Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/40/9c5a00-0b5f-4a95-98a8-8bd976910dbf/1/w70m_iKV5GK-JnhTPvpTHiO38QI.mft
File: w70m_iKV5GK-JnhTPvpTHiO38QI.mft (raw, json)
Hash identifier: q3tnnWAr8Wji/kjqVH4nv6AJqOnfaOozCL/eH3a8UNQ=
Subject key identifier: FA:6E:53:CD:C4:50:BD:32:99:B9:E7:F7:10:C8:3B:14:2F:F0:51:23
Authority key identifier: C3:BD:26:FE:22:95:E4:62:BE:26:78:53:3E:FA:53:1E:23:B7:F1:02
Certificate issuer: /CN=c3bd26fe2295e462be2678533efa531e23b7f102
Certificate serial: 01A0F8D79EAE34CC3BEEC3BE0F96BCF55FD8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w70m_iKV5GK-JnhTPvpTHiO38QI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/9c5a00-0b5f-4a95-98a8-8bd976910dbf/1/w70m_iKV5GK-JnhTPvpTHiO38QI.mft
Manifest number: 1A82
Signing time: Thu 01 Oct 2026 19:01:15 +0000
Manifest this update: Thu 01 Oct 2026 19:01:15 +0000
Manifest next update: Fri 02 Oct 2026 19:01:15 +0000
Files and hashes: 1: BpitMkNTOG0_ouRmz2bpaYkKoBY.roa (hash: YpWL3AH39Erg/3Vj3WOA5eh5wrqjLGB0H0SvsITlAwA=)
2: qKqi_rXQXOvxeFffB2pfRZ_x1CM.roa (hash: XYn4rn0UvMRvensr1fkhAzYC4HLrGdOg2tErj1J5QmQ=)
3: w70m_iKV5GK-JnhTPvpTHiO38QI.crl (hash: +cFriC8jE4ZT//kvekpFXtUiPzMwqZu9ScgaTiDPd0c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/9c5a00-0b5f-4a95-98a8-8bd976910dbf/1/w70m_iKV5GK-JnhTPvpTHiO38QI.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/9c5a00-0b5f-4a95-98a8-8bd976910dbf/1/w70m_iKV5GK-JnhTPvpTHiO38QI.mft
rsync://rpki.ripe.net/repository/DEFAULT/w70m_iKV5GK-JnhTPvpTHiO38QI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 Oct 2026 16:22:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f8:d7:9e:ae:34:cc:3b:ee:c3:be:0f:96:bc:f5:5f:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3bd26fe2295e462be2678533efa531e23b7f102
Validity
Not Before: Oct 1 19:01:15 2026 GMT
Not After : Oct 2 19:01:15 2026 GMT
Subject: CN=fa6e53cdc450bd3299b9e7f710c83b142ff05123
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:38:61:0c:16:cb:8d:7d:2a:5c:b8:80:84:c5:
b7:fd:4b:94:31:6f:07:8e:7d:d9:c4:60:71:3c:57:
98:53:57:04:4e:cd:a5:c7:c1:4c:77:3b:e6:0a:5f:
b9:a9:c8:9b:82:19:59:b0:ab:15:bb:94:02:8c:75:
de:d6:f0:9c:ed:d0:c5:5c:02:79:71:ea:02:20:ad:
9c:4c:2e:4f:14:c7:9f:c0:9e:26:1e:2b:f4:62:0d:
89:70:91:35:7c:99:91:d2:d7:5f:33:69:8b:54:e9:
98:9f:40:ff:cb:f1:2e:62:a0:b9:03:cc:b5:77:eb:
d8:4f:ba:8d:1a:0b:c7:ae:3c:59:da:81:22:5b:8c:
92:0c:41:1e:04:51:10:84:54:0c:ae:33:6a:f8:8b:
5c:ed:79:bc:b2:61:b7:1e:37:c4:21:3d:a5:8c:c9:
ed:4f:84:8b:c7:53:f2:26:eb:d9:df:81:78:ff:a9:
da:43:0b:d7:d1:96:b2:bc:d9:90:af:fa:8f:f3:3e:
01:05:c1:9a:76:8e:26:12:d5:23:c4:40:86:b1:f0:
18:4d:af:89:f9:b9:92:5d:55:d7:60:40:70:32:19:
8c:ad:7c:8b:4d:24:bb:0e:75:c6:46:7e:dc:b8:36:
1a:1c:2f:df:4f:41:b7:90:f9:81:f1:55:9d:ed:d7:
75:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:6E:53:CD:C4:50:BD:32:99:B9:E7:F7:10:C8:3B:14:2F:F0:51:23
X509v3 Authority Key Identifier:
keyid:C3:BD:26:FE:22:95:E4:62:BE:26:78:53:3E:FA:53:1E:23:B7:F1:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w70m_iKV5GK-JnhTPvpTHiO38QI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/9c5a00-0b5f-4a95-98a8-8bd976910dbf/1/w70m_iKV5GK-JnhTPvpTHiO38QI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/9c5a00-0b5f-4a95-98a8-8bd976910dbf/1/w70m_iKV5GK-JnhTPvpTHiO38QI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:9c:a4:9b:73:f4:79:36:e3:38:59:a6:07:a6:d6:93:c1:dd:
37:1e:46:ca:84:be:78:01:aa:a7:10:d5:e8:96:43:cc:73:82:
ef:95:8a:ac:a8:c4:6e:04:ae:2f:54:0d:c8:71:28:fe:71:13:
02:2f:98:28:47:60:55:08:f9:14:d7:4f:89:95:a5:79:8c:e1:
2f:6e:d9:de:14:94:47:2c:5e:c0:eb:4b:1d:69:64:ad:08:3f:
2e:81:17:34:d8:a5:52:d6:b2:8d:f6:07:97:2b:9f:76:84:9f:
24:61:f2:e7:9e:38:95:97:74:69:bc:e2:5c:40:c0:b6:03:d5:
f0:a9:3c:f0:26:b3:33:ce:cf:56:88:3a:aa:1b:60:09:b5:cf:
45:9a:f4:2a:17:f8:73:16:41:16:c9:43:b9:88:e2:4d:61:63:
a6:42:fd:7e:78:6d:24:e3:ba:a6:21:c1:e3:e3:16:f4:aa:83:
eb:1a:f0:17:23:35:95:9e:88:35:e2:19:a5:b9:ff:6a:55:99:
f1:0a:a1:c8:ae:57:a9:f3:a5:08:02:49:81:a8:20:12:8b:ee:
d4:87:33:a4:e4:93:bd:5a:33:a7:6f:39:d8:9b:3d:cd:22:3d:
0b:80:ff:b3:58:75:30:66:79:d9:2b:3a:6a:c7:43:95:c2:06:
6a:f3:4d:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 2 10:24:13 2026 by rpki-client