Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/e534b0-7023-4e71-a264-a71497f168e1/1/wkDtrImIu1blLeEopdZaj07z8Tg.mft
File: wkDtrImIu1blLeEopdZaj07z8Tg.mft (raw, json)
Hash identifier: lCihorKh6c6NRdvxpoYh18VK2hNr7dlc+3dqidlJqN0=
Subject key identifier: 01:19:1D:2C:B0:6D:D2:BA:7E:60:8E:E1:F3:8F:15:53:E0:64:AA:C0
Authority key identifier: C2:40:ED:AC:89:88:BB:56:E5:2D:E1:28:A5:D6:5A:8F:4E:F3:F1:38
Certificate issuer: /CN=c240edac8988bb56e52de128a5d65a8f4ef3f138
Certificate serial: 019D29CE327C5079AD4A6D9C05729F4627D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wkDtrImIu1blLeEopdZaj07z8Tg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/e534b0-7023-4e71-a264-a71497f168e1/1/wkDtrImIu1blLeEopdZaj07z8Tg.mft
Manifest number: 0EF2
Signing time: Thu 26 Mar 2026 11:01:12 +0000
Manifest this update: Thu 26 Mar 2026 11:01:12 +0000
Manifest next update: Fri 27 Mar 2026 11:01:12 +0000
Files and hashes: 1: wkDtrImIu1blLeEopdZaj07z8Tg.crl (hash: lWQ3K8wlDEjEzY6sOHmcxM07xBW+r7QBJsyfF6BR4NM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/e534b0-7023-4e71-a264-a71497f168e1/1/wkDtrImIu1blLeEopdZaj07z8Tg.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/e534b0-7023-4e71-a264-a71497f168e1/1/wkDtrImIu1blLeEopdZaj07z8Tg.mft
rsync://rpki.ripe.net/repository/DEFAULT/wkDtrImIu1blLeEopdZaj07z8Tg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:ce:32:7c:50:79:ad:4a:6d:9c:05:72:9f:46:27:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c240edac8988bb56e52de128a5d65a8f4ef3f138
Validity
Not Before: Mar 26 11:01:12 2026 GMT
Not After : Mar 27 11:01:12 2026 GMT
Subject: CN=01191d2cb06dd2ba7e608ee1f38f1553e064aac0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:ee:ce:77:9e:91:80:71:57:ba:c7:04:77:44:
86:b9:e5:79:8e:eb:69:b2:aa:eb:b0:ba:90:3a:5b:
00:e5:71:d5:17:4c:a8:07:09:e4:32:6c:9e:14:71:
c5:e9:48:a8:e2:5e:ee:c2:30:a6:be:d7:44:c0:66:
4b:e0:65:10:03:27:41:d0:f1:df:b9:95:0f:03:b5:
8c:1b:14:c1:5b:b4:d8:f5:92:3e:70:75:f2:04:ca:
66:c0:a1:38:a4:08:4e:8a:93:47:36:3d:74:b3:53:
af:4f:0c:0f:1c:82:11:37:4a:0f:03:a6:b1:cf:82:
e5:68:56:bd:19:04:58:e8:04:20:c9:4d:5a:b1:e5:
9a:13:08:4d:28:83:66:3d:a1:45:65:1c:c7:10:6a:
8b:49:0e:d9:71:df:cb:92:e8:61:4c:61:15:27:c9:
05:55:cd:51:5e:3d:c1:66:17:a6:da:e2:08:bd:15:
da:84:84:66:cb:d3:a1:c6:fa:49:60:25:62:9c:ac:
fd:10:b0:60:a3:e3:64:be:50:28:65:bf:d5:53:11:
50:86:99:ae:18:8e:35:c5:97:d9:3a:47:1a:5d:2b:
11:d0:ba:df:4e:66:18:09:31:02:ff:29:f5:e0:f1:
7d:f1:22:46:02:41:24:6d:79:cc:d5:27:62:81:e1:
70:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:19:1D:2C:B0:6D:D2:BA:7E:60:8E:E1:F3:8F:15:53:E0:64:AA:C0
X509v3 Authority Key Identifier:
keyid:C2:40:ED:AC:89:88:BB:56:E5:2D:E1:28:A5:D6:5A:8F:4E:F3:F1:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wkDtrImIu1blLeEopdZaj07z8Tg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/e534b0-7023-4e71-a264-a71497f168e1/1/wkDtrImIu1blLeEopdZaj07z8Tg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/e534b0-7023-4e71-a264-a71497f168e1/1/wkDtrImIu1blLeEopdZaj07z8Tg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:b5:66:b5:6b:fb:de:60:c2:a4:d8:d2:ca:d6:9a:6b:d5:67:
0a:33:a9:ba:0a:04:4f:7d:d6:ef:fd:17:ff:0a:6d:c5:9f:6c:
cd:c2:b6:27:d1:8e:86:54:5a:ee:1d:b2:64:33:05:ea:72:8b:
67:39:b1:e3:d5:e1:d3:d0:8e:43:f9:e2:de:56:ee:df:08:64:
9b:44:ed:59:dc:90:22:cb:e8:e2:49:23:89:22:33:a2:0d:42:
51:ee:87:b2:4d:c8:9a:94:d4:de:f0:5b:a1:15:f8:d7:1c:6b:
48:9c:9a:e9:7d:84:69:20:dc:2c:b6:69:48:b0:f0:5c:a4:c9:
6c:d0:e5:4d:e6:89:1d:16:b1:78:51:a3:ef:52:78:53:27:33:
8e:98:79:8a:ba:80:e1:5f:1a:d0:93:37:66:e1:62:73:69:9f:
89:79:3e:f6:2f:51:d9:5a:f7:0a:a6:cd:4a:fc:7f:1f:21:f2:
68:51:35:da:bb:e2:43:71:8b:a2:52:10:df:45:d2:28:3d:89:
fa:51:a1:c7:4a:e9:6f:3e:a4:f2:b7:bf:38:82:44:3b:70:a9:
51:e5:69:9f:1a:66:b0:fb:7c:0b:b3:8a:d7:bd:6f:d9:7a:1a:
b2:d7:a2:1d:3a:c0:dd:79:46:7f:2c:50:57:56:39:f4:4a:54:
ab:34:cc:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:55:48 2026 by rpki-client