Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/420a13-f0a5-4db0-9048-15958a89a012/1/wOOV6sUDfy5HhZVvjai4aeu-_OA.mft
File: wOOV6sUDfy5HhZVvjai4aeu-_OA.mft (raw, json)
Hash identifier: KJQZZoNKvDj6Bg+ALhnfEsPPqMpg22NZuyIWAAibSag=
Subject key identifier: 2A:AA:A6:1B:59:02:0C:05:34:66:D2:2A:39:B8:57:33:A6:52:02:28
Authority key identifier: C0:E3:95:EA:C5:03:7F:2E:47:85:95:6F:8D:A8:B8:69:EB:BE:FC:E0
Certificate issuer: /CN=c0e395eac5037f2e4785956f8da8b869ebbefce0
Certificate serial: 019D2AE03D21052A9A033944E7CE4A87925F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wOOV6sUDfy5HhZVvjai4aeu-_OA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/420a13-f0a5-4db0-9048-15958a89a012/1/wOOV6sUDfy5HhZVvjai4aeu-_OA.mft
Manifest number: 0F7C
Signing time: Thu 26 Mar 2026 16:00:31 +0000
Manifest this update: Thu 26 Mar 2026 16:00:31 +0000
Manifest next update: Fri 27 Mar 2026 16:00:31 +0000
Files and hashes: 1: wOOV6sUDfy5HhZVvjai4aeu-_OA.crl (hash: FymFM7kQUXlGGN1929P+K8QoZzlEjXGp3+sKTp+h2rg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/420a13-f0a5-4db0-9048-15958a89a012/1/wOOV6sUDfy5HhZVvjai4aeu-_OA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/420a13-f0a5-4db0-9048-15958a89a012/1/wOOV6sUDfy5HhZVvjai4aeu-_OA.mft
rsync://rpki.ripe.net/repository/DEFAULT/wOOV6sUDfy5HhZVvjai4aeu-_OA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:e0:3d:21:05:2a:9a:03:39:44:e7:ce:4a:87:92:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0e395eac5037f2e4785956f8da8b869ebbefce0
Validity
Not Before: Mar 26 16:00:31 2026 GMT
Not After : Mar 27 16:00:31 2026 GMT
Subject: CN=2aaaa61b59020c053466d22a39b85733a6520228
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:69:7f:fd:62:3b:b9:72:86:93:29:96:17:93:
5c:22:2f:16:cc:1e:0e:c9:87:88:c5:f7:27:61:4d:
b2:c0:99:88:2a:db:5a:a8:bd:6a:8e:32:82:07:45:
26:15:6a:92:ce:48:96:49:91:33:57:66:cb:9d:43:
a9:4e:56:95:44:37:cb:0d:9b:33:15:b6:b5:be:b4:
f1:c8:de:e7:61:5f:06:cb:98:9c:9c:a0:46:f2:62:
d1:02:a3:52:a3:2c:29:1b:6c:cf:21:3d:88:36:8d:
f8:43:37:3c:9b:fe:6a:eb:84:40:85:9c:b6:6e:9b:
8f:40:11:73:49:47:53:c8:13:63:75:8d:70:0c:02:
ba:e1:bd:32:2c:79:eb:d5:e0:66:2c:42:42:f6:f4:
83:38:77:69:3e:60:15:ab:d4:fa:40:c8:bf:f6:28:
b0:79:01:0b:b4:82:fc:dc:82:be:96:90:c0:6a:b4:
c0:9d:62:20:bf:10:37:15:a3:85:51:22:49:69:d5:
d0:ba:42:56:4a:2c:e9:39:ec:93:11:4f:b0:98:9f:
61:64:a9:46:9f:b4:5f:17:10:ad:38:c9:dc:b9:f4:
4a:bc:b3:d8:47:90:26:91:64:75:12:ca:c8:87:20:
9b:71:1f:eb:22:bc:7a:bd:d4:cd:65:c2:f3:6a:77:
2d:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:AA:A6:1B:59:02:0C:05:34:66:D2:2A:39:B8:57:33:A6:52:02:28
X509v3 Authority Key Identifier:
