
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/b63a01-7e7b-4a5f-9683-1cd9926c5495/1/W0ShsaCcqepQ5aW9W3d737XzVls.mft
File: W0ShsaCcqepQ5aW9W3d737XzVls.mft (raw, json)
Hash identifier: YX+KKylyGslMHmH+yGM+tRRKKreIoNvQgPtk+q/tkLs=
Subject key identifier: 97:8B:D9:3F:66:99:AB:24:CA:66:9A:3B:34:FF:1F:64:44:26:4A:FF
Authority key identifier: 5B:44:A1:B1:A0:9C:A9:EA:50:E5:A5:BD:5B:77:7B:DF:B5:F3:56:5B
Certificate issuer: /CN=5b44a1b1a09ca9ea50e5a5bd5b777bdfb5f3565b
Certificate serial: 019CD7319860B4C7BFA8E6AF27C988A14C7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W0ShsaCcqepQ5aW9W3d737XzVls.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/b63a01-7e7b-4a5f-9683-1cd9926c5495/1/W0ShsaCcqepQ5aW9W3d737XzVls.mft
Manifest number: 96
Signing time: Tue 10 Mar 2026 10:01:17 +0000
Manifest this update: Tue 10 Mar 2026 10:01:17 +0000
Manifest next update: Wed 11 Mar 2026 10:01:17 +0000
Files and hashes: 1: W0ShsaCcqepQ5aW9W3d737XzVls.crl (hash: zsZO98LkpFxEB52ZVMkzsU/Bat/TXNPwYR0L6p8d8Rc=)
2: y7HPoPOKJt4_BEiMkLGZ9Q4eEJM.asa (hash: w9rApASglHDBpx/DYcJualDyoNDP/7m3UoJGYbB33JQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/b63a01-7e7b-4a5f-9683-1cd9926c5495/1/W0ShsaCcqepQ5aW9W3d737XzVls.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/b63a01-7e7b-4a5f-9683-1cd9926c5495/1/W0ShsaCcqepQ5aW9W3d737XzVls.mft
rsync://rpki.ripe.net/repository/DEFAULT/W0ShsaCcqepQ5aW9W3d737XzVls.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Mar 2026 10:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:d7:31:98:60:b4:c7:bf:a8:e6:af:27:c9:88:a1:4c:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b44a1b1a09ca9ea50e5a5bd5b777bdfb5f3565b
Validity
Not Before: Mar 10 10:01:17 2026 GMT
Not After : Mar 11 10:01:17 2026 GMT
Subject: CN=978bd93f6699ab24ca669a3b34ff1f6444264aff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:10:8f:68:d4:24:45:d2:32:30:b2:e9:6f:97:
16:3a:60:6d:79:09:26:bf:69:8e:bc:32:30:2c:7f:
5f:82:f5:9e:56:dc:88:5b:f4:36:de:be:fe:78:e0:
bc:c0:7d:97:91:94:b4:e3:28:13:ae:9d:27:73:23:
a5:91:fd:9c:30:0b:df:71:d3:87:fe:bb:2d:a3:e5:
42:e9:b9:cd:32:b4:ff:9a:3d:6b:e9:6d:b9:94:8a:
5e:dc:04:9a:94:26:d9:23:72:44:56:0c:b1:51:f3:
6f:1c:9e:94:ce:22:aa:77:9c:ae:96:44:3e:12:8c:
3c:42:90:92:ae:73:e2:62:46:7d:c9:6c:a7:e4:79:
b1:0e:38:8d:79:38:d5:e2:26:f6:3f:60:99:df:57:
d5:4e:c4:7d:0e:c7:60:01:e9:68:49:98:a8:b1:ba:
f2:89:37:25:c0:80:ff:8a:4b:ce:8f:0b:e5:4f:44:
27:d6:30:c2:8d:3a:8a:26:12:ef:6a:41:1f:f2:3c:
72:81:96:d8:7f:fb:13:4f:b8:ee:ce:4c:12:5f:2e:
2b:e4:13:63:c8:8c:22:51:61:cd:dc:e8:6e:c9:f5:
78:f5:2b:e8:5a:33:b1:49:11:87:f1:01:69:6e:89:
ea:af:fd:fe:70:c2:35:45:74:43:aa:f9:d0:7b:87:
5f:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:8B:D9:3F:66:99:AB:24:CA:66:9A:3B:34:FF:1F:64:44:26:4A:FF
X509v3 Authority Key Identifier:
keyid:5B:44:A1:B1:A0:9C:A9:EA:50:E5:A5:BD:5B:77:7B:DF:B5:F3:56:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W0ShsaCcqepQ5aW9W3d737XzVls.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/b63a01-7e7b-4a5f-9683-1cd9926c5495/1/W0ShsaCcqepQ5aW9W3d737XzVls.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/b63a01-7e7b-4a5f-9683-1cd9926c5495/1/W0ShsaCcqepQ5aW9W3d737XzVls.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:32:b8:dc:62:e8:92:bb:d2:61:02:57:66:6c:67:24:27:84:
53:1e:6f:ff:f1:2f:73:a5:19:e3:7c:51:78:05:af:8f:5d:7a:
09:c8:3e:d8:b1:36:25:f5:5d:6f:dd:8f:54:75:34:e0:40:89:
96:3f:6c:5b:94:c0:ce:51:d7:de:86:9f:d3:f7:3b:0f:d4:f4:
b3:2a:f9:4c:8f:9f:76:12:5a:34:09:ad:ee:37:19:a7:79:0c:
8c:c5:29:22:cc:17:ed:d7:82:97:bd:4e:c5:b8:9f:be:df:ee:
8c:81:44:9e:b4:6f:96:bc:b1:1e:c9:a0:88:c4:10:81:0e:c5:
84:78:04:ce:d3:7c:65:3a:02:eb:1b:b7:7a:df:9e:87:27:d4:
31:0e:67:5f:25:8d:2f:a0:ed:13:49:df:ac:e9:e4:66:95:d1:
8e:21:2c:62:50:a2:62:9c:21:88:b7:26:fe:43:dd:b0:1b:97:
a2:db:d7:3c:bb:89:16:28:e0:7a:df:07:54:a4:74:3f:05:1c:
41:56:d0:b9:a3:67:6a:6a:bb:79:1d:ff:28:cf:40:5a:10:5d:
85:cf:cc:6d:f9:b0:b9:48:6d:90:8f:c6:83:e8:b9:05:e5:83:
7b:38:3f:79:6f:2c:4a:22:29:b0:a8:af:35:12:9d:ab:7c:61:
9f:ca:cd:3b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZzXMZhgtMe/qOavJ8mIoUx6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDViNDRhMWIxYTA5Y2E5ZWE1MGU1YTViZDViNzc3YmRmYjVm
MzU2NWIwHhcNMjYwMzEwMTAwMTE3WhcNMjYwMzExMTAwMTE3WjAzMTEwLwYDVQQD
Eyg5NzhiZDkzZjY2OTlhYjI0Y2E2NjlhM2IzNGZmMWY2NDQ0MjY0YWZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnBCPaNQkRdIyMLLpb5cWOmBteQkm
v2mOvDIwLH9fgvWeVtyIW/Q23r7+eOC8wH2XkZS04ygTrp0ncyOlkf2cMAvfcdOH
/rsto+VC6bnNMrT/mj1r6W25lIpe3ASalCbZI3JEVgyxUfNvHJ6UziKqd5yulkQ+
Eow8QpCSrnPiYkZ9yWyn5HmxDjiNeTjV4ib2P2CZ31fVTsR9DsdgAeloSZiosbry
iTclwID/ikvOjwvlT0Qn1jDCjTqKJhLvakEf8jxygZbYf/sTT7juzkwSXy4r5BNj
yIwiUWHN3OhuyfV49SvoWjOxSRGH8QFpbonqr/3+cMI1RXRDqvnQe4dfVwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJeL2T9mmaskymaaOzT/H2REJkr/MB8GA1UdIwQY
MBaAFFtEobGgnKnqUOWlvVt3e9+181ZbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVzBTaHNhQ2NxZXBRNWFXOVczZDczN1h6VmxzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS9iNjNhMDEtN2U3Yi00YTVmLTk2ODMt
MWNkOTkyNmM1NDk1LzEvVzBTaHNhQ2NxZXBRNWFXOVczZDczN1h6VmxzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNS9iNjNhMDEtN2U3Yi00YTVmLTk2ODMtMWNkOTkyNmM1NDk1
LzEvVzBTaHNhQ2NxZXBRNWFXOVczZDczN1h6VmxzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXzK43GLo
krvSYQJXZmxnJCeEUx5v//Evc6UZ43xReAWvj116Ccg+2LE2JfVdb92PVHU04ECJ
lj9sW5TAzlHX3oaf0/c7D9T0syr5TI+fdhJaNAmt7jcZp3kMjMUpIswX7deCl71O
xbifvt/ujIFEnrRvlryxHsmgiMQQgQ7FhHgEztN8ZToC6xu3et+ehyfUMQ5nXyWN
L6DtE0nfrOnkZpXRjiEsYlCiYpwhiLcm/kPdsBuXotvXPLuJFijget8HVKR0PwUc
QVbQuaNnamq7eR3/KM9AWhBdhc/MbfmwuUhtkI/Gg+i5BeWDezg/eW8sSiIpsKiv
NRKdq3xhn8rNOw==
-----END CERTIFICATE-----
Generated at Tue Mar 10 20:16:01 2026 by rpki-client