Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/1db0cb-79fd-4d69-9515-42fcfb755744/1/Wu6ShG_jj96OD2KUjKmIPBopt1U.mft
File: Wu6ShG_jj96OD2KUjKmIPBopt1U.mft (raw, json)
Hash identifier: uHmnx3lo454PwXtPu7aoUroby3jSUo5TKWfvfvuUiVQ=
Subject key identifier: 7D:35:A2:33:2A:B5:6A:53:51:82:92:BD:1F:0F:2A:01:D4:42:EB:1D
Authority key identifier: 5A:EE:92:84:6F:E3:8F:DE:8E:0F:62:94:8C:A9:88:3C:1A:29:B7:55
Certificate issuer: /CN=5aee92846fe38fde8e0f62948ca9883c1a29b755
Certificate serial: 019D25F1707E33914A3607866C8834AD19F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wu6ShG_jj96OD2KUjKmIPBopt1U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/1db0cb-79fd-4d69-9515-42fcfb755744/1/Wu6ShG_jj96OD2KUjKmIPBopt1U.mft
Manifest number: 0CC7
Signing time: Wed 25 Mar 2026 17:01:12 +0000
Manifest this update: Wed 25 Mar 2026 17:01:12 +0000
Manifest next update: Thu 26 Mar 2026 17:01:12 +0000
Files and hashes: 1: Wu6ShG_jj96OD2KUjKmIPBopt1U.crl (hash: mO+KqedXV6h46Fl5j01NjXlS02MI8IROBTe9dvs4KhU=)
2: rP5nHNYdqEAJLssTyCJ5gOdDH2I.roa (hash: yOB632STL0Rw5rEnDDsr56AUQMoN3jjS+xa8opoFvzA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/1db0cb-79fd-4d69-9515-42fcfb755744/1/Wu6ShG_jj96OD2KUjKmIPBopt1U.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/1db0cb-79fd-4d69-9515-42fcfb755744/1/Wu6ShG_jj96OD2KUjKmIPBopt1U.mft
rsync://rpki.ripe.net/repository/DEFAULT/Wu6ShG_jj96OD2KUjKmIPBopt1U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 17:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f1:70:7e:33:91:4a:36:07:86:6c:88:34:ad:19:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5aee92846fe38fde8e0f62948ca9883c1a29b755
Validity
Not Before: Mar 25 17:01:12 2026 GMT
Not After : Mar 26 17:01:12 2026 GMT
Subject: CN=7d35a2332ab56a53518292bd1f0f2a01d442eb1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:c3:e3:e0:ab:a7:5d:9a:66:74:53:c9:f9:9a:
e5:8d:37:b9:92:a0:25:12:dd:a6:72:2d:9f:cb:2d:
1f:e2:f2:fd:54:e9:7f:54:89:ec:5e:86:cf:3c:b0:
15:1a:c6:47:a3:b7:fc:dd:06:48:7a:06:02:5c:93:
cf:3c:8d:09:35:54:18:45:c0:5e:4b:1f:ab:6e:aa:
2b:ae:e1:32:29:71:45:2b:5e:45:c6:3c:0d:13:98:
03:23:c3:bc:d4:80:0d:e0:1f:b6:00:d6:21:0b:e5:
1b:c8:6f:4b:a5:21:29:46:e0:b6:27:4b:15:91:e8:
fc:54:c6:1f:c9:06:f7:bf:9e:ea:30:a0:db:c5:cd:
1e:f4:7a:d6:00:c0:a3:6f:2c:df:22:bd:92:4e:40:
8c:cb:b5:49:f3:04:50:59:d9:00:14:20:ba:1c:4d:
4d:86:20:8f:d6:75:6e:6f:54:a2:67:61:6d:e4:7d:
9c:cc:83:75:8d:96:b0:17:82:44:bf:76:fb:cf:5b:
80:68:95:38:0e:ea:19:1f:27:12:16:44:29:d1:9c:
0d:fd:ef:2a:f8:38:23:f6:3b:4a:51:9f:73:80:57:
07:dc:1b:9a:2b:7b:ad:d7:f0:ab:07:0c:0c:fd:41:
80:66:b2:66:5b:80:e8:f9:a0:77:1d:4e:09:5a:67:
82:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:35:A2:33:2A:B5:6A:53:51:82:92:BD:1F:0F:2A:01:D4:42:EB:1D
X509v3 Authority Key Identifier:
keyid:5A:EE:92:84:6F:E3:8F:DE:8E:0F:62:94:8C:A9:88:3C:1A:29:B7:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wu6ShG_jj96OD2KUjKmIPBopt1U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/1db0cb-79fd-4d69-9515-42fcfb755744/1/Wu6ShG_jj96OD2KUjKmIPBopt1U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/1db0cb-79fd-4d69-9515-42fcfb755744/1/Wu6ShG_jj96OD2KUjKmIPBopt1U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c3:97:c3:2b:45:46:cf:e8:09:1a:1b:83:df:91:98:b2:ac:71:
9b:7c:53:61:cd:e4:d4:e4:43:d3:bd:19:5d:72:f7:4d:e8:66:
79:ae:a9:3a:88:5b:03:38:9c:0c:19:14:33:36:8e:35:3b:2a:
e9:e4:9a:60:4e:a2:d1:a8:a2:cb:8b:3b:0c:99:f2:80:49:da:
46:c8:c5:1d:f5:d1:e8:ff:77:9e:76:77:25:43:4b:0c:a4:53:
78:c4:46:82:09:95:ea:d0:91:32:62:9b:ad:3d:9b:38:07:2d:
27:72:b5:ea:97:a3:dd:9f:d4:bd:e4:8a:59:26:f4:20:bf:78:
94:76:3c:c9:9f:f8:43:44:da:6a:6c:ec:b0:8e:4f:b9:4a:73:
71:f6:6a:1f:b6:b4:25:fb:6e:bf:df:f0:72:aa:e1:1e:9e:e7:
73:64:a5:da:e3:d2:0b:4b:ea:8c:d7:94:e4:ac:a2:5c:99:1d:
0b:26:c7:a9:64:1d:27:7b:70:e4:b2:da:f2:f0:fd:9c:f9:c3:
c9:b3:ff:66:94:2b:2d:99:de:ce:fb:e6:69:3c:79:74:68:6c:
94:14:3b:5c:be:75:79:ea:7f:c5:da:85:89:c6:08:56:25:bb:
a6:ac:0d:db:98:72:70:f0:85:23:aa:7e:07:13:ab:1e:47:4e:
03:77:e9:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:36:32 2026 by rpki-client