Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/681aea-ffc5-43ec-ab51-dbcce21419b7/1/0WCL-QDDOGYd_2M3q0xq-Rb4QXI.mft
File: 0WCL-QDDOGYd_2M3q0xq-Rb4QXI.mft (raw, json)
Hash identifier: cqRnShIU2GjF6UV/0eW6eZVX5lkKDng14rvv+vW3BI8=
Subject key identifier: BD:16:CA:59:96:C4:AB:8E:78:E0:71:71:FE:55:1D:6A:30:01:CE:B7
Authority key identifier: D1:60:8B:F9:00:C3:38:66:1D:FF:63:37:AB:4C:6A:F9:16:F8:41:72
Certificate issuer: /CN=d1608bf900c338661dff6337ab4c6af916f84172
Certificate serial: 019D2696355F52DCF0E19A94778D597306BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0WCL-QDDOGYd_2M3q0xq-Rb4QXI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/681aea-ffc5-43ec-ab51-dbcce21419b7/1/0WCL-QDDOGYd_2M3q0xq-Rb4QXI.mft
Manifest number: 069A
Signing time: Wed 25 Mar 2026 20:01:11 +0000
Manifest this update: Wed 25 Mar 2026 20:01:11 +0000
Manifest next update: Thu 26 Mar 2026 20:01:11 +0000
Files and hashes: 1: 0WCL-QDDOGYd_2M3q0xq-Rb4QXI.crl (hash: R+u1na/kd+aWJQBH4SdR+SbequwdbPaCbrW49+3Nr4Y=)
2: tvVyRp4L9e3meI8HjNM8zokhY-g.asa (hash: olDJRhTYRvq4nKsZ0gccZ00xYdhkTFh1VWFFg4+4L98=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/681aea-ffc5-43ec-ab51-dbcce21419b7/1/0WCL-QDDOGYd_2M3q0xq-Rb4QXI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/681aea-ffc5-43ec-ab51-dbcce21419b7/1/0WCL-QDDOGYd_2M3q0xq-Rb4QXI.mft
rsync://rpki.ripe.net/repository/DEFAULT/0WCL-QDDOGYd_2M3q0xq-Rb4QXI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:96:35:5f:52:dc:f0:e1:9a:94:77:8d:59:73:06:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1608bf900c338661dff6337ab4c6af916f84172
Validity
Not Before: Mar 25 20:01:11 2026 GMT
Not After : Mar 26 20:01:11 2026 GMT
Subject: CN=bd16ca5996c4ab8e78e07171fe551d6a3001ceb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:21:e4:dc:df:7b:7c:5c:e4:dc:79:cf:07:a8:
43:65:a7:d9:0d:7a:1d:df:e1:ac:a6:cd:51:39:60:
fd:82:e3:d4:ee:f4:33:33:04:65:92:fe:4f:18:e4:
45:5f:17:88:e2:8e:2a:79:8a:d0:8f:b7:15:c6:0d:
08:c8:af:6d:cd:d0:e5:95:10:9e:e9:bf:11:92:c5:
10:d3:ac:51:15:cc:04:68:1d:eb:f8:bf:26:26:17:
3b:08:6d:f3:f0:16:a0:03:bc:f1:e4:c4:e3:1e:8d:
b0:11:bf:3c:03:27:bf:79:6b:f2:25:cf:63:7a:95:
a7:99:be:98:24:df:fd:d9:24:6b:c1:ee:0a:d2:e3:
c8:e7:53:04:2d:48:32:ef:1d:9a:77:a0:24:dc:25:
96:15:e4:89:6f:4d:a0:77:fa:71:dd:39:cb:19:db:
89:06:e8:c3:2a:b8:c6:41:06:b7:91:48:89:51:01:
8c:98:29:b9:40:fa:13:59:7e:ae:71:5e:65:d7:d8:
2b:2f:12:f1:0e:23:af:0e:9a:3b:55:2c:d4:e3:e5:
45:d1:36:d8:1a:2f:1e:fb:16:31:87:87:f0:f6:69:
14:a6:5f:d2:1d:50:3d:7c:6d:50:26:6e:b3:96:78:
42:e2:94:91:ae:dd:43:7f:f0:9b:11:e6:03:4f:6a:
db:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:16:CA:59:96:C4:AB:8E:78:E0:71:71:FE:55:1D:6A:30:01:CE:B7
X509v3 Authority Key Identifier:
keyid:D1:60:8B:F9:00:C3:38:66:1D:FF:63:37:AB:4C:6A:F9:16:F8:41:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0WCL-QDDOGYd_2M3q0xq-Rb4QXI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/681aea-ffc5-43ec-ab51-dbcce21419b7/1/0WCL-QDDOGYd_2M3q0xq-Rb4QXI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/681aea-ffc5-43ec-ab51-dbcce21419b7/1/0WCL-QDDOGYd_2M3q0xq-Rb4QXI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:9a:df:d0:87:5d:78:b6:2e:07:42:63:77:33:ff:00:bc:ac:
d1:2f:0c:9f:4f:74:98:f2:82:01:5d:03:5c:f1:04:18:33:75:
6e:e4:dc:0d:5d:b9:3f:b7:df:fa:a2:e8:81:3f:37:3b:50:3f:
32:43:00:f8:28:09:59:32:00:13:63:9e:f7:69:f4:9a:55:f4:
89:ca:f1:cc:fe:ee:05:55:81:46:a2:e8:b5:4c:c6:da:1d:fe:
99:72:e6:9a:3f:34:20:65:ef:a6:5f:d7:ec:5e:3b:72:c8:10:
76:2f:f8:b7:9e:39:94:5a:19:75:4a:38:78:94:56:f0:5a:1c:
74:4c:f2:6b:e8:c9:4e:04:71:6e:ed:89:a3:19:72:21:da:66:
77:95:b6:66:e2:78:f7:a0:b6:12:4b:b6:c5:ab:d0:75:30:ef:
ff:23:8e:ce:b2:44:f6:cf:70:88:0c:19:b9:5c:b8:99:ce:67:
26:60:78:30:09:52:d1:b5:80:c1:1d:07:1e:af:f9:3e:82:bd:
33:2b:27:29:81:26:0b:b0:18:62:10:55:a6:5f:5d:9d:36:5d:
e7:4f:3e:c2:70:c4:42:68:30:a2:82:c4:78:d7:35:1d:58:d9:
2c:3c:cd:36:03:1d:53:92:1d:aa:f6:e2:f8:2a:78:54:5a:91:
9f:5d:8f:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:24:57 2026 by rpki-client