Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/2053c4-bc4a-416a-8970-ac536b2ab4f8/1/WsswiUYeH1-JhLd0LIm7aPG4jBI.mft
File: WsswiUYeH1-JhLd0LIm7aPG4jBI.mft (raw, json)
Hash identifier: wWBBsmrzzfwDud031MaLoOwRgFk0/QafvzxLBSC5vbA=
Subject key identifier: 9B:A1:C4:5B:65:8E:F9:21:79:D1:F8:A7:38:50:E4:EE:11:1C:11:A7
Authority key identifier: 5A:CB:30:89:46:1E:1F:5F:89:84:B7:74:2C:89:BB:68:F1:B8:8C:12
Certificate issuer: /CN=5acb3089461e1f5f8984b7742c89bb68f1b88c12
Certificate serial: 019D37C08297D2EC26FD1B41716F64806660
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WsswiUYeH1-JhLd0LIm7aPG4jBI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/2053c4-bc4a-416a-8970-ac536b2ab4f8/1/WsswiUYeH1-JhLd0LIm7aPG4jBI.mft
Manifest number: 188F
Signing time: Sun 29 Mar 2026 04:00:56 +0000
Manifest this update: Sun 29 Mar 2026 04:00:56 +0000
Manifest next update: Mon 30 Mar 2026 04:00:56 +0000
Files and hashes: 1: WsswiUYeH1-JhLd0LIm7aPG4jBI.crl (hash: ulVsw9Kl+1On8w8fTK5s41M3OCj84a1aJVKwOa3ByGU=)
2: dJUmGz-VHARh9iQCCVjAjqcYY24.roa (hash: 6l/C0aO7pVVh6TmumDnFhpRIJmTtsI9/rCHq3aG0LHQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/2053c4-bc4a-416a-8970-ac536b2ab4f8/1/WsswiUYeH1-JhLd0LIm7aPG4jBI.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/2053c4-bc4a-416a-8970-ac536b2ab4f8/1/WsswiUYeH1-JhLd0LIm7aPG4jBI.mft
rsync://rpki.ripe.net/repository/DEFAULT/WsswiUYeH1-JhLd0LIm7aPG4jBI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:82:97:d2:ec:26:fd:1b:41:71:6f:64:80:66:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5acb3089461e1f5f8984b7742c89bb68f1b88c12
Validity
Not Before: Mar 29 04:00:56 2026 GMT
Not After : Mar 30 04:00:56 2026 GMT
Subject: CN=9ba1c45b658ef92179d1f8a73850e4ee111c11a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:07:b2:6b:89:60:e3:0b:e3:ac:9a:d6:65:b6:
b8:13:30:2e:df:0e:37:f5:2b:90:3b:85:9b:86:c7:
59:4d:c3:f3:eb:a7:da:72:bc:af:1d:79:2b:db:7c:
9b:43:a1:21:fb:0d:6c:3e:7c:3a:50:9f:a2:87:d4:
c7:e5:65:43:ba:09:a8:26:44:2f:0e:84:d1:d0:0e:
d0:b8:71:00:27:3f:ab:17:3c:ba:e9:c1:67:81:98:
20:96:58:a2:70:3a:fd:87:fc:52:61:89:85:5f:c6:
4b:c3:fb:b8:ee:f1:0d:ab:bb:5f:e0:b5:38:6d:3f:
00:d4:c3:c5:88:7d:58:30:03:d0:01:12:dc:05:71:
fb:9a:b6:c5:a3:b9:56:8f:0f:41:0e:6a:f4:84:7b:
87:a7:f6:3a:0c:29:a9:f7:90:2d:1f:b5:a0:b0:18:
fc:cc:94:fa:39:e2:6a:b4:72:be:14:80:10:98:31:
03:a2:0c:82:e2:f1:0d:f3:e0:86:59:16:34:22:5e:
9b:1a:5e:35:bd:2d:b2:03:7b:0f:67:13:34:c1:f2:
21:76:c0:0c:23:c5:b1:95:2b:12:fe:c0:ca:e3:51:
b1:c1:08:f1:19:1b:8e:f0:62:8c:63:7a:38:bf:c2:
4d:fc:60:a6:f2:73:a3:7d:43:4e:db:7e:2d:0b:31:
2f:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:A1:C4:5B:65:8E:F9:21:79:D1:F8:A7:38:50:E4:EE:11:1C:11:A7
X509v3 Authority Key Identifier:
keyid:5A:CB:30:89:46:1E:1F:5F:89:84:B7:74:2C:89:BB:68:F1:B8:8C:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WsswiUYeH1-JhLd0LIm7aPG4jBI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/2053c4-bc4a-416a-8970-ac536b2ab4f8/1/WsswiUYeH1-JhLd0LIm7aPG4jBI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/2053c4-bc4a-416a-8970-ac536b2ab4f8/1/WsswiUYeH1-JhLd0LIm7aPG4jBI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:e5:99:ec:0a:b8:ef:1c:9c:4c:3e:f2:b8:9c:51:63:ec:6b:
44:37:e3:04:c5:3b:19:c8:b4:99:bf:42:cb:50:c8:3b:92:39:
b8:62:41:3e:03:50:14:28:1b:66:81:f4:ad:d0:48:28:f8:f1:
11:e2:cc:35:e1:6d:ef:8a:27:56:53:30:1a:15:91:65:9e:ec:
c2:43:ef:96:72:ab:66:24:2c:9d:65:4b:3c:8b:d7:21:d2:d4:
b4:a1:20:d7:ad:a8:ee:2f:88:63:76:a5:63:06:7b:e1:e4:71:
7e:0b:5e:06:de:f3:33:6b:bb:49:6e:23:21:73:2e:4e:28:08:
93:1c:f4:f7:27:c8:fe:ab:05:14:4f:85:0f:d4:c5:e0:54:6e:
86:ee:f3:56:16:15:77:39:f7:4d:7b:de:98:85:ed:b2:e0:e0:
a5:74:b7:50:d2:e2:fa:c7:ba:56:81:d1:60:37:54:9d:ef:ed:
75:60:e6:98:51:78:14:56:88:15:85:34:fe:4a:17:fe:9a:b4:
4d:57:3b:f0:6c:07:18:92:52:26:92:fa:ad:4e:78:fd:e7:3f:
ca:ae:67:a4:18:ce:13:c8:8f:7b:be:ef:53:5d:43:93:47:4a:
29:d6:ce:a2:ec:9c:33:4b:98:c0:43:01:f6:f2:53:b4:62:66:
8d:f4:de:00
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03wIKX0uwm/RtBcW9kgGZgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVhY2IzMDg5NDYxZTFmNWY4OTg0Yjc3NDJjODliYjY4ZjFi
ODhjMTIwHhcNMjYwMzI5MDQwMDU2WhcNMjYwMzMwMDQwMDU2WjAzMTEwLwYDVQQD
Eyg5YmExYzQ1YjY1OGVmOTIxNzlkMWY4YTczODUwZTRlZTExMWMxMWE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtQeya4lg4wvjrJrWZba4EzAu3w43
9SuQO4WbhsdZTcPz66facryvHXkr23ybQ6Eh+w1sPnw6UJ+ih9TH5WVDugmoJkQv
DoTR0A7QuHEAJz+rFzy66cFngZgglliicDr9h/xSYYmFX8ZLw/u47vENq7tf4LU4
bT8A1MPFiH1YMAPQARLcBXH7mrbFo7lWjw9BDmr0hHuHp/Y6DCmp95AtH7WgsBj8
zJT6OeJqtHK+FIAQmDEDogyC4vEN8+CGWRY0Il6bGl41vS2yA3sPZxM0wfIhdsAM
I8WxlSsS/sDK41GxwQjxGRuO8GKMY3o4v8JN/GCm8nOjfUNO234tCzEvxQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJuhxFtljvkhedH4pzhQ5O4RHBGnMB8GA1UdIwQY
MBaAFFrLMIlGHh9fiYS3dCyJu2jxuIwSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV3Nzd2lVWWVIMS1KaExkMExJbTdhUEc0akJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy8yMDUzYzQtYmM0YS00MTZhLTg5NzAt
YWM1MzZiMmFiNGY4LzEvV3Nzd2lVWWVIMS1KaExkMExJbTdhUEc0akJJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy8yMDUzYzQtYmM0YS00MTZhLTg5NzAtYWM1MzZiMmFiNGY4
LzEvV3Nzd2lVWWVIMS1KaExkMExJbTdhUEc0akJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAuWZ7Aq4
7xycTD7yuJxRY+xrRDfjBMU7Gci0mb9Cy1DIO5I5uGJBPgNQFCgbZoH0rdBIKPjx
EeLMNeFt74onVlMwGhWRZZ7swkPvlnKrZiQsnWVLPIvXIdLUtKEg162o7i+IY3al
YwZ74eRxfgteBt7zM2u7SW4jIXMuTigIkxz09yfI/qsFFE+FD9TF4FRuhu7zVhYV
dzn3TXvemIXtsuDgpXS3UNLi+se6VoHRYDdUne/tdWDmmFF4FFaIFYU0/koX/pq0
TVc78GwHGJJSJpL6rU54/ec/yq5npBjOE8iPe77vU11Dk0dKKdbOouycM0uYwEMB
9vJTtGJmjfTeAA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:29:18 2026 by rpki-client