Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/b4cd6e-3e8c-4402-b2c1-b1a1edda77cd/1/wKmyD2ubglk-wH4MuLuHDOEYZdw.mft
File: wKmyD2ubglk-wH4MuLuHDOEYZdw.mft (raw, json)
Hash identifier: VUBA7umHVd/jfHqaujuJp/2V/w1aBHucsjG26reNDzw=
Subject key identifier: 7E:48:98:BF:2F:D8:30:6B:AE:7C:E5:2D:B4:37:52:3A:82:3C:BD:A1
Authority key identifier: C0:A9:B2:0F:6B:9B:82:59:3E:C0:7E:0C:B8:BB:87:0C:E1:18:65:DC
Certificate issuer: /CN=c0a9b20f6b9b82593ec07e0cb8bb870ce11865dc
Certificate serial: 019D371BD2E850027189D1DD26D9A337276F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wKmyD2ubglk-wH4MuLuHDOEYZdw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/b4cd6e-3e8c-4402-b2c1-b1a1edda77cd/1/wKmyD2ubglk-wH4MuLuHDOEYZdw.mft
Manifest number: 0BFF
Signing time: Sun 29 Mar 2026 01:01:03 +0000
Manifest this update: Sun 29 Mar 2026 01:01:03 +0000
Manifest next update: Mon 30 Mar 2026 01:01:03 +0000
Files and hashes: 1: wKmyD2ubglk-wH4MuLuHDOEYZdw.crl (hash: pH+pztXvtvUYHeCire78XKZkQpCK86u3XSY+5PLZZgw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/b4cd6e-3e8c-4402-b2c1-b1a1edda77cd/1/wKmyD2ubglk-wH4MuLuHDOEYZdw.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/b4cd6e-3e8c-4402-b2c1-b1a1edda77cd/1/wKmyD2ubglk-wH4MuLuHDOEYZdw.mft
rsync://rpki.ripe.net/repository/DEFAULT/wKmyD2ubglk-wH4MuLuHDOEYZdw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 01:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:1b:d2:e8:50:02:71:89:d1:dd:26:d9:a3:37:27:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0a9b20f6b9b82593ec07e0cb8bb870ce11865dc
Validity
Not Before: Mar 29 01:01:03 2026 GMT
Not After : Mar 30 01:01:03 2026 GMT
Subject: CN=7e4898bf2fd8306bae7ce52db437523a823cbda1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:6c:ed:e4:51:ae:bc:bb:99:47:58:d0:39:45:
08:ec:a5:d8:1f:39:02:42:65:cc:d4:09:73:23:e3:
cf:fb:95:94:b7:e1:7a:47:fe:70:94:23:55:45:9d:
47:a0:a1:e0:67:7f:6e:82:f8:44:55:68:95:0c:74:
a5:37:92:d4:e2:2b:70:21:d2:8f:8b:db:c2:98:f5:
22:13:1c:aa:86:2e:41:05:20:72:3a:c6:37:57:ee:
70:15:87:2e:39:8b:8f:04:cd:58:ba:94:24:ba:cf:
a3:3e:ae:f2:7b:26:eb:1d:36:da:88:4a:ba:dc:08:
b9:c5:65:79:11:52:86:a3:9e:23:7d:20:dc:00:ad:
d0:6e:4d:70:01:52:ea:42:76:16:66:cd:ad:cc:eb:
a3:2b:68:f6:7e:65:07:55:b5:13:33:d6:52:65:f3:
99:66:61:67:52:db:94:ce:2e:00:71:ba:8e:e4:8f:
ea:e2:a4:05:f1:75:0a:2f:53:d6:cb:87:ec:e5:5f:
9d:4a:cc:32:a0:a8:6b:68:23:7f:11:cd:87:33:ba:
e7:73:a0:b2:09:76:87:b5:c5:4e:cd:0b:98:d7:5b:
a1:26:80:f3:f2:ec:ff:f5:11:a5:a0:98:b9:62:61:
8a:1c:25:a7:1e:04:c4:b8:eb:3d:ee:31:58:ef:94:
61:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:48:98:BF:2F:D8:30:6B:AE:7C:E5:2D:B4:37:52:3A:82:3C:BD:A1
X509v3 Authority Key Identifier:
