Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/652bef-6f4e-4997-bb3a-4c9e49239624/1/wsej20o9La--GGqmhfRzbqfQjDg.mft
File: wsej20o9La--GGqmhfRzbqfQjDg.mft (raw, json)
Hash identifier: QuXYOPXo7sS6JQGssTVkvtWw63Aafpdh7CWxn+8vQRo=
Subject key identifier: 64:4E:3F:AA:1C:EE:6C:6C:3C:D6:88:31:AD:28:2C:05:6D:A9:FC:39
Authority key identifier: C2:C7:A3:DB:4A:3D:2D:AF:BE:18:6A:A6:85:F4:73:6E:A7:D0:8C:38
Certificate issuer: /CN=c2c7a3db4a3d2dafbe186aa685f4736ea7d08c38
Certificate serial: 019D3AF81D0E702FF2B1CA778FC02737C738
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wsej20o9La--GGqmhfRzbqfQjDg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/652bef-6f4e-4997-bb3a-4c9e49239624/1/wsej20o9La--GGqmhfRzbqfQjDg.mft
Manifest number: 11E7
Signing time: Sun 29 Mar 2026 19:00:32 +0000
Manifest this update: Sun 29 Mar 2026 19:00:32 +0000
Manifest next update: Mon 30 Mar 2026 19:00:32 +0000
Files and hashes: 1: wsej20o9La--GGqmhfRzbqfQjDg.crl (hash: POMxG7Da9TZSeKvUtAWM6fYXTpiNwmXFASQ4QlzNdvY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/652bef-6f4e-4997-bb3a-4c9e49239624/1/wsej20o9La--GGqmhfRzbqfQjDg.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/652bef-6f4e-4997-bb3a-4c9e49239624/1/wsej20o9La--GGqmhfRzbqfQjDg.mft
rsync://rpki.ripe.net/repository/DEFAULT/wsej20o9La--GGqmhfRzbqfQjDg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 16:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:f8:1d:0e:70:2f:f2:b1:ca:77:8f:c0:27:37:c7:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2c7a3db4a3d2dafbe186aa685f4736ea7d08c38
Validity
Not Before: Mar 29 19:00:32 2026 GMT
Not After : Mar 30 19:00:32 2026 GMT
Subject: CN=644e3faa1cee6c6c3cd68831ad282c056da9fc39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:df:4c:27:6e:b0:f7:1d:65:25:31:36:84:75:
a2:9a:ed:89:27:ca:cb:2a:2b:57:32:fe:ab:60:c8:
6f:94:16:fc:69:26:6b:8e:ac:ac:77:1e:fd:c2:36:
2a:e4:9b:04:e0:4b:a0:fa:04:ee:42:41:fe:d2:2d:
5b:d3:5a:7c:ae:7c:a4:78:2a:5d:dc:52:1d:d0:d9:
09:68:39:f0:54:14:a2:6e:f9:0e:66:5d:db:de:d0:
7c:ed:a2:37:d5:d1:f3:87:80:69:ca:1d:9f:49:93:
52:34:2c:62:64:d1:62:cf:a5:3c:80:cc:a9:28:22:
e3:7a:a6:ca:ac:d2:57:32:25:90:5f:8a:33:93:00:
18:7d:f2:76:c0:2c:61:54:d1:47:37:aa:f3:2c:d4:
6a:ec:76:98:be:c0:73:f2:84:04:ae:16:73:99:ec:
e2:7f:d9:a3:b5:7b:e2:99:97:3c:18:08:09:e3:d9:
73:7e:ed:c2:3f:71:19:94:a0:c9:67:07:64:74:c8:
d7:ff:a6:2c:11:6d:68:d6:0f:44:c8:c6:77:d3:57:
b0:56:a6:a9:cf:52:8e:38:70:4c:4f:d2:5e:ed:d4:
9b:93:27:75:0b:f1:78:51:2d:42:99:ea:27:00:7d:
4f:cf:a7:a8:fd:d5:75:ea:fe:3e:85:ba:9f:bf:16:
e3:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:4E:3F:AA:1C:EE:6C:6C:3C:D6:88:31:AD:28:2C:05:6D:A9:FC:39
X509v3 Authority Key Identifier:
