Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/44222e-568e-4c43-8dc8-a54bbc34cce9/1/ws5Z0a-DDJS6jqEc-P7G3ZwDuRc.mft
File: ws5Z0a-DDJS6jqEc-P7G3ZwDuRc.mft (raw, json)
Hash identifier: 0FbDPOsLITPCeq7tHoDaWx9Em8LcoCHDyN8yE4hAC4g=
Subject key identifier: CB:31:C4:7E:20:71:2C:BF:0D:85:54:2E:1E:36:C2:76:D0:9A:3F:95
Authority key identifier: C2:CE:59:D1:AF:83:0C:94:BA:8E:A1:1C:F8:FE:C6:DD:9C:03:B9:17
Certificate issuer: /CN=c2ce59d1af830c94ba8ea11cf8fec6dd9c03b917
Certificate serial: 019D3A1C86622AA90729A706B1F9DDA2016F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ws5Z0a-DDJS6jqEc-P7G3ZwDuRc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/44222e-568e-4c43-8dc8-a54bbc34cce9/1/ws5Z0a-DDJS6jqEc-P7G3ZwDuRc.mft
Manifest number: 1314
Signing time: Sun 29 Mar 2026 15:00:41 +0000
Manifest this update: Sun 29 Mar 2026 15:00:41 +0000
Manifest next update: Mon 30 Mar 2026 15:00:41 +0000
Files and hashes: 1: sdks8TCsvDa1jYkE0cZ1sXdA91U.roa (hash: 0MDGve+WYhOqia0+8JPSj/YzTSmHLemKWZ32TZAhSqQ=)
2: ws5Z0a-DDJS6jqEc-P7G3ZwDuRc.crl (hash: tV0/OinnhcWGryOMDJ7dFENdFKEsxQdV797X8RrR2Nw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/44222e-568e-4c43-8dc8-a54bbc34cce9/1/ws5Z0a-DDJS6jqEc-P7G3ZwDuRc.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/44222e-568e-4c43-8dc8-a54bbc34cce9/1/ws5Z0a-DDJS6jqEc-P7G3ZwDuRc.mft
rsync://rpki.ripe.net/repository/DEFAULT/ws5Z0a-DDJS6jqEc-P7G3ZwDuRc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:1c:86:62:2a:a9:07:29:a7:06:b1:f9:dd:a2:01:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2ce59d1af830c94ba8ea11cf8fec6dd9c03b917
Validity
Not Before: Mar 29 15:00:41 2026 GMT
Not After : Mar 30 15:00:41 2026 GMT
Subject: CN=cb31c47e20712cbf0d85542e1e36c276d09a3f95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:93:4f:33:6b:97:33:9c:94:77:78:a3:14:18:
74:23:5c:e4:8b:58:65:af:81:9b:13:cb:63:e8:8c:
e8:a1:30:04:bc:f9:d2:0e:a2:eb:9a:45:38:c4:38:
e7:20:80:b6:09:78:13:b2:4c:45:86:a5:a5:cb:79:
bb:b1:76:a0:bc:05:5a:f6:c0:b6:32:df:da:a9:45:
ea:00:f1:6f:e3:aa:31:67:fc:f2:45:74:81:95:c1:
6d:0a:b6:00:f2:55:b5:2f:26:1b:54:6d:71:87:d2:
f6:e8:30:00:04:82:6f:4b:b1:b2:75:ac:a4:f2:ed:
6e:87:dd:30:6c:b4:b2:d2:79:ff:f9:ff:fe:ba:1e:
34:52:b5:e1:ff:a9:43:de:c6:26:66:89:be:de:c1:
cf:3e:5e:1d:c4:8e:e2:5e:21:ad:86:84:bf:05:a5:
05:d9:4d:db:f5:78:6b:63:9a:cc:8c:75:94:4a:bc:
e1:f7:8d:0f:a7:30:9d:48:f3:be:dd:6e:a3:a5:71:
ed:44:4d:ac:bb:b5:e4:33:eb:e6:de:20:f9:5a:b7:
44:7d:45:cf:cc:84:c8:19:17:31:b5:58:17:05:a4:
de:60:9d:a4:14:6e:30:c1:71:fa:61:a8:d4:e1:73:
41:1b:13:d4:57:75:8d:c6:fd:d5:25:7c:d8:80:f8:
1c:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:31:C4:7E:20:71:2C:BF:0D:85:54:2E:1E:36:C2:76:D0:9A:3F:95
X509v3 Authority Key Identifier:
keyid:C2:CE:59:D1:AF:83:0C:94:BA:8E:A1:1C:F8:FE:C6:DD:9C:03:B9:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ws5Z0a-DDJS6jqEc-P7G3ZwDuRc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/44222e-568e-4c43-8dc8-a54bbc34cce9/1/ws5Z0a-DDJS6jqEc-P7G3ZwDuRc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/44222e-568e-4c43-8dc8-a54bbc34cce9/1/ws5Z0a-DDJS6jqEc-P7G3ZwDuRc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:eb:e8:c1:ca:1a:31:35:d2:58:9c:ce:e7:47:b9:a1:a5:83:
11:63:a3:40:13:24:a6:e3:77:62:ef:20:9b:14:0a:ae:49:78:
0a:e9:b3:89:b1:90:78:78:cf:dd:85:be:0b:36:44:73:76:3f:
9f:94:ed:97:e6:8b:79:f7:7e:60:fa:17:2e:28:e0:ca:0e:20:
07:b4:2b:78:9f:ec:6d:a2:33:d0:69:b2:6c:66:79:ef:4a:76:
93:09:8b:59:88:f3:66:ee:73:ac:e0:86:1f:1a:a5:05:9a:58:
59:a3:d7:5c:89:b9:f2:32:76:33:9f:c2:1c:b1:06:17:fc:5a:
23:75:52:64:05:e0:b0:7e:16:d2:1c:00:88:77:fa:92:29:a6:
b6:b8:bc:d1:43:1b:63:29:44:e1:84:c3:5d:d1:84:83:5a:87:
84:b9:fa:ad:98:ea:75:ed:06:18:0c:cd:53:ff:d1:e1:89:62:
83:86:c1:8f:b2:0e:4c:60:7e:d1:5b:ef:fd:32:67:e9:4e:14:
83:99:91:b2:5c:d4:09:53:89:98:54:f7:9c:42:c1:4b:53:24:
6a:e4:18:18:2b:92:5d:8c:4a:09:80:0a:21:c3:66:28:95:7e:
ea:a5:ea:49:f1:6f:f7:a4:7c:2f:d6:b9:82:20:73:43:ce:ef:
ad:39:14:79
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ06HIZiKqkHKacGsfndogFvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMyY2U1OWQxYWY4MzBjOTRiYThlYTExY2Y4ZmVjNmRkOWMw
M2I5MTcwHhcNMjYwMzI5MTUwMDQxWhcNMjYwMzMwMTUwMDQxWjAzMTEwLwYDVQQD
EyhjYjMxYzQ3ZTIwNzEyY2JmMGQ4NTU0MmUxZTM2YzI3NmQwOWEzZjk1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu5NPM2uXM5yUd3ijFBh0I1zki1hl
r4GbE8tj6IzooTAEvPnSDqLrmkU4xDjnIIC2CXgTskxFhqWly3m7sXagvAVa9sC2
Mt/aqUXqAPFv46oxZ/zyRXSBlcFtCrYA8lW1LyYbVG1xh9L26DAABIJvS7Gydayk
8u1uh90wbLSy0nn/+f/+uh40UrXh/6lD3sYmZom+3sHPPl4dxI7iXiGthoS/BaUF
2U3b9XhrY5rMjHWUSrzh940PpzCdSPO+3W6jpXHtRE2su7XkM+vm3iD5WrdEfUXP
zITIGRcxtVgXBaTeYJ2kFG4wwXH6YajU4XNBGxPUV3WNxv3VJXzYgPgckwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMsxxH4gcSy/DYVULh42wnbQmj+VMB8GA1UdIwQY
MBaAFMLOWdGvgwyUuo6hHPj+xt2cA7kXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd3M1WjBhLURESlM2anFFYy1QN0czWndEdVJjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi80NDIyMmUtNTY4ZS00YzQzLThkYzgt
YTU0YmJjMzRjY2U5LzEvd3M1WjBhLURESlM2anFFYy1QN0czWndEdVJjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi80NDIyMmUtNTY4ZS00YzQzLThkYzgtYTU0YmJjMzRjY2U5
LzEvd3M1WjBhLURESlM2anFFYy1QN0czWndEdVJjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALevowcoa
MTXSWJzO50e5oaWDEWOjQBMkpuN3Yu8gmxQKrkl4CumzibGQeHjP3YW+CzZEc3Y/
n5Ttl+aLefd+YPoXLijgyg4gB7QreJ/sbaIz0GmybGZ570p2kwmLWYjzZu5zrOCG
HxqlBZpYWaPXXIm58jJ2M5/CHLEGF/xaI3VSZAXgsH4W0hwAiHf6kimmtri80UMb
YylE4YTDXdGEg1qHhLn6rZjqde0GGAzNU//R4Ylig4bBj7IOTGB+0Vvv/TJn6U4U
g5mRslzUCVOJmFT3nELBS1MkauQYGCuSXYxKCYAKIcNmKJV+6qXqSfFv96R8L9a5
giBzQ87vrTkUeQ==
-----END CERTIFICATE-----
Generated at Sun Mar 29 17:47:29 2026 by rpki-client