Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/7905aa-3546-4c2d-9031-0982bbd31dd4/1/wsVutD8iDrUUHthhUwr_JSGyHu0.mft
File: wsVutD8iDrUUHthhUwr_JSGyHu0.mft (raw, json)
Hash identifier: eueCeM3nBAr9E946zzmNBV1IwNJa56X+O+wM8mpldhM=
Subject key identifier: 41:7B:D4:01:B8:D5:62:65:54:C3:ED:C5:5D:3A:F0:F0:1F:B6:C5:C0
Authority key identifier: C2:C5:6E:B4:3F:22:0E:B5:14:1E:D8:61:53:0A:FF:25:21:B2:1E:ED
Certificate issuer: /CN=c2c56eb43f220eb5141ed861530aff2521b21eed
Certificate serial: 019CAAC663B461FFDCD85F740FA63C21FB13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wsVutD8iDrUUHthhUwr_JSGyHu0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/7905aa-3546-4c2d-9031-0982bbd31dd4/1/wsVutD8iDrUUHthhUwr_JSGyHu0.mft
Manifest number: 1842
Signing time: Sun 01 Mar 2026 19:00:54 +0000
Manifest this update: Sun 01 Mar 2026 19:00:54 +0000
Manifest next update: Mon 02 Mar 2026 19:00:54 +0000
Files and hashes: 1: wsVutD8iDrUUHthhUwr_JSGyHu0.crl (hash: PWxoAnK7M2IVHEkcIklHvMG10LwBU6+0oiqyB9hVZMo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/7905aa-3546-4c2d-9031-0982bbd31dd4/1/wsVutD8iDrUUHthhUwr_JSGyHu0.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/7905aa-3546-4c2d-9031-0982bbd31dd4/1/wsVutD8iDrUUHthhUwr_JSGyHu0.mft
rsync://rpki.ripe.net/repository/DEFAULT/wsVutD8iDrUUHthhUwr_JSGyHu0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:63:b4:61:ff:dc:d8:5f:74:0f:a6:3c:21:fb:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2c56eb43f220eb5141ed861530aff2521b21eed
Validity
Not Before: Mar 1 19:00:54 2026 GMT
Not After : Mar 2 19:00:54 2026 GMT
Subject: CN=417bd401b8d5626554c3edc55d3af0f01fb6c5c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:29:52:4f:46:1d:89:7d:f4:a1:c9:37:03:ac:
16:c2:82:8a:b2:cf:4c:18:20:28:03:d8:3c:20:44:
e4:de:f6:83:b5:92:90:c3:34:e2:ba:fa:f2:1d:3b:
a5:62:64:66:fc:65:58:23:4b:db:42:77:cc:33:72:
a3:b9:5e:12:b6:e1:6e:81:ef:93:9d:5b:8a:fb:32:
d6:8b:cc:31:19:af:79:0f:9b:a1:9f:18:55:1f:f4:
38:54:1c:c8:7e:f8:50:e7:89:82:a0:97:a2:30:c5:
58:cc:1a:6e:21:7e:7c:d8:25:a6:77:21:13:5d:4f:
5b:e4:b1:b1:63:4a:0c:0d:ae:b8:35:cd:ec:03:a2:
f6:4a:b7:51:2d:0d:94:12:e6:17:10:0b:0e:f3:04:
b8:ab:3a:27:1b:72:25:c0:4b:ff:c9:93:7f:f4:52:
81:1e:f8:e3:4f:a0:b4:15:0e:b0:09:a8:cf:10:5c:
49:6c:b4:71:6c:16:d0:63:d3:be:c4:cf:b6:20:1d:
1c:c9:ba:77:df:19:95:b4:a9:c6:43:d6:5d:e0:2a:
30:9a:83:11:3f:34:56:1d:80:05:56:a4:6b:71:bd:
43:be:da:fe:6b:cd:ee:3d:dd:f5:c4:21:9e:23:58:
88:5a:5a:56:44:52:9b:8b:bd:57:fc:ab:be:ef:04:
f4:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:7B:D4:01:B8:D5:62:65:54:C3:ED:C5:5D:3A:F0:F0:1F:B6:C5:C0
X509v3 Authority Key Identifier:
keyid:C2:C5:6E:B4:3F:22:0E:B5:14:1E:D8:61:53:0A:FF:25:21:B2:1E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wsVutD8iDrUUHthhUwr_JSGyHu0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/7905aa-3546-4c2d-9031-0982bbd31dd4/1/wsVutD8iDrUUHthhUwr_JSGyHu0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/7905aa-3546-4c2d-9031-0982bbd31dd4/1/wsVutD8iDrUUHthhUwr_JSGyHu0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:1d:11:79:64:d3:fc:18:38:e6:5e:c4:bd:e2:84:0a:ab:bb:
82:e8:cd:10:e5:15:fd:d9:1b:ae:68:2b:91:b0:48:9b:e3:c1:
6d:81:f3:d6:98:92:35:ad:89:aa:4f:a2:bd:8b:6a:90:32:35:
70:e0:3d:6e:4c:84:58:d4:7d:0f:f3:04:e3:b6:a8:60:19:d4:
90:d3:10:5a:86:14:74:ef:f7:f6:41:38:08:4e:b3:d8:33:d5:
eb:6e:1d:14:d2:98:9f:bd:4d:94:37:8a:7f:e3:a7:f4:eb:00:
fb:22:7a:67:7e:48:b5:4a:89:a4:cf:cc:49:f0:eb:a0:10:74:
3e:16:7a:8c:11:38:f0:90:e6:fd:b8:09:5a:51:13:a5:06:f1:
c6:35:97:be:f3:c3:6d:65:15:58:f0:52:3e:5b:c1:a8:fd:03:
dd:6a:6d:10:c1:b6:f1:72:05:ac:ef:12:9f:60:08:b1:ab:a6:
c4:67:88:6d:05:a1:c1:97:0b:ea:42:5e:42:64:af:4d:53:74:
dd:5d:e2:f7:bb:97:dd:a7:d4:28:52:9c:22:aa:53:2e:4f:5e:
8f:40:b2:ce:ca:39:66:b8:21:92:96:6d:f9:23:8f:7d:0e:ef:
e7:bf:7c:b3:33:a4:2c:0f:95:a1:9d:4c:f9:45:01:d0:fa:69:
76:e5:6d:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:44:53 2026 by rpki-client