keyid:C2:C7:A3:DB:4A:3D:2D:AF:BE:18:6A:A6:85:F4:73:6E:A7:D0:8C:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wsej20o9La--GGqmhfRzbqfQjDg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/652bef-6f4e-4997-bb3a-4c9e49239624/1/wsej20o9La--GGqmhfRzbqfQjDg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/652bef-6f4e-4997-bb3a-4c9e49239624/1/wsej20o9La--GGqmhfRzbqfQjDg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:42:50:c2:e8:f1:3b:10:8a:fc:f1:c5:ca:2f:70:05:e9:6f:
28:6b:a2:1f:bb:ef:3f:16:e8:c3:69:1b:65:1c:7d:4a:32:ff:
5a:28:2a:90:48:47:85:7a:fa:c6:30:bf:8b:b5:fb:34:fd:34:
a7:16:cf:5f:ba:55:ed:82:33:ec:a1:fe:6f:89:12:b1:df:45:
27:94:14:51:7f:17:bd:36:30:ae:f8:9f:8b:28:3c:33:48:19:
1a:bc:d8:c2:93:fd:45:29:d0:d6:5a:cb:a0:56:7f:37:93:73:
99:62:4b:e6:38:24:c0:41:76:70:5a:00:9f:c7:99:c9:41:41:
34:e9:96:77:bc:f6:2e:e2:7d:54:9d:78:bc:00:93:b7:33:e3:
03:f8:81:59:5c:10:c3:ab:84:60:e1:0f:13:2b:95:6d:9e:d3:
92:65:59:3d:08:02:3f:af:21:c1:16:cd:84:bb:47:c2:d4:70:
8b:ed:3b:25:71:49:89:58:bf:7e:bd:4e:64:cc:a0:61:8f:0c:
a9:46:f3:72:14:20:46:53:59:73:b4:16:21:3e:de:70:b7:78:
8a:d7:5c:58:8e:b1:f3:af:f6:bb:10:76:0e:b1:2b:61:22:bf:
f5:48:33:74:98:35:12:3d:cd:44:7e:4c:a9:49:53:d3:15:0d:
6e:3d:43:0b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ06+B0OcC/yscp3j8AnN8c4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMyYzdhM2RiNGEzZDJkYWZiZTE4NmFhNjg1ZjQ3MzZlYTdk
MDhjMzgwHhcNMjYwMzI5MTkwMDMyWhcNMjYwMzMwMTkwMDMyWjAzMTEwLwYDVQQD
Eyg2NDRlM2ZhYTFjZWU2YzZjM2NkNjg4MzFhZDI4MmMwNTZkYTlmYzM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtN9MJ26w9x1lJTE2hHWimu2JJ8rL
KitXMv6rYMhvlBb8aSZrjqysdx79wjYq5JsE4Eug+gTuQkH+0i1b01p8rnykeCpd
3FId0NkJaDnwVBSibvkOZl3b3tB87aI31dHzh4Bpyh2fSZNSNCxiZNFiz6U8gMyp
KCLjeqbKrNJXMiWQX4ozkwAYffJ2wCxhVNFHN6rzLNRq7HaYvsBz8oQErhZzmezi
f9mjtXvimZc8GAgJ49lzfu3CP3EZlKDJZwdkdMjX/6YsEW1o1g9EyMZ301ewVqap
z1KOOHBMT9Je7dSbkyd1C/F4US1CmeonAH1Pz6eo/dV16v4+hbqfvxbjxwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGROP6oc7mxsPNaIMa0oLAVtqfw5MB8GA1UdIwQY
MBaAFMLHo9tKPS2vvhhqpoX0c26n0Iw4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd3NlajIwbzlMYS0tR0dxbWhmUnpicWZRakRnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi82NTJiZWYtNmY0ZS00OTk3LWJiM2Et
NGM5ZTQ5MjM5NjI0LzEvd3NlajIwbzlMYS0tR0dxbWhmUnpicWZRakRnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZi82NTJiZWYtNmY0ZS00OTk3LWJiM2EtNGM5ZTQ5MjM5NjI0
LzEvd3NlajIwbzlMYS0tR0dxbWhmUnpicWZRakRnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgkJQwujx
OxCK/PHFyi9wBelvKGuiH7vvPxbow2kbZRx9SjL/WigqkEhHhXr6xjC/i7X7NP00
pxbPX7pV7YIz7KH+b4kSsd9FJ5QUUX8XvTYwrvifiyg8M0gZGrzYwpP9RSnQ1lrL
oFZ/N5NzmWJL5jgkwEF2cFoAn8eZyUFBNOmWd7z2LuJ9VJ14vACTtzPjA/iBWVwQ
w6uEYOEPEyuVbZ7TkmVZPQgCP68hwRbNhLtHwtRwi+07JXFJiVi/fr1OZMygYY8M
qUbzchQgRlNZc7QWIT7ecLd4itdcWI6x86/2uxB2DrErYSK/9UgzdJg1Ej3NRH5M
qUlT0xUNbj1DCw==
-----END CERTIFICATE-----
Generated at Sun Mar 29 21:19:44 2026 by rpki-client