Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/179bd8-fc68-4f76-86ff-68f316607376/1/Wjsd3asz5FUGrZdwQJJHIEF9Vog.mft
File: Wjsd3asz5FUGrZdwQJJHIEF9Vog.mft (raw, json)
Hash identifier: ghJkcwYxT/jLIDNTg4WZLe90xK7duouFlYGQ4gpe144=
Subject key identifier: 0C:7B:4F:04:13:42:B8:E5:20:2E:AC:03:46:F6:BD:41:D0:EF:FF:B9
Authority key identifier: 5A:3B:1D:DD:AB:33:E4:55:06:AD:97:70:40:92:47:20:41:7D:56:88
Certificate issuer: /CN=5a3b1dddab33e45506ad977040924720417d5688
Certificate serial: 019D382E86961223668EE72DC1E0C9DD24F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wjsd3asz5FUGrZdwQJJHIEF9Vog.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/179bd8-fc68-4f76-86ff-68f316607376/1/Wjsd3asz5FUGrZdwQJJHIEF9Vog.mft
Manifest number: 0DD8
Signing time: Sun 29 Mar 2026 06:01:06 +0000
Manifest this update: Sun 29 Mar 2026 06:01:06 +0000
Manifest next update: Mon 30 Mar 2026 06:01:06 +0000
Files and hashes: 1: Wjsd3asz5FUGrZdwQJJHIEF9Vog.crl (hash: /h0fWgKjXmeMqRG+qDQ/yp7I3MZrYRRTMd3ZGigm9Mk=)
2: b-_n2W3tKk55AZ6OfLhjhQmjHQM.roa (hash: o8XoU14Iw4MJitDTGOKpTt9lHXFFyCkBas20Hr7/Z5o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/179bd8-fc68-4f76-86ff-68f316607376/1/Wjsd3asz5FUGrZdwQJJHIEF9Vog.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/179bd8-fc68-4f76-86ff-68f316607376/1/Wjsd3asz5FUGrZdwQJJHIEF9Vog.mft
rsync://rpki.ripe.net/repository/DEFAULT/Wjsd3asz5FUGrZdwQJJHIEF9Vog.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:86:96:12:23:66:8e:e7:2d:c1:e0:c9:dd:24:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a3b1dddab33e45506ad977040924720417d5688
Validity
Not Before: Mar 29 06:01:06 2026 GMT
Not After : Mar 30 06:01:06 2026 GMT
Subject: CN=0c7b4f041342b8e5202eac0346f6bd41d0efffb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:26:3b:08:1a:f2:2c:92:91:1d:07:91:6f:50:
f4:4b:ad:2a:52:db:22:7d:b4:21:d0:a6:b2:e2:19:
4b:15:9a:ad:a0:7b:21:43:f6:2a:e0:63:20:05:7a:
4d:00:a3:72:88:c9:0b:b1:86:ec:53:bc:a2:90:89:
9c:1e:7f:32:bb:14:86:5a:79:bb:c0:11:f2:68:f2:
6d:f8:a3:95:1c:0e:33:b3:f5:8a:28:54:a2:86:f4:
12:9e:2f:72:50:6a:e2:a7:6f:a6:f6:3b:cd:e3:09:
d8:52:ac:1b:59:81:96:6a:4f:f6:1d:11:e1:d8:5c:
47:a1:18:c5:cd:b3:21:ce:41:38:e9:f1:5c:74:1a:
a0:bb:44:08:bb:8c:22:78:5a:46:35:77:9a:06:3f:
5d:6b:c2:9b:bc:73:b2:df:1a:41:41:39:ad:d9:2f:
40:9a:15:65:0d:de:b2:6a:36:a8:03:9a:ec:c4:c9:
54:7e:ae:36:28:25:41:7d:eb:3f:cc:3b:46:5a:e8:
61:83:76:ad:5d:00:5b:45:78:ac:c8:90:90:ac:4c:
8f:4d:93:00:b2:a3:20:12:a3:62:cc:da:70:f1:3a:
f5:11:7e:b3:79:75:13:ab:15:1f:15:56:f1:a7:1c:
d2:ff:2d:ab:9c:23:de:cb:c1:b6:c7:28:2a:7a:a8:
19:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:7B:4F:04:13:42:B8:E5:20:2E:AC:03:46:F6:BD:41:D0:EF:FF:B9
X509v3 Authority Key Identifier:
keyid:5A:3B:1D:DD:AB:33:E4:55:06:AD:97:70:40:92:47:20:41:7D:56:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wjsd3asz5FUGrZdwQJJHIEF9Vog.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/179bd8-fc68-4f76-86ff-68f316607376/1/Wjsd3asz5FUGrZdwQJJHIEF9Vog.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/179bd8-fc68-4f76-86ff-68f316607376/1/Wjsd3asz5FUGrZdwQJJHIEF9Vog.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c5:9b:da:8a:10:cf:b3:21:fc:39:a2:73:8b:ec:76:32:d5:37:
32:69:39:ca:95:45:64:e3:32:7d:9a:fe:eb:3f:75:d5:77:9a:
a1:6f:8e:ed:79:e3:40:21:c0:ad:fb:31:f7:4d:39:4f:97:24:
6d:f3:e4:33:4a:98:4c:e7:f7:17:43:97:2a:1d:7a:cd:4b:d8:
d4:0b:fd:d0:2b:33:1b:dd:e5:a6:f9:22:de:9a:54:1f:89:83:
58:c0:56:59:ec:2a:ac:9e:d2:2f:95:e6:6a:1a:42:b5:d4:7e:
2d:03:f4:59:a4:ec:c7:80:d8:a0:14:8b:f2:6e:7c:d1:3d:74:
83:2b:1d:03:13:9d:63:f9:90:7e:e2:c9:64:ae:52:ea:b8:9c:
db:be:3e:b2:49:3f:05:4a:94:c3:b1:25:b2:36:65:a6:11:67:
3f:95:35:a4:d7:c9:eb:cc:27:ea:71:35:67:62:3d:05:b7:1d:
7b:3a:e0:85:b8:f6:c9:88:5f:99:7e:40:cb:48:39:43:98:21:
42:87:d9:1f:b5:3f:28:5d:e4:ac:87:7d:ae:2a:65:31:9a:80:
cf:85:53:5f:d4:69:22:4f:89:5f:14:d9:d7:b0:4c:82:48:7e:
37:9f:8c:5f:95:98:1e:b8:67:14:aa:5f:32:1d:36:48:3c:af:
09:cb:58:8d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04LoaWEiNmjuctweDJ3ST0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVhM2IxZGRkYWIzM2U0NTUwNmFkOTc3MDQwOTI0NzIwNDE3
ZDU2ODgwHhcNMjYwMzI5MDYwMTA2WhcNMjYwMzMwMDYwMTA2WjAzMTEwLwYDVQQD
EygwYzdiNGYwNDEzNDJiOGU1MjAyZWFjMDM0NmY2YmQ0MWQwZWZmZmI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoCY7CBryLJKRHQeRb1D0S60qUtsi
fbQh0Kay4hlLFZqtoHshQ/Yq4GMgBXpNAKNyiMkLsYbsU7yikImcHn8yuxSGWnm7
wBHyaPJt+KOVHA4zs/WKKFSihvQSni9yUGrip2+m9jvN4wnYUqwbWYGWak/2HRHh
2FxHoRjFzbMhzkE46fFcdBqgu0QIu4wieFpGNXeaBj9da8KbvHOy3xpBQTmt2S9A
mhVlDd6yajaoA5rsxMlUfq42KCVBfes/zDtGWuhhg3atXQBbRXisyJCQrEyPTZMA
sqMgEqNizNpw8Tr1EX6zeXUTqxUfFVbxpxzS/y2rnCPey8G2xygqeqgZFQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAx7TwQTQrjlIC6sA0b2vUHQ7/+5MB8GA1UdIwQY
MBaAFFo7Hd2rM+RVBq2XcECSRyBBfVaIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV2pzZDNhc3o1RlVHclpkd1FKSkhJRUY5Vm9nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy8xNzliZDgtZmM2OC00Zjc2LTg2ZmYt
NjhmMzE2NjA3Mzc2LzEvV2pzZDNhc3o1RlVHclpkd1FKSkhJRUY5Vm9nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yy8xNzliZDgtZmM2OC00Zjc2LTg2ZmYtNjhmMzE2NjA3Mzc2
LzEvV2pzZDNhc3o1RlVHclpkd1FKSkhJRUY5Vm9nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxZvaihDP
syH8OaJzi+x2MtU3Mmk5ypVFZOMyfZr+6z911XeaoW+O7XnjQCHArfsx9005T5ck
bfPkM0qYTOf3F0OXKh16zUvY1Av90CszG93lpvki3ppUH4mDWMBWWewqrJ7SL5Xm
ahpCtdR+LQP0WaTsx4DYoBSL8m580T10gysdAxOdY/mQfuLJZK5S6ric274+skk/
BUqUw7ElsjZlphFnP5U1pNfJ68wn6nE1Z2I9Bbcdezrghbj2yYhfmX5Ay0g5Q5gh
QofZH7U/KF3krId9riplMZqAz4VTX9RpIk+JXxTZ17BMgkh+N5+MX5WYHrhnFKpf
Mh02SDyvCctYjQ==
-----END CERTIFICATE-----
Generated at Sun Mar 29 13:47:39 2026 by rpki-client