Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/9c5a00-0b5f-4a95-98a8-8bd976910dbf/1/w70m_iKV5GK-JnhTPvpTHiO38QI.mft
File: w70m_iKV5GK-JnhTPvpTHiO38QI.mft (raw, json)
Hash identifier: DlfqShtLVQcywUeMmljaq1YV6nSE4K2bsvpJK2Dk+oQ=
Subject key identifier: 5C:AE:91:6F:0D:8F:D8:56:20:46:8B:D2:8E:77:1A:D9:74:25:2E:51
Authority key identifier: C3:BD:26:FE:22:95:E4:62:BE:26:78:53:3E:FA:53:1E:23:B7:F1:02
Certificate issuer: /CN=c3bd26fe2295e462be2678533efa531e23b7f102
Certificate serial: 019E1ED9F1637099D016F45E45F86F0EACAE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w70m_iKV5GK-JnhTPvpTHiO38QI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/9c5a00-0b5f-4a95-98a8-8bd976910dbf/1/w70m_iKV5GK-JnhTPvpTHiO38QI.mft
Manifest number: 1908
Signing time: Wed 13 May 2026 01:00:59 +0000
Manifest this update: Wed 13 May 2026 01:00:59 +0000
Manifest next update: Thu 14 May 2026 01:00:59 +0000
Files and hashes: 1: BpitMkNTOG0_ouRmz2bpaYkKoBY.roa (hash: YpWL3AH39Erg/3Vj3WOA5eh5wrqjLGB0H0SvsITlAwA=)
2: qKqi_rXQXOvxeFffB2pfRZ_x1CM.roa (hash: XYn4rn0UvMRvensr1fkhAzYC4HLrGdOg2tErj1J5QmQ=)
3: w70m_iKV5GK-JnhTPvpTHiO38QI.crl (hash: geBz0gRQtmOSHLTKwP1fBxiUIA/ZfagvMiUmYbHVUVc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/9c5a00-0b5f-4a95-98a8-8bd976910dbf/1/w70m_iKV5GK-JnhTPvpTHiO38QI.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/9c5a00-0b5f-4a95-98a8-8bd976910dbf/1/w70m_iKV5GK-JnhTPvpTHiO38QI.mft
rsync://rpki.ripe.net/repository/DEFAULT/w70m_iKV5GK-JnhTPvpTHiO38QI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:d9:f1:63:70:99:d0:16:f4:5e:45:f8:6f:0e:ac:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3bd26fe2295e462be2678533efa531e23b7f102
Validity
Not Before: May 13 01:00:59 2026 GMT
Not After : May 14 01:00:59 2026 GMT
Subject: CN=5cae916f0d8fd85620468bd28e771ad974252e51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:51:24:a4:7b:c1:b4:c6:0f:68:6b:43:33:bb:
1c:9b:17:12:bb:ab:28:52:9f:a1:a0:bf:f5:40:4b:
57:77:93:4b:ec:3d:f7:51:f9:ce:1c:a8:5a:dd:fc:
be:bb:8d:be:46:0a:f6:9a:56:78:68:42:e6:4b:e9:
0a:c2:22:df:36:1a:f4:c2:61:27:db:9e:47:3a:7c:
27:48:cb:22:7b:b6:03:ce:41:a2:1b:d6:f5:18:50:
18:74:08:e3:f5:82:f9:19:95:e4:12:44:05:ae:c8:
84:49:e5:05:f3:d7:49:c2:12:5a:62:96:9d:b2:36:
b0:7b:5f:d4:30:3f:75:3e:5a:ba:97:48:3a:83:43:
61:42:59:ac:54:d2:41:f5:b6:f1:f1:33:79:4c:3a:
a9:09:a1:ad:04:0b:ec:f3:db:64:62:26:d3:eb:ef:
1a:01:a1:62:22:f7:94:d1:45:f6:4f:34:d4:b0:e7:
25:e8:b1:01:df:98:f6:66:9a:e2:34:a5:9b:81:58:
17:fa:2c:d9:fc:2b:37:ea:b8:95:99:80:02:d4:19:
2d:c9:f5:ee:01:46:75:59:ca:a2:b7:5e:1b:a4:27:
28:f1:1a:20:03:39:1d:f1:99:79:02:3f:c9:44:c7:
d4:10:c0:e3:9e:54:a5:53:6f:44:86:8a:d3:69:19:
1c:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:AE:91:6F:0D:8F:D8:56:20:46:8B:D2:8E:77:1A:D9:74:25:2E:51
X509v3 Authority Key Identifier:
