Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/9c5a00-0b5f-4a95-98a8-8bd976910dbf/1/w70m_iKV5GK-JnhTPvpTHiO38QI.mft
File: w70m_iKV5GK-JnhTPvpTHiO38QI.mft (raw, json)
Hash identifier: BwJU8oMCW8ffejP6C7ZdKbVhVtu+Ju3Pj/miPxSXN8Q=
Subject key identifier: 9C:E3:8A:5D:63:5A:A7:22:16:3A:8B:5C:22:B3:D5:B3:AA:4C:7C:46
Authority key identifier: C3:BD:26:FE:22:95:E4:62:BE:26:78:53:3E:FA:53:1E:23:B7:F1:02
Certificate issuer: /CN=c3bd26fe2295e462be2678533efa531e23b7f102
Certificate serial: 019D29977A5052EC792FF58C64D1E2C75CF3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w70m_iKV5GK-JnhTPvpTHiO38QI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/9c5a00-0b5f-4a95-98a8-8bd976910dbf/1/w70m_iKV5GK-JnhTPvpTHiO38QI.mft
Manifest number: 1889
Signing time: Thu 26 Mar 2026 10:01:26 +0000
Manifest this update: Thu 26 Mar 2026 10:01:26 +0000
Manifest next update: Fri 27 Mar 2026 10:01:26 +0000
Files and hashes: 1: BpitMkNTOG0_ouRmz2bpaYkKoBY.roa (hash: YpWL3AH39Erg/3Vj3WOA5eh5wrqjLGB0H0SvsITlAwA=)
2: qKqi_rXQXOvxeFffB2pfRZ_x1CM.roa (hash: XYn4rn0UvMRvensr1fkhAzYC4HLrGdOg2tErj1J5QmQ=)
3: w70m_iKV5GK-JnhTPvpTHiO38QI.crl (hash: sWSpoUc48vsbH4UbiIaI7BtlN6BTDkUyq+obfFpx7hs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/9c5a00-0b5f-4a95-98a8-8bd976910dbf/1/w70m_iKV5GK-JnhTPvpTHiO38QI.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/9c5a00-0b5f-4a95-98a8-8bd976910dbf/1/w70m_iKV5GK-JnhTPvpTHiO38QI.mft
rsync://rpki.ripe.net/repository/DEFAULT/w70m_iKV5GK-JnhTPvpTHiO38QI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:97:7a:50:52:ec:79:2f:f5:8c:64:d1:e2:c7:5c:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3bd26fe2295e462be2678533efa531e23b7f102
Validity
Not Before: Mar 26 10:01:26 2026 GMT
Not After : Mar 27 10:01:26 2026 GMT
Subject: CN=9ce38a5d635aa722163a8b5c22b3d5b3aa4c7c46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:70:cc:1c:f4:99:50:f0:1e:29:8d:8a:3a:42:
07:c3:97:f4:7b:ba:c2:1d:b2:17:13:c7:a7:b9:25:
9c:3a:df:2d:a4:5c:3e:46:50:ea:a8:c9:2e:ae:73:
90:33:ca:0b:f9:1f:35:4d:8a:a6:c5:19:95:88:13:
5b:ec:d9:f4:74:c9:05:17:8a:90:52:8e:76:5d:f1:
cf:87:60:ed:25:7e:3e:43:6b:ae:25:37:b3:1e:21:
66:e2:6c:0d:23:ac:4b:1c:42:67:92:60:e5:c3:f0:
1a:ae:31:43:70:61:fe:ba:8d:db:a9:64:64:3f:3e:
75:91:2e:3f:88:18:c1:7e:69:b7:1d:ed:16:f7:56:
36:de:02:9c:0a:eb:4c:dc:ab:d5:8b:8d:98:45:6c:
7b:0c:48:80:d4:7d:f0:d1:09:94:51:6c:52:8d:a0:
20:cb:ae:ec:5e:a4:f2:0d:fe:0f:bb:df:53:4e:f0:
8b:4d:0e:86:43:d2:bc:36:61:f6:38:28:39:d8:9e:
f5:30:4a:86:df:86:8c:35:e5:05:2f:b7:ea:d9:d5:
a2:97:4d:85:ba:44:67:8d:16:86:13:79:f4:bd:9a:
7c:e2:87:9a:c8:82:35:96:bd:f1:c2:c7:57:31:92:
b7:c9:e5:5f:6b:a9:ba:68:57:0f:14:fd:26:92:f7:
8d:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:E3:8A:5D:63:5A:A7:22:16:3A:8B:5C:22:B3:D5:B3:AA:4C:7C:46
X509v3 Authority Key Identifier:
keyid:C3:BD:26:FE:22:95:E4:62:BE:26:78:53:3E:FA:53:1E:23:B7:F1:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w70m_iKV5GK-JnhTPvpTHiO38QI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/9c5a00-0b5f-4a95-98a8-8bd976910dbf/1/w70m_iKV5GK-JnhTPvpTHiO38QI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/9c5a00-0b5f-4a95-98a8-8bd976910dbf/1/w70m_iKV5GK-JnhTPvpTHiO38QI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:0c:d4:c1:ef:fd:43:62:d5:e3:4a:b3:01:ae:ed:42:e8:9e:
1c:a0:7f:8e:ea:0d:8f:8f:2f:a1:34:31:3b:b4:75:a0:5d:40:
1c:4c:f4:94:09:09:65:fc:0f:71:be:2b:cf:d6:49:e9:6e:14:
4a:8e:c3:8b:99:64:15:df:b2:09:18:b6:ef:5b:94:0a:6a:44:
7e:f6:88:1e:23:5e:b9:b3:a6:f0:40:ed:d7:63:df:5d:bd:94:
f4:19:3d:a4:e6:79:74:bb:46:2a:3e:20:9a:bc:65:96:b6:69:
6c:3f:6b:3a:1e:84:da:17:e9:d5:61:84:02:89:12:32:4d:09:
f5:30:cd:0c:b3:1e:0e:32:07:3d:4f:4e:34:51:ed:80:b5:c1:
43:cb:1f:c5:ce:9c:81:ef:e4:56:6d:3d:62:1b:e9:9d:87:6e:
78:93:bb:c7:89:56:f4:ae:62:b2:04:6a:86:fe:e6:cd:73:d2:
35:70:86:5e:38:ff:59:ce:1d:64:ee:72:a0:f1:30:17:4e:ac:
78:69:5b:0f:e2:84:4e:6d:b3:1d:0d:45:1c:9a:9f:53:d9:d6:
ab:a5:c8:83:2a:42:16:31:db:a6:0b:b2:98:4d:f3:51:fa:30:
9a:e7:52:be:dc:a6:11:21:56:63:bf:1e:65:ce:df:3c:55:50:
8f:e9:cd:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:10:13 2026 by rpki-client