Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/103e6b-1033-452e-82a4-9774bc226cce/1/w6PDZsu4xcf3NZGdFQovrwwI-F8.mft
File: w6PDZsu4xcf3NZGdFQovrwwI-F8.mft (raw, json)
Hash identifier: OJ/PCST2mFWmIl4+70wyCQM1h6SfDrQIgmekHRW+hII=
Subject key identifier: 0A:5C:55:AC:53:1D:9F:AB:C7:98:4E:1B:33:AE:62:63:2C:A2:F8:05
Authority key identifier: C3:A3:C3:66:CB:B8:C5:C7:F7:35:91:9D:15:0A:2F:AF:0C:08:F8:5F
Certificate issuer: /CN=c3a3c366cbb8c5c7f735919d150a2faf0c08f85f
Certificate serial: 019D27E0765A8BA5ADA01C7FC36CCFD118DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w6PDZsu4xcf3NZGdFQovrwwI-F8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/103e6b-1033-452e-82a4-9774bc226cce/1/w6PDZsu4xcf3NZGdFQovrwwI-F8.mft
Manifest number: 080D
Signing time: Thu 26 Mar 2026 02:01:54 +0000
Manifest this update: Thu 26 Mar 2026 02:01:54 +0000
Manifest next update: Fri 27 Mar 2026 02:01:54 +0000
Files and hashes: 1: w6PDZsu4xcf3NZGdFQovrwwI-F8.crl (hash: iFJHpZ/4PQG8mMgCWkHp1Yn6jRrF/Ru4u450+TzYiBQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/103e6b-1033-452e-82a4-9774bc226cce/1/w6PDZsu4xcf3NZGdFQovrwwI-F8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/103e6b-1033-452e-82a4-9774bc226cce/1/w6PDZsu4xcf3NZGdFQovrwwI-F8.mft
rsync://rpki.ripe.net/repository/DEFAULT/w6PDZsu4xcf3NZGdFQovrwwI-F8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:e0:76:5a:8b:a5:ad:a0:1c:7f:c3:6c:cf:d1:18:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3a3c366cbb8c5c7f735919d150a2faf0c08f85f
Validity
Not Before: Mar 26 02:01:54 2026 GMT
Not After : Mar 27 02:01:54 2026 GMT
Subject: CN=0a5c55ac531d9fabc7984e1b33ae62632ca2f805
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:b9:cd:7c:61:f6:5b:9d:6f:15:c4:cc:20:4e:
9c:34:73:33:53:9e:4d:64:9e:31:f5:92:c1:77:ee:
47:81:e7:8b:92:51:1a:90:9f:fd:09:4b:0a:19:f3:
be:39:c6:55:ca:fb:1f:45:0c:d8:be:e8:d0:26:e8:
9f:23:60:d7:32:14:08:90:02:9e:11:cb:6d:aa:05:
f0:74:04:cb:ef:11:ca:bd:b0:5e:8c:35:33:ee:05:
b2:34:12:3f:c9:5f:55:f3:19:21:a2:2e:63:2a:5a:
d3:01:bc:7f:23:43:fe:b3:de:22:45:cd:5f:c6:03:
21:79:a2:b5:81:aa:43:ad:ef:6a:92:5e:25:cb:da:
9c:65:c8:b6:e6:22:eb:cb:0e:e0:1d:2c:bc:d8:9b:
20:fa:a7:a1:c7:5a:e0:5f:64:d0:39:0c:e3:d8:f0:
f7:cb:6f:eb:88:60:7e:1e:c1:11:0d:88:f6:5c:86:
40:38:20:0f:43:ec:29:42:c4:75:a6:65:a7:d2:3e:
0e:c4:5f:85:fe:ce:db:11:fc:c1:4d:b1:46:6a:e2:
39:82:a1:28:56:cf:8d:51:76:17:84:ee:05:39:94:
5d:3b:96:e9:0a:68:b4:ef:19:ec:9d:af:89:35:e7:
1e:85:ab:64:40:eb:bd:bc:6b:c4:05:33:75:02:61:
76:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:5C:55:AC:53:1D:9F:AB:C7:98:4E:1B:33:AE:62:63:2C:A2:F8:05
X509v3 Authority Key Identifier:
keyid:C3:A3:C3:66:CB:B8:C5:C7:F7:35:91:9D:15:0A:2F:AF:0C:08:F8:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w6PDZsu4xcf3NZGdFQovrwwI-F8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/103e6b-1033-452e-82a4-9774bc226cce/1/w6PDZsu4xcf3NZGdFQovrwwI-F8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/103e6b-1033-452e-82a4-9774bc226cce/1/w6PDZsu4xcf3NZGdFQovrwwI-F8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:ff:c0:1e:9a:5f:56:31:cb:08:e2:07:85:6c:69:52:e7:fd:
95:30:db:c0:69:3b:a8:7a:60:86:23:1d:c0:39:cd:a3:fe:cd:
ec:84:f7:1d:1b:7b:ac:65:b6:ce:b0:69:04:74:83:a4:7b:77:
aa:17:fd:39:ab:86:52:5a:db:ef:64:4d:5e:75:d7:d3:2a:a2:
7b:4f:6e:01:df:89:f6:c0:b1:d6:5f:c0:d9:b8:11:ba:10:69:
ba:a5:8f:d9:eb:66:eb:2e:db:bf:3c:f2:d6:06:64:4f:9f:29:
32:de:63:9d:a9:c7:82:9f:a2:3c:2f:97:43:b1:52:be:49:e9:
04:b3:9f:56:91:1f:fe:9b:c3:e6:23:8a:6d:e9:84:ad:d8:27:
89:00:94:4f:21:eb:83:14:0c:68:68:46:4b:ce:54:ea:58:93:
9a:89:9f:97:8c:77:84:51:ce:4f:d5:e2:1d:19:da:5e:1f:c4:
d7:78:3b:14:28:8a:64:fd:3c:9b:e7:d0:ec:6c:6c:f7:6e:47:
c1:da:53:c1:02:3d:16:b5:be:3d:db:7c:37:cb:db:b1:71:46:
96:6a:c4:22:94:b6:88:ac:67:31:e1:31:1e:62:8a:b5:95:ae:
43:3f:d6:17:ab:c4:04:d3:f0:2a:10:97:d3:fc:5d:9a:71:a8:
cf:d9:28:48
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0n4HZai6WtoBx/w2zP0RjaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMzYTNjMzY2Y2JiOGM1YzdmNzM1OTE5ZDE1MGEyZmFmMGMw
OGY4NWYwHhcNMjYwMzI2MDIwMTU0WhcNMjYwMzI3MDIwMTU0WjAzMTEwLwYDVQQD
EygwYTVjNTVhYzUzMWQ5ZmFiYzc5ODRlMWIzM2FlNjI2MzJjYTJmODA1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwrnNfGH2W51vFcTMIE6cNHMzU55N
ZJ4x9ZLBd+5HgeeLklEakJ/9CUsKGfO+OcZVyvsfRQzYvujQJuifI2DXMhQIkAKe
EcttqgXwdATL7xHKvbBejDUz7gWyNBI/yV9V8xkhoi5jKlrTAbx/I0P+s94iRc1f
xgMheaK1gapDre9qkl4ly9qcZci25iLryw7gHSy82Jsg+qehx1rgX2TQOQzj2PD3
y2/riGB+HsERDYj2XIZAOCAPQ+wpQsR1pmWn0j4OxF+F/s7bEfzBTbFGauI5gqEo
Vs+NUXYXhO4FOZRdO5bpCmi07xnsna+JNecehatkQOu9vGvEBTN1AmF2zQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFApcVaxTHZ+rx5hOGzOuYmMsovgFMB8GA1UdIwQY
MBaAFMOjw2bLuMXH9zWRnRUKL68MCPhfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdzZQRFpzdTR4Y2YzTlpHZEZRb3Zyd3dJLUY4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC8xMDNlNmItMTAzMy00NTJlLTgyYTQt
OTc3NGJjMjI2Y2NlLzEvdzZQRFpzdTR4Y2YzTlpHZEZRb3Zyd3dJLUY4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZC8xMDNlNmItMTAzMy00NTJlLTgyYTQtOTc3NGJjMjI2Y2Nl
LzEvdzZQRFpzdTR4Y2YzTlpHZEZRb3Zyd3dJLUY4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI//AHppf
VjHLCOIHhWxpUuf9lTDbwGk7qHpghiMdwDnNo/7N7IT3HRt7rGW2zrBpBHSDpHt3
qhf9OauGUlrb72RNXnXX0yqie09uAd+J9sCx1l/A2bgRuhBpuqWP2etm6y7bvzzy
1gZkT58pMt5jnanHgp+iPC+XQ7FSvknpBLOfVpEf/pvD5iOKbemErdgniQCUTyHr
gxQMaGhGS85U6liTmomfl4x3hFHOT9XiHRnaXh/E13g7FCiKZP08m+fQ7Gxs925H
wdpTwQI9FrW+Pdt8N8vbsXFGlmrEIpS2iKxnMeExHmKKtZWuQz/WF6vEBNPwKhCX
0/xdmnGoz9koSA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 08:34:59 2026 by rpki-client