Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/3990c2-51be-4b87-af62-e0e099640eac/1/ws_pT97DCaxVMFrJDnw9Yo39QGo.mft
File: ws_pT97DCaxVMFrJDnw9Yo39QGo.mft (raw, json)
Hash identifier: av2xNtlv4qlVk/8NGBe5RVBRjkXDS/XS7HKScSSghZk=
Subject key identifier: FC:DE:8D:01:34:F8:6A:E0:C4:81:F0:49:CB:A7:5D:F6:97:A2:CE:76
Authority key identifier: C2:CF:E9:4F:DE:C3:09:AC:55:30:5A:C9:0E:7C:3D:62:8D:FD:40:6A
Certificate issuer: /CN=c2cfe94fdec309ac55305ac90e7c3d628dfd406a
Certificate serial: 019D389BA68D250C49C2009FE0810F85AF88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ws_pT97DCaxVMFrJDnw9Yo39QGo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/3990c2-51be-4b87-af62-e0e099640eac/1/ws_pT97DCaxVMFrJDnw9Yo39QGo.mft
Manifest number: 0410
Signing time: Sun 29 Mar 2026 08:00:17 +0000
Manifest this update: Sun 29 Mar 2026 08:00:17 +0000
Manifest next update: Mon 30 Mar 2026 08:00:17 +0000
Files and hashes: 1: ws_pT97DCaxVMFrJDnw9Yo39QGo.crl (hash: NgB/Hrur44Pl3wuRjthpYdhYb69pbqPw1RXQ1HCpSUM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/3990c2-51be-4b87-af62-e0e099640eac/1/ws_pT97DCaxVMFrJDnw9Yo39QGo.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/3990c2-51be-4b87-af62-e0e099640eac/1/ws_pT97DCaxVMFrJDnw9Yo39QGo.mft
rsync://rpki.ripe.net/repository/DEFAULT/ws_pT97DCaxVMFrJDnw9Yo39QGo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9b:a6:8d:25:0c:49:c2:00:9f:e0:81:0f:85:af:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2cfe94fdec309ac55305ac90e7c3d628dfd406a
Validity
Not Before: Mar 29 08:00:17 2026 GMT
Not After : Mar 30 08:00:17 2026 GMT
Subject: CN=fcde8d0134f86ae0c481f049cba75df697a2ce76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:62:ef:da:35:c1:3a:07:39:53:75:f9:56:5a:
b0:16:84:cf:7d:60:d0:71:8f:3c:0a:0b:64:53:9a:
c2:95:56:66:79:d0:3c:44:cb:f7:aa:a4:9a:18:0a:
b5:48:c8:13:a2:76:81:b1:e5:3d:8a:27:90:c0:f1:
52:a2:3a:22:7a:78:88:3a:40:7c:3d:e0:1b:58:27:
27:a0:02:5a:8a:d1:ba:1b:ac:1d:23:4a:04:e6:33:
53:19:86:c5:b1:6a:44:9e:48:1f:eb:03:72:ca:29:
a4:ec:0d:0f:c9:d2:5f:9a:f5:2a:27:16:a0:84:4b:
bf:2b:d4:d0:8d:db:0f:8f:df:f4:91:20:a6:07:78:
57:80:1c:1a:e7:5e:d9:b7:be:26:6f:76:77:ad:26:
9d:63:d0:ce:b7:94:f0:98:15:a3:ef:ea:16:16:3c:
14:4a:9b:29:b1:0d:ed:2c:96:2b:e6:61:29:26:84:
39:90:1f:da:4d:c5:03:60:9b:1c:86:2a:fe:db:a1:
f2:5a:84:9a:b8:1c:01:f1:95:cc:5c:e6:ea:d8:b0:
30:a4:ac:c2:39:b9:f7:97:64:aa:3e:af:18:85:28:
5d:f9:be:ac:b5:c9:ab:93:6c:c8:ac:01:5c:0f:f9:
35:66:c1:1a:47:74:7e:03:a4:08:07:e1:03:8d:95:
31:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:DE:8D:01:34:F8:6A:E0:C4:81:F0:49:CB:A7:5D:F6:97:A2:CE:76
X509v3 Authority Key Identifier:
keyid:C2:CF:E9:4F:DE:C3:09:AC:55:30:5A:C9:0E:7C:3D:62:8D:FD:40:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ws_pT97DCaxVMFrJDnw9Yo39QGo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/3990c2-51be-4b87-af62-e0e099640eac/1/ws_pT97DCaxVMFrJDnw9Yo39QGo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/3990c2-51be-4b87-af62-e0e099640eac/1/ws_pT97DCaxVMFrJDnw9Yo39QGo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:a9:56:75:ce:f1:80:a8:9e:4b:c8:26:87:b3:bc:25:49:d5:
d4:c1:75:e6:11:de:d0:5b:8f:0c:6a:a5:e4:7f:e4:f2:7d:08:
9d:53:59:ef:06:1e:bb:c5:6a:33:95:75:9d:b4:a2:bb:5f:9a:
c5:94:d8:d8:58:90:d6:f0:78:55:d1:63:f8:b9:41:10:df:9e:
c3:42:01:aa:88:87:fa:fb:e1:1c:d2:72:a9:a6:31:15:dc:5c:
65:c8:53:79:60:d2:00:13:49:05:c3:98:c9:47:f4:75:42:3b:
07:53:8b:75:d1:ac:78:4d:bc:54:31:a5:2c:98:2d:d6:61:7d:
16:9e:10:7c:90:06:68:47:7e:36:a7:b1:d4:71:34:d6:1b:6f:
da:a2:42:31:45:7f:26:89:f2:66:f8:32:d4:f6:47:41:a7:73:
66:8a:a0:52:17:07:d1:49:54:88:16:fd:65:ac:2d:61:83:dd:
3f:eb:80:7e:bf:0d:c0:77:e6:bc:4a:c3:f4:f8:3d:ca:ee:1d:
5f:55:9f:02:c4:e7:6e:d0:21:95:c6:48:da:64:87:69:06:fa:
12:86:ac:81:b1:4e:20:f8:49:70:4e:3c:d8:f3:70:00:89:1e:
d0:44:90:67:ad:5f:42:09:67:ef:d3:3f:b5:9d:c9:ba:00:70:
0c:08:72:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:49:00 2026 by rpki-client