Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/73c829-1518-4d41-92c2-7e0ab8bcae89/1/MW9DO7TO3XLYbETthZmQNSK15PE.mft
File: MW9DO7TO3XLYbETthZmQNSK15PE.mft (raw, json)
Hash identifier: 9TL+Muno4FPlzuYbfjLlpBe8bQQ/YRGYT3WoPvfh1QY=
Subject key identifier: 39:62:94:CA:CA:AC:D9:DC:97:13:CA:EF:E1:BB:03:27:6E:D2:D0:F2
Authority key identifier: 31:6F:43:3B:B4:CE:DD:72:D8:6C:44:ED:85:99:90:35:22:B5:E4:F1
Certificate issuer: /CN=316f433bb4cedd72d86c44ed8599903522b5e4f1
Certificate serial: 019D27E00659D703EA0E0A84E2DCDA1E032B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MW9DO7TO3XLYbETthZmQNSK15PE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/73c829-1518-4d41-92c2-7e0ab8bcae89/1/MW9DO7TO3XLYbETthZmQNSK15PE.mft
Manifest number: 1367
Signing time: Thu 26 Mar 2026 02:01:26 +0000
Manifest this update: Thu 26 Mar 2026 02:01:26 +0000
Manifest next update: Fri 27 Mar 2026 02:01:26 +0000
Files and hashes: 1: MW9DO7TO3XLYbETthZmQNSK15PE.crl (hash: w25CIIUNEhhtkz1uIXFExD4bxlpN/NOnKUgNKxfRYc0=)
2: Q4ow8LCimKzjYqCIeM6du1pQCj4.roa (hash: gGIn6jSJgA0OXpF2GsDtGiH/BCzdqF5tX7x9AZXnSTE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/73c829-1518-4d41-92c2-7e0ab8bcae89/1/MW9DO7TO3XLYbETthZmQNSK15PE.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/73c829-1518-4d41-92c2-7e0ab8bcae89/1/MW9DO7TO3XLYbETthZmQNSK15PE.mft
rsync://rpki.ripe.net/repository/DEFAULT/MW9DO7TO3XLYbETthZmQNSK15PE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 02:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:e0:06:59:d7:03:ea:0e:0a:84:e2:dc:da:1e:03:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=316f433bb4cedd72d86c44ed8599903522b5e4f1
Validity
Not Before: Mar 26 02:01:26 2026 GMT
Not After : Mar 27 02:01:26 2026 GMT
Subject: CN=396294cacaacd9dc9713caefe1bb03276ed2d0f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:1f:e8:00:b0:e1:d2:31:55:dc:1a:3d:c3:de:
b7:7c:5d:ba:29:d4:54:55:65:81:94:d1:c1:4f:4d:
2c:85:5f:3d:0f:7f:54:21:fc:ea:13:69:2f:46:0d:
40:15:9b:17:f9:c3:4f:4a:5d:9f:13:3f:7c:54:4d:
02:b5:8a:87:01:13:97:05:4e:23:05:8b:37:cf:68:
07:bc:13:ff:b5:dc:a6:70:e8:d9:09:67:3b:04:3a:
df:43:bd:3e:f1:77:2b:cc:7d:93:3e:8f:bd:52:9d:
9c:09:da:01:2a:53:2d:9b:a0:d2:f5:68:ad:8b:69:
ff:f3:21:f8:e7:4d:f8:69:55:07:07:1b:cc:82:87:
52:81:79:d5:73:32:b7:c9:b1:c2:66:bf:3b:e7:47:
94:d0:8a:f1:31:28:fd:eb:cf:e2:45:9e:d6:83:13:
32:e9:bb:78:84:ce:5b:b0:0d:aa:8d:30:fa:e8:66:
06:ff:5e:ba:e8:4a:f6:db:15:81:a8:3d:ef:e3:81:
3c:7b:ed:f7:0f:d2:41:97:37:18:00:5c:69:85:83:
f8:f8:70:30:3c:8a:ab:00:0f:95:07:2f:52:ba:63:
32:0c:84:47:c6:15:d8:61:21:2b:b7:ae:e1:53:04:
13:52:47:36:02:09:ef:3d:bd:c6:52:52:67:a8:a6:
1a:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:62:94:CA:CA:AC:D9:DC:97:13:CA:EF:E1:BB:03:27:6E:D2:D0:F2
X509v3 Authority Key Identifier:
