Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/3663ba-a80d-4108-8708-0b15d97ad561/1/mWsinL82Z6zid7FgBcOQctBnP88.mft
File: mWsinL82Z6zid7FgBcOQctBnP88.mft (raw, json)
Hash identifier: UnUixHf5OZytyomKaNdk+nVJjCLr5r8RjiCUxPp1GDw=
Subject key identifier: 0D:26:67:C3:C0:57:4D:79:43:A5:A0:D8:1A:19:ED:24:9C:00:11:00
Authority key identifier: 99:6B:22:9C:BF:36:67:AC:E2:77:B1:60:05:C3:90:72:D0:67:3F:CF
Certificate issuer: /CN=996b229cbf3667ace277b16005c39072d0673fcf
Certificate serial: 019D28845289B096E2FE0D3665E661FA3B75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mWsinL82Z6zid7FgBcOQctBnP88.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/3663ba-a80d-4108-8708-0b15d97ad561/1/mWsinL82Z6zid7FgBcOQctBnP88.mft
Manifest number: 06ED
Signing time: Thu 26 Mar 2026 05:00:53 +0000
Manifest this update: Thu 26 Mar 2026 05:00:53 +0000
Manifest next update: Fri 27 Mar 2026 05:00:53 +0000
Files and hashes: 1: 1hrgzjhdA5Y-F7fISIbwYJa2IVc.roa (hash: 8PAttc7ZrtZswXRaiAtTSylop3DYOKrwU34TygYkrxs=)
2: mWsinL82Z6zid7FgBcOQctBnP88.crl (hash: u50JbPQiMI7UyFriDUe6+BdEcoUxJGaUVPdfCVQXLQc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/3663ba-a80d-4108-8708-0b15d97ad561/1/mWsinL82Z6zid7FgBcOQctBnP88.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/3663ba-a80d-4108-8708-0b15d97ad561/1/mWsinL82Z6zid7FgBcOQctBnP88.mft
rsync://rpki.ripe.net/repository/DEFAULT/mWsinL82Z6zid7FgBcOQctBnP88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:84:52:89:b0:96:e2:fe:0d:36:65:e6:61:fa:3b:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=996b229cbf3667ace277b16005c39072d0673fcf
Validity
Not Before: Mar 26 05:00:53 2026 GMT
Not After : Mar 27 05:00:53 2026 GMT
Subject: CN=0d2667c3c0574d7943a5a0d81a19ed249c001100
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:c4:0d:2d:0a:ab:21:4e:71:43:7e:79:c7:33:
be:0b:5a:38:1f:24:92:de:c3:bd:43:e5:39:a5:d5:
a5:8f:ef:0d:15:f9:50:f5:e3:ff:cd:43:9e:12:bc:
df:a3:bc:9b:26:cb:1e:8f:c1:b9:ce:66:e1:d7:5c:
10:64:a2:23:f9:ce:43:b1:26:1c:b6:1f:2f:e0:2e:
14:8a:9d:78:73:e6:0b:96:d7:fc:ed:c1:1b:0e:76:
31:96:7b:70:83:7b:d8:18:20:7d:e0:ba:2a:54:7e:
e8:70:f2:a3:ae:aa:66:a6:81:17:5f:f5:b5:c8:fa:
26:43:c8:51:e9:28:66:e1:1e:87:96:90:80:18:81:
2b:3e:1a:82:4b:d4:2c:b9:c4:1e:ca:fb:04:fd:90:
21:6c:fb:88:a4:89:18:ce:36:aa:92:6f:ca:5a:7e:
37:f8:f5:7b:86:0f:60:a2:93:bb:db:74:4b:5d:59:
28:67:2e:46:76:d7:a7:84:cd:e6:17:c0:3d:bd:dd:
3b:0e:f5:bf:da:e6:06:6e:06:f7:24:b7:c2:53:3a:
bb:10:14:d8:bb:f4:28:7a:a3:d7:0c:bd:52:3d:79:
4a:dd:57:b4:ce:ba:f8:99:b1:24:67:aa:05:68:0d:
0d:9a:88:46:b1:f8:8c:f9:a4:ba:73:39:eb:58:7d:
1f:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:26:67:C3:C0:57:4D:79:43:A5:A0:D8:1A:19:ED:24:9C:00:11:00
X509v3 Authority Key Identifier:
keyid:99:6B:22:9C:BF:36:67:AC:E2:77:B1:60:05:C3:90:72:D0:67:3F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mWsinL82Z6zid7FgBcOQctBnP88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/3663ba-a80d-4108-8708-0b15d97ad561/1/mWsinL82Z6zid7FgBcOQctBnP88.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/3663ba-a80d-4108-8708-0b15d97ad561/1/mWsinL82Z6zid7FgBcOQctBnP88.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:33:9c:84:59:f0:cc:1d:ce:26:71:96:76:99:ac:de:dc:52:
50:82:45:f0:80:75:9f:35:b7:56:58:42:3b:aa:66:65:9d:d4:
61:12:de:64:a9:e4:0c:3b:bf:f5:05:b6:e0:0b:b1:c4:ea:0e:
ab:18:d7:9a:3b:73:ea:50:84:fe:48:03:d0:11:21:4d:2e:a7:
1f:7c:58:2c:0b:92:85:5c:03:6d:ef:f0:f0:97:92:ad:fe:14:
b0:b2:7e:66:a6:15:06:1c:20:3d:17:62:fe:da:6a:c8:bb:e2:
c1:5a:74:bf:3a:7c:fc:eb:2d:dd:d4:71:a9:ed:7f:d8:d9:49:
29:87:1f:16:90:d7:a6:a8:fa:f5:5b:fd:82:43:5a:68:8b:52:
ad:9b:40:15:b9:d3:c3:55:0c:25:de:3c:c2:09:fe:c7:3e:6e:
0c:da:48:3e:81:26:36:e6:0c:0c:96:01:c6:56:43:fa:f7:93:
6f:50:ec:dc:a9:55:bc:a6:5b:5c:c5:ed:fa:b0:f3:fb:b0:af:
af:ac:ee:cb:f7:de:e3:c6:f7:66:e8:cf:76:9c:72:9d:0e:ad:
e2:23:60:b4:13:2b:eb:d4:b7:45:bb:b0:8c:d4:a6:99:8e:3e:
13:79:0e:88:c1:b6:f0:49:01:60:3c:0f:01:52:66:6d:19:c6:
b0:5a:d0:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:39:16 2026 by rpki-client