Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/834875-aafb-45b4-ab58-519368b77c5d/1/WRgezM-jp4ELruDwW_Oge7j3jWY.mft
File: WRgezM-jp4ELruDwW_Oge7j3jWY.mft (raw, json)
Hash identifier: XOaY4Vg2UqI7oQVyFk7Vb7wpNrf4Sb6yy1ODE+fRkgU=
Subject key identifier: 91:C0:7C:FF:5A:12:80:31:BA:17:F9:3A:E3:12:9E:A7:E9:EC:7B:4E
Authority key identifier: 59:18:1E:CC:CF:A3:A7:81:0B:AE:E0:F0:5B:F3:A0:7B:B8:F7:8D:66
Certificate issuer: /CN=59181ecccfa3a7810baee0f05bf3a07bb8f78d66
Certificate serial: 019D99D0C1C5750A270190239DD83555D694
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WRgezM-jp4ELruDwW_Oge7j3jWY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/834875-aafb-45b4-ab58-519368b77c5d/1/WRgezM-jp4ELruDwW_Oge7j3jWY.mft
Manifest number: 1150
Signing time: Fri 17 Apr 2026 05:01:28 +0000
Manifest this update: Fri 17 Apr 2026 05:01:28 +0000
Manifest next update: Sat 18 Apr 2026 05:01:28 +0000
Files and hashes: 1: WRgezM-jp4ELruDwW_Oge7j3jWY.crl (hash: k9vS095mBcZPI1FEPdR+i+jFdEKhuVkejs09IvjevN8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/834875-aafb-45b4-ab58-519368b77c5d/1/WRgezM-jp4ELruDwW_Oge7j3jWY.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/834875-aafb-45b4-ab58-519368b77c5d/1/WRgezM-jp4ELruDwW_Oge7j3jWY.mft
rsync://rpki.ripe.net/repository/DEFAULT/WRgezM-jp4ELruDwW_Oge7j3jWY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 05:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:d0:c1:c5:75:0a:27:01:90:23:9d:d8:35:55:d6:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59181ecccfa3a7810baee0f05bf3a07bb8f78d66
Validity
Not Before: Apr 17 05:01:28 2026 GMT
Not After : Apr 18 05:01:28 2026 GMT
Subject: CN=91c07cff5a128031ba17f93ae3129ea7e9ec7b4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:57:ea:02:09:a2:ac:cc:2c:2f:c8:7e:bd:5a:
09:8b:5d:f9:cd:99:ab:12:69:05:4b:21:33:b4:9d:
04:da:b2:da:60:51:8f:10:5c:c3:6a:36:1b:64:cc:
2b:33:b4:f0:d8:d1:b7:e6:51:b5:78:a0:20:38:9a:
d6:5d:9b:b7:ef:64:76:46:80:40:e8:7c:10:74:d3:
69:f2:b4:45:69:b3:ac:a0:dd:32:15:37:70:7e:c6:
a0:ec:2f:ac:68:c6:5f:0c:d8:a1:29:13:5c:f3:f1:
e8:09:49:3e:cf:5d:c3:0c:48:49:28:87:4f:f9:1b:
6f:34:ff:42:ce:15:45:f8:b6:3a:38:cf:57:25:c8:
57:48:43:1a:c1:81:0b:38:1c:5a:31:cf:88:20:8e:
82:4d:45:4c:09:05:56:41:7f:f0:2d:45:aa:31:a5:
05:78:be:df:2c:e1:10:c2:4d:bb:5e:e3:70:fc:85:
4a:f1:18:64:ed:97:1d:23:98:4b:51:88:47:82:f4:
02:e9:86:c1:b1:af:45:a0:7c:4f:f9:a0:e0:ab:f3:
94:9e:99:7f:b8:64:16:86:d6:76:50:23:14:e0:2f:
19:5a:fc:b1:01:1e:0d:c4:98:a6:d6:8e:9c:a6:8f:
56:7c:d8:45:cc:b6:59:4b:0d:d0:ff:51:30:29:c7:
b7:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:C0:7C:FF:5A:12:80:31:BA:17:F9:3A:E3:12:9E:A7:E9:EC:7B:4E
X509v3 Authority Key Identifier:
keyid:59:18:1E:CC:CF:A3:A7:81:0B:AE:E0:F0:5B:F3:A0:7B:B8:F7:8D:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WRgezM-jp4ELruDwW_Oge7j3jWY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/834875-aafb-45b4-ab58-519368b77c5d/1/WRgezM-jp4ELruDwW_Oge7j3jWY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/834875-aafb-45b4-ab58-519368b77c5d/1/WRgezM-jp4ELruDwW_Oge7j3jWY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:3e:7a:22:74:4d:b8:38:c1:59:f4:02:d5:99:d3:ab:22:fd:
71:d2:f8:54:0d:2f:bd:c0:ae:83:67:f6:67:f9:8d:30:6e:3c:
16:53:a2:08:7e:a7:72:21:27:e2:a5:f2:fa:7b:5f:3b:21:ab:
51:4a:6f:0f:20:05:e5:be:a9:09:1f:c9:33:2b:bd:4b:81:ed:
77:c6:da:d8:00:6b:7c:77:93:3c:ad:47:00:60:c7:df:0a:09:
f6:30:e1:7b:85:1e:47:c2:a2:db:c9:7c:f2:e0:c0:7b:ab:02:
e4:c1:30:c1:db:2c:17:8d:1e:55:7f:07:bc:23:b5:ee:c5:ee:
72:a0:9b:30:fd:a8:6d:b0:5e:0f:fc:0a:10:00:df:5c:77:db:
23:09:33:0e:3a:28:8e:b9:bd:87:f9:a3:21:a8:e5:9a:b4:ce:
81:6a:45:d6:ad:f2:98:12:2c:49:74:da:57:eb:28:58:c2:4c:
27:ab:cb:23:11:f3:39:55:d4:45:ac:dd:ae:67:e8:03:b1:03:
29:9f:21:75:85:ef:29:f0:0d:d6:0a:2a:f8:43:58:0a:28:d1:
57:a4:02:f1:df:aa:50:e4:5c:34:37:b8:e8:d2:f4:27:ec:e9:
26:09:9e:a1:f9:39:79:5f:67:d2:12:2d:16:e9:3a:fc:21:02:
6a:7b:d2:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:32:15 2026 by rpki-client