Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/a99a2a-6025-4f5b-9aaf-b10eaf864bb8/1/wUuc2uDH11fKow4dR7Nz3uffdW0.mft
File: wUuc2uDH11fKow4dR7Nz3uffdW0.mft (raw, json)
Hash identifier: 0y58nmVTV0KQM3ErCUEZjxENMse2AlYQltzLVK9iHX8=
Subject key identifier: A4:E2:2D:F6:1B:3C:4E:06:CA:6F:63:4A:99:16:4F:0A:FF:99:2D:80
Authority key identifier: C1:4B:9C:DA:E0:C7:D7:57:CA:A3:0E:1D:47:B3:73:DE:E7:DF:75:6D
Certificate issuer: /CN=c14b9cdae0c7d757caa30e1d47b373dee7df756d
Certificate serial: 019D258435C1204E4423F60AB0F06ABA65EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wUuc2uDH11fKow4dR7Nz3uffdW0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/a99a2a-6025-4f5b-9aaf-b10eaf864bb8/1/wUuc2uDH11fKow4dR7Nz3uffdW0.mft
Manifest number: 0509
Signing time: Wed 25 Mar 2026 15:01:54 +0000
Manifest this update: Wed 25 Mar 2026 15:01:54 +0000
Manifest next update: Thu 26 Mar 2026 15:01:54 +0000
Files and hashes: 1: wUuc2uDH11fKow4dR7Nz3uffdW0.crl (hash: hC0spJiRBJtNNgZ0sZGvKaDFZeRSfg8dIaBddQqsDtg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/a99a2a-6025-4f5b-9aaf-b10eaf864bb8/1/wUuc2uDH11fKow4dR7Nz3uffdW0.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/a99a2a-6025-4f5b-9aaf-b10eaf864bb8/1/wUuc2uDH11fKow4dR7Nz3uffdW0.mft
rsync://rpki.ripe.net/repository/DEFAULT/wUuc2uDH11fKow4dR7Nz3uffdW0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:01:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:84:35:c1:20:4e:44:23:f6:0a:b0:f0:6a:ba:65:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c14b9cdae0c7d757caa30e1d47b373dee7df756d
Validity
Not Before: Mar 25 15:01:54 2026 GMT
Not After : Mar 26 15:01:54 2026 GMT
Subject: CN=a4e22df61b3c4e06ca6f634a99164f0aff992d80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:f7:06:73:93:78:40:d4:8c:27:a9:4e:74:16:
a2:76:7f:0f:36:42:c8:ff:9f:fd:c8:dc:b6:6c:2d:
3e:2a:9d:39:75:f5:dd:4d:b7:90:25:e3:32:fd:9c:
ca:1b:2c:ab:c0:51:da:97:79:b4:59:83:58:3e:e5:
a5:be:44:3a:23:f2:68:1e:22:15:41:dd:6f:1c:89:
a9:bc:fa:1f:60:89:78:3b:22:24:2d:ad:fb:ae:57:
1d:4e:0a:8b:db:46:b6:38:87:9a:34:18:c0:87:98:
a8:cd:e5:9f:20:73:d1:56:fd:c4:e3:58:c0:32:9f:
0e:66:cd:3b:0e:08:f8:2f:9a:f1:6e:c8:f9:e4:5a:
ba:57:03:f0:ea:02:d6:d0:52:a1:d8:15:8a:cf:92:
ab:ab:a2:08:7a:9e:18:90:24:3b:86:3d:50:46:b0:
0e:cd:6d:ab:92:fd:9e:3d:5e:df:2c:fb:c0:a4:a4:
df:9d:8b:0a:6f:51:32:6f:57:ec:57:40:24:5a:a2:
cb:3e:5b:75:da:0b:9c:91:b4:24:66:7a:fa:5a:aa:
c2:33:38:9e:ad:67:91:2f:ba:63:43:16:79:37:97:
f1:da:c7:48:ec:36:98:a3:5e:e9:33:03:83:2e:42:
c4:ba:78:c1:87:fb:24:e4:62:71:91:49:71:93:fa:
c4:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:E2:2D:F6:1B:3C:4E:06:CA:6F:63:4A:99:16:4F:0A:FF:99:2D:80
X509v3 Authority Key Identifier:
keyid:C1:4B:9C:DA:E0:C7:D7:57:CA:A3:0E:1D:47:B3:73:DE:E7:DF:75:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wUuc2uDH11fKow4dR7Nz3uffdW0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/a99a2a-6025-4f5b-9aaf-b10eaf864bb8/1/wUuc2uDH11fKow4dR7Nz3uffdW0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/a99a2a-6025-4f5b-9aaf-b10eaf864bb8/1/wUuc2uDH11fKow4dR7Nz3uffdW0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:84:8e:7f:24:9f:f7:7f:0d:6b:ae:ae:73:88:36:9d:5f:75:
b9:08:35:e6:09:67:63:d8:ee:99:86:27:70:4d:6d:94:75:46:
10:08:02:81:dc:54:65:30:fa:d5:34:c5:a9:c2:8e:b8:23:6d:
23:f7:f2:e3:8a:77:96:4d:da:d0:9e:38:e6:50:47:63:3a:14:
45:74:4f:c8:47:d3:6b:7a:f4:af:80:05:35:0d:b7:d0:cb:75:
95:24:6c:43:4d:47:8f:9c:46:6f:22:5f:cd:4d:09:33:cb:fe:
86:db:48:c6:03:4a:1e:3c:4f:19:88:17:02:ff:cc:15:df:5b:
d0:68:34:b0:ec:a9:1c:87:8c:08:1c:89:ef:55:75:d8:a5:36:
1a:2a:68:6c:81:4a:14:02:76:cd:b5:e5:1d:b4:26:33:fa:a3:
bd:35:c9:d7:b4:32:79:e5:ca:98:fa:78:2d:b0:ff:0d:52:ad:
68:c3:e4:26:08:18:66:ac:f2:e8:52:79:d2:eb:ea:23:4c:35:
a9:cc:55:45:ce:84:42:b0:fc:d5:b2:54:35:ca:2d:19:7c:5c:
e0:66:1a:1e:d8:1c:4f:9b:d3:a5:9e:35:c8:d4:3b:f8:86:a6:
7e:23:ee:e7:ed:a4:33:ba:e2:96:ca:cf:14:17:b2:47:b8:68:
16:93:3f:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:06:21 2026 by rpki-client