keyid:C0:A9:B2:0F:6B:9B:82:59:3E:C0:7E:0C:B8:BB:87:0C:E1:18:65:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wKmyD2ubglk-wH4MuLuHDOEYZdw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/b4cd6e-3e8c-4402-b2c1-b1a1edda77cd/1/wKmyD2ubglk-wH4MuLuHDOEYZdw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/b4cd6e-3e8c-4402-b2c1-b1a1edda77cd/1/wKmyD2ubglk-wH4MuLuHDOEYZdw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:f7:06:b6:bd:a4:17:b5:b6:97:bd:5d:55:37:41:78:7e:0f:
05:2b:6d:95:00:25:99:35:92:3b:34:9f:76:bc:ce:6e:1e:14:
4f:76:1c:68:c0:71:32:cd:1e:b4:ec:57:39:46:73:b1:57:70:
2f:98:bd:6c:65:04:a6:40:b4:5b:71:a5:5b:aa:82:66:38:49:
d6:b7:0b:2a:43:88:7c:a4:60:5a:66:9b:41:2a:6c:f4:91:b1:
2f:2c:bc:8c:3a:29:43:31:8a:67:d6:17:06:31:b3:31:89:b1:
a0:97:f0:ea:a8:04:a9:46:7f:57:4b:4d:b8:04:12:b4:47:c6:
8e:9c:86:b1:93:68:66:7f:63:ac:78:2d:ea:6e:9f:7d:47:63:
e7:7b:7f:ce:18:2f:2f:a8:74:b1:67:81:69:61:ed:41:42:3b:
2b:b1:55:f4:24:40:04:59:c4:81:c9:97:c6:bb:d1:6c:26:32:
cb:4e:d9:77:a0:ef:d0:f1:8d:b2:3f:db:32:4b:08:2d:2e:fe:
aa:8b:75:4a:e0:a4:d0:e2:da:a6:1f:7d:45:e1:cf:a6:12:2d:
34:2c:f0:6d:31:61:c9:7b:3a:8b:d0:e2:4f:88:bb:e3:49:a4:
0b:5d:63:20:ac:c4:54:53:ed:cb:9f:ad:0f:0d:06:71:ea:ce:
43:04:57:7e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03G9LoUAJxidHdJtmjNydvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMwYTliMjBmNmI5YjgyNTkzZWMwN2UwY2I4YmI4NzBjZTEx
ODY1ZGMwHhcNMjYwMzI5MDEwMTAzWhcNMjYwMzMwMDEwMTAzWjAzMTEwLwYDVQQD
Eyg3ZTQ4OThiZjJmZDgzMDZiYWU3Y2U1MmRiNDM3NTIzYTgyM2NiZGExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl2zt5FGuvLuZR1jQOUUI7KXYHzkC
QmXM1AlzI+PP+5WUt+F6R/5wlCNVRZ1HoKHgZ39ugvhEVWiVDHSlN5LU4itwIdKP
i9vCmPUiExyqhi5BBSByOsY3V+5wFYcuOYuPBM1YupQkus+jPq7yeybrHTbaiEq6
3Ai5xWV5EVKGo54jfSDcAK3Qbk1wAVLqQnYWZs2tzOujK2j2fmUHVbUTM9ZSZfOZ
ZmFnUtuUzi4AcbqO5I/q4qQF8XUKL1PWy4fs5V+dSswyoKhraCN/Ec2HM7rnc6Cy
CXaHtcVOzQuY11uhJoDz8uz/9RGloJi5YmGKHCWnHgTEuOs97jFY75RhqQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH5ImL8v2DBrrnzlLbQ3UjqCPL2hMB8GA1UdIwQY
MBaAFMCpsg9rm4JZPsB+DLi7hwzhGGXcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd0tteUQydWJnbGstd0g0TXVMdUhET0VZWmR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy9iNGNkNmUtM2U4Yy00NDAyLWIyYzEt
YjFhMWVkZGE3N2NkLzEvd0tteUQydWJnbGstd0g0TXVMdUhET0VZWmR3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNy9iNGNkNmUtM2U4Yy00NDAyLWIyYzEtYjFhMWVkZGE3N2Nk
LzEvd0tteUQydWJnbGstd0g0TXVMdUhET0VZWmR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOfcGtr2k
F7W2l71dVTdBeH4PBSttlQAlmTWSOzSfdrzObh4UT3YcaMBxMs0etOxXOUZzsVdw
L5i9bGUEpkC0W3GlW6qCZjhJ1rcLKkOIfKRgWmabQSps9JGxLyy8jDopQzGKZ9YX
BjGzMYmxoJfw6qgEqUZ/V0tNuAQStEfGjpyGsZNoZn9jrHgt6m6ffUdj53t/zhgv
L6h0sWeBaWHtQUI7K7FV9CRABFnEgcmXxrvRbCYyy07Zd6Dv0PGNsj/bMksILS7+
qot1SuCk0OLaph99ReHPphItNCzwbTFhyXs6i9DiT4i740mkC11jIKzEVFPty5+t
Dw0GcerOQwRXfg==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:13:11 2026 by rpki-client