keyid:C3:BD:26:FE:22:95:E4:62:BE:26:78:53:3E:FA:53:1E:23:B7:F1:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w70m_iKV5GK-JnhTPvpTHiO38QI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/9c5a00-0b5f-4a95-98a8-8bd976910dbf/1/w70m_iKV5GK-JnhTPvpTHiO38QI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/9c5a00-0b5f-4a95-98a8-8bd976910dbf/1/w70m_iKV5GK-JnhTPvpTHiO38QI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:3b:04:8a:66:9e:10:0a:39:ac:3f:2f:f5:b2:0f:64:33:a7:
bf:4e:64:ad:1e:10:9c:02:3f:f1:63:83:f7:5c:78:c1:95:45:
bc:7d:14:9c:6b:1c:05:bf:30:ba:99:5c:8d:8c:6a:9a:fb:6e:
76:cf:5f:3a:0d:c5:34:e7:0c:0f:5b:bb:e4:3c:b9:96:2d:bd:
56:2e:05:39:c2:26:c0:55:91:21:83:cf:7e:63:2b:50:52:70:
ec:a3:cc:94:4f:67:7b:14:8a:4f:00:ed:83:1c:81:92:78:d4:
eb:cc:7c:67:62:c6:1a:bf:ed:5c:51:36:63:05:dd:b3:8f:53:
a3:4a:42:13:68:37:31:ea:e4:6d:a4:13:a4:4e:44:54:84:80:
61:a9:5c:9b:f0:81:68:a7:62:84:07:08:8a:51:34:8b:87:e8:
72:a8:18:2d:f1:cb:32:3b:39:e0:72:bd:95:7c:03:bc:d8:f7:
d1:52:cf:2f:51:73:8a:5a:df:91:2b:12:fe:15:a5:30:14:7f:
12:0a:e9:5f:11:c5:4a:f5:73:9a:25:41:8a:9c:8f:63:3e:24:
76:19:bc:12:e2:d2:08:51:d9:2e:a6:48:e3:7b:e4:77:8e:b9:
bd:d4:85:7f:10:75:ab:c3:53:d7:b1:be:84:52:a6:cc:96:4e:
12:85:1a:8f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4e2fFjcJnQFvReRfhvDqyuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMzYmQyNmZlMjI5NWU0NjJiZTI2Nzg1MzNlZmE1MzFlMjNi
N2YxMDIwHhcNMjYwNTEzMDEwMDU5WhcNMjYwNTE0MDEwMDU5WjAzMTEwLwYDVQQD
Eyg1Y2FlOTE2ZjBkOGZkODU2MjA0NjhiZDI4ZTc3MWFkOTc0MjUyZTUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA31EkpHvBtMYPaGtDM7scmxcSu6so
Up+hoL/1QEtXd5NL7D33UfnOHKha3fy+u42+Rgr2mlZ4aELmS+kKwiLfNhr0wmEn
255HOnwnSMsie7YDzkGiG9b1GFAYdAjj9YL5GZXkEkQFrsiESeUF89dJwhJaYpad
sjawe1/UMD91Plq6l0g6g0NhQlmsVNJB9bbx8TN5TDqpCaGtBAvs89tkYibT6+8a
AaFiIveU0UX2TzTUsOcl6LEB35j2ZpriNKWbgVgX+izZ/Cs36riVmYAC1BktyfXu
AUZ1Wcqit14bpCco8RogAzkd8Zl5Aj/JRMfUEMDjnlSlU29EhorTaRkcPQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFyukW8Nj9hWIEaL0o53Gtl0JS5RMB8GA1UdIwQY
MBaAFMO9Jv4ileRiviZ4Uz76Ux4jt/ECMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdzcwbV9pS1Y1R0stSm5oVFB2cFRIaU8zOFFJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC85YzVhMDAtMGI1Zi00YTk1LTk4YTgt
OGJkOTc2OTEwZGJmLzEvdzcwbV9pS1Y1R0stSm5oVFB2cFRIaU8zOFFJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MC85YzVhMDAtMGI1Zi00YTk1LTk4YTgtOGJkOTc2OTEwZGJm
LzEvdzcwbV9pS1Y1R0stSm5oVFB2cFRIaU8zOFFJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXDsEimae
EAo5rD8v9bIPZDOnv05krR4QnAI/8WOD91x4wZVFvH0UnGscBb8wuplcjYxqmvtu
ds9fOg3FNOcMD1u75Dy5li29Vi4FOcImwFWRIYPPfmMrUFJw7KPMlE9nexSKTwDt
gxyBknjU68x8Z2LGGr/tXFE2YwXds49To0pCE2g3MerkbaQTpE5EVISAYalcm/CB
aKdihAcIilE0i4focqgYLfHLMjs54HK9lXwDvNj30VLPL1FzilrfkSsS/hWlMBR/
EgrpXxHFSvVzmiVBipyPYz4kdhm8EuLSCFHZLqZI43vkd465vdSFfxB1q8NT17G+
hFKmzJZOEoUajw==
-----END CERTIFICATE-----
Generated at Wed May 13 09:36:55 2026 by rpki-client