Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/00b84b-b5d1-4c1d-8e70-09e8fafaf0cc/1/wA7St1AmRN0DbiOS-wMyz7FNuNI.mft
File: wA7St1AmRN0DbiOS-wMyz7FNuNI.mft (raw, json)
Hash identifier: jjQ/lKp/htTvTUR7JftcDu/HZtpb8md2dPoRL1YE0hg=
Subject key identifier: 40:B4:E1:EF:14:F6:3B:95:7B:90:30:1B:3C:7C:B4:5B:A3:F8:3D:E3
Authority key identifier: C0:0E:D2:B7:50:26:44:DD:03:6E:23:92:FB:03:32:CF:B1:4D:B8:D2
Certificate issuer: /CN=c00ed2b7502644dd036e2392fb0332cfb14db8d2
Certificate serial: 019D333EBCA48900EAB174492D86786DA610
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wA7St1AmRN0DbiOS-wMyz7FNuNI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/00b84b-b5d1-4c1d-8e70-09e8fafaf0cc/1/wA7St1AmRN0DbiOS-wMyz7FNuNI.mft
Manifest number: 188A
Signing time: Sat 28 Mar 2026 07:00:42 +0000
Manifest this update: Sat 28 Mar 2026 07:00:42 +0000
Manifest next update: Sun 29 Mar 2026 07:00:42 +0000
Files and hashes: 1: wA7St1AmRN0DbiOS-wMyz7FNuNI.crl (hash: 62aIK1pC76xZNe/Q145gwAmBaYY7Spg8QGFJR5k1ebY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/00b84b-b5d1-4c1d-8e70-09e8fafaf0cc/1/wA7St1AmRN0DbiOS-wMyz7FNuNI.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/00b84b-b5d1-4c1d-8e70-09e8fafaf0cc/1/wA7St1AmRN0DbiOS-wMyz7FNuNI.mft
rsync://rpki.ripe.net/repository/DEFAULT/wA7St1AmRN0DbiOS-wMyz7FNuNI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:33:3e:bc:a4:89:00:ea:b1:74:49:2d:86:78:6d:a6:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c00ed2b7502644dd036e2392fb0332cfb14db8d2
Validity
Not Before: Mar 28 07:00:42 2026 GMT
Not After : Mar 29 07:00:42 2026 GMT
Subject: CN=40b4e1ef14f63b957b90301b3c7cb45ba3f83de3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:86:f9:ba:b6:98:40:a1:db:98:85:f1:5c:06:
f1:22:2c:66:5f:dc:b0:39:b6:ef:24:2e:0d:fa:79:
71:03:e8:c5:6a:23:fd:66:68:38:ee:d3:4c:7a:53:
a1:a8:6a:21:b8:0a:15:a4:4f:cf:bc:db:5a:b4:16:
2e:ba:df:ea:9d:75:ab:81:00:e7:fb:6f:62:7e:c2:
5b:ff:9a:59:86:df:28:cb:4c:b6:2f:11:42:f7:65:
ab:ca:56:f1:f9:06:8d:50:52:d1:77:24:01:31:d8:
2a:b3:75:c5:5b:95:38:03:04:1a:eb:bd:73:cb:53:
f7:3b:29:88:5d:f4:84:fa:b8:a7:3e:83:ff:63:db:
8e:ec:d7:56:1b:fc:2b:72:5a:ea:13:3d:25:2e:c5:
8b:6f:ec:bd:94:50:df:7d:ff:b6:b4:f9:f5:de:4e:
51:7b:5a:07:bd:9c:af:25:a0:26:56:fa:13:89:3c:
b4:e4:4d:da:39:24:e5:d1:a2:8e:eb:30:b5:f4:fc:
06:ea:8d:1d:1a:46:69:34:56:56:fa:e9:cc:51:ab:
7e:d5:c3:c7:b6:45:eb:5c:7b:13:6d:59:b9:2e:da:
73:4c:04:f7:d3:61:cf:f9:41:ae:9a:78:6c:b8:fa:
b9:20:58:7a:cf:e1:fe:eb:60:97:27:56:bc:8e:43:
3e:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:B4:E1:EF:14:F6:3B:95:7B:90:30:1B:3C:7C:B4:5B:A3:F8:3D:E3
X509v3 Authority Key Identifier:
keyid:C0:0E:D2:B7:50:26:44:DD:03:6E:23:92:FB:03:32:CF:B1:4D:B8:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wA7St1AmRN0DbiOS-wMyz7FNuNI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/00b84b-b5d1-4c1d-8e70-09e8fafaf0cc/1/wA7St1AmRN0DbiOS-wMyz7FNuNI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/00b84b-b5d1-4c1d-8e70-09e8fafaf0cc/1/wA7St1AmRN0DbiOS-wMyz7FNuNI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:4a:f5:ff:74:ab:35:dc:7f:38:15:be:c4:2b:77:66:6e:b6:
54:a7:da:cb:6e:f2:c1:04:bf:7b:da:3b:3b:74:20:1d:1c:f0:
62:c9:a4:2a:20:f3:9d:3e:31:b4:47:cf:86:3a:62:b1:28:a7:
de:cd:52:e8:a4:3b:aa:29:47:90:a5:bd:62:3d:a5:59:a3:02:
b4:52:5c:80:8a:f8:47:fd:c9:08:22:51:43:1e:a5:6f:41:8e:
c5:a7:9f:8a:8a:f1:f7:66:0a:34:ea:ac:5d:54:f3:42:a8:25:
01:e4:47:88:be:de:5f:d0:11:77:fa:5e:55:dc:97:1b:dd:c6:
fb:e6:82:55:06:64:29:7c:65:2b:4f:28:7b:f4:10:92:0f:4f:
28:32:81:8e:d2:c5:b5:2f:a0:9b:4f:c0:b3:56:a8:c3:24:70:
a9:fb:8c:ff:32:33:ae:1d:87:92:f4:3f:5d:a2:d7:d2:3b:57:
17:a6:21:fd:1e:f1:ca:ad:79:e8:9d:79:89:65:00:00:1e:c1:
bc:22:9d:cb:d5:3f:d3:a0:22:36:fc:d0:ab:1e:7b:ff:c7:c9:
24:25:7d:1b:47:7c:5b:30:0f:0d:60:a4:eb:90:28:01:c9:50:
98:3f:1d:dd:3b:35:e4:f6:50:2e:7c:df:8f:7f:7c:d3:cf:1f:
f8:91:ca:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:33:11 2026 by rpki-client