
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/f5ac46-4c59-4b3e-b71e-becf12862497/1/wIi1a9ngFvm8Uhr03CSebRJWsd8.mft
File: wIi1a9ngFvm8Uhr03CSebRJWsd8.mft (raw, json)
Hash identifier: BONJTkuuuCTgEtDQSafcN++ajzIYhW3be8paeGiM2IY=
Subject key identifier: 52:9F:36:A7:25:25:43:5D:EE:FF:EE:9B:CA:48:5D:A1:2B:54:A6:AF
Authority key identifier: C0:88:B5:6B:D9:E0:16:F9:BC:52:1A:F4:DC:24:9E:6D:12:56:B1:DF
Certificate issuer: /CN=c088b56bd9e016f9bc521af4dc249e6d1256b1df
Certificate serial: 019D265F94FA75E513E95D11407E27648E62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wIi1a9ngFvm8Uhr03CSebRJWsd8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/f5ac46-4c59-4b3e-b71e-becf12862497/1/wIi1a9ngFvm8Uhr03CSebRJWsd8.mft
Manifest number: 1889
Signing time: Wed 25 Mar 2026 19:01:31 +0000
Manifest this update: Wed 25 Mar 2026 19:01:31 +0000
Manifest next update: Thu 26 Mar 2026 19:01:31 +0000
Files and hashes: 1: 84LpmG68F7Kl-A8fwrFLp1ZbLKk.roa (hash: 2XJZi7mXa4opeuJIyNfWmpTnxGxuMecCcsVg8EKeWbU=)
2: kNoTU_DDr3ySeIp3kzeqTRzy7WU.roa (hash: wiygXWg117FYrb4QXRydtTU624Ret1FMbW/7q/ighUY=)
3: wIi1a9ngFvm8Uhr03CSebRJWsd8.crl (hash: aW5wDAqkQJ/u6M9hP5BjXACEdp5sUl9RzjuVx3qwuKE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/f5ac46-4c59-4b3e-b71e-becf12862497/1/wIi1a9ngFvm8Uhr03CSebRJWsd8.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/f5ac46-4c59-4b3e-b71e-becf12862497/1/wIi1a9ngFvm8Uhr03CSebRJWsd8.mft
rsync://rpki.ripe.net/repository/DEFAULT/wIi1a9ngFvm8Uhr03CSebRJWsd8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:94:fa:75:e5:13:e9:5d:11:40:7e:27:64:8e:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c088b56bd9e016f9bc521af4dc249e6d1256b1df
Validity
Not Before: Mar 25 19:01:31 2026 GMT
Not After : Mar 26 19:01:31 2026 GMT
Subject: CN=529f36a72525435deeffee9bca485da12b54a6af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:00:03:0b:2f:0a:59:fa:7f:b5:82:c5:85:bd:
25:39:6d:bb:ad:aa:49:bf:79:55:4f:08:8e:4f:9f:
cf:57:8e:c2:ed:6d:0e:27:d1:e7:37:9e:a2:8b:8e:
a0:da:66:b2:e5:47:98:ac:9b:01:6b:c4:91:d7:d9:
5b:5f:b3:28:d8:1c:c9:f2:1d:69:54:1e:90:dc:cf:
17:89:d1:ab:5d:97:51:dd:77:10:1d:0d:fd:c6:bd:
1a:db:6e:0f:9e:61:e5:97:6a:3d:d5:92:7c:86:74:
95:25:86:3f:9d:20:83:da:57:d6:53:f4:7d:c5:61:
bd:ca:0d:7c:b6:bc:16:ee:7d:d4:1b:01:83:09:04:
4a:5e:cc:a1:49:63:e4:b2:a9:57:bc:28:e3:d3:73:
8d:75:09:b7:8e:e3:9f:bb:9a:86:7c:37:aa:54:a7:
f5:a0:ca:df:6f:74:a2:87:55:d8:7e:3f:63:66:e4:
6e:b3:c6:ea:ce:cf:5a:b1:a6:c8:8a:ae:c6:fb:22:
5e:2c:91:34:e7:d9:8a:d8:66:4d:d4:d7:b7:89:1d:
6e:d8:f1:bc:be:79:7e:ac:eb:83:c1:92:e1:1e:c4:
60:24:ab:f9:3a:25:4f:5b:87:36:d5:30:9f:df:f7:
ba:7f:55:eb:13:df:99:8f:af:4f:d1:0a:4b:2f:64:
aa:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:9F:36:A7:25:25:43:5D:EE:FF:EE:9B:CA:48:5D:A1:2B:54:A6:AF
X509v3 Authority Key Identifier:
keyid:C0:88:B5:6B:D9:E0:16:F9:BC:52:1A:F4:DC:24:9E:6D:12:56:B1:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wIi1a9ngFvm8Uhr03CSebRJWsd8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/f5ac46-4c59-4b3e-b71e-becf12862497/1/wIi1a9ngFvm8Uhr03CSebRJWsd8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/f5ac46-4c59-4b3e-b71e-becf12862497/1/wIi1a9ngFvm8Uhr03CSebRJWsd8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:82:fa:5c:17:97:06:5c:03:28:16:4b:34:12:8f:17:66:80:
c9:be:f8:dc:62:ce:23:33:0e:3e:00:3d:d7:30:b4:d8:a9:2a:
d1:66:5e:63:fc:4f:6a:03:35:b4:6f:77:9f:ee:5c:66:44:d9:
61:d7:69:40:aa:43:7e:a1:5e:02:98:50:82:6d:d8:7a:7c:7b:
ef:19:1f:d6:87:bc:69:ee:24:00:51:16:8c:f8:2d:81:44:4b:
74:d9:36:9d:c7:12:9d:b3:3a:01:d8:62:5a:b9:14:a9:0d:2c:
11:bf:2a:82:e4:33:3d:d8:48:63:2e:9f:86:32:6f:69:ac:14:
f9:42:f4:0e:74:43:f5:af:0e:04:1a:fe:90:ce:dd:e9:8a:10:
1c:fa:e4:9a:b2:5c:5c:7c:f0:05:b4:77:fa:d9:88:e2:e1:4b:
81:a5:f0:af:c9:c3:ff:e2:ab:7d:ae:90:87:96:84:a4:fb:3f:
e3:f2:dc:6a:27:bf:aa:ac:aa:e4:09:9b:94:aa:9d:e0:b8:b9:
5a:02:81:9d:a3:24:fe:70:af:01:4a:8c:ea:a2:e6:a9:e2:d3:
f6:d7:93:ae:6a:70:96:78:74:10:88:54:ef:9c:77:9e:54:94:
b5:e4:0d:d0:c5:6d:d6:6a:be:b7:45:3a:60:50:90:fa:4d:c0:
80:ee:ba:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:06:29 2026 by rpki-client