Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/3990c2-51be-4b87-af62-e0e099640eac/1/ws_pT97DCaxVMFrJDnw9Yo39QGo.mft
File: ws_pT97DCaxVMFrJDnw9Yo39QGo.mft (raw, json)
Hash identifier: gu6owWWS6EgDCIRkg/rKNYnI465W3nYNkQD0iEm2sL4=
Subject key identifier: 40:5D:92:37:B3:8C:9B:E7:61:1D:54:55:97:B1:BB:A6:FB:3D:C6:B5
Authority key identifier: C2:CF:E9:4F:DE:C3:09:AC:55:30:5A:C9:0E:7C:3D:62:8D:FD:40:6A
Certificate issuer: /CN=c2cfe94fdec309ac55305ac90e7c3d628dfd406a
Certificate serial: 019D273ACAA8850834F1A8E69EDC0AB1C5F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ws_pT97DCaxVMFrJDnw9Yo39QGo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/3990c2-51be-4b87-af62-e0e099640eac/1/ws_pT97DCaxVMFrJDnw9Yo39QGo.mft
Manifest number: 0407
Signing time: Wed 25 Mar 2026 23:00:57 +0000
Manifest this update: Wed 25 Mar 2026 23:00:57 +0000
Manifest next update: Thu 26 Mar 2026 23:00:57 +0000
Files and hashes: 1: ws_pT97DCaxVMFrJDnw9Yo39QGo.crl (hash: TKJFqZolinR+nfXrK08ASp+nc7/cfheMejGtSQart2Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/3990c2-51be-4b87-af62-e0e099640eac/1/ws_pT97DCaxVMFrJDnw9Yo39QGo.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/3990c2-51be-4b87-af62-e0e099640eac/1/ws_pT97DCaxVMFrJDnw9Yo39QGo.mft
rsync://rpki.ripe.net/repository/DEFAULT/ws_pT97DCaxVMFrJDnw9Yo39QGo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 23:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3a:ca:a8:85:08:34:f1:a8:e6:9e:dc:0a:b1:c5:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2cfe94fdec309ac55305ac90e7c3d628dfd406a
Validity
Not Before: Mar 25 23:00:57 2026 GMT
Not After : Mar 26 23:00:57 2026 GMT
Subject: CN=405d9237b38c9be7611d545597b1bba6fb3dc6b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:a3:3b:e6:fb:06:09:27:6d:14:04:c5:b0:46:
79:0a:74:5b:da:27:6c:01:cf:d9:d6:3c:9f:e8:d2:
0f:71:be:ee:4d:39:9f:a3:d8:0c:6f:ab:6c:e5:64:
87:85:cf:47:b3:28:16:25:53:72:9d:83:9d:aa:6f:
72:30:63:61:77:19:4b:dc:32:cd:f7:a4:f2:f9:97:
7b:e4:d3:1d:cc:81:1f:a4:12:b9:54:60:26:de:98:
ce:a7:05:f6:3a:38:6d:32:44:bd:d8:9e:5a:59:1c:
24:b4:e3:96:7c:fb:e7:a1:27:e8:cb:35:d4:5d:97:
f2:20:eb:96:5a:38:e3:66:b1:9a:4b:29:c1:02:06:
74:70:85:29:46:99:2e:c3:32:b1:d1:78:d0:e1:d0:
b3:2a:b4:2b:28:3d:5e:10:db:13:84:28:ab:5a:e7:
51:5b:d7:01:ce:3a:95:e5:c5:47:b2:7d:8c:90:b1:
85:c6:83:85:56:e2:88:93:a7:a1:0c:34:4b:e9:cf:
92:70:be:e4:de:ae:b1:9c:57:92:51:ec:73:f5:1d:
aa:d7:10:6a:ef:1c:1f:d6:73:e1:d8:4f:d9:30:2f:
76:cc:2a:bd:cd:02:e7:c9:bb:aa:2c:37:0d:74:98:
4f:1f:30:59:05:42:71:e6:4a:95:46:06:8b:40:41:
14:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:5D:92:37:B3:8C:9B:E7:61:1D:54:55:97:B1:BB:A6:FB:3D:C6:B5
X509v3 Authority Key Identifier:
keyid:C2:CF:E9:4F:DE:C3:09:AC:55:30:5A:C9:0E:7C:3D:62:8D:FD:40:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ws_pT97DCaxVMFrJDnw9Yo39QGo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/3990c2-51be-4b87-af62-e0e099640eac/1/ws_pT97DCaxVMFrJDnw9Yo39QGo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/3990c2-51be-4b87-af62-e0e099640eac/1/ws_pT97DCaxVMFrJDnw9Yo39QGo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:18:98:70:ca:dd:4d:8c:38:a7:51:5a:6a:64:79:d4:f5:8f:
2f:68:36:40:08:fc:e3:8d:d5:5d:e7:34:e6:75:4a:2a:f6:ff:
5d:59:12:9e:e3:fc:5f:00:68:92:88:37:c1:ff:d7:72:b3:b5:
ad:82:aa:4b:4d:25:14:60:a1:2c:0b:a9:4a:56:ae:1a:b7:e8:
52:8e:b1:23:67:cf:ec:5e:1c:76:37:b0:7c:28:5a:74:fb:7f:
96:1a:06:34:e1:b0:6a:aa:de:0c:cc:05:c8:06:0c:d0:e2:7d:
f9:50:71:a3:9d:9a:3b:75:7b:7b:ff:2f:e5:9c:19:7b:ee:18:
c8:43:81:3d:83:a9:a1:75:ee:57:8d:ef:1f:b6:e6:e0:8d:ac:
01:40:6e:c7:1c:7f:0c:34:71:eb:5f:25:b5:27:17:c9:0c:77:
fb:ab:27:86:a9:a6:fa:57:78:b2:e6:01:b8:2a:8e:77:8f:f8:
f5:bb:88:8c:52:83:0c:0c:23:ee:f0:60:4f:f6:8d:59:8a:72:
52:32:bd:d7:07:51:20:35:15:f2:27:d5:bf:19:00:31:4b:be:
67:37:8b:20:ae:8e:cd:a5:dc:49:80:a4:7c:40:ed:62:50:6d:
f7:9e:4d:77:f3:45:8a:0d:d7:a5:8a:ed:f4:76:a8:85:94:51:
41:06:33:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:43:43 2026 by rpki-client