Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/3e50ff-a566-4cb1-a110-3a8af02951ee/1/wrAFQRuLMhCDQsn3BZUCIGuYJME.mft
File: wrAFQRuLMhCDQsn3BZUCIGuYJME.mft (raw, json)
Hash identifier: XFqm2cDb042oityWTCWXTHok8vSEsXvS/BedwtqawkQ=
Subject key identifier: EE:3F:DC:F6:36:E2:EA:64:C6:2D:BE:C5:5E:10:31:43:24:67:72:46
Authority key identifier: C2:B0:05:41:1B:8B:32:10:83:42:C9:F7:05:95:02:20:6B:98:24:C1
Certificate issuer: /CN=c2b005411b8b32108342c9f7059502206b9824c1
Certificate serial: 019EB8EA9D797693438E10FC19A0D71BF02D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wrAFQRuLMhCDQsn3BZUCIGuYJME.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/3e50ff-a566-4cb1-a110-3a8af02951ee/1/wrAFQRuLMhCDQsn3BZUCIGuYJME.mft
Manifest number: 1954
Signing time: Thu 11 Jun 2026 23:00:43 +0000
Manifest this update: Thu 11 Jun 2026 23:00:43 +0000
Manifest next update: Fri 12 Jun 2026 23:00:43 +0000
Files and hashes: 1: wrAFQRuLMhCDQsn3BZUCIGuYJME.crl (hash: waIIFRIuzyyJWTcb8p9oJEHIFqevPe8UzbBCQA25lrc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/3e50ff-a566-4cb1-a110-3a8af02951ee/1/wrAFQRuLMhCDQsn3BZUCIGuYJME.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/3e50ff-a566-4cb1-a110-3a8af02951ee/1/wrAFQRuLMhCDQsn3BZUCIGuYJME.mft
rsync://rpki.ripe.net/repository/DEFAULT/wrAFQRuLMhCDQsn3BZUCIGuYJME.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 20:26:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b8:ea:9d:79:76:93:43:8e:10:fc:19:a0:d7:1b:f0:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2b005411b8b32108342c9f7059502206b9824c1
Validity
Not Before: Jun 11 23:00:43 2026 GMT
Not After : Jun 12 23:00:43 2026 GMT
Subject: CN=ee3fdcf636e2ea64c62dbec55e10314324677246
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:4a:38:a7:cd:13:7c:a6:35:65:67:82:34:fc:
49:da:c0:25:19:e9:bc:b6:08:de:48:34:f8:9f:74:
54:27:50:72:3a:f4:25:4e:c3:35:9c:a4:94:28:3d:
b4:3b:7d:b0:dc:87:90:9d:34:8a:00:5a:8f:d3:c3:
08:21:c3:64:62:00:ab:bd:5f:cb:7e:7d:c9:0e:2f:
f6:49:ce:7d:8b:16:17:31:1c:50:cd:ca:00:10:46:
6a:2a:36:2a:d5:8e:a8:81:76:d7:7a:e2:65:98:ef:
03:9b:0c:ce:56:36:5d:a3:5f:ec:89:7d:5d:e9:01:
81:ee:2e:bd:9c:bc:bc:3a:fd:3f:92:c3:d8:39:47:
e9:9f:17:58:71:30:10:ae:2b:8f:8a:e9:6f:ff:08:
aa:72:4f:ff:6f:65:80:06:d0:67:ef:98:0a:2c:1e:
56:32:84:35:72:17:e9:43:31:0a:3b:02:d5:f8:eb:
0e:fe:a2:43:a5:79:40:b0:16:f7:59:91:e1:da:ed:
9e:6e:47:ee:c7:08:bb:4d:cf:46:61:4d:93:db:5c:
9e:7b:76:f4:80:99:bf:14:9d:4f:14:56:b2:7c:ae:
6c:a7:c2:ef:84:86:b0:98:bc:3b:b2:92:02:fd:a0:
99:ed:1c:8b:b7:35:50:c5:b4:34:65:76:10:43:dc:
80:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:3F:DC:F6:36:E2:EA:64:C6:2D:BE:C5:5E:10:31:43:24:67:72:46
X509v3 Authority Key Identifier:
keyid:C2:B0:05:41:1B:8B:32:10:83:42:C9:F7:05:95:02:20:6B:98:24:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wrAFQRuLMhCDQsn3BZUCIGuYJME.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/3e50ff-a566-4cb1-a110-3a8af02951ee/1/wrAFQRuLMhCDQsn3BZUCIGuYJME.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/3e50ff-a566-4cb1-a110-3a8af02951ee/1/wrAFQRuLMhCDQsn3BZUCIGuYJME.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:c9:40:33:88:f2:64:67:2e:ae:e6:24:1d:7d:4e:d5:3f:e6:
84:cc:52:2b:d1:c9:a1:06:a0:6f:05:c9:b3:37:c1:f6:95:8b:
95:d3:4c:d9:80:0c:97:81:16:72:eb:21:77:78:4f:36:13:26:
84:6c:49:5a:1c:01:89:19:35:26:0c:b0:b0:86:04:11:7c:65:
b6:35:1f:64:7e:fd:ea:d4:dd:56:f7:75:5a:ea:a9:40:9f:4f:
b6:3d:e8:6e:9d:97:3f:4b:e4:b4:18:48:fa:13:06:2e:87:ca:
f6:74:d1:e4:72:80:c5:a7:5c:80:09:2f:e9:28:a1:d0:bf:3d:
ad:3b:29:51:bd:24:77:dc:d2:a6:82:1c:44:ad:30:1c:e2:43:
c7:e6:4a:a1:17:d7:47:bb:03:c4:09:c0:12:f5:80:08:7f:49:
fa:50:4f:43:c0:e4:22:0a:b4:5f:11:f0:b0:6b:f0:0a:2a:21:
9d:c7:2c:1a:90:2f:96:18:29:3a:37:c0:e8:a5:87:14:0e:2e:
b3:bf:ed:37:ca:19:ed:4a:fd:d2:76:f6:61:4e:7e:ac:1b:50:
41:e9:e1:25:d4:2e:a2:c4:cb:5a:56:65:84:4d:15:59:b0:f2:
25:4c:a9:1b:7c:be:8a:91:ae:61:39:ef:0c:c2:69:8e:bf:bb:
d1:f1:8d:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 05:18:46 2026 by rpki-client