Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/9fdb0f-e67c-4769-9a0d-0fbeaecd93a4/1/wS8tv90wnyYDJMqn4-2neT-FQac.mft
File: wS8tv90wnyYDJMqn4-2neT-FQac.mft (raw, json)
Hash identifier: nbFRkFVoEmA1MtOuVymjhkvwxdUHe4BNtccVfumrD48=
Subject key identifier: F6:37:F0:B9:72:0B:B3:A4:8E:9D:35:DF:28:6B:06:D3:30:0E:98:31
Authority key identifier: C1:2F:2D:BF:DD:30:9F:26:03:24:CA:A7:E3:ED:A7:79:3F:85:41:A7
Certificate issuer: /CN=c12f2dbfdd309f260324caa7e3eda7793f8541a7
Certificate serial: 019D2703C7F96A84B889E1C77C9B17AA2D6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wS8tv90wnyYDJMqn4-2neT-FQac.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/9fdb0f-e67c-4769-9a0d-0fbeaecd93a4/1/wS8tv90wnyYDJMqn4-2neT-FQac.mft
Manifest number: 0EEC
Signing time: Wed 25 Mar 2026 22:00:52 +0000
Manifest this update: Wed 25 Mar 2026 22:00:52 +0000
Manifest next update: Thu 26 Mar 2026 22:00:52 +0000
Files and hashes: 1: wS8tv90wnyYDJMqn4-2neT-FQac.crl (hash: 2Wa4SCs4OCvFyPvJd/wSXE7mztJf3BBt1VLuuXgHTmU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/9fdb0f-e67c-4769-9a0d-0fbeaecd93a4/1/wS8tv90wnyYDJMqn4-2neT-FQac.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/9fdb0f-e67c-4769-9a0d-0fbeaecd93a4/1/wS8tv90wnyYDJMqn4-2neT-FQac.mft
rsync://rpki.ripe.net/repository/DEFAULT/wS8tv90wnyYDJMqn4-2neT-FQac.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:03:c7:f9:6a:84:b8:89:e1:c7:7c:9b:17:aa:2d:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c12f2dbfdd309f260324caa7e3eda7793f8541a7
Validity
Not Before: Mar 25 22:00:52 2026 GMT
Not After : Mar 26 22:00:52 2026 GMT
Subject: CN=f637f0b9720bb3a48e9d35df286b06d3300e9831
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:f6:9e:9e:38:25:ab:87:bb:85:67:72:aa:81:
ca:0d:67:27:c8:51:65:95:2e:6f:9f:2a:49:23:ef:
95:0e:67:b8:04:9c:62:c8:9f:6f:85:f8:bc:20:a3:
d6:2a:6a:08:dd:68:9e:31:32:b9:f5:9b:0c:7c:91:
40:84:83:63:f8:90:02:aa:13:40:cb:b3:51:c4:95:
04:6e:dd:7b:e8:4b:a6:72:6e:48:02:a8:42:fa:35:
a3:83:4b:db:bf:e7:ed:a0:bb:90:69:16:2a:0e:af:
24:a9:0f:4b:18:e6:a7:24:a6:7d:52:a2:39:1d:73:
f2:81:ba:90:9a:a9:ee:e1:b7:24:e2:43:4b:78:9c:
a1:af:3c:e9:f1:83:7e:37:d6:31:ff:50:d7:d1:0f:
67:f0:56:79:d2:59:01:5c:4e:07:d3:60:6e:d0:1f:
73:f1:6b:b5:9d:ef:08:98:1b:69:b5:a1:8d:93:e0:
33:68:e8:7c:57:24:d5:1d:7b:8f:b0:87:df:d7:10:
86:f3:c9:ef:da:35:c2:5f:ad:66:56:0e:02:13:e6:
c8:fc:12:31:71:c1:70:ea:6a:9f:c9:17:55:9a:d5:
3a:3e:6d:85:f3:e4:38:e8:e7:95:1e:f8:a5:76:58:
77:9d:13:e9:62:78:ed:15:82:4e:f3:6f:2b:de:d3:
f1:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:37:F0:B9:72:0B:B3:A4:8E:9D:35:DF:28:6B:06:D3:30:0E:98:31
X509v3 Authority Key Identifier:
keyid:C1:2F:2D:BF:DD:30:9F:26:03:24:CA:A7:E3:ED:A7:79:3F:85:41:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wS8tv90wnyYDJMqn4-2neT-FQac.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/9fdb0f-e67c-4769-9a0d-0fbeaecd93a4/1/wS8tv90wnyYDJMqn4-2neT-FQac.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/9fdb0f-e67c-4769-9a0d-0fbeaecd93a4/1/wS8tv90wnyYDJMqn4-2neT-FQac.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:fe:51:82:9e:17:f2:64:05:4e:c1:1d:03:19:7d:9e:f8:c5:
67:87:84:87:d2:8c:70:e3:f3:d4:27:5e:dd:20:32:43:55:e2:
67:e1:36:08:82:25:a7:9f:de:92:36:43:b3:ea:59:13:dc:00:
e3:c4:a2:90:e0:16:45:14:4a:b1:59:76:65:2c:66:e2:65:8f:
24:c6:2f:a8:37:74:e5:80:93:4c:a6:f4:49:ce:fc:40:8c:16:
d3:c1:ae:1c:3a:71:5f:91:28:4e:0e:5a:4f:e0:fb:b3:06:0c:
f9:97:c2:1f:5e:6f:a5:ae:e2:04:73:fa:0e:b0:5e:7c:5d:ff:
6d:34:16:dd:2b:e7:6a:6c:d4:ac:09:77:2d:c7:32:ea:c2:6a:
3e:37:48:a5:6d:ec:a1:82:41:64:96:ac:d4:30:76:f8:00:c0:
88:1d:bd:e1:59:d8:88:60:9c:e4:d7:81:ea:2d:e4:19:77:37:
50:41:1a:b7:b7:7c:07:25:fa:d0:40:76:de:5a:64:de:b8:ec:
5a:26:61:8e:5e:c2:ef:c3:9a:22:d3:ab:ae:8e:03:34:2f:84:
79:6b:c1:60:e6:f2:77:92:4d:86:d8:b5:73:96:c3:63:4a:56:
ff:3c:d2:08:55:c5:f9:c6:37:a0:72:76:f8:77:5e:91:8a:9e:
8e:04:bc:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:09:59 2026 by rpki-client