Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/9c5a00-0b5f-4a95-98a8-8bd976910dbf/1/w70m_iKV5GK-JnhTPvpTHiO38QI.mft
File: w70m_iKV5GK-JnhTPvpTHiO38QI.mft (raw, json)
Hash identifier: Ln6ZErXS82Ctkkb/aLsUWirkKgKqJMj1hdxIfRXEwdU=
Subject key identifier: 40:AF:28:1D:E5:B0:77:EC:EF:5C:11:83:1A:D6:81:01:AA:E6:BE:5B
Authority key identifier: C3:BD:26:FE:22:95:E4:62:BE:26:78:53:3E:FA:53:1E:23:B7:F1:02
Certificate issuer: /CN=c3bd26fe2295e462be2678533efa531e23b7f102
Certificate serial: 019F91A434E1511C3F8C8787123E08D44EDE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w70m_iKV5GK-JnhTPvpTHiO38QI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/9c5a00-0b5f-4a95-98a8-8bd976910dbf/1/w70m_iKV5GK-JnhTPvpTHiO38QI.mft
Manifest number: 19C8
Signing time: Fri 24 Jul 2026 01:01:25 +0000
Manifest this update: Fri 24 Jul 2026 01:01:25 +0000
Manifest next update: Sat 25 Jul 2026 01:01:25 +0000
Files and hashes: 1: BpitMkNTOG0_ouRmz2bpaYkKoBY.roa (hash: YpWL3AH39Erg/3Vj3WOA5eh5wrqjLGB0H0SvsITlAwA=)
2: qKqi_rXQXOvxeFffB2pfRZ_x1CM.roa (hash: XYn4rn0UvMRvensr1fkhAzYC4HLrGdOg2tErj1J5QmQ=)
3: w70m_iKV5GK-JnhTPvpTHiO38QI.crl (hash: vSyC6GyTHhcOchZASrSbg3j6thJOKiZdTfl3oxUxDXI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/9c5a00-0b5f-4a95-98a8-8bd976910dbf/1/w70m_iKV5GK-JnhTPvpTHiO38QI.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/9c5a00-0b5f-4a95-98a8-8bd976910dbf/1/w70m_iKV5GK-JnhTPvpTHiO38QI.mft
rsync://rpki.ripe.net/repository/DEFAULT/w70m_iKV5GK-JnhTPvpTHiO38QI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 01:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:a4:34:e1:51:1c:3f:8c:87:87:12:3e:08:d4:4e:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3bd26fe2295e462be2678533efa531e23b7f102
Validity
Not Before: Jul 24 01:01:25 2026 GMT
Not After : Jul 25 01:01:25 2026 GMT
Subject: CN=40af281de5b077ecef5c11831ad68101aae6be5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:d6:be:37:22:a9:60:71:6a:85:a1:48:0c:ab:
0a:b6:3c:8d:42:89:e4:00:5e:9e:18:b8:13:00:fd:
08:08:2c:a0:25:c7:13:b3:80:3c:58:5c:b7:83:5d:
65:ec:d2:4d:20:ee:35:38:ff:ac:db:a0:eb:97:10:
fb:92:d3:19:66:65:92:f7:72:b3:8e:87:9d:f4:09:
24:96:71:e0:b9:35:f8:7f:57:e1:b0:97:15:61:67:
d3:7a:a5:f2:fa:45:23:9e:2b:f9:bb:6b:fa:5e:0b:
80:92:6f:d8:80:55:a6:10:29:7f:b2:4a:bf:82:8a:
d1:5d:78:20:5b:cc:f1:72:50:4b:72:6b:00:6e:da:
a6:d3:f0:99:48:98:d1:c8:3c:c1:57:ff:18:99:41:
42:28:97:58:de:43:5e:b8:17:87:06:42:98:e7:dd:
8b:c9:88:29:1b:e0:0b:b5:a2:53:be:0c:e0:9f:30:
98:83:8e:c5:ec:55:c3:f5:22:9b:a0:f0:a0:6c:e1:
fb:fb:89:1b:e3:2c:e9:b3:a1:2d:9b:d8:bb:99:7e:
a0:b9:60:75:b9:43:a1:8e:0c:f3:42:62:02:b8:85:
3d:19:02:cd:3d:25:b3:04:e2:83:61:c3:80:11:63:
d2:92:e9:a2:c5:47:2c:e0:2a:1f:8e:7c:ff:d9:44:
91:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:AF:28:1D:E5:B0:77:EC:EF:5C:11:83:1A:D6:81:01:AA:E6:BE:5B
X509v3 Authority Key Identifier:
keyid:C3:BD:26:FE:22:95:E4:62:BE:26:78:53:3E:FA:53:1E:23:B7:F1:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w70m_iKV5GK-JnhTPvpTHiO38QI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/9c5a00-0b5f-4a95-98a8-8bd976910dbf/1/w70m_iKV5GK-JnhTPvpTHiO38QI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/9c5a00-0b5f-4a95-98a8-8bd976910dbf/1/w70m_iKV5GK-JnhTPvpTHiO38QI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:b1:35:55:fa:62:31:ba:ac:79:78:f6:b4:25:02:8b:94:37:
66:19:86:32:2c:10:5f:17:31:e5:f4:1f:c8:eb:01:a3:af:cd:
38:fe:7a:0a:a4:92:d0:63:36:7b:48:2a:c2:a9:30:14:73:c4:
6f:72:39:4a:64:90:8a:47:e3:54:e0:0f:46:86:59:54:f3:b9:
6e:d8:65:52:ef:38:83:fb:e3:95:eb:b0:6d:04:a9:d5:2b:1b:
2d:31:7d:be:f4:7f:60:25:3c:cd:54:77:28:aa:7b:1f:63:52:
27:4b:d6:cb:e0:05:b4:78:64:44:aa:45:50:fb:52:69:55:6a:
58:7c:6e:9d:1e:65:b4:5b:22:e5:bd:83:de:05:88:c2:00:05:
c1:ee:88:d2:f3:f7:a0:bc:ba:8a:56:a9:50:36:b0:b2:8f:ee:
f2:d8:5e:cd:6a:ee:c5:db:d3:31:c6:6f:f6:f7:65:35:bd:bc:
31:5d:04:a1:85:3d:83:1a:a6:21:8e:5f:aa:16:c1:65:f8:72:
ac:1d:8c:52:d7:54:92:66:94:b6:a2:96:cb:12:1d:25:84:48:
22:1a:87:6e:d7:40:02:36:f0:34:60:55:9c:2a:34:6e:11:7a:
36:91:08:e7:72:94:70:00:7c:59:07:1e:05:e8:da:83:fb:ea:
5a:df:5b:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:40:38 2026 by rpki-client