
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/81f76f-d878-44a1-82c7-2ccb5f0c5f6b/1/WrJabDkrjmejrSH2D9MxHWt_Hlw.mft
File: WrJabDkrjmejrSH2D9MxHWt_Hlw.mft (raw, json)
Hash identifier: 196LJYfpTDzAmRIFBwaK1y30yJUGtY4WgWaPbA/7dLY=
Subject key identifier: 7E:7A:6B:AC:45:73:63:06:0F:84:54:82:35:0E:DB:E6:54:FE:8C:6A
Authority key identifier: 5A:B2:5A:6C:39:2B:8E:67:A3:AD:21:F6:0F:D3:31:1D:6B:7F:1E:5C
Certificate issuer: /CN=5ab25a6c392b8e67a3ad21f60fd3311d6b7f1e5c
Certificate serial: 019D270481D3EBB04B5E6B97D42B0AA3617C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WrJabDkrjmejrSH2D9MxHWt_Hlw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/81f76f-d878-44a1-82c7-2ccb5f0c5f6b/1/WrJabDkrjmejrSH2D9MxHWt_Hlw.mft
Manifest number: 1121
Signing time: Wed 25 Mar 2026 22:01:39 +0000
Manifest this update: Wed 25 Mar 2026 22:01:39 +0000
Manifest next update: Thu 26 Mar 2026 22:01:39 +0000
Files and hashes: 1: WrJabDkrjmejrSH2D9MxHWt_Hlw.crl (hash: TOjNuR0GIvl8xpuPS1ez0CvSYUVdeySgef1Z6/et+0w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/81f76f-d878-44a1-82c7-2ccb5f0c5f6b/1/WrJabDkrjmejrSH2D9MxHWt_Hlw.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/81f76f-d878-44a1-82c7-2ccb5f0c5f6b/1/WrJabDkrjmejrSH2D9MxHWt_Hlw.mft
rsync://rpki.ripe.net/repository/DEFAULT/WrJabDkrjmejrSH2D9MxHWt_Hlw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:81:d3:eb:b0:4b:5e:6b:97:d4:2b:0a:a3:61:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ab25a6c392b8e67a3ad21f60fd3311d6b7f1e5c
Validity
Not Before: Mar 25 22:01:39 2026 GMT
Not After : Mar 26 22:01:39 2026 GMT
Subject: CN=7e7a6bac457363060f845482350edbe654fe8c6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:b2:c4:de:5c:b7:ae:ac:6b:51:0b:19:00:aa:
95:8b:e5:23:e9:f6:7b:77:c4:c3:f6:0d:44:17:cb:
18:a3:17:d5:12:54:0a:92:6a:9e:f3:47:a3:9d:6a:
e1:88:f5:94:48:a2:68:b3:0e:f6:4c:8e:b5:5f:86:
de:75:e1:79:39:8e:8a:5b:cc:01:82:ee:04:3e:37:
ec:3c:94:e7:e7:26:77:83:dd:5f:cc:ce:5d:2b:ab:
ae:e4:34:b4:5d:4b:56:dc:21:96:fe:16:e2:f7:cf:
be:70:f3:02:5f:15:71:a3:c3:02:72:fb:33:27:f3:
09:14:2b:82:c7:68:b1:f1:26:28:03:06:53:d8:45:
56:ca:38:33:2c:95:d3:be:a0:5f:82:27:79:92:6e:
b1:71:26:37:ac:32:d9:ac:fe:dd:0d:44:94:a0:53:
89:b0:20:c6:72:c1:eb:2a:72:72:2e:83:3f:12:1a:
4a:27:dc:49:53:98:4c:de:48:26:9b:44:a0:60:91:
9c:c5:3b:fe:c9:b5:6e:5a:25:6b:e0:74:1c:93:00:
96:f5:41:f0:90:4f:de:f8:80:7a:a5:81:a2:c2:4f:
74:c4:6f:4f:84:23:7b:6e:8f:fc:08:85:c5:25:01:
74:97:92:8e:5b:92:cf:6a:7b:8c:ad:c5:11:fc:c2:
37:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:7A:6B:AC:45:73:63:06:0F:84:54:82:35:0E:DB:E6:54:FE:8C:6A
X509v3 Authority Key Identifier:
keyid:5A:B2:5A:6C:39:2B:8E:67:A3:AD:21:F6:0F:D3:31:1D:6B:7F:1E:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WrJabDkrjmejrSH2D9MxHWt_Hlw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/81f76f-d878-44a1-82c7-2ccb5f0c5f6b/1/WrJabDkrjmejrSH2D9MxHWt_Hlw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/81f76f-d878-44a1-82c7-2ccb5f0c5f6b/1/WrJabDkrjmejrSH2D9MxHWt_Hlw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:7a:23:0d:10:2c:c9:ef:49:19:8e:08:50:55:f4:1f:33:69:
fb:90:5e:39:b9:37:f6:94:86:50:5e:ef:9d:a1:6e:cd:cc:f6:
88:bb:06:a1:de:4d:0a:1b:ae:2c:05:a7:51:5e:eb:4b:c4:79:
d3:52:1d:9b:6a:b7:11:3b:ed:0d:ad:8a:34:d0:6d:ce:f4:30:
b7:78:5a:65:a9:20:f5:1a:f4:5a:f0:2f:e6:5c:61:20:9e:f9:
ee:ec:0a:6a:7d:9b:0a:c7:1c:52:bd:75:0c:06:c3:28:74:11:
8b:06:91:1f:36:5e:48:61:35:76:44:ff:b2:9c:fb:37:f5:db:
09:9c:bf:41:0b:49:01:16:af:8b:f4:65:2a:7f:6b:fa:2b:3d:
d6:cf:af:f1:67:af:07:1c:38:af:8e:03:78:ef:10:f1:70:37:
87:31:e4:29:2a:b1:8e:5c:69:ef:14:b8:71:1d:11:e3:24:2c:
cb:67:aa:1d:2c:63:54:50:3b:e4:e5:d2:25:93:67:39:51:72:
b8:98:16:ce:46:88:5b:bf:a5:86:c4:53:d0:65:25:2e:58:23:
5d:97:41:2b:d7:0c:93:b5:a3:f1:71:58:30:77:42:56:23:b2:
db:07:6c:b6:74:51:3e:34:8f:a6:aa:ce:52:7b:0e:ef:f7:e1:
ef:e2:c0:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:54:59 2026 by rpki-client