Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/44222e-568e-4c43-8dc8-a54bbc34cce9/1/ws5Z0a-DDJS6jqEc-P7G3ZwDuRc.mft
File: ws5Z0a-DDJS6jqEc-P7G3ZwDuRc.mft (raw, json)
Hash identifier: ecSkIosHCQy020JLFOceSFyU7oaEGQ6JDbpilEGP+j4=
Subject key identifier: 3D:96:37:A1:45:E0:34:57:E1:24:F0:46:EB:14:76:00:CE:79:12:49
Authority key identifier: C2:CE:59:D1:AF:83:0C:94:BA:8E:A1:1C:F8:FE:C6:DD:9C:03:B9:17
Certificate issuer: /CN=c2ce59d1af830c94ba8ea11cf8fec6dd9c03b917
Certificate serial: 019D9AABB0988B6B81A5E93CB97EF9C86857
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ws5Z0a-DDJS6jqEc-P7G3ZwDuRc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/44222e-568e-4c43-8dc8-a54bbc34cce9/1/ws5Z0a-DDJS6jqEc-P7G3ZwDuRc.mft
Manifest number: 1346
Signing time: Fri 17 Apr 2026 09:00:36 +0000
Manifest this update: Fri 17 Apr 2026 09:00:36 +0000
Manifest next update: Sat 18 Apr 2026 09:00:36 +0000
Files and hashes: 1: sdks8TCsvDa1jYkE0cZ1sXdA91U.roa (hash: 0MDGve+WYhOqia0+8JPSj/YzTSmHLemKWZ32TZAhSqQ=)
2: ws5Z0a-DDJS6jqEc-P7G3ZwDuRc.crl (hash: MQLHqL0qM6YEfNL2I5llm8Hw26iD7hCVSeHzkqeO5ss=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/44222e-568e-4c43-8dc8-a54bbc34cce9/1/ws5Z0a-DDJS6jqEc-P7G3ZwDuRc.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/44222e-568e-4c43-8dc8-a54bbc34cce9/1/ws5Z0a-DDJS6jqEc-P7G3ZwDuRc.mft
rsync://rpki.ripe.net/repository/DEFAULT/ws5Z0a-DDJS6jqEc-P7G3ZwDuRc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:ab:b0:98:8b:6b:81:a5:e9:3c:b9:7e:f9:c8:68:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2ce59d1af830c94ba8ea11cf8fec6dd9c03b917
Validity
Not Before: Apr 17 09:00:36 2026 GMT
Not After : Apr 18 09:00:36 2026 GMT
Subject: CN=3d9637a145e03457e124f046eb147600ce791249
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:ae:a3:45:ab:09:c6:94:f8:81:20:18:68:9e:
a4:29:cf:d8:d6:3d:e0:eb:6b:f7:1b:42:05:09:02:
b0:2a:3d:92:20:4b:e6:b6:4b:5b:74:37:67:bb:06:
af:91:4f:60:d1:d5:3b:72:03:8a:ae:a8:84:56:0a:
46:0c:b2:85:5c:4b:b2:b5:d0:3e:17:84:b7:54:18:
29:4d:63:4e:34:bf:3b:b1:2f:d8:bd:b6:02:7b:ee:
37:fa:9f:a5:cc:fb:2b:29:0e:40:46:a8:7a:f7:73:
ed:49:d9:57:2e:15:38:c4:d0:98:39:3a:f6:00:2a:
d8:2d:dd:36:ce:a7:53:45:97:2b:51:55:1a:d7:7d:
7f:02:3c:aa:ba:67:5b:c8:fd:23:19:53:cc:50:38:
be:52:3e:3b:f6:80:04:66:49:a0:d8:c9:62:b3:76:
82:f7:3c:4e:ae:11:6d:29:fd:68:3a:63:ac:80:ed:
8d:ad:c1:e7:23:c8:d0:dd:bb:e3:93:ef:9e:72:e1:
dc:cd:a0:fb:2f:b2:a7:d4:ab:08:4a:b6:19:b4:1a:
56:75:8d:8d:f3:c8:59:5e:e5:cf:bd:86:64:66:e9:
a1:37:62:38:60:6f:5a:c3:91:a0:f3:8a:71:fc:e5:
99:5b:9c:39:58:f3:06:01:5b:2d:37:15:63:3d:89:
40:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:96:37:A1:45:E0:34:57:E1:24:F0:46:EB:14:76:00:CE:79:12:49
X509v3 Authority Key Identifier:
keyid:C2:CE:59:D1:AF:83:0C:94:BA:8E:A1:1C:F8:FE:C6:DD:9C:03:B9:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ws5Z0a-DDJS6jqEc-P7G3ZwDuRc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/44222e-568e-4c43-8dc8-a54bbc34cce9/1/ws5Z0a-DDJS6jqEc-P7G3ZwDuRc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/44222e-568e-4c43-8dc8-a54bbc34cce9/1/ws5Z0a-DDJS6jqEc-P7G3ZwDuRc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ce:3e:01:2f:ae:f0:63:f3:ba:57:0c:e8:d5:b0:c2:35:74:b0:
49:e3:25:dd:5b:e8:71:d5:5c:72:1c:62:4a:a0:e0:98:90:f0:
d2:61:de:c8:5d:d2:c1:a3:89:5d:d7:b5:99:c7:fd:ea:60:38:
11:94:e9:02:64:d7:8c:31:51:1c:59:90:e4:cf:9c:47:8e:5b:
67:77:f0:d8:04:de:7b:4b:60:cc:66:52:f3:67:3d:b4:af:28:
a5:23:5a:63:2d:70:19:db:f7:ad:1f:af:78:d1:ed:70:8e:3a:
b1:76:6b:f7:66:f1:22:73:17:a2:4c:60:b4:43:af:84:36:c0:
b1:06:8c:81:46:c6:a8:eb:df:f7:47:84:92:bf:a7:3f:ce:40:
47:29:2f:fa:2e:e7:db:2d:2a:93:c3:f4:01:ac:30:b7:80:88:
ee:03:2b:09:d3:08:82:aa:45:f8:31:e2:f0:4e:4b:19:7a:15:
5a:cd:7f:ce:65:26:b0:b9:0f:cc:38:56:dc:c2:7e:cb:2c:8d:
c5:a1:68:53:a0:c1:dd:88:ce:03:d5:e0:69:9b:9c:af:b8:76:
8a:1b:8e:e8:39:8f:18:53:a9:a6:a8:00:dc:eb:ab:8a:18:fe:
2f:d1:4c:19:3a:c5:9f:96:44:78:78:c0:ef:75:4c:58:42:a5:
c1:34:a7:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:22:17 2026 by rpki-client