
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/86802e-3f43-4bca-9cc2-4fb40485ff7b/1/wN3S1PAw-jY4wEvmNu-T0oknFlI.mft
File: wN3S1PAw-jY4wEvmNu-T0oknFlI.mft (raw, json)
Hash identifier: SVvzPYMjH6Ix7K3wb7gsE0BDamOGPqzQ2ESsMmB+6Fk=
Subject key identifier: 85:E1:E9:9C:8D:E1:07:91:C5:F7:2E:8C:E6:07:D0:FE:5B:40:D2:F8
Authority key identifier: C0:DD:D2:D4:F0:30:FA:36:38:C0:4B:E6:36:EF:93:D2:89:27:16:52
Certificate issuer: /CN=c0ddd2d4f030fa3638c04be636ef93d289271652
Certificate serial: 019E1EA3B1857FD9EC60174E2EF410DF65E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wN3S1PAw-jY4wEvmNu-T0oknFlI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/86802e-3f43-4bca-9cc2-4fb40485ff7b/1/wN3S1PAw-jY4wEvmNu-T0oknFlI.mft
Manifest number: 0748
Signing time: Wed 13 May 2026 00:01:44 +0000
Manifest this update: Wed 13 May 2026 00:01:44 +0000
Manifest next update: Thu 14 May 2026 00:01:44 +0000
Files and hashes: 1: cPRFnymx0CIKx6ZtB7MkyWCDm0U.roa (hash: AIiSdddDnEI2m5R7XY5zbokXJZOOTj517t6eCwoUwtY=)
2: ma1O2DltnndXpH9aWxYN2FdTRIE.roa (hash: y57vLDkssL86NAU7EWD13+ZBmcV21SBi3gDMpAVaAnQ=)
3: wN3S1PAw-jY4wEvmNu-T0oknFlI.crl (hash: Ekb2MpeBs3CxIpqW2IDoCa6YxPkrT07R78FlHvV/81s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/86802e-3f43-4bca-9cc2-4fb40485ff7b/1/wN3S1PAw-jY4wEvmNu-T0oknFlI.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/86802e-3f43-4bca-9cc2-4fb40485ff7b/1/wN3S1PAw-jY4wEvmNu-T0oknFlI.mft
rsync://rpki.ripe.net/repository/DEFAULT/wN3S1PAw-jY4wEvmNu-T0oknFlI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:a3:b1:85:7f:d9:ec:60:17:4e:2e:f4:10:df:65:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0ddd2d4f030fa3638c04be636ef93d289271652
Validity
Not Before: May 13 00:01:44 2026 GMT
Not After : May 14 00:01:44 2026 GMT
Subject: CN=85e1e99c8de10791c5f72e8ce607d0fe5b40d2f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:6b:71:8d:ef:db:79:e9:ef:5b:1a:ff:a8:3b:
6c:43:7b:7d:d7:ec:94:22:99:bd:f4:89:70:7a:57:
52:70:e3:38:0b:d4:cd:b7:a3:4d:8f:ea:cf:2b:46:
a2:6f:51:ca:03:24:0e:84:52:95:fa:76:63:d5:10:
cd:23:b8:30:ed:cc:ec:7a:52:16:d9:f4:fc:f0:43:
37:13:24:62:97:2e:8a:ba:33:3a:70:8e:9a:67:27:
95:8f:90:a4:ec:21:c0:e1:09:f8:fe:f2:ac:d3:5b:
02:68:39:24:bc:70:77:75:05:cd:93:1c:0d:e4:90:
be:9c:99:80:8d:75:1c:f1:ea:33:0f:e4:96:c9:68:
70:22:31:1e:3e:77:7f:b4:91:7f:cb:c6:8d:fe:48:
8a:ca:e6:ff:aa:69:a6:43:c4:fe:d2:5f:22:7a:f0:
93:53:8e:8a:2b:fd:4a:4a:fe:5d:74:3d:2e:f1:ad:
69:e9:6c:25:93:57:0c:fa:17:d1:40:5b:30:1e:aa:
be:e0:72:c3:39:23:45:92:f5:d1:54:19:cb:c8:12:
f9:9e:d6:4e:cb:28:6a:a3:41:fe:c2:97:2f:eb:2b:
61:09:98:67:32:bc:5e:1f:f2:f8:8a:11:19:01:88:
42:02:80:ae:fa:57:67:4b:d6:4e:52:3e:4b:d8:43:
3c:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:E1:E9:9C:8D:E1:07:91:C5:F7:2E:8C:E6:07:D0:FE:5B:40:D2:F8
X509v3 Authority Key Identifier:
keyid:C0:DD:D2:D4:F0:30:FA:36:38:C0:4B:E6:36:EF:93:D2:89:27:16:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wN3S1PAw-jY4wEvmNu-T0oknFlI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/86802e-3f43-4bca-9cc2-4fb40485ff7b/1/wN3S1PAw-jY4wEvmNu-T0oknFlI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/86802e-3f43-4bca-9cc2-4fb40485ff7b/1/wN3S1PAw-jY4wEvmNu-T0oknFlI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:69:5b:ef:bb:74:d9:70:95:ba:fb:74:a8:e0:b6:de:fc:90:
94:e9:1b:b9:6a:3a:55:c1:a3:3b:f9:ad:91:d2:2c:32:b5:ac:
cf:35:bb:a0:28:ab:07:1e:5f:32:14:6c:75:ee:6b:a7:c4:9e:
c9:38:67:3f:1b:5e:ba:dc:75:22:47:be:07:98:62:0f:ad:80:
f6:43:e3:ef:ec:a7:7d:75:77:98:fb:79:58:3b:c9:96:12:b3:
cc:f6:45:97:e0:de:6d:6c:18:d3:25:62:48:b0:0c:23:ce:14:
49:71:50:bd:d0:de:8b:b9:8f:b9:5f:18:ca:5b:0f:19:0b:23:
64:b3:6b:ba:cf:80:47:6a:77:02:2b:76:48:ae:99:b3:f6:2d:
49:86:4a:92:b5:52:51:03:7c:9c:23:e7:02:9b:df:9b:6e:20:
f3:8f:7f:a2:74:ad:a1:f7:39:d6:bc:5b:29:80:42:59:bc:ce:
a6:fa:36:1c:8f:0c:19:ed:4c:c6:e6:66:fd:6f:84:ec:1f:a6:
cb:b5:38:5c:de:d2:af:ea:23:77:0b:12:8e:f8:61:2b:3e:c5:
32:e2:cb:e8:1d:9a:4b:ad:ec:21:2c:4a:1b:e1:4f:0b:00:3a:
61:68:d4:f1:7c:ae:58:01:3a:80:cb:d8:c9:d3:27:ff:db:66:
9b:51:ae:d8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4eo7GFf9nsYBdOLvQQ32XgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMwZGRkMmQ0ZjAzMGZhMzYzOGMwNGJlNjM2ZWY5M2QyODky
NzE2NTIwHhcNMjYwNTEzMDAwMTQ0WhcNMjYwNTE0MDAwMTQ0WjAzMTEwLwYDVQQD
Eyg4NWUxZTk5YzhkZTEwNzkxYzVmNzJlOGNlNjA3ZDBmZTViNDBkMmY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhWtxje/beenvWxr/qDtsQ3t91+yU
Ipm99IlweldScOM4C9TNt6NNj+rPK0aib1HKAyQOhFKV+nZj1RDNI7gw7czselIW
2fT88EM3EyRily6KujM6cI6aZyeVj5Ck7CHA4Qn4/vKs01sCaDkkvHB3dQXNkxwN
5JC+nJmAjXUc8eozD+SWyWhwIjEePnd/tJF/y8aN/kiKyub/qmmmQ8T+0l8ievCT
U46KK/1KSv5ddD0u8a1p6Wwlk1cM+hfRQFswHqq+4HLDOSNFkvXRVBnLyBL5ntZO
yyhqo0H+wpcv6ythCZhnMrxeH/L4ihEZAYhCAoCu+ldnS9ZOUj5L2EM8lQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIXh6ZyN4QeRxfcujOYH0P5bQNL4MB8GA1UdIwQY
MBaAFMDd0tTwMPo2OMBL5jbvk9KJJxZSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd04zUzFQQXctalk0d0V2bU51LVQwb2tuRmxJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83My84NjgwMmUtM2Y0My00YmNhLTljYzIt
NGZiNDA0ODVmZjdiLzEvd04zUzFQQXctalk0d0V2bU51LVQwb2tuRmxJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83My84NjgwMmUtM2Y0My00YmNhLTljYzItNGZiNDA0ODVmZjdi
LzEvd04zUzFQQXctalk0d0V2bU51LVQwb2tuRmxJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcGlb77t0
2XCVuvt0qOC23vyQlOkbuWo6VcGjO/mtkdIsMrWszzW7oCirBx5fMhRsde5rp8Se
yThnPxteutx1Ike+B5hiD62A9kPj7+ynfXV3mPt5WDvJlhKzzPZFl+DebWwY0yVi
SLAMI84USXFQvdDei7mPuV8YylsPGQsjZLNrus+AR2p3Ait2SK6Zs/YtSYZKkrVS
UQN8nCPnApvfm24g849/onStofc51rxbKYBCWbzOpvo2HI8MGe1MxuZm/W+E7B+m
y7U4XN7Sr+ojdwsSjvhhKz7FMuLL6B2aS63sISxKG+FPCwA6YWjU8XyuWAE6gMvY
ydMn/9tmm1Gu2A==
-----END CERTIFICATE-----
Generated at Wed May 13 05:15:17 2026 by rpki-client