Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/9c64e2-4b64-43da-b904-10b907ffd08f/1/wZXJC6JdDegZV1eMeMt7JOjJPsk.mft
File: wZXJC6JdDegZV1eMeMt7JOjJPsk.mft (raw, json)
Hash identifier: o4IUXeleuZN2kRto+ohSPK4B0cJdzBAS0r20VAFsU40=
Subject key identifier: 30:B4:DA:84:EB:10:0B:41:93:59:8C:49:B9:7C:F3:9D:67:AF:E7:48
Authority key identifier: C1:95:C9:0B:A2:5D:0D:E8:19:57:57:8C:78:CB:7B:24:E8:C9:3E:C9
Certificate issuer: /CN=c195c90ba25d0de81957578c78cb7b24e8c93ec9
Certificate serial: 019D2704DCFB58A260775B7D9F12C3FEE20B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wZXJC6JdDegZV1eMeMt7JOjJPsk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/9c64e2-4b64-43da-b904-10b907ffd08f/1/wZXJC6JdDegZV1eMeMt7JOjJPsk.mft
Manifest number: 03A2
Signing time: Wed 25 Mar 2026 22:02:03 +0000
Manifest this update: Wed 25 Mar 2026 22:02:03 +0000
Manifest next update: Thu 26 Mar 2026 22:02:03 +0000
Files and hashes: 1: wZXJC6JdDegZV1eMeMt7JOjJPsk.crl (hash: TY4w3bBRtfuzQjxpVSUHwb432G0sw2L7mh2QJoUpjbw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/9c64e2-4b64-43da-b904-10b907ffd08f/1/wZXJC6JdDegZV1eMeMt7JOjJPsk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/9c64e2-4b64-43da-b904-10b907ffd08f/1/wZXJC6JdDegZV1eMeMt7JOjJPsk.mft
rsync://rpki.ripe.net/repository/DEFAULT/wZXJC6JdDegZV1eMeMt7JOjJPsk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:dc:fb:58:a2:60:77:5b:7d:9f:12:c3:fe:e2:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c195c90ba25d0de81957578c78cb7b24e8c93ec9
Validity
Not Before: Mar 25 22:02:03 2026 GMT
Not After : Mar 26 22:02:03 2026 GMT
Subject: CN=30b4da84eb100b4193598c49b97cf39d67afe748
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:c2:61:51:a8:52:04:ba:54:b7:ad:4c:0c:4f:
2c:b9:b5:f7:6e:3b:57:6e:fd:af:90:89:72:5b:c2:
fa:6a:9d:53:aa:b5:4a:2c:89:f4:c2:cd:b7:f7:a9:
d9:1e:5a:9e:7f:bf:41:63:5c:3c:67:08:04:5a:3a:
e8:87:a3:46:e0:f9:2b:1a:56:f9:0c:fc:7f:bf:07:
1e:e2:75:12:63:ba:d6:4e:f8:b5:1c:20:21:7c:73:
8b:a5:d1:cd:52:e7:91:7d:d2:24:d2:5f:67:7e:d0:
bf:1d:6c:2c:03:68:74:f4:fd:76:35:b4:67:a7:f7:
2a:35:22:10:f4:6e:20:f9:6f:1b:57:d0:d6:95:07:
af:93:97:ea:7a:5e:66:2e:0b:5f:b3:e7:c4:f3:66:
ab:f6:1c:0e:41:d0:0c:4d:67:f4:02:65:37:dc:9a:
b0:d8:b0:80:45:3d:b0:2d:f5:c7:ea:25:61:b1:25:
5c:66:3d:0f:88:54:68:01:f6:6f:9e:de:65:43:33:
52:2d:59:9b:c2:fb:78:5f:0b:0e:c1:ee:6e:bb:5e:
40:59:3d:41:dc:dd:f4:1a:c9:1d:c3:81:66:fd:5b:
fa:85:93:e2:0f:8c:47:3d:03:97:3e:2d:60:02:b7:
70:dd:a9:b4:ac:45:72:27:6a:00:92:04:b8:a3:21:
4f:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:B4:DA:84:EB:10:0B:41:93:59:8C:49:B9:7C:F3:9D:67:AF:E7:48
X509v3 Authority Key Identifier:
keyid:C1:95:C9:0B:A2:5D:0D:E8:19:57:57:8C:78:CB:7B:24:E8:C9:3E:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wZXJC6JdDegZV1eMeMt7JOjJPsk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/9c64e2-4b64-43da-b904-10b907ffd08f/1/wZXJC6JdDegZV1eMeMt7JOjJPsk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/9c64e2-4b64-43da-b904-10b907ffd08f/1/wZXJC6JdDegZV1eMeMt7JOjJPsk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:26:93:71:8c:ad:0d:9e:39:4d:15:39:0d:48:31:a9:4a:5c:
46:f6:a1:8d:06:7f:a4:5f:98:ad:92:5b:2f:08:d2:a8:7e:ca:
5e:66:ca:e4:71:cc:73:05:bd:06:2b:a3:3c:89:40:a3:30:6e:
c8:5d:15:7d:74:bb:a1:af:09:cc:5e:8d:32:9d:16:8f:29:f5:
d2:f5:9a:d9:2c:0a:96:98:c0:a1:05:24:bb:de:84:d9:1f:6f:
bf:bd:24:2d:3d:f6:c0:a9:bb:f0:44:65:f9:45:8a:d9:1c:2b:
21:f5:80:fb:86:62:26:32:18:1c:7c:5b:94:c8:b3:a2:60:fa:
bc:4a:a9:40:dd:ae:10:8c:72:06:7b:44:fe:6d:0e:63:d5:a8:
a6:94:e7:33:0a:66:4c:57:98:93:c0:f4:5d:68:16:19:11:d0:
ca:53:e1:bc:25:6b:95:19:e3:40:d2:dc:c6:a7:f8:e1:73:bc:
bf:27:b0:9b:46:44:4a:e6:ab:78:5f:ae:32:ea:e6:ab:7d:6a:
08:c9:62:45:97:f3:d3:92:61:92:7f:2c:4e:70:3d:7d:56:f0:
9d:49:6a:e6:61:dc:5d:08:5d:92:44:d5:82:cf:f8:69:c0:e7:
c5:cb:5d:57:b4:05:79:1c:a2:38:d8:b4:5d:a4:cb:81:32:20:
aa:0b:73:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:24:22 2026 by rpki-client