Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/652bef-6f4e-4997-bb3a-4c9e49239624/1/wsej20o9La--GGqmhfRzbqfQjDg.mft
File: wsej20o9La--GGqmhfRzbqfQjDg.mft (raw, json)
Hash identifier: MEOd57/qmd1XhGlHSIntZ8srj6FU+q49/79HNQ7/F6k=
Subject key identifier: A5:4A:D6:B3:F0:69:6C:23:17:57:6A:09:62:8C:73:DD:EB:B8:DD:72
Authority key identifier: C2:C7:A3:DB:4A:3D:2D:AF:BE:18:6A:A6:85:F4:73:6E:A7:D0:8C:38
Certificate issuer: /CN=c2c7a3db4a3d2dafbe186aa685f4736ea7d08c38
Certificate serial: 019D99991C2A32C0EC05CFA4AFA8C159B908
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wsej20o9La--GGqmhfRzbqfQjDg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/652bef-6f4e-4997-bb3a-4c9e49239624/1/wsej20o9La--GGqmhfRzbqfQjDg.mft
Manifest number: 1218
Signing time: Fri 17 Apr 2026 04:00:41 +0000
Manifest this update: Fri 17 Apr 2026 04:00:41 +0000
Manifest next update: Sat 18 Apr 2026 04:00:41 +0000
Files and hashes: 1: wsej20o9La--GGqmhfRzbqfQjDg.crl (hash: W9GwdNPQvgK9llVE4gCsf/e9PFOqHlp/uve1evZleMs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/652bef-6f4e-4997-bb3a-4c9e49239624/1/wsej20o9La--GGqmhfRzbqfQjDg.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/652bef-6f4e-4997-bb3a-4c9e49239624/1/wsej20o9La--GGqmhfRzbqfQjDg.mft
rsync://rpki.ripe.net/repository/DEFAULT/wsej20o9La--GGqmhfRzbqfQjDg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 04:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:99:1c:2a:32:c0:ec:05:cf:a4:af:a8:c1:59:b9:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2c7a3db4a3d2dafbe186aa685f4736ea7d08c38
Validity
Not Before: Apr 17 04:00:41 2026 GMT
Not After : Apr 18 04:00:41 2026 GMT
Subject: CN=a54ad6b3f0696c2317576a09628c73ddebb8dd72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:80:d2:1d:6c:02:5d:67:65:13:10:5a:b7:24:
60:95:5f:76:af:6a:14:86:0b:c2:21:51:83:6d:bc:
b7:bd:7f:35:c7:3d:6f:dd:67:da:8a:a4:c5:bb:39:
b0:9b:38:14:67:af:fc:03:a0:13:fb:34:9b:6c:89:
b4:bf:58:ae:ce:85:75:17:d4:24:0a:10:f1:f9:95:
f1:a0:61:27:a4:08:f4:a9:20:99:37:88:25:97:3b:
c3:13:6a:8e:d5:3c:08:9e:70:d3:05:13:d6:c8:1e:
f0:e8:ab:22:17:89:8f:7e:8e:4f:2a:82:2a:50:64:
b5:4b:f6:ef:b7:86:75:92:fe:fb:f1:05:d5:43:78:
d0:03:2a:0e:d3:b7:da:95:bc:37:a9:c9:c6:8c:0e:
80:fc:2a:3a:98:56:16:e4:2b:5d:64:c1:5e:dc:72:
0a:de:76:57:78:25:65:1d:3e:08:ce:f8:ef:56:23:
20:e0:f2:9a:c5:3a:14:74:f3:59:d7:a2:82:b8:7d:
18:d8:7a:c1:b9:1b:ba:43:05:57:b5:56:6f:f2:91:
97:98:2e:68:d0:4a:fe:7c:93:6f:f1:a2:07:7e:c7:
ce:ba:ec:dc:ed:47:15:3b:97:ef:eb:1b:cd:b5:d3:
0c:97:78:76:b9:fd:6a:54:3e:1e:cc:e7:23:ea:23:
41:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:4A:D6:B3:F0:69:6C:23:17:57:6A:09:62:8C:73:DD:EB:B8:DD:72
X509v3 Authority Key Identifier:
keyid:C2:C7:A3:DB:4A:3D:2D:AF:BE:18:6A:A6:85:F4:73:6E:A7:D0:8C:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wsej20o9La--GGqmhfRzbqfQjDg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/652bef-6f4e-4997-bb3a-4c9e49239624/1/wsej20o9La--GGqmhfRzbqfQjDg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/652bef-6f4e-4997-bb3a-4c9e49239624/1/wsej20o9La--GGqmhfRzbqfQjDg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:20:7d:bf:4b:54:3d:67:b9:f1:44:9e:b5:f2:98:b7:e6:27:
19:6e:6a:cd:90:d1:d0:8b:b1:46:35:2d:ea:f8:e7:cc:5b:34:
58:15:ce:da:22:1d:77:38:e2:8c:cb:35:72:4f:69:e7:3c:ae:
f3:11:37:62:fd:0e:4b:a2:30:32:7f:9c:6a:a6:b1:5b:ff:15:
40:19:6f:21:98:7b:6d:f3:19:ad:1e:af:54:b9:80:31:96:61:
9c:e1:f2:d0:47:ef:f2:18:7c:3f:2d:db:cd:33:54:4e:09:5a:
bf:3d:a4:ec:8d:c2:d2:66:19:a3:f3:72:a3:c3:14:2b:2b:18:
fe:e1:f9:39:61:8f:a3:f1:2f:ed:d9:26:06:2a:e9:05:ae:7f:
41:80:67:74:38:35:2f:25:8f:73:6a:a5:30:81:62:47:33:db:
17:8a:80:1b:69:51:ea:28:83:da:6f:8e:e8:f9:c1:1f:08:c0:
23:4b:9d:3f:27:4b:43:f5:49:22:05:ab:56:39:77:8f:1b:e7:
37:51:8c:2c:d3:ec:41:c5:c0:36:a3:86:85:2a:c5:01:18:b0:
18:04:d0:a7:cb:34:a2:ba:94:82:ba:0d:e9:e4:bf:c8:cd:15:
a4:8c:dd:f1:6b:5e:4d:5e:18:6e:3c:a6:96:b6:e3:64:63:26:
eb:92:89:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:05:51 2026 by rpki-client