Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/363ba7-89e3-495f-aa2e-c1eb73ffd416/1/w2gG6gYvYFOEEoi0RuLg3tWy8uc.mft
File: w2gG6gYvYFOEEoi0RuLg3tWy8uc.mft (raw, json)
Hash identifier: aqA/ZVjP0iVmkAJfAqMLE3JBT8+FqJ5CfAxZFGXNOf4=
Subject key identifier: 39:71:CD:EF:C4:0A:F1:A8:79:FE:DB:BD:70:A1:25:D4:AA:13:08:C1
Authority key identifier: C3:68:06:EA:06:2F:60:53:84:12:88:B4:46:E2:E0:DE:D5:B2:F2:E7
Certificate issuer: /CN=c36806ea062f6053841288b446e2e0ded5b2f2e7
Certificate serial: 019F927F5BA40B3D50D2B498050979641A0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w2gG6gYvYFOEEoi0RuLg3tWy8uc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/363ba7-89e3-495f-aa2e-c1eb73ffd416/1/w2gG6gYvYFOEEoi0RuLg3tWy8uc.mft
Manifest number: 19C8
Signing time: Fri 24 Jul 2026 05:00:47 +0000
Manifest this update: Fri 24 Jul 2026 05:00:47 +0000
Manifest next update: Sat 25 Jul 2026 05:00:47 +0000
Files and hashes: 1: HKW_JvuPX0mHM7lazYSgyR0g0uM.roa (hash: Jh1Szq0fa2LL5rNZCDMcjRVX03Rzj5K0HXlv8wVQfI0=)
2: TZ8ebUDvVSJ909itJWgZrOe21gA.roa (hash: Lbig1GSFrk10qV21/rpvsSSWNduF4FEdkvJj9QTS+kg=)
3: w2gG6gYvYFOEEoi0RuLg3tWy8uc.crl (hash: bUO7679fJyTCDWcjlyq/qwrxSS2+VkKUHhRp1+OxOXs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/363ba7-89e3-495f-aa2e-c1eb73ffd416/1/w2gG6gYvYFOEEoi0RuLg3tWy8uc.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/363ba7-89e3-495f-aa2e-c1eb73ffd416/1/w2gG6gYvYFOEEoi0RuLg3tWy8uc.mft
rsync://rpki.ripe.net/repository/DEFAULT/w2gG6gYvYFOEEoi0RuLg3tWy8uc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 05:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:7f:5b:a4:0b:3d:50:d2:b4:98:05:09:79:64:1a:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c36806ea062f6053841288b446e2e0ded5b2f2e7
Validity
Not Before: Jul 24 05:00:47 2026 GMT
Not After : Jul 25 05:00:47 2026 GMT
Subject: CN=3971cdefc40af1a879fedbbd70a125d4aa1308c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:f0:f2:a8:b2:32:94:3b:f4:bb:94:39:f4:5b:
cb:85:07:ec:02:9f:47:ef:11:54:11:60:3d:40:44:
56:b0:10:1d:ac:df:d3:27:74:30:29:82:d3:97:f2:
fb:55:6d:10:61:6e:a9:8a:45:f6:01:5d:03:d0:bf:
38:ee:8e:53:12:84:a7:73:db:7c:8a:81:00:cb:ef:
fb:33:ce:f8:d7:33:9a:7e:48:a3:cb:90:61:60:17:
f3:3f:d4:bb:21:de:db:17:d8:c6:4a:23:3a:28:53:
80:ae:39:ac:c4:2d:c1:16:d7:c6:d8:c3:dd:fa:f6:
73:95:fb:7c:3c:86:58:10:5f:86:a6:cf:2c:0c:46:
de:34:5b:a8:18:08:38:b5:29:ed:de:a7:c2:43:cf:
63:5e:e8:a3:4d:77:7a:78:df:94:3b:d7:ae:fd:3f:
f9:46:af:ad:53:94:3c:45:ec:ee:86:e3:3f:37:2b:
c6:8e:f2:3d:eb:b4:98:98:58:60:7d:65:43:90:80:
78:59:41:bf:d7:b3:eb:c2:6a:f6:31:71:8e:ab:df:
00:0f:75:7b:bd:c0:f5:29:b5:4f:4e:90:02:ef:fe:
b1:01:1f:3b:0a:7b:ee:36:80:23:ee:86:e0:1b:b2:
76:b9:0e:61:db:41:4c:8d:c7:2b:8b:53:bb:15:4b:
10:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:71:CD:EF:C4:0A:F1:A8:79:FE:DB:BD:70:A1:25:D4:AA:13:08:C1
X509v3 Authority Key Identifier:
keyid:C3:68:06:EA:06:2F:60:53:84:12:88:B4:46:E2:E0:DE:D5:B2:F2:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w2gG6gYvYFOEEoi0RuLg3tWy8uc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/363ba7-89e3-495f-aa2e-c1eb73ffd416/1/w2gG6gYvYFOEEoi0RuLg3tWy8uc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/363ba7-89e3-495f-aa2e-c1eb73ffd416/1/w2gG6