Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/93620e-7528-4aac-9212-c7857a033962/1/w6iCsQ8bqepLofp3BttkdH5ipBM.mft
File: w6iCsQ8bqepLofp3BttkdH5ipBM.mft (raw, json)
Hash identifier: XR/l/cTUztgyC1spOXo6aaKC00Nun+D8eKRywCG1+S0=
Subject key identifier: BA:97:3A:F6:1C:E5:B3:5A:2D:92:CE:84:E3:FE:B2:BE:68:D6:B4:30
Authority key identifier: C3:A8:82:B1:0F:1B:A9:EA:4B:A1:FA:77:06:DB:64:74:7E:62:A4:13
Certificate issuer: /CN=c3a882b10f1ba9ea4ba1fa7706db64747e62a413
Certificate serial: 019D27724FB028D3D588B0CD88D841FCA1DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w6iCsQ8bqepLofp3BttkdH5ipBM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/93620e-7528-4aac-9212-c7857a033962/1/w6iCsQ8bqepLofp3BttkdH5ipBM.mft
Manifest number: 1886
Signing time: Thu 26 Mar 2026 00:01:36 +0000
Manifest this update: Thu 26 Mar 2026 00:01:36 +0000
Manifest next update: Fri 27 Mar 2026 00:01:36 +0000
Files and hashes: 1: 3zDXj12FVAF9XeXyFE67e6JY6lg.roa (hash: yDL38rTQ8XpaiZahcdQcgu5FHofBAzcqqnIqz6pUsPE=)
2: QDqYZmLzV23YVoA-rNr3_dudehM.roa (hash: DU7wizlaOucg4WwRR/OJogCxUlPPjJyoBT/zCr/m24w=)
3: w6iCsQ8bqepLofp3BttkdH5ipBM.crl (hash: iPcOHqaqRjqOLmgYdfI+MLvLXVhW6pVeJp5qv7AZCFo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/93620e-7528-4aac-9212-c7857a033962/1/w6iCsQ8bqepLofp3BttkdH5ipBM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/93620e-7528-4aac-9212-c7857a033962/1/w6iCsQ8bqepLofp3BttkdH5ipBM.mft
rsync://rpki.ripe.net/repository/DEFAULT/w6iCsQ8bqepLofp3BttkdH5ipBM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:4f:b0:28:d3:d5:88:b0:cd:88:d8:41:fc:a1:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3a882b10f1ba9ea4ba1fa7706db64747e62a413
Validity
Not Before: Mar 26 00:01:36 2026 GMT
Not After : Mar 27 00:01:36 2026 GMT
Subject: CN=ba973af61ce5b35a2d92ce84e3feb2be68d6b430
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:72:63:20:f2:23:8c:b6:6c:c7:be:e7:94:93:
4d:97:1c:45:f6:51:82:67:0b:b5:0f:b1:fc:7a:62:
4b:24:7b:6b:d2:d6:07:1d:e3:85:74:bb:e4:bb:63:
5f:6b:08:f5:71:68:84:f4:6a:64:d8:7b:42:13:6a:
e1:95:1d:1f:19:82:ed:3d:48:76:2e:44:44:eb:71:
0a:2d:4e:a7:7c:08:ce:e8:6f:03:99:b0:0e:cc:2e:
61:1b:8a:0e:b9:6e:5c:7f:97:11:ec:17:16:a5:95:
79:68:01:91:c5:26:3a:de:63:2f:0f:69:42:09:5c:
40:db:a9:10:35:db:83:2e:58:4d:5c:09:1d:7c:e4:
1f:49:e9:1d:1b:f3:09:df:4d:48:68:1c:fd:0f:33:
19:3d:cb:f9:92:03:04:3e:11:aa:05:c5:ad:f8:8f:
95:d5:84:de:b8:40:f0:ec:50:77:38:29:14:ce:44:
12:dd:63:2b:7c:29:4c:4d:fc:d5:9b:20:8b:27:13:
07:2c:34:fa:69:fd:af:91:de:5b:f6:7a:79:a0:0f:
fb:70:76:f5:46:c3:d0:ca:cf:1b:85:ff:ec:c4:e7:
49:e5:c1:77:b7:17:bc:32:67:2c:d3:e6:a6:da:75:
53:cb:42:a2:bc:d8:19:83:7e:8f:91:91:9a:76:d3:
de:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:97:3A:F6:1C:E5:B3:5A:2D:92:CE:84:E3:FE:B2:BE:68:D6:B4:30
X509v3 Authority Key Identifier:
keyid:C3:A8:82:B1:0F:1B:A9:EA:4B:A1:FA:77:06:DB:64:74:7E:62:A4:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w6iCsQ8bqepLofp3BttkdH5ipBM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/93620e-7528-4aac-9212-c7857a033962/1/w6iCsQ8bqepLofp3BttkdH5ipBM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/93620e-7528-4aac-9212-c7857a033962/1/w6iCsQ8bqepLofp3BttkdH5ipBM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:2c:59:9b:46:e3:0c:53:44:3a:4c:b4:7d:0d:54:92:d6:51:
17:32:0b:ba:73:79:f5:8f:d7:70:08:c8:58:94:c6:18:b2:f1:
4e:dc:4a:f2:fa:82:24:75:8b:e9:f7:a7:45:ef:66:06:10:fb:
d3:97:9b:5e:be:5b:c7:f4:74:98:48:01:ee:05:48:31:11:6a:
05:b5:94:c7:78:02:c7:ca:df:53:c2:d6:7a:0b:08:6a:d7:07:
7b:f3:75:fb:28:9b:7d:70:af:48:e4:6e:4b:b1:19:5e:06:f1:
9a:c8:56:0f:96:d7:2f:89:03:03:a1:76:2e:94:10:a0:24:0f:
13:66:56:87:47:71:74:a7:fd:dd:89:19:07:a4:98:13:e2:de:
77:cb:17:8e:0e:82:c0:21:ca:6b:ef:99:3a:ec:d2:29:c6:9d:
83:63:c4:3c:bb:54:c0:ca:4b:cb:e8:0a:5a:a9:3c:bc:67:fd:
57:b2:21:6c:02:ee:f9:ef:05:48:c0:15:b4:9e:4c:28:3f:b2:
37:82:48:7b:03:68:e1:9d:07:02:da:00:a0:ee:db:22:aa:ec:
8a:1a:00:c7:86:86:c3:ba:51:a5:22:ae:61:63:68:be:38:ce:
f2:0f:d0:cd:d8:f3:64:ac:78:8e:b0:a1:25:0d:28:d8:9f:c1:
fb:f6:7f:55
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nck+wKNPViLDNiNhB/KHaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMzYTg4MmIxMGYxYmE5ZWE0YmExZmE3NzA2ZGI2NDc0N2U2
MmE0MTMwHhcNMjYwMzI2MDAwMTM2WhcNMjYwMzI3MDAwMTM2WjAzMTEwLwYDVQQD
EyhiYTk3M2FmNjFjZTViMzVhMmQ5MmNlODRlM2ZlYjJiZTY4ZDZiNDMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy3JjIPIjjLZsx77nlJNNlxxF9lGC
Zwu1D7H8emJLJHtr0tYHHeOFdLvku2Nfawj1cWiE9Gpk2HtCE2rhlR0fGYLtPUh2
LkRE63EKLU6nfAjO6G8DmbAOzC5hG4oOuW5cf5cR7BcWpZV5aAGRxSY63mMvD2lC
CVxA26kQNduDLlhNXAkdfOQfSekdG/MJ301IaBz9DzMZPcv5kgMEPhGqBcWt+I+V
1YTeuEDw7FB3OCkUzkQS3WMrfClMTfzVmyCLJxMHLDT6af2vkd5b9np5oA/7cHb1
RsPQys8bhf/sxOdJ5cF3txe8Mmcs0+am2nVTy0KivNgZg36PkZGadtPevQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLqXOvYc5bNaLZLOhOP+sr5o1rQwMB8GA1UdIwQY
MBaAFMOogrEPG6nqS6H6dwbbZHR+YqQTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdzZpQ3NROGJxZXBMb2ZwM0J0dGtkSDVpcEJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS85MzYyMGUtNzUyOC00YWFjLTkyMTIt
Yzc4NTdhMDMzOTYyLzEvdzZpQ3NROGJxZXBMb2ZwM0J0dGtkSDVpcEJNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNS85MzYyMGUtNzUyOC00YWFjLTkyMTItYzc4NTdhMDMzOTYy
LzEvdzZpQ3NROGJxZXBMb2ZwM0J0dGtkSDVpcEJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOSxZm0bj
DFNEOky0fQ1UktZRFzILunN59Y/XcAjIWJTGGLLxTtxK8vqCJHWL6fenRe9mBhD7
05ebXr5bx/R0mEgB7gVIMRFqBbWUx3gCx8rfU8LWegsIatcHe/N1+yibfXCvSORu
S7EZXgbxmshWD5bXL4kDA6F2LpQQoCQPE2ZWh0dxdKf93YkZB6SYE+Led8sXjg6C
wCHKa++ZOuzSKcadg2PEPLtUwMpLy+gKWqk8vGf9V7IhbALu+e8FSMAVtJ5MKD+y
N4JIewNo4Z0HAtoAoO7bIqrsihoAx4aGw7pRpSKuYWNovjjO8g/QzdjzZKx4jrCh
JQ0o2J/B+/Z/VQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 10:56:18 2026 by rpki-client