keyid:31:6F:43:3B:B4:CE:DD:72:D8:6C:44:ED:85:99:90:35:22:B5:E4:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MW9DO7TO3XLYbETthZmQNSK15PE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/73c829-1518-4d41-92c2-7e0ab8bcae89/1/MW9DO7TO3XLYbETthZmQNSK15PE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/73c829-1518-4d41-92c2-7e0ab8bcae89/1/MW9DO7TO3XLYbETthZmQNSK15PE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:58:8c:9b:fc:7e:de:2d:52:fb:44:4b:e8:69:ed:65:dc:4d:
ae:26:10:9a:6d:91:99:8b:99:1e:be:a1:d2:c1:92:b2:3f:95:
cb:67:46:32:c3:90:79:7b:d3:58:04:47:f0:8c:c6:89:71:f1:
88:12:20:13:db:63:c3:64:3d:97:ab:7b:2d:85:3c:d0:4a:aa:
ee:b9:9a:83:ff:bc:5b:ef:7c:a7:68:28:d1:4c:cc:b0:6e:29:
75:c3:89:97:a5:85:77:2d:5d:f7:07:46:f8:10:0d:c1:d1:15:
84:f6:27:7b:55:a1:68:2b:47:33:7e:3d:a6:80:2b:8a:88:50:
ce:b5:d3:2b:bf:e4:39:06:90:d1:37:2a:42:fa:73:4c:6b:71:
cf:38:70:7a:50:3b:6f:ed:4e:2b:bd:b2:7e:7c:b2:74:31:97:
63:06:ac:ea:fc:c0:11:64:0b:f9:d3:45:09:0b:45:2f:c1:01:
b9:8d:8d:fc:0c:63:ae:33:34:2c:e9:a9:6f:20:32:74:60:7b:
9c:b1:b6:27:61:28:84:0f:12:73:6d:53:82:5c:9c:8e:b0:61:
ab:66:d0:b4:69:51:0d:a7:21:ef:f8:54:4b:40:d6:ba:3a:97:
b6:d5:36:b9:21:cd:b1:7c:c9:af:ed:79:ac:bd:6a:62:75:0a:
4d:9e:bf:ac
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0n4AZZ1wPqDgqE4tzaHgMrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMxNmY0MzNiYjRjZWRkNzJkODZjNDRlZDg1OTk5MDM1MjJi
NWU0ZjEwHhcNMjYwMzI2MDIwMTI2WhcNMjYwMzI3MDIwMTI2WjAzMTEwLwYDVQQD
EygzOTYyOTRjYWNhYWNkOWRjOTcxM2NhZWZlMWJiMDMyNzZlZDJkMGYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkx/oALDh0jFV3Bo9w963fF26KdRU
VWWBlNHBT00shV89D39UIfzqE2kvRg1AFZsX+cNPSl2fEz98VE0CtYqHAROXBU4j
BYs3z2gHvBP/tdymcOjZCWc7BDrfQ70+8XcrzH2TPo+9Up2cCdoBKlMtm6DS9Wit
i2n/8yH45034aVUHBxvMgodSgXnVczK3ybHCZr8750eU0IrxMSj968/iRZ7WgxMy
6bt4hM5bsA2qjTD66GYG/1666Er22xWBqD3v44E8e+33D9JBlzcYAFxphYP4+HAw
PIqrAA+VBy9SumMyDIRHxhXYYSErt67hUwQTUkc2AgnvPb3GUlJnqKYaJQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDlilMrKrNnclxPK7+G7Aydu0tDyMB8GA1UdIwQY
MBaAFDFvQzu0zt1y2GxE7YWZkDUiteTxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTVc5RE83VE8zWExZYkVUdGhabVFOU0sxNVBFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS83M2M4MjktMTUxOC00ZDQxLTkyYzIt
N2UwYWI4YmNhZTg5LzEvTVc5RE83VE8zWExZYkVUdGhabVFOU0sxNVBFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NS83M2M4MjktMTUxOC00ZDQxLTkyYzItN2UwYWI4YmNhZTg5
LzEvTVc5RE83VE8zWExZYkVUdGhabVFOU0sxNVBFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC1iMm/x+
3i1S+0RL6GntZdxNriYQmm2RmYuZHr6h0sGSsj+Vy2dGMsOQeXvTWARH8IzGiXHx
iBIgE9tjw2Q9l6t7LYU80Eqq7rmag/+8W+98p2go0UzMsG4pdcOJl6WFdy1d9wdG
+BANwdEVhPYne1WhaCtHM349poAriohQzrXTK7/kOQaQ0TcqQvpzTGtxzzhwelA7
b+1OK72yfnyydDGXYwas6vzAEWQL+dNFCQtFL8EBuY2N/AxjrjM0LOmpbyAydGB7
nLG2J2EohA8Sc21TglycjrBhq2bQtGlRDach7/hUS0DWujqXttU2uSHNsXzJr+15
rL1qYnUKTZ6/rA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 13:58:47 2026 by rpki-client