Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/3663ba-a80d-4108-8708-0b15d97ad561/1/mWsinL82Z6zid7FgBcOQctBnP88.mft
File: mWsinL82Z6zid7FgBcOQctBnP88.mft (raw, json)
Hash identifier: 3aIceOAggK3HMLQglwI/vrWr4MjwAfRSwQYS6G4qA+E=
Subject key identifier: 9E:3C:FC:FD:FD:69:41:7A:D8:1D:4F:FB:78:A9:D5:21:AD:28:A0:12
Authority key identifier: 99:6B:22:9C:BF:36:67:AC:E2:77:B1:60:05:C3:90:72:D0:67:3F:CF
Certificate issuer: /CN=996b229cbf3667ace277b16005c39072d0673fcf
Certificate serial: 019D37F6DA09C6E35B3FDDD48646A7C8836E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mWsinL82Z6zid7FgBcOQctBnP88.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/3663ba-a80d-4108-8708-0b15d97ad561/1/mWsinL82Z6zid7FgBcOQctBnP88.mft
Manifest number: 06F5
Signing time: Sun 29 Mar 2026 05:00:17 +0000
Manifest this update: Sun 29 Mar 2026 05:00:17 +0000
Manifest next update: Mon 30 Mar 2026 05:00:17 +0000
Files and hashes: 1: 1hrgzjhdA5Y-F7fISIbwYJa2IVc.roa (hash: 8PAttc7ZrtZswXRaiAtTSylop3DYOKrwU34TygYkrxs=)
2: mWsinL82Z6zid7FgBcOQctBnP88.crl (hash: zMip8s5p+/CSj7rz2lwmx6GE7fS1gyyDq8dYsm4iBGY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/3663ba-a80d-4108-8708-0b15d97ad561/1/mWsinL82Z6zid7FgBcOQctBnP88.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/3663ba-a80d-4108-8708-0b15d97ad561/1/mWsinL82Z6zid7FgBcOQctBnP88.mft
rsync://rpki.ripe.net/repository/DEFAULT/mWsinL82Z6zid7FgBcOQctBnP88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f6:da:09:c6:e3:5b:3f:dd:d4:86:46:a7:c8:83:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=996b229cbf3667ace277b16005c39072d0673fcf
Validity
Not Before: Mar 29 05:00:17 2026 GMT
Not After : Mar 30 05:00:17 2026 GMT
Subject: CN=9e3cfcfdfd69417ad81d4ffb78a9d521ad28a012
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:a3:fe:af:6b:04:b3:0b:ed:d1:b7:34:90:5c:
bc:d3:49:20:13:be:42:7a:1a:6b:fa:79:62:91:78:
c1:31:f8:92:87:4b:a7:67:0d:7b:92:80:84:7f:5e:
fc:78:39:65:f7:b1:b3:9c:c1:67:dd:a5:bd:a1:2f:
aa:70:9c:44:fc:d2:d8:3f:bf:93:ba:51:3b:36:d0:
07:40:6e:59:3e:e6:ba:4a:53:cc:ad:bc:28:d8:39:
e2:92:01:d7:02:6b:ed:5e:dd:51:c6:0c:2d:a9:c2:
ef:0a:89:cf:b2:54:13:ff:ba:07:61:67:48:c2:4f:
b9:a0:0d:1c:4e:c0:ac:c9:c6:06:35:1c:33:53:78:
88:e2:ad:d4:30:8a:24:fd:4b:86:cd:6d:e5:81:70:
7d:55:60:ef:8b:3e:b3:7b:ed:0a:e2:b1:28:97:52:
e0:6c:17:dc:65:68:0d:fb:68:b4:96:7f:07:dd:34:
be:22:b5:c9:d0:cc:41:d6:d8:bd:65:95:56:4c:5c:
4b:07:dc:81:b9:ac:8b:59:c0:ba:a9:68:c1:7d:0d:
5f:e6:c9:d7:d5:be:7b:04:61:d6:6f:62:c5:b2:78:
96:3c:ec:34:cd:54:47:93:1a:51:10:09:68:4b:e9:
ee:74:eb:c7:de:82:a0:60:77:f9:25:8c:9f:15:f8:
57:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:3C:FC:FD:FD:69:41:7A:D8:1D:4F:FB:78:A9:D5:21:AD:28:A0:12
X509v3 Authority Key Identifier:
keyid:99:6B:22:9C:BF:36:67:AC:E2:77:B1:60:05:C3:90:72:D0:67:3F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mWsinL82Z6zid7FgBcOQctBnP88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/3663ba-a80d-4108-8708-0b15d97ad561/1/mWsinL82Z6zid7FgBcOQctBnP88.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/3663ba-a80d-4108-8708-0b15d97ad561/1/mWsinL82Z6zid7FgBcOQctBnP88.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:03:d4:c9:1b:59:06:47:45:9d:f7:9f:3f:9c:a6:1f:ed:25:
b8:b9:0f:18:93:b9:71:1f:6d:8c:02:37:2f:d6:c4:15:8f:ee:
e7:76:3f:f2:9d:87:06:0a:f5:50:a8:8d:b3:9c:f1:8c:04:14:
c8:55:ff:a0:17:e3:6d:d2:28:db:85:a7:6b:bb:c1:52:f6:b0:
e8:6d:87:be:c6:49:2c:4e:09:b8:16:dd:56:ff:16:db:51:cf:
cd:91:94:e7:cc:17:70:08:e4:1a:09:8b:e6:03:6e:6c:f3:a4:
06:c5:94:5f:18:4c:0f:8b:d5:45:db:2a:07:b0:4d:79:eb:d8:
29:26:95:ef:f9:d0:d4:f4:6e:88:63:25:f3:5c:91:1e:2d:86:
c8:00:e7:af:0f:e2:cb:47:a9:a4:1a:c1:b9:2a:28:e8:ab:94:
bd:7b:49:bc:56:d7:45:bd:1d:27:6a:0e:2e:20:82:fd:eb:8c:
0d:57:d5:53:30:a2:53:5b:e4:7c:40:a0:32:78:87:ed:95:01:
e9:3a:63:99:03:7f:b1:97:88:c1:6c:5a:08:2e:66:53:a7:9f:
aa:02:e0:aa:8d:f3:62:2c:43:09:af:9f:eb:3b:a3:1e:82:68:
bc:d3:8e:67:02:ff:28:15:dd:9f:dd:66:e5:ce:1c:0d:55:40:
18:11:12:5d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ039toJxuNbP93UhkanyINuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk5NmIyMjljYmYzNjY3YWNlMjc3YjE2MDA1YzM5MDcyZDA2
NzNmY2YwHhcNMjYwMzI5MDUwMDE3WhcNMjYwMzMwMDUwMDE3WjAzMTEwLwYDVQQD
Eyg5ZTNjZmNmZGZkNjk0MTdhZDgxZDRmZmI3OGE5ZDUyMWFkMjhhMDEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnKP+r2sEswvt0bc0kFy800kgE75C
ehpr+nlikXjBMfiSh0unZw17koCEf178eDll97GznMFn3aW9oS+qcJxE/NLYP7+T
ulE7NtAHQG5ZPua6SlPMrbwo2DnikgHXAmvtXt1RxgwtqcLvConPslQT/7oHYWdI
wk+5oA0cTsCsycYGNRwzU3iI4q3UMIok/UuGzW3lgXB9VWDviz6ze+0K4rEol1Lg
bBfcZWgN+2i0ln8H3TS+IrXJ0MxB1ti9ZZVWTFxLB9yBuayLWcC6qWjBfQ1f5snX
1b57BGHWb2LFsniWPOw0zVRHkxpREAloS+nudOvH3oKgYHf5JYyfFfhXmQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ48/P39aUF62B1P+3ip1SGtKKASMB8GA1UdIwQY
MBaAFJlrIpy/Nmes4nexYAXDkHLQZz/PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbVdzaW5MODJaNnppZDdGZ0JjT1FjdEJuUDg4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS8zNjYzYmEtYTgwZC00MTA4LTg3MDgt
MGIxNWQ5N2FkNTYxLzEvbVdzaW5MODJaNnppZDdGZ0JjT1FjdEJuUDg4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMS8zNjYzYmEtYTgwZC00MTA4LTg3MDgtMGIxNWQ5N2FkNTYx
LzEvbVdzaW5MODJaNnppZDdGZ0JjT1FjdEJuUDg4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZwPUyRtZ
BkdFnfefP5ymH+0luLkPGJO5cR9tjAI3L9bEFY/u53Y/8p2HBgr1UKiNs5zxjAQU
yFX/oBfjbdIo24Wna7vBUvaw6G2HvsZJLE4JuBbdVv8W21HPzZGU58wXcAjkGgmL
5gNubPOkBsWUXxhMD4vVRdsqB7BNeevYKSaV7/nQ1PRuiGMl81yRHi2GyADnrw/i
y0eppBrBuSoo6KuUvXtJvFbXRb0dJ2oOLiCC/euMDVfVUzCiU1vkfECgMniH7ZUB
6TpjmQN/sZeIwWxaCC5mU6efqgLgqo3zYixDCa+f6zujHoJovNOOZwL/KBXdn91m
5c4cDVVAGBESXQ==
-----END CERTIFICATE-----
Generated at Sun Mar 29 14:02:02 2026 by rpki-client