Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/e54bf9-6b55-4c3c-aa50-153eefe70cf6/1/w7wtL2gXuUwmrv3Yn_lDqI8_HIQ.mft
File: w7wtL2gXuUwmrv3Yn_lDqI8_HIQ.mft (raw, json)
Hash identifier: AVNRdnjPTqywwWBL5Jpqcl/JPNL1AImX/dYo9MdCSrE=
Subject key identifier: A8:65:D6:26:66:BD:8B:60:66:CA:2C:69:67:88:86:43:11:AA:61:AE
Authority key identifier: C3:BC:2D:2F:68:17:B9:4C:26:AE:FD:D8:9F:F9:43:A8:8F:3F:1C:84
Certificate issuer: /CN=c3bc2d2f6817b94c26aefdd89ff943a88f3f1c84
Certificate serial: 019D262880450EBC24C0623DD7AE7A2EDDCD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w7wtL2gXuUwmrv3Yn_lDqI8_HIQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/e54bf9-6b55-4c3c-aa50-153eefe70cf6/1/w7wtL2gXuUwmrv3Yn_lDqI8_HIQ.mft
Manifest number: 0844
Signing time: Wed 25 Mar 2026 18:01:21 +0000
Manifest this update: Wed 25 Mar 2026 18:01:21 +0000
Manifest next update: Thu 26 Mar 2026 18:01:21 +0000
Files and hashes: 1: w7wtL2gXuUwmrv3Yn_lDqI8_HIQ.crl (hash: 136f1VGgeAJ6+pJ20XAj9O8cqhgHiclYEpCqgtzX+68=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/e54bf9-6b55-4c3c-aa50-153eefe70cf6/1/w7wtL2gXuUwmrv3Yn_lDqI8_HIQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/e54bf9-6b55-4c3c-aa50-153eefe70cf6/1/w7wtL2gXuUwmrv3Yn_lDqI8_HIQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/w7wtL2gXuUwmrv3Yn_lDqI8_HIQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:28:80:45:0e:bc:24:c0:62:3d:d7:ae:7a:2e:dd:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3bc2d2f6817b94c26aefdd89ff943a88f3f1c84
Validity
Not Before: Mar 25 18:01:21 2026 GMT
Not After : Mar 26 18:01:21 2026 GMT
Subject: CN=a865d62666bd8b6066ca2c696788864311aa61ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:88:57:86:35:fd:63:3c:17:a2:38:d0:fa:c6:
e3:1b:af:9a:d5:07:ca:55:c0:5e:c9:06:2b:16:1f:
53:d6:32:39:4e:85:52:56:05:d7:b3:d4:63:d3:69:
79:9f:1a:a9:b4:dd:62:cd:21:31:be:25:b7:c0:18:
44:b3:f8:81:f3:bc:f2:55:84:ec:ce:7c:cb:7a:b7:
cb:ed:aa:ad:2e:62:18:6e:d5:c7:a7:a8:94:48:2c:
96:61:75:39:89:40:88:79:60:c7:da:c1:27:5f:58:
37:76:02:5a:4e:6c:cf:fc:77:bf:19:4b:7d:71:b6:
42:4e:0a:0a:b7:c4:06:a0:ac:5b:22:8d:cb:7c:31:
b9:b8:6d:94:bd:db:d9:07:54:61:1a:a2:a9:0f:b4:
70:3c:d0:aa:4c:ab:5d:fc:24:10:91:31:8c:46:34:
bc:76:57:91:14:86:69:7f:8d:58:3e:0d:dc:6a:7e:
b3:cc:37:97:3f:db:68:61:aa:6a:2a:75:a7:a8:eb:
2b:60:06:56:64:7e:92:9d:c8:97:1a:d1:4b:a5:65:
44:6a:a7:61:03:9a:ab:cd:b9:a8:50:84:b8:b3:50:
19:e1:a3:c5:8d:7e:83:f7:a5:e4:d0:52:6f:ce:03:
9c:17:14:12:f8:ee:b1:34:c4:9c:9a:fe:77:ff:01:
72:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:65:D6:26:66:BD:8B:60:66:CA:2C:69:67:88:86:43:11:AA:61:AE
X509v3 Authority Key Identifier:
keyid:C3:BC:2D:2F:68:17:B9:4C:26:AE:FD:D8:9F:F9:43:A8:8F:3F:1C:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w7wtL2gXuUwmrv3Yn_lDqI8_HIQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/e54bf9-6b55-4c3c-aa50-153eefe70cf6/1/w7wtL2gXuUwmrv3Yn_lDqI8_HIQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/e54bf9-6b55-4c3c-aa50-153eefe70cf6/1/w7wtL2gXuUwmrv3Yn_lDqI8_HIQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:ee:d8:a7:be:ce:53:77:f1:3c:e8:0c:3b:33:46:d5:33:cb:
e8:05:db:aa:f3:d7:d3:ca:ee:33:ea:fb:51:dc:ab:4e:e2:d9:
fc:56:e2:2d:bd:f2:e3:4a:3d:ae:f2:66:ac:f1:4a:05:f9:2f:
7e:c8:4b:0a:28:b9:fb:73:6b:93:cc:1a:05:87:84:00:5d:e0:
c5:f9:80:1b:14:45:ba:38:8f:80:92:65:19:c8:99:c5:0a:6e:
75:23:29:a0:77:21:2a:28:9b:71:a2:8e:fb:30:75:ad:ba:35:
be:5b:9c:3c:68:42:84:2d:4d:12:e1:00:fd:fb:77:a8:10:b6:
bf:ec:61:2d:ca:c2:79:67:3c:84:66:21:ad:5d:9d:07:04:bf:
4c:39:1b:45:84:bc:a9:d9:dd:ff:67:25:2d:42:97:9b:15:50:
fe:62:8f:f2:e8:78:9b:cb:4a:3d:bf:d1:12:3e:5b:68:d4:5b:
04:54:fb:e5:54:36:e3:48:9d:aa:cd:e4:c7:3e:93:bf:38:18:
1b:6d:9f:9f:f0:bd:06:55:27:fe:5e:73:36:df:67:9b:55:62:
0a:34:09:d6:a9:22:c4:d3:33:0d:d0:48:68:99:d3:1a:76:a4:
74:00:bc:a9:4a:68:64:7f:0c:04:e0:98:e5:36:b6:99:87:de:
6c:8e:85:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:11:11 2026 by rpki-client