keyid:C0:E3:95:EA:C5:03:7F:2E:47:85:95:6F:8D:A8:B8:69:EB:BE:FC:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wOOV6sUDfy5HhZVvjai4aeu-_OA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/420a13-f0a5-4db0-9048-15958a89a012/1/wOOV6sUDfy5HhZVvjai4aeu-_OA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/420a13-f0a5-4db0-9048-15958a89a012/1/wOOV6sUDfy5HhZVvjai4aeu-_OA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:7d:1a:ef:42:33:37:21:11:82:d8:e8:6f:87:3b:0c:ad:77:
96:70:ab:b0:a9:85:bb:99:a0:ac:09:9b:7f:41:06:68:c1:81:
75:d4:f9:a9:fd:20:4a:fd:d1:90:83:d8:f7:16:ef:bd:8f:1e:
d5:9c:f8:6c:73:b0:5a:dd:b7:bb:a4:df:c7:f1:b2:9f:dd:75:
2e:94:d7:e4:67:8e:c8:17:55:46:a7:78:83:7d:c2:aa:74:0c:
c0:2c:29:82:8b:c0:1b:f9:f0:58:ef:a4:c6:60:08:49:fc:35:
0e:8a:d0:de:f9:5d:d0:30:84:cb:5b:0d:81:69:62:a5:4e:35:
03:53:a9:4d:a4:80:c8:55:4c:d7:53:01:38:8e:44:05:53:fc:
2f:75:21:bf:30:02:3d:03:0f:9c:a4:8e:e2:5f:ed:3a:c1:40:
a3:f2:a0:44:96:6e:af:1b:fd:97:23:ca:47:36:7e:52:b1:5d:
df:27:80:29:ed:15:a9:01:c4:fe:f7:ab:91:5c:c8:c8:4c:f9:
6b:82:52:0b:17:3d:61:47:df:f6:91:13:e8:a7:c0:d8:53:03:
f9:01:3f:d2:63:ff:6b:e6:04:ba:32:2c:19:40:f2:f5:50:85:
45:6c:95:1b:94:fc:f8:01:7e:3e:4d:ee:46:f2:f0:21:5a:02:
37:44:07:dc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0q4D0hBSqaAzlE585Kh5JfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMwZTM5NWVhYzUwMzdmMmU0Nzg1OTU2ZjhkYThiODY5ZWJi
ZWZjZTAwHhcNMjYwMzI2MTYwMDMxWhcNMjYwMzI3MTYwMDMxWjAzMTEwLwYDVQQD
EygyYWFhYTYxYjU5MDIwYzA1MzQ2NmQyMmEzOWI4NTczM2E2NTIwMjI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx2l//WI7uXKGkymWF5NcIi8WzB4O
yYeIxfcnYU2ywJmIKttaqL1qjjKCB0UmFWqSzkiWSZEzV2bLnUOpTlaVRDfLDZsz
Fba1vrTxyN7nYV8Gy5icnKBG8mLRAqNSoywpG2zPIT2INo34Qzc8m/5q64RAhZy2
bpuPQBFzSUdTyBNjdY1wDAK64b0yLHnr1eBmLEJC9vSDOHdpPmAVq9T6QMi/9iiw
eQELtIL83IK+lpDAarTAnWIgvxA3FaOFUSJJadXQukJWSizpOeyTEU+wmJ9hZKlG
n7RfFxCtOMncufRKvLPYR5AmkWR1EsrIhyCbcR/rIrx6vdTNZcLzanct1QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCqqphtZAgwFNGbSKjm4VzOmUgIoMB8GA1UdIwQY
MBaAFMDjlerFA38uR4WVb42ouGnrvvzgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd09PVjZzVURmeTVIaFpWdmphaTRhZXUtX09BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy80MjBhMTMtZjBhNS00ZGIwLTkwNDgt
MTU5NThhODlhMDEyLzEvd09PVjZzVURmeTVIaFpWdmphaTRhZXUtX09BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy80MjBhMTMtZjBhNS00ZGIwLTkwNDgtMTU5NThhODlhMDEy
LzEvd09PVjZzVURmeTVIaFpWdmphaTRhZXUtX09BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUX0a70Iz
NyERgtjob4c7DK13lnCrsKmFu5mgrAmbf0EGaMGBddT5qf0gSv3RkIPY9xbvvY8e
1Zz4bHOwWt23u6Tfx/Gyn911LpTX5GeOyBdVRqd4g33CqnQMwCwpgovAG/nwWO+k
xmAISfw1DorQ3vld0DCEy1sNgWlipU41A1OpTaSAyFVM11MBOI5EBVP8L3UhvzAC
PQMPnKSO4l/tOsFAo/KgRJZurxv9lyPKRzZ+UrFd3yeAKe0VqQHE/verkVzIyEz5
a4JSCxc9YUff9pET6KfA2FMD+QE/0mP/a+YEujIsGUDy9VCFRWyVG5T8+AF+Pk3u
RvLwIVoCN0QH3A==
-----END CERTIFICATE-----
Generated at Thu Mar 26 18:23:08 2026 by rpki-client