Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/3be914-9d1b-4e0b-bfd2-8bfcf906f76a/1/w3oiGyndRjBow6jVysFGsFe1qe0.mft
File: w3oiGyndRjBow6jVysFGsFe1qe0.mft (raw, json)
Hash identifier: 2kvz9hGcoPlBGQq7e9cntN9rhtVBp4b7P+R5VrA8yp0=
Subject key identifier: 6D:6F:E9:75:12:41:7F:A8:3B:84:82:77:0F:05:AE:65:59:F6:C0:66
Authority key identifier: C3:7A:22:1B:29:DD:46:30:68:C3:A8:D5:CA:C1:46:B0:57:B5:A9:ED
Certificate issuer: /CN=c37a221b29dd463068c3a8d5cac146b057b5a9ed
Certificate serial: 019D284E3AB48B3C48E9EC66F1ABD5478FD1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w3oiGyndRjBow6jVysFGsFe1qe0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/3be914-9d1b-4e0b-bfd2-8bfcf906f76a/1/w3oiGyndRjBow6jVysFGsFe1qe0.mft
Manifest number: 14E3
Signing time: Thu 26 Mar 2026 04:01:48 +0000
Manifest this update: Thu 26 Mar 2026 04:01:48 +0000
Manifest next update: Fri 27 Mar 2026 04:01:48 +0000
Files and hashes: 1: vAWr7DCiErOxN_C5-TPGoRi3VBg.roa (hash: yOuxPDX3hQeFVT5meNKt6VOVi7//Pn4HmhuFPEp2iEM=)
2: w3oiGyndRjBow6jVysFGsFe1qe0.crl (hash: KqsK8yEu+yhYyGqeLDik7cMt+yGypz66bjYaQ8Mohm0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/3be914-9d1b-4e0b-bfd2-8bfcf906f76a/1/w3oiGyndRjBow6jVysFGsFe1qe0.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/3be914-9d1b-4e0b-bfd2-8bfcf906f76a/1/w3oiGyndRjBow6jVysFGsFe1qe0.mft
rsync://rpki.ripe.net/repository/DEFAULT/w3oiGyndRjBow6jVysFGsFe1qe0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4e:3a:b4:8b:3c:48:e9:ec:66:f1:ab:d5:47:8f:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c37a221b29dd463068c3a8d5cac146b057b5a9ed
Validity
Not Before: Mar 26 04:01:48 2026 GMT
Not After : Mar 27 04:01:48 2026 GMT
Subject: CN=6d6fe97512417fa83b8482770f05ae6559f6c066
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:bd:e9:7c:64:00:75:7f:08:50:88:52:8b:ff:
55:ba:1f:2e:e2:51:1d:c0:6f:cc:ab:60:66:0e:58:
5a:ef:15:b4:2d:11:3c:95:ea:ae:af:12:1b:4b:57:
70:e5:be:d6:57:c5:9b:fb:2c:66:93:7a:50:73:45:
7f:f1:a4:73:ca:44:56:5d:ba:1f:7e:0f:cb:0d:28:
24:23:34:5f:b7:e8:77:58:ec:3e:9f:6c:f1:63:e6:
90:fd:9f:27:0a:20:92:29:08:c5:9d:c7:22:e5:e2:
93:55:3d:3c:ee:d0:0d:06:8a:78:8d:12:79:59:8f:
a3:11:6e:3f:31:ef:ae:11:c3:da:30:b3:b5:c8:b8:
5c:e6:98:6a:74:ff:8a:9d:af:55:27:8a:66:4f:63:
39:9a:4e:4d:4d:44:fe:c9:1c:8a:3a:27:51:fc:8c:
51:4d:1b:8a:2b:1d:11:08:39:19:38:dc:f0:80:70:
87:c8:c2:c4:ab:94:98:be:a5:e6:87:62:3b:87:d6:
7b:ff:0e:ec:5b:58:18:b2:37:fa:ca:d2:c8:67:25:
74:44:7a:93:ce:04:cc:e6:f1:2a:2c:c4:96:66:71:
f0:29:40:b9:cc:50:01:3d:6a:6b:bb:12:d9:c8:93:
42:74:17:38:da:38:d4:c9:93:60:c6:57:55:03:b3:
0b:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:6F:E9:75:12:41:7F:A8:3B:84:82:77:0F:05:AE:65:59:F6:C0:66
X509v3 Authority Key Identifier:
keyid:C3:7A:22:1B:29:DD:46:30:68:C3:A8:D5:CA:C1:46:B0:57:B5:A9:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w3oiGyndRjBow6jVysFGsFe1qe0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/3be914-9d1b-4e0b-bfd2-8bfcf906f76a/1/w3oiGyndRjBow6jVysFGsFe1qe0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/3be914-9d1b-4e0b-bfd2-8bfcf906f76a/1/w3oiGyndRjBow6jVysFGsFe1qe0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:1d:e8:12:64:52:ab:35:7c:e7:fb:2e:6c:57:90:62:c0:2d:
23:07:2b:37:bc:ce:c4:ed:26:3b:ec:09:3f:15:51:49:91:a6:
91:01:10:09:c1:18:6b:81:dd:ed:26:96:c0:bf:7b:87:1c:80:
05:ee:0b:bd:5f:46:6a:15:38:bb:a1:23:00:ff:78:12:ba:47:
71:5c:b4:3a:d5:11:d4:02:0f:01:21:48:89:e4:cd:21:1b:bf:
86:90:53:1b:39:a2:ea:1a:ca:c7:88:74:13:e3:14:60:e6:01:
aa:04:36:da:43:fa:33:53:da:ef:65:84:d2:b9:1e:02:78:8b:
72:b2:35:85:66:27:59:1a:c8:97:00:42:63:78:7f:5d:14:71:
67:22:8d:d0:6c:e8:85:96:3a:62:88:d2:5c:e6:75:7f:67:b4:
d1:e7:12:54:7d:d4:0d:e2:70:ab:3a:d3:31:77:2b:17:76:a5:
aa:39:fc:a4:15:e4:22:4e:65:a5:e8:64:39:16:aa:ff:d4:29:
6e:de:9d:b3:1d:b8:5e:26:31:de:fb:dc:a7:0d:07:df:3f:98:
5b:e0:a8:9c:be:e7:f5:5b:30:1b:7d:f2:ad:e8:50:43:42:22:
5c:54:c9:ba:7c:7a:54:6b:45:4f:f0:76:ec:a5:da:81:46:8a:
d3:f5:7e:1c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0oTjq0izxI6exm8avVR4/RMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMzN2EyMjFiMjlkZDQ2MzA2OGMzYThkNWNhYzE0NmIwNTdi
NWE5ZWQwHhcNMjYwMzI2MDQwMTQ4WhcNMjYwMzI3MDQwMTQ4WjAzMTEwLwYDVQQD
Eyg2ZDZmZTk3NTEyNDE3ZmE4M2I4NDgyNzcwZjA1YWU2NTU5ZjZjMDY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvL3pfGQAdX8IUIhSi/9Vuh8u4lEd
wG/Mq2BmDlha7xW0LRE8lequrxIbS1dw5b7WV8Wb+yxmk3pQc0V/8aRzykRWXbof
fg/LDSgkIzRft+h3WOw+n2zxY+aQ/Z8nCiCSKQjFncci5eKTVT087tANBop4jRJ5
WY+jEW4/Me+uEcPaMLO1yLhc5phqdP+Kna9VJ4pmT2M5mk5NTUT+yRyKOidR/IxR
TRuKKx0RCDkZONzwgHCHyMLEq5SYvqXmh2I7h9Z7/w7sW1gYsjf6ytLIZyV0RHqT
zgTM5vEqLMSWZnHwKUC5zFABPWpruxLZyJNCdBc42jjUyZNgxldVA7MLdQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG1v6XUSQX+oO4SCdw8FrmVZ9sBmMB8GA1UdIwQY
MBaAFMN6Ihsp3UYwaMOo1crBRrBXtantMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdzNvaUd5bmRSakJvdzZqVnlzRkdzRmUxcWUwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS8zYmU5MTQtOWQxYi00ZTBiLWJmZDIt
OGJmY2Y5MDZmNzZhLzEvdzNvaUd5bmRSakJvdzZqVnlzRkdzRmUxcWUwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OS8zYmU5MTQtOWQxYi00ZTBiLWJmZDItOGJmY2Y5MDZmNzZh
LzEvdzNvaUd5bmRSakJvdzZqVnlzRkdzRmUxcWUwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkh3oEmRS
qzV85/subFeQYsAtIwcrN7zOxO0mO+wJPxVRSZGmkQEQCcEYa4Hd7SaWwL97hxyA
Be4LvV9GahU4u6EjAP94ErpHcVy0OtUR1AIPASFIieTNIRu/hpBTGzmi6hrKx4h0
E+MUYOYBqgQ22kP6M1Pa72WE0rkeAniLcrI1hWYnWRrIlwBCY3h/XRRxZyKN0Gzo
hZY6YojSXOZ1f2e00ecSVH3UDeJwqzrTMXcrF3alqjn8pBXkIk5lpehkORaq/9Qp
bt6dsx24XiYx3vvcpw0H3z+YW+ConL7n9VswG33yrehQQ0IiXFTJunx6VGtFT/B2
7KXagUaK0/V+HA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 09:49:07 2026 by rpki-client