Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/652bef-6f4e-4997-bb3a-4c9e49239624/1/wsej20o9La--GGqmhfRzbqfQjDg.mft
File: wsej20o9La--GGqmhfRzbqfQjDg.mft (raw, json)
Hash identifier: 3vH53SobjZMyZj4LrWt1yoMjTAuaFGTSLkAItxO5a5s=
Subject key identifier: C4:90:96:46:36:A8:99:C7:FC:85:18:28:1D:52:A9:71:4A:54:6A:9C
Authority key identifier: C2:C7:A3:DB:4A:3D:2D:AF:BE:18:6A:A6:85:F4:73:6E:A7:D0:8C:38
Certificate issuer: /CN=c2c7a3db4a3d2dafbe186aa685f4736ea7d08c38
Certificate serial: 019D333EB7DBD22F143F813182D338CC8728
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wsej20o9La--GGqmhfRzbqfQjDg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/652bef-6f4e-4997-bb3a-4c9e49239624/1/wsej20o9La--GGqmhfRzbqfQjDg.mft
Manifest number: 11E3
Signing time: Sat 28 Mar 2026 07:00:41 +0000
Manifest this update: Sat 28 Mar 2026 07:00:41 +0000
Manifest next update: Sun 29 Mar 2026 07:00:41 +0000
Files and hashes: 1: wsej20o9La--GGqmhfRzbqfQjDg.crl (hash: PJem8zyCgyKRzZ5rJ38ZIYfCBEDbFhKnhtZ+r6fcqjQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/652bef-6f4e-4997-bb3a-4c9e49239624/1/wsej20o9La--GGqmhfRzbqfQjDg.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/652bef-6f4e-4997-bb3a-4c9e49239624/1/wsej20o9La--GGqmhfRzbqfQjDg.mft
rsync://rpki.ripe.net/repository/DEFAULT/wsej20o9La--GGqmhfRzbqfQjDg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:33:3e:b7:db:d2:2f:14:3f:81:31:82:d3:38:cc:87:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2c7a3db4a3d2dafbe186aa685f4736ea7d08c38
Validity
Not Before: Mar 28 07:00:41 2026 GMT
Not After : Mar 29 07:00:41 2026 GMT
Subject: CN=c490964636a899c7fc8518281d52a9714a546a9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:fa:13:fd:f2:0a:45:d0:96:75:cd:18:a0:9a:
ce:44:aa:24:14:d6:49:2b:4d:df:c0:5b:a0:47:91:
28:d9:d1:31:6f:24:8e:18:c4:f1:b0:13:76:96:5d:
7e:87:47:65:d5:97:60:cd:b8:44:19:84:be:5c:16:
f8:0e:6f:9f:8d:25:4b:1c:67:a8:69:1f:be:1e:68:
be:b5:4e:22:80:ad:37:f1:ad:d4:dd:90:43:df:c9:
c2:f3:c1:19:48:ed:8c:01:2a:2f:c9:62:e2:73:b0:
28:a0:01:d9:a0:05:db:7b:b6:e9:4f:c0:d3:76:62:
33:cd:35:e5:4a:8f:18:e7:80:83:64:1e:da:16:6c:
7a:c0:00:d7:75:15:e0:f3:01:bb:c6:4e:48:07:84:
1e:86:df:8b:fa:ba:95:06:51:46:d2:f5:70:54:c5:
96:19:8c:36:56:ce:de:de:b6:37:31:33:a8:5c:a3:
8a:5c:e3:82:3d:9c:cc:d4:43:0e:30:7f:03:ba:b9:
a1:86:d5:bd:20:33:14:89:fb:31:03:5e:7f:b3:71:
bf:b6:5c:ee:da:40:36:f1:60:65:f1:33:ed:c7:f7:
4e:17:7a:17:1a:bf:f8:f4:a2:f5:24:b6:64:e0:a6:
7b:ca:01:4e:00:77:12:22:67:ed:1c:ea:ef:75:21:
f3:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:90:96:46:36:A8:99:C7:FC:85:18:28:1D:52:A9:71:4A:54:6A:9C
X509v3 Authority Key Identifier:
keyid:C2:C7:A3:DB:4A:3D:2D:AF:BE:18:6A:A6:85:F4:73:6E:A7:D0:8C:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wsej20o9La--GGqmhfRzbqfQjDg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/652bef-6f4e-4997-bb3a-4c9e49239624/1/wsej20o9La--GGqmhfRzbqfQjDg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/652bef-6f4e-4997-bb3a-4c9e49239624/1/wsej20o9La--GGqmhfRzbqfQjDg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:1b:d2:d7:bc:be:e3:0c:2b:9b:e6:6f:54:73:c5:c6:ef:b3:
86:cb:f1:33:7c:24:2e:2a:f1:bc:72:cd:2f:2d:1b:05:7b:77:
21:8b:99:4f:a7:d4:7c:5a:73:31:6f:f5:40:fb:82:22:d9:79:
9d:98:70:a7:00:1c:a8:e9:89:a5:90:d9:52:2d:95:6f:0a:e8:
7b:09:87:f2:ee:11:93:ea:4d:4d:4f:63:b4:38:29:cb:c5:8e:
24:ff:02:03:30:28:68:aa:8d:c3:6c:18:9e:8c:7f:e2:63:0f:
c4:b1:cb:3f:96:96:fd:19:6e:b8:24:4e:80:65:26:f8:df:ba:
e4:98:4f:05:95:18:14:1d:85:15:ba:a8:ab:a5:62:90:e7:d6:
eb:5e:cc:b3:10:ef:be:28:9d:0b:d6:c3:3f:1e:e6:59:66:55:
46:9b:5a:c2:84:29:df:6a:c7:6c:42:e2:d3:b0:d0:9b:59:ca:
8b:c8:10:e9:16:7b:e5:dd:bf:e1:0b:67:e9:e4:4d:00:16:d7:
f7:f9:57:91:91:f5:09:c3:a4:52:8f:05:94:83:cd:ac:7f:93:
3b:04:42:f3:a4:34:a1:aa:94:c5:ef:a0:b8:86:e7:ba:92:e4:
0d:d7:df:aa:79:a4:c4:b0:8c:9c:77:d1:0a:bd:78:87:33:1f:
db:dc:c4:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:48:31 2026 by rpki-client