Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/9a97f0-50b6-4844-89d4-23a276a428ab/1/w98u83AH1U-Gu6J1c9M61pXJ7lw.mft
File: w98u83AH1U-Gu6J1c9M61pXJ7lw.mft (raw, json)
Hash identifier: U14+h7j7HssTGLNR9aKaQsbEqYLYEkC8h4hqDNdxAvQ=
Subject key identifier: 6E:6B:08:89:1E:EA:59:2F:EB:19:7F:05:42:A6:C4:26:CE:88:BB:88
Authority key identifier: C3:DF:2E:F3:70:07:D5:4F:86:BB:A2:75:73:D3:3A:D6:95:C9:EE:5C
Certificate issuer: /CN=c3df2ef37007d54f86bba27573d33ad695c9ee5c
Certificate serial: 019D382E40BCB589F6B7741D5564601ED21A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w98u83AH1U-Gu6J1c9M61pXJ7lw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/9a97f0-50b6-4844-89d4-23a276a428ab/1/w98u83AH1U-Gu6J1c9M61pXJ7lw.mft
Manifest number: 0D40
Signing time: Sun 29 Mar 2026 06:00:48 +0000
Manifest this update: Sun 29 Mar 2026 06:00:48 +0000
Manifest next update: Mon 30 Mar 2026 06:00:48 +0000
Files and hashes: 1: 9jeDYK_knLWdWNHtP5D0cVO31qY.roa (hash: 6Wo1Gq7cJQHP7npXhJpTMr2r87iqorsL+3UpSfgjQL8=)
2: w98u83AH1U-Gu6J1c9M61pXJ7lw.crl (hash: eOoFd9ntUatYqqID+LdlHAYUbcolvUsCHHlQAxyNzg0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/9a97f0-50b6-4844-89d4-23a276a428ab/1/w98u83AH1U-Gu6J1c9M61pXJ7lw.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/9a97f0-50b6-4844-89d4-23a276a428ab/1/w98u83AH1U-Gu6J1c9M61pXJ7lw.mft
rsync://rpki.ripe.net/repository/DEFAULT/w98u83AH1U-Gu6J1c9M61pXJ7lw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:40:bc:b5:89:f6:b7:74:1d:55:64:60:1e:d2:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3df2ef37007d54f86bba27573d33ad695c9ee5c
Validity
Not Before: Mar 29 06:00:48 2026 GMT
Not After : Mar 30 06:00:48 2026 GMT
Subject: CN=6e6b08891eea592feb197f0542a6c426ce88bb88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:0f:c7:29:18:8f:42:fd:89:3b:80:da:06:e0:
2b:d5:8b:b6:3c:e5:aa:ba:cb:96:78:4e:ac:db:df:
71:ba:d1:60:2d:db:2c:a6:32:fe:a0:80:c7:f2:c6:
73:95:d6:24:eb:60:4b:f8:d0:9b:2c:35:0b:9d:4c:
95:e2:7e:75:19:43:33:7e:55:fe:cb:4d:a8:ae:82:
32:b0:d4:6f:e0:71:b2:0c:7f:c5:20:ff:a3:5c:7c:
bf:f2:e9:23:5c:d8:30:b4:e2:b6:8f:38:05:0c:84:
60:e7:34:2b:4c:e4:99:c9:93:f6:61:f0:ed:20:9d:
7f:72:66:2a:e0:18:fa:5d:9b:cc:27:e8:6f:4c:ad:
85:20:71:60:bf:65:65:e1:85:be:97:f9:08:7c:5f:
c7:61:57:66:08:1f:d5:88:19:56:86:d7:dc:9b:33:
42:2c:09:3a:98:75:3f:4a:87:5e:6f:93:c4:0d:5f:
c7:59:f3:11:75:fc:b8:b4:75:c1:8a:a2:7e:31:3f:
84:ed:3d:0d:97:a2:66:9a:d2:d0:da:68:4d:b7:f9:
4d:4e:98:17:02:f9:b1:02:10:83:40:4d:6d:38:1a:
ba:39:c6:5d:44:c4:f0:52:eb:99:9f:d3:0a:19:b9:
65:96:2a:13:43:77:e7:32:8c:84:ca:87:31:f0:17:
b9:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:6B:08:89:1E:EA:59:2F:EB:19:7F:05:42:A6:C4:26:CE:88:BB:88
X509v3 Authority Key Identifier:
keyid:C3:DF:2E:F3:70:07:D5:4F:86:BB:A2:75:73:D3:3A:D6:95:C9:EE:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w98u83AH1U-Gu6J1c9M61pXJ7lw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/9a97f0-50b6-4844-89d4-23a276a428ab/1/w98u83AH1U-Gu6J1c9M61pXJ7lw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/9a97f0-50b6-4844-89d4-23a276a428ab/1/w98u83AH1U-Gu6J1c9M61pXJ7lw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:79:08:18:84:bd:cf:ee:d5:21:c0:7f:88:7e:2e:16:4a:23:
6e:d3:2f:bf:08:61:3d:93:21:23:7d:06:2b:ef:08:39:c7:27:
52:92:2e:e5:83:bf:06:0e:9d:62:ba:5a:aa:14:ef:e3:74:d0:
25:10:cd:f2:99:0e:bf:d4:29:51:c3:64:72:ce:c6:c3:69:4a:
3e:d0:7e:55:7b:c3:63:57:ee:41:3a:a1:30:db:c9:62:f8:46:
87:41:fd:a3:cb:01:57:d9:33:30:ac:7b:37:75:84:39:8d:a0:
09:86:4a:48:51:51:53:ae:d5:db:27:b6:49:1c:e0:6a:5e:71:
ae:4a:1a:a1:b0:38:5a:f8:7f:14:05:c2:fb:af:63:f5:36:20:
fc:6e:7d:03:30:ed:84:b7:5c:d8:8d:2e:62:22:bf:65:02:28:
32:51:15:dd:f7:d6:75:88:75:6e:fa:03:58:e4:8a:d9:ed:92:
6b:48:41:ae:70:0c:75:92:34:b3:83:e0:aa:d0:a7:26:7d:c4:
3a:8c:fa:14:89:9f:ed:94:30:7d:0c:4c:b9:a9:4c:4f:47:f4:
dd:3e:34:74:b7:23:fe:ce:03:bf:dd:93:a7:b4:90:01:71:b9:
84:b8:97:00:1a:7a:76:49:7b:22:4f:32:03:f2:e8:8e:97:09:
a4:70:e7:57
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04LkC8tYn2t3QdVWRgHtIaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMzZGYyZWYzNzAwN2Q1NGY4NmJiYTI3NTczZDMzYWQ2OTVj
OWVlNWMwHhcNMjYwMzI5MDYwMDQ4WhcNMjYwMzMwMDYwMDQ4WjAzMTEwLwYDVQQD
Eyg2ZTZiMDg4OTFlZWE1OTJmZWIxOTdmMDU0MmE2YzQyNmNlODhiYjg4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5w/HKRiPQv2JO4DaBuAr1Yu2POWq
usuWeE6s299xutFgLdsspjL+oIDH8sZzldYk62BL+NCbLDULnUyV4n51GUMzflX+
y02oroIysNRv4HGyDH/FIP+jXHy/8ukjXNgwtOK2jzgFDIRg5zQrTOSZyZP2YfDt
IJ1/cmYq4Bj6XZvMJ+hvTK2FIHFgv2Vl4YW+l/kIfF/HYVdmCB/ViBlWhtfcmzNC
LAk6mHU/Sodeb5PEDV/HWfMRdfy4tHXBiqJ+MT+E7T0Nl6JmmtLQ2mhNt/lNTpgX
AvmxAhCDQE1tOBq6OcZdRMTwUuuZn9MKGblllioTQ3fnMoyEyocx8Be5EwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG5rCIke6lkv6xl/BUKmxCbOiLuIMB8GA1UdIwQY
MBaAFMPfLvNwB9VPhruidXPTOtaVye5cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdzk4dTgzQUgxVS1HdTZKMWM5TTYxcFhKN2x3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi85YTk3ZjAtNTBiNi00ODQ0LTg5ZDQt
MjNhMjc2YTQyOGFiLzEvdzk4dTgzQUgxVS1HdTZKMWM5TTYxcFhKN2x3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Mi85YTk3ZjAtNTBiNi00ODQ0LTg5ZDQtMjNhMjc2YTQyOGFi
LzEvdzk4dTgzQUgxVS1HdTZKMWM5TTYxcFhKN2x3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUnkIGIS9
z+7VIcB/iH4uFkojbtMvvwhhPZMhI30GK+8IOccnUpIu5YO/Bg6dYrpaqhTv43TQ
JRDN8pkOv9QpUcNkcs7Gw2lKPtB+VXvDY1fuQTqhMNvJYvhGh0H9o8sBV9kzMKx7
N3WEOY2gCYZKSFFRU67V2ye2SRzgal5xrkoaobA4Wvh/FAXC+69j9TYg/G59AzDt
hLdc2I0uYiK/ZQIoMlEV3ffWdYh1bvoDWOSK2e2Sa0hBrnAMdZI0s4PgqtCnJn3E
Ooz6FImf7ZQwfQxMualMT0f03T40dLcj/s4Dv92Tp7SQAXG5hLiXABp6dkl7Ik8y
A/LojpcJpHDnVw==
-----END CERTIFICATE-----
Generated at Sun Mar 29 14:10:38 2026 by rpki-client