Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/0af199-fe47-4f5b-9c68-15b944577c86/1/wiS2ntSiO3s-BnSj-ZRgHXO3uv8.mft
File: wiS2ntSiO3s-BnSj-ZRgHXO3uv8.mft (raw, json)
Hash identifier: ViSJfH2ADJ3UI2E7DNng2X0/KG/SFuSUAgiASLTRQPM=
Subject key identifier: DE:9B:89:E8:F7:C6:49:E9:CD:82:EA:B1:CC:AF:6A:45:10:73:BD:2E
Authority key identifier: C2:24:B6:9E:D4:A2:3B:7B:3E:06:74:A3:F9:94:60:1D:73:B7:BA:FF
Certificate issuer: /CN=c224b69ed4a23b7b3e0674a3f994601d73b7baff
Certificate serial: 019D38667726B92A20E4A7FAA69F83102577
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wiS2ntSiO3s-BnSj-ZRgHXO3uv8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/0af199-fe47-4f5b-9c68-15b944577c86/1/wiS2ntSiO3s-BnSj-ZRgHXO3uv8.mft
Manifest number: 07D9
Signing time: Sun 29 Mar 2026 07:02:12 +0000
Manifest this update: Sun 29 Mar 2026 07:02:12 +0000
Manifest next update: Mon 30 Mar 2026 07:02:12 +0000
Files and hashes: 1: NDrrs_IUd2G0O3SuekMlmUqDGQ0.roa (hash: jPB6GFI8ltAMvGMwxWBRh6dK/JyrVkFk3erVX9RWesc=)
2: O-gWt6o4q970dyzmWA3O_dAqLD0.roa (hash: NVRXZZk1exXkOayT1ebIzr9QdlyalYAdYzDjQteTBuc=)
3: wiS2ntSiO3s-BnSj-ZRgHXO3uv8.crl (hash: 2t4K4K8aUX56UA/VPJjwibe/M+qkARYbWmmeQavGNLw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/0af199-fe47-4f5b-9c68-15b944577c86/1/wiS2ntSiO3s-BnSj-ZRgHXO3uv8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/0af199-fe47-4f5b-9c68-15b944577c86/1/wiS2ntSiO3s-BnSj-ZRgHXO3uv8.mft
rsync://rpki.ripe.net/repository/DEFAULT/wiS2ntSiO3s-BnSj-ZRgHXO3uv8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:77:26:b9:2a:20:e4:a7:fa:a6:9f:83:10:25:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c224b69ed4a23b7b3e0674a3f994601d73b7baff
Validity
Not Before: Mar 29 07:02:12 2026 GMT
Not After : Mar 30 07:02:12 2026 GMT
Subject: CN=de9b89e8f7c649e9cd82eab1ccaf6a451073bd2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:90:05:20:04:86:f3:9c:be:2b:b9:5f:d5:9b:
e3:f9:17:94:32:b2:07:88:73:83:a6:3f:1e:a7:c6:
d5:58:14:8f:0b:ce:c3:e4:dd:b3:07:b9:2a:f6:8b:
33:65:70:16:bc:64:9c:59:f4:5c:89:dd:38:f4:2a:
5d:50:3c:b3:fd:cb:0f:11:7c:8c:14:f6:cc:76:6d:
03:9e:50:67:25:1d:34:56:53:fc:1f:e1:eb:ff:c5:
4d:18:00:e8:a9:20:db:73:74:16:2d:62:91:81:9f:
39:87:66:19:df:db:c0:cf:c9:8a:4e:d0:67:00:41:
40:61:8d:1c:e1:58:d6:84:dd:c7:79:de:ee:bc:dd:
34:e4:06:b0:79:2e:a7:56:23:07:7c:b6:35:56:2e:
c1:5d:01:f4:84:09:4d:5d:50:68:0d:33:8a:42:48:
fc:66:69:85:de:78:57:b0:19:20:c5:f3:5d:97:cb:
12:4f:83:1a:89:80:20:ff:40:eb:d6:6d:4b:cf:a4:
87:76:bd:f7:94:0c:1a:1b:44:86:8d:7f:9d:a6:13:
3a:a1:da:98:76:77:07:e7:90:dd:e1:62:40:ab:ab:
bb:75:b4:25:50:5a:34:b9:e2:eb:9b:c9:85:80:23:
d0:d7:49:0a:05:d5:5d:45:4d:9f:89:5f:2a:15:38:
49:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:9B:89:E8:F7:C6:49:E9:CD:82:EA:B1:CC:AF:6A:45:10:73:BD:2E
X509v3 Authority Key Identifier:
keyid:C2:24:B6:9E:D4:A2:3B:7B:3E:06:74:A3:F9:94:60:1D:73:B7:BA:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wiS2ntSiO3s-BnSj-ZRgHXO3uv8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/0af199-fe47-4f5b-9c68-15b944577c86/1/wiS2ntSiO3s-BnSj-ZRgHXO3uv8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/0af199-fe47-4f5b-9c68-15b944577c86/1/wiS2ntSiO3s-BnSj-ZRgHXO3uv8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:b9:72:a3:e5:18:af:2c:3c:9a:e0:b3:8f:1b:08:1b:f6:56:
38:f5:bb:a7:3e:07:12:4f:94:49:ff:13:1f:50:33:a2:1e:ab:
c7:ce:10:47:f3:01:c0:a5:2c:53:1d:b8:4d:7a:83:a3:69:67:
22:38:44:ba:63:00:38:56:44:93:e2:bf:6f:c5:ea:34:74:04:
c3:0a:ee:6b:1e:03:c1:4e:6f:51:c1:32:29:08:6c:eb:ac:c6:
f5:f8:8e:81:1b:20:38:32:91:d7:04:3f:60:e7:ce:f2:50:52:
22:f8:1b:ba:10:2a:bc:0d:f5:41:e0:32:0e:99:9d:12:68:17:
6b:56:dd:d5:56:3b:9d:68:1a:22:ed:5e:38:d5:43:d8:e5:e8:
80:58:8e:da:59:d3:6e:f1:2d:f6:6a:2e:93:78:ab:1b:76:dd:
82:21:1d:40:44:67:fc:14:a7:65:64:fa:13:3e:39:de:9d:a7:
51:ed:22:7d:5a:7b:3b:82:7f:06:21:a4:68:e5:8f:92:0d:66:
ab:02:8a:ae:23:07:7e:75:c2:33:c4:a8:b3:e9:8b:e7:cd:51:
d5:0b:1b:08:2c:2d:59:ba:93:f0:bc:8b:8a:4f:ee:fa:80:34:
46:57:4f:c1:f9:f6:79:81:eb:42:50:79:f0:45:9a:e2:eb:7e:
01:f7:bb:d8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04ZncmuSog5Kf6pp+DECV3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMyMjRiNjllZDRhMjNiN2IzZTA2NzRhM2Y5OTQ2MDFkNzNi
N2JhZmYwHhcNMjYwMzI5MDcwMjEyWhcNMjYwMzMwMDcwMjEyWjAzMTEwLwYDVQQD
EyhkZTliODllOGY3YzY0OWU5Y2Q4MmVhYjFjY2FmNmE0NTEwNzNiZDJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjZAFIASG85y+K7lf1Zvj+ReUMrIH
iHODpj8ep8bVWBSPC87D5N2zB7kq9oszZXAWvGScWfRcid049CpdUDyz/csPEXyM
FPbMdm0DnlBnJR00VlP8H+Hr/8VNGADoqSDbc3QWLWKRgZ85h2YZ39vAz8mKTtBn
AEFAYY0c4VjWhN3Hed7uvN005AaweS6nViMHfLY1Vi7BXQH0hAlNXVBoDTOKQkj8
ZmmF3nhXsBkgxfNdl8sST4MaiYAg/0Dr1m1Lz6SHdr33lAwaG0SGjX+dphM6odqY
dncH55Dd4WJAq6u7dbQlUFo0ueLrm8mFgCPQ10kKBdVdRU2fiV8qFThJXwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN6biej3xknpzYLqscyvakUQc70uMB8GA1UdIwQY
MBaAFMIktp7Uojt7PgZ0o/mUYB1zt7r/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd2lTMm50U2lPM3MtQm5Tai1aUmdIWE8zdXY4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC8wYWYxOTktZmU0Ny00ZjViLTljNjgt
MTViOTQ0NTc3Yzg2LzEvd2lTMm50U2lPM3MtQm5Tai1aUmdIWE8zdXY4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNC8wYWYxOTktZmU0Ny00ZjViLTljNjgtMTViOTQ0NTc3Yzg2
LzEvd2lTMm50U2lPM3MtQm5Tai1aUmdIWE8zdXY4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcLlyo+UY
ryw8muCzjxsIG/ZWOPW7pz4HEk+USf8TH1Azoh6rx84QR/MBwKUsUx24TXqDo2ln
IjhEumMAOFZEk+K/b8XqNHQEwwruax4DwU5vUcEyKQhs66zG9fiOgRsgODKR1wQ/
YOfO8lBSIvgbuhAqvA31QeAyDpmdEmgXa1bd1VY7nWgaIu1eONVD2OXogFiO2lnT
bvEt9mouk3irG3bdgiEdQERn/BSnZWT6Ez453p2nUe0ifVp7O4J/BiGkaOWPkg1m
qwKKriMHfnXCM8Sos+mL581R1QsbCCwtWbqT8LyLik/u+oA0RldPwfn2eYHrQlB5
8EWa4ut+Afe72A==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:58:16 2026 by rpki-client