Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/e0134c-447f-4c29-ae1b-b2cd36c5a15e/1/WK_t_vZ5GEkGNL5OK3XBG3DC6i4.mft
File: WK_t_vZ5GEkGNL5OK3XBG3DC6i4.mft (raw, json)
Hash identifier: VFoNxeAT40mO2rz7jrKrA2qoNb3LLQyJxunukaREVqY=
Subject key identifier: 1E:9E:D1:47:37:8A:EF:53:23:6D:D8:C0:FE:70:40:F2:45:D3:B5:D2
Authority key identifier: 58:AF:ED:FE:F6:79:18:49:06:34:BE:4E:2B:75:C1:1B:70:C2:EA:2E
Certificate issuer: /CN=58afedfef67918490634be4e2b75c11b70c2ea2e
Certificate serial: 019D382DE7E681D1A39DEE74D0F806FA131F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WK_t_vZ5GEkGNL5OK3XBG3DC6i4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/e0134c-447f-4c29-ae1b-b2cd36c5a15e/1/WK_t_vZ5GEkGNL5OK3XBG3DC6i4.mft
Manifest number: 0CBA
Signing time: Sun 29 Mar 2026 06:00:25 +0000
Manifest this update: Sun 29 Mar 2026 06:00:25 +0000
Manifest next update: Mon 30 Mar 2026 06:00:25 +0000
Files and hashes: 1: WK_t_vZ5GEkGNL5OK3XBG3DC6i4.crl (hash: piCoyInrGHQVqqePJG6u4pgebN3EsT8w/u7T/JViTLI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/e0134c-447f-4c29-ae1b-b2cd36c5a15e/1/WK_t_vZ5GEkGNL5OK3XBG3DC6i4.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/e0134c-447f-4c29-ae1b-b2cd36c5a15e/1/WK_t_vZ5GEkGNL5OK3XBG3DC6i4.mft
rsync://rpki.ripe.net/repository/DEFAULT/WK_t_vZ5GEkGNL5OK3XBG3DC6i4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2d:e7:e6:81:d1:a3:9d:ee:74:d0:f8:06:fa:13:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58afedfef67918490634be4e2b75c11b70c2ea2e
Validity
Not Before: Mar 29 06:00:25 2026 GMT
Not After : Mar 30 06:00:25 2026 GMT
Subject: CN=1e9ed147378aef53236dd8c0fe7040f245d3b5d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:0d:d4:51:3f:65:19:97:d1:8f:78:34:86:a0:
f9:dd:d4:37:59:fe:e2:62:ad:17:7f:6d:a7:48:de:
93:11:75:93:8d:dc:0e:3c:52:41:38:01:2e:98:4d:
37:6e:ef:9f:b2:b7:b4:02:67:50:2f:70:29:2f:38:
9b:91:0f:44:95:be:33:e2:6a:a4:0b:c1:80:9f:04:
c3:3b:c6:78:96:7e:b3:a8:e1:5f:07:12:15:86:63:
5f:11:7e:c1:a0:ff:81:35:dc:bf:cb:fa:ef:22:a0:
fa:38:24:a2:1d:da:e7:5a:00:65:b2:0a:a6:46:0c:
3f:a1:8a:74:61:21:43:ef:2a:67:82:c1:48:93:60:
bf:9c:90:79:e6:30:e6:7c:49:8d:5d:d0:68:c4:17:
10:53:42:a6:46:ad:9b:8c:c1:f9:4b:f0:4f:b7:de:
51:45:a5:c1:61:e9:d4:ad:ba:a8:07:6c:d0:fb:47:
94:f3:21:02:9b:65:88:62:e3:36:33:ee:14:f5:3d:
29:5c:0a:a1:00:e3:aa:a4:eb:76:0e:0f:cf:dd:74:
a8:18:ab:3c:56:1b:d9:5a:a6:dd:7c:96:d1:1c:0e:
09:98:a4:a9:c8:0c:de:ef:6c:dc:ba:ee:cc:82:13:
78:e2:65:45:0c:42:06:85:a6:c4:ab:32:95:f3:90:
00:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:9E:D1:47:37:8A:EF:53:23:6D:D8:C0:FE:70:40:F2:45:D3:B5:D2
X509v3 Authority Key Identifier:
keyid:58:AF:ED:FE:F6:79:18:49:06:34:BE:4E:2B:75:C1:1B:70:C2:EA:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WK_t_vZ5GEkGNL5OK3XBG3DC6i4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/e0134c-447f-4c29-ae1b-b2cd36c5a15e/1/WK_t_vZ5GEkGNL5OK3XBG3DC6i4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/e0134c-447f-4c29-ae1b-b2cd36c5a15e/1/WK_t_vZ5GEkGNL5OK3XBG3DC6i4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:80:b2:c0:a3:35:a5:36:30:5e:27:e4:e1:21:a7:a4:05:42:
d1:30:6b:e4:3b:fa:46:e3:79:f8:88:44:1a:80:61:18:2a:58:
aa:bb:a8:7a:f6:64:7c:a9:30:9d:bd:40:ec:4b:d7:f2:a6:aa:
88:57:f8:f1:e4:8a:ee:53:3f:f0:2b:42:4c:3e:4a:1e:24:b1:
fc:f3:ce:16:c8:c2:8b:f2:bb:28:4e:a0:e3:06:10:82:cb:8c:
c3:7e:1c:6a:50:38:1e:93:ab:20:ae:c7:c0:74:06:00:0b:9c:
ab:6e:33:1d:5d:fe:26:42:74:99:5a:c3:a7:48:1b:16:8b:62:
2f:5c:ae:d8:db:4f:57:b7:07:f0:12:73:63:a2:27:74:5c:d9:
9f:a5:ea:f2:40:7a:2d:60:15:ce:4f:f9:63:0b:db:97:c6:55:
b6:7b:1c:45:55:d6:9e:9a:75:f7:69:5a:ba:39:02:55:b5:8b:
e7:93:16:f1:64:d2:52:47:9d:fa:c9:d5:2b:d5:c2:30:61:b9:
dd:da:1b:02:a2:8e:0a:c3:3e:d5:46:5c:bc:0d:c3:c7:47:66:
8f:af:12:ca:7d:94:f1:b1:d2:78:2a:57:6d:97:2c:b0:f7:30:
47:23:f5:7c:dd:d4:82:e0:97:a0:f5:17:6b:29:4a:cf:0e:fd:
64:ea:d8:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:04:00 2026 by rpki-client