Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/895117-a0f8-4145-bdaa-88cec2f95513/1/WSh1E_SesUCO5BsoHIsnczB6iRA.mft
File: WSh1E_SesUCO5BsoHIsnczB6iRA.mft (raw, json)
Hash identifier: maj71k+Q+6J8HsvPBVqnrKE6yHQ/Z/+FoTv1pc80af8=
Subject key identifier: B4:F0:A7:ED:B0:7C:C1:36:D9:DC:11:2E:EF:80:6E:31:37:37:DE:E0
Authority key identifier: 59:28:75:13:F4:9E:B1:40:8E:E4:1B:28:1C:8B:27:73:30:7A:89:10
Certificate issuer: /CN=59287513f49eb1408ee41b281c8b2773307a8910
Certificate serial: 019D38D34AD8946150711AF5BA7A71841C7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WSh1E_SesUCO5BsoHIsnczB6iRA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/895117-a0f8-4145-bdaa-88cec2f95513/1/WSh1E_SesUCO5BsoHIsnczB6iRA.mft
Manifest number: 188C
Signing time: Sun 29 Mar 2026 09:01:04 +0000
Manifest this update: Sun 29 Mar 2026 09:01:04 +0000
Manifest next update: Mon 30 Mar 2026 09:01:04 +0000
Files and hashes: 1: WSh1E_SesUCO5BsoHIsnczB6iRA.crl (hash: TcqLYSGFafhT1A0WdtHR4zL9zMl5sk3yMid9ApAxOSs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/895117-a0f8-4145-bdaa-88cec2f95513/1/WSh1E_SesUCO5BsoHIsnczB6iRA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/895117-a0f8-4145-bdaa-88cec2f95513/1/WSh1E_SesUCO5BsoHIsnczB6iRA.mft
rsync://rpki.ripe.net/repository/DEFAULT/WSh1E_SesUCO5BsoHIsnczB6iRA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:4a:d8:94:61:50:71:1a:f5:ba:7a:71:84:1c:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59287513f49eb1408ee41b281c8b2773307a8910
Validity
Not Before: Mar 29 09:01:04 2026 GMT
Not After : Mar 30 09:01:04 2026 GMT
Subject: CN=b4f0a7edb07cc136d9dc112eef806e313737dee0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:12:7d:f2:e8:f3:a8:48:ac:8e:fa:be:13:3b:
b8:62:9d:58:6c:5e:e9:40:67:ed:74:e2:7b:7d:e1:
46:fc:af:71:12:e7:fd:5e:d1:63:9d:04:1f:28:2b:
12:6a:0e:58:bf:5f:08:de:8d:fe:32:bb:66:98:fa:
6a:92:26:03:4a:4c:6a:31:3b:b1:fc:b4:dd:ba:3d:
06:0a:e6:7c:69:21:14:5a:b0:d9:99:10:1c:ee:b0:
35:e2:87:0d:5c:0a:66:ab:e3:e4:e8:a0:22:53:6e:
c7:e4:70:9b:47:78:fc:6c:6a:9c:6b:69:f5:b1:4f:
8b:0a:7e:59:c0:eb:8e:4d:18:55:be:7b:fd:5a:52:
54:ac:9f:5f:52:e6:e8:1d:a4:8d:8a:ad:17:d2:ae:
05:8b:dd:55:60:14:5c:5c:7b:e0:94:b1:2b:33:de:
ca:26:db:a5:0a:9c:ef:0c:d8:5d:d5:08:3b:73:e9:
e1:fc:6c:66:83:2e:75:18:fa:02:24:fd:7a:e1:83:
b3:9e:d2:80:43:c7:7e:57:2b:91:6d:6f:6e:2d:5e:
41:d2:0d:7b:e3:ab:77:86:03:e5:b6:b4:25:41:e3:
00:a8:3c:56:e8:34:ce:1b:9d:f2:45:62:81:cb:36:
0c:35:c3:11:34:6b:70:a4:bb:91:ca:a1:1d:2e:a6:
c8:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:F0:A7:ED:B0:7C:C1:36:D9:DC:11:2E:EF:80:6E:31:37:37:DE:E0
X509v3 Authority Key Identifier:
keyid:59:28:75:13:F4:9E:B1:40:8E:E4:1B:28:1C:8B:27:73:30:7A:89:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WSh1E_SesUCO5BsoHIsnczB6iRA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/895117-a0f8-4145-bdaa-88cec2f95513/1/WSh1E_SesUCO5BsoHIsnczB6iRA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/895117-a0f8-4145-bdaa-88cec2f95513/1/WSh1E_SesUCO5BsoHIsnczB6iRA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:f2:44:0d:dc:4b:1e:6e:70:81:ed:3c:ea:25:1a:12:72:1b:
37:de:70:77:d2:17:39:48:f0:e7:d7:db:d9:7a:51:9e:02:cb:
c3:01:a6:9d:83:72:f2:60:a3:bf:f2:4c:c3:e0:4b:f4:a5:50:
85:bb:f7:59:ef:84:6c:08:15:22:2f:cf:a7:df:cc:fb:0a:69:
ec:97:bd:44:e7:34:59:d4:65:a2:43:f1:0e:7f:b0:e6:d4:e9:
9b:bb:3d:68:fd:ac:41:d1:ff:59:80:f6:62:0c:c9:55:b3:f4:
81:6a:c3:cb:e9:dc:5a:ad:30:1e:a4:5d:1c:83:ad:ec:58:d4:
ce:8c:e4:a4:09:95:18:98:f9:db:1a:1e:4a:b4:0a:17:51:3d:
33:45:ac:53:98:28:88:c0:33:fa:7d:aa:07:88:bf:3b:8a:5f:
bc:3a:d0:3e:f8:64:cc:09:d5:cc:0e:d1:41:b0:2c:85:8f:ef:
cf:09:6e:a7:62:92:00:b4:61:5a:f2:63:05:f4:c7:30:77:38:
68:cd:16:5c:df:7f:9f:bd:01:26:dd:83:5e:c5:77:83:e0:ec:
ad:04:57:e9:71:cd:80:40:24:61:b5:12:2a:cd:01:fd:52:50:
48:08:47:a8:72:e4:98:94:02:bf:79:28:3a:55:3d:c4:8e:8e:
35:e6:ad:77
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0400rYlGFQcRr1unpxhBx8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU5Mjg3NTEzZjQ5ZWIxNDA4ZWU0MWIyODFjOGIyNzczMzA3
YTg5MTAwHhcNMjYwMzI5MDkwMTA0WhcNMjYwMzMwMDkwMTA0WjAzMTEwLwYDVQQD
EyhiNGYwYTdlZGIwN2NjMTM2ZDlkYzExMmVlZjgwNmUzMTM3MzdkZWUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2BJ98ujzqEisjvq+Ezu4Yp1YbF7p
QGftdOJ7feFG/K9xEuf9XtFjnQQfKCsSag5Yv18I3o3+MrtmmPpqkiYDSkxqMTux
/LTduj0GCuZ8aSEUWrDZmRAc7rA14ocNXApmq+Pk6KAiU27H5HCbR3j8bGqca2n1
sU+LCn5ZwOuOTRhVvnv9WlJUrJ9fUuboHaSNiq0X0q4Fi91VYBRcXHvglLErM97K
JtulCpzvDNhd1Qg7c+nh/Gxmgy51GPoCJP164YOzntKAQ8d+VyuRbW9uLV5B0g17
46t3hgPltrQlQeMAqDxW6DTOG53yRWKByzYMNcMRNGtwpLuRyqEdLqbI8wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLTwp+2wfME22dwRLu+AbjE3N97gMB8GA1UdIwQY
MBaAFFkodRP0nrFAjuQbKByLJ3MweokQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV1NoMUVfU2VzVUNPNUJzb0hJc25jekI2aVJBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi84OTUxMTctYTBmOC00MTQ1LWJkYWEt
ODhjZWMyZjk1NTEzLzEvV1NoMUVfU2VzVUNPNUJzb0hJc25jekI2aVJBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMi84OTUxMTctYTBmOC00MTQ1LWJkYWEtODhjZWMyZjk1NTEz
LzEvV1NoMUVfU2VzVUNPNUJzb0hJc25jekI2aVJBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXvJEDdxL
Hm5wge086iUaEnIbN95wd9IXOUjw59fb2XpRngLLwwGmnYNy8mCjv/JMw+BL9KVQ
hbv3We+EbAgVIi/Pp9/M+wpp7Je9ROc0WdRlokPxDn+w5tTpm7s9aP2sQdH/WYD2
YgzJVbP0gWrDy+ncWq0wHqRdHIOt7FjUzozkpAmVGJj52xoeSrQKF1E9M0WsU5go
iMAz+n2qB4i/O4pfvDrQPvhkzAnVzA7RQbAshY/vzwlup2KSALRhWvJjBfTHMHc4
aM0WXN9/n70BJt2DXsV3g+DsrQRX6XHNgEAkYbUSKs0B/VJQSAhHqHLkmJQCv3ko
OlU9xI6ONeatdw==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:39:02 2026 by rpki-client