Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/44222e-568e-4c43-8dc8-a54bbc34cce9/1/ws5Z0a-DDJS6jqEc-P7G3ZwDuRc.mft
File: ws5Z0a-DDJS6jqEc-P7G3ZwDuRc.mft (raw, json)
Hash identifier: EStKT9DFrNF76ARvY8OEUjUUJ/AscjR5exVzetpLmGA=
Subject key identifier: 75:A9:EB:19:F3:18:1B:3C:6E:BA:D2:D8:13:95:E2:A7:0B:F6:C2:D8
Authority key identifier: C2:CE:59:D1:AF:83:0C:94:BA:8E:A1:1C:F8:FE:C6:DD:9C:03:B9:17
Certificate issuer: /CN=c2ce59d1af830c94ba8ea11cf8fec6dd9c03b917
Certificate serial: 019CAD2265F592282892CEDEFF8C9310FBE5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ws5Z0a-DDJS6jqEc-P7G3ZwDuRc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/44222e-568e-4c43-8dc8-a54bbc34cce9/1/ws5Z0a-DDJS6jqEc-P7G3ZwDuRc.mft
Manifest number: 12CB
Signing time: Mon 02 Mar 2026 06:00:38 +0000
Manifest this update: Mon 02 Mar 2026 06:00:38 +0000
Manifest next update: Tue 03 Mar 2026 06:00:38 +0000
Files and hashes: 1: sdks8TCsvDa1jYkE0cZ1sXdA91U.roa (hash: 0MDGve+WYhOqia0+8JPSj/YzTSmHLemKWZ32TZAhSqQ=)
2: ws5Z0a-DDJS6jqEc-P7G3ZwDuRc.crl (hash: VZXoYUmZYbOxpugtSLAYllIK7MEbGXM4LxcG5Xvfi64=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/44222e-568e-4c43-8dc8-a54bbc34cce9/1/ws5Z0a-DDJS6jqEc-P7G3ZwDuRc.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/44222e-568e-4c43-8dc8-a54bbc34cce9/1/ws5Z0a-DDJS6jqEc-P7G3ZwDuRc.mft
rsync://rpki.ripe.net/repository/DEFAULT/ws5Z0a-DDJS6jqEc-P7G3ZwDuRc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:22:65:f5:92:28:28:92:ce:de:ff:8c:93:10:fb:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2ce59d1af830c94ba8ea11cf8fec6dd9c03b917
Validity
Not Before: Mar 2 06:00:38 2026 GMT
Not After : Mar 3 06:00:38 2026 GMT
Subject: CN=75a9eb19f3181b3c6ebad2d81395e2a70bf6c2d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:e2:ed:4f:41:ad:be:1e:6b:38:08:5c:76:cd:
2a:70:2c:f6:97:71:0d:07:42:60:47:9f:f5:e5:a8:
5e:97:4f:ba:62:21:51:45:52:be:0b:a3:54:0e:d8:
69:ac:35:db:63:23:8e:8b:1e:22:e5:9f:03:62:92:
45:16:18:1c:6a:f8:b1:d3:14:2e:03:9d:19:21:fc:
e2:ab:76:32:ef:a7:05:d8:70:1b:d8:e1:4e:e1:8e:
ad:fd:a6:d5:7d:21:7b:ee:b5:7a:42:4f:f1:9a:c1:
83:73:ef:c9:ea:37:95:e1:bd:0a:47:d0:b8:3e:bd:
d9:3e:0b:0f:89:3c:9e:1e:e3:8a:92:5e:8e:18:40:
31:e8:ae:1a:9a:db:98:6b:b6:18:bf:21:57:b8:af:
e3:b4:ab:2e:dc:dc:6f:22:f9:b0:2f:47:3d:d0:69:
4e:7c:13:4f:51:43:70:b7:3c:0d:8c:7d:89:16:3e:
0a:52:78:2f:ce:e1:a4:80:04:dc:e5:8f:2c:17:14:
ef:15:d6:25:db:0b:0d:7c:e0:4a:c4:b2:63:5e:a3:
cf:41:59:07:49:4a:12:3b:1d:35:76:c7:08:f2:fb:
67:fa:8b:ec:ea:c3:8b:3a:98:b3:7b:e0:e8:62:00:
44:f2:de:25:d8:fc:6a:d8:e8:0d:4b:23:3e:fa:ec:
2b:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:A9:EB:19:F3:18:1B:3C:6E:BA:D2:D8:13:95:E2:A7:0B:F6:C2:D8
X509v3 Authority Key Identifier:
keyid:C2:CE:59:D1:AF:83:0C:94:BA:8E:A1:1C:F8:FE:C6:DD:9C:03:B9:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ws5Z0a-DDJS6jqEc-P7G3ZwDuRc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/44222e-568e-4c43-8dc8-a54bbc34cce9/1/ws5Z0a-DDJS6jqEc-P7G3ZwDuRc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/44222e-568e-4c43-8dc8-a54bbc34cce9/1/ws5Z0a-DDJS6jqEc-P7G3ZwDuRc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d9:9c:68:12:59:d5:cf:ee:10:5b:2a:aa:59:fe:16:75:6b:f7:
80:e1:83:da:eb:66:47:5f:24:96:a9:c6:d0:99:47:f2:2b:99:
81:01:6a:be:49:d9:c6:d7:18:a1:e4:b5:1e:59:46:9a:20:80:
ea:e5:7d:d3:72:0a:2c:05:e6:49:83:22:7c:76:49:a3:f2:9c:
af:3a:a7:80:cb:b8:47:20:78:7d:0b:34:54:81:28:7c:6b:8f:
31:5d:7a:2d:08:86:0a:6e:b7:95:9e:99:01:4e:f7:79:89:8f:
06:84:46:fa:22:c7:87:f1:f8:42:5b:01:dd:07:07:5e:94:9a:
66:2f:7c:9d:1d:61:11:05:5c:f2:16:d4:ef:03:cb:6f:b5:ff:
1a:8e:90:5a:a8:2b:48:26:59:7c:cb:f0:53:8e:97:5c:49:ab:
39:3e:e8:cf:2f:bb:36:e0:fd:a0:84:17:cc:74:da:40:13:5e:
39:13:a6:e0:89:c9:0b:5d:e3:c3:d6:77:77:3a:69:7d:56:53:
b0:b0:e9:86:7b:67:9b:00:82:c6:c4:8e:cd:3c:78:3d:38:ad:
5b:75:40:4d:a6:2f:df:a8:50:81:9d:85:40:8b:9d:35:6b:64:
71:77:a0:0b:b1:b6:56:ef:17:1e:bb:0b:5e:39:35:d8:b2:cf:
33:47:0e:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:01:46 2026 by rpki-client