Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/96952b-79b8-4e04-bc4a-29e445de2459/1/dWXhJLHEG5OxTX7eBda4B3eYmv0.mft
File: dWXhJLHEG5OxTX7eBda4B3eYmv0.mft (raw, json)
Hash identifier: WVRJTbvrAuVCX3JOTLok65hYOuXJJtPH68fZq3yR2wU=
Subject key identifier: 30:DD:C9:B6:B0:5A:CD:BE:02:34:36:7E:C9:2E:5D:24:A9:91:EA:95
Authority key identifier: 75:65:E1:24:B1:C4:1B:93:B1:4D:7E:DE:05:D6:B8:07:77:98:9A:FD
Certificate issuer: /CN=7565e124b1c41b93b14d7ede05d6b80777989afd
Certificate serial: 019D2816DBA8A108537EE8549A2EE6642EFB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dWXhJLHEG5OxTX7eBda4B3eYmv0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/96952b-79b8-4e04-bc4a-29e445de2459/1/dWXhJLHEG5OxTX7eBda4B3eYmv0.mft
Manifest number: 162B
Signing time: Thu 26 Mar 2026 03:01:19 +0000
Manifest this update: Thu 26 Mar 2026 03:01:19 +0000
Manifest next update: Fri 27 Mar 2026 03:01:19 +0000
Files and hashes: 1: dWXhJLHEG5OxTX7eBda4B3eYmv0.crl (hash: rTItDHKflUkgMNI86+ZY4RgEKcCPkenWmBGRJ+t8Qbg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/96952b-79b8-4e04-bc4a-29e445de2459/1/dWXhJLHEG5OxTX7eBda4B3eYmv0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/96952b-79b8-4e04-bc4a-29e445de2459/1/dWXhJLHEG5OxTX7eBda4B3eYmv0.mft
rsync://rpki.ripe.net/repository/DEFAULT/dWXhJLHEG5OxTX7eBda4B3eYmv0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 03:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:db:a8:a1:08:53:7e:e8:54:9a:2e:e6:64:2e:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7565e124b1c41b93b14d7ede05d6b80777989afd
Validity
Not Before: Mar 26 03:01:19 2026 GMT
Not After : Mar 27 03:01:19 2026 GMT
Subject: CN=30ddc9b6b05acdbe0234367ec92e5d24a991ea95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:6e:5c:4e:90:de:d9:5a:8a:36:5a:f8:09:3d:
5a:24:6f:cf:b5:e1:ac:55:8e:98:30:10:aa:50:00:
0f:37:fa:8b:5c:19:91:c3:5b:1e:f7:53:98:39:6f:
83:e7:97:79:d9:9e:f2:df:8d:28:6a:10:14:46:9c:
d5:86:34:30:b1:1d:1e:c4:b4:47:3e:cb:13:af:b0:
7a:4d:0e:da:ea:67:40:c6:08:9c:5f:ee:04:09:8f:
b6:73:55:ae:f4:08:47:2d:0f:a4:f2:c7:e1:d4:6e:
f6:25:f6:a5:8b:74:34:98:b2:cd:63:52:b3:2e:b9:
02:cd:cb:2a:e6:c9:f0:14:96:f1:a2:09:eb:b9:81:
1e:24:f0:e5:b1:14:ce:5f:f2:de:f8:77:b1:ee:3b:
73:07:ea:19:e6:ba:c4:31:f8:89:88:d8:7a:6b:06:
47:5c:4a:b2:f7:97:5f:40:e5:43:61:7c:b5:89:7a:
cb:96:5e:a7:d7:03:da:ce:5a:68:f9:cd:cc:a9:e9:
75:6b:6b:34:0f:2c:8d:9c:44:bb:d1:95:d9:fc:d4:
7d:40:01:a8:6c:84:10:e1:d0:a5:31:1d:50:fa:31:
bb:9a:7a:65:7a:80:66:ef:dc:b1:e9:23:eb:44:2a:
de:43:c6:a6:9f:d5:8d:85:e8:31:9b:1c:51:f3:04:
8b:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:DD:C9:B6:B0:5A:CD:BE:02:34:36:7E:C9:2E:5D:24:A9:91:EA:95
X509v3 Authority Key Identifier:
keyid:75:65:E1:24:B1:C4:1B:93:B1:4D:7E:DE:05:D6:B8:07:77:98:9A:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dWXhJLHEG5OxTX7eBda4B3eYmv0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/96952b-79b8-4e04-bc4a-29e445de2459/1/dWXhJLHEG5OxTX7eBda4B3eYmv0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/96952b-79b8-4e04-bc4a-29e445de2459/1/dWXhJLHEG5OxTX7eBda4B3eYmv0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:50:87:fa:98:39:57:dd:45:d5:ed:0a:38:65:5e:0d:7c:f4:
78:28:f7:27:0e:98:65:88:fc:b4:f0:8a:08:ba:fb:94:23:70:
5a:e3:6b:f7:f3:1d:0b:a8:73:46:0b:a1:11:ec:f0:69:43:a8:
47:24:36:91:df:7b:8b:7d:0b:3b:f1:7f:75:c3:04:34:57:98:
96:65:5a:2d:19:2d:39:c6:7b:67:94:05:92:d7:37:ce:b8:5c:
41:23:a1:bf:0f:de:e8:91:26:14:09:49:b3:9a:eb:67:71:80:
93:86:13:d8:a6:d6:b8:76:ef:ec:1b:50:89:67:05:ab:d0:66:
66:02:e1:8b:bf:9c:66:5f:08:5e:dd:13:23:29:fd:89:ea:9a:
bf:9c:fc:89:24:f4:42:ff:13:16:6e:46:83:59:6a:26:9b:bc:
2e:81:a6:d2:19:cf:2d:16:e2:24:22:a1:79:51:83:f9:b0:49:
d2:cc:d5:29:6f:be:45:1a:4e:c8:89:a6:ca:d3:65:01:73:0e:
4c:b3:8f:32:97:79:51:d2:8c:f3:5f:a0:04:73:98:58:cc:91:
d1:4f:db:43:05:45:fb:94:6c:63:be:43:90:6f:46:31:28:b4:
36:b3:71:d8:e6:46:ea:e0:86:79:9d:39:20:b3:2a:30:e2:5f:
f4:c5:aa:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:59:50 2026 by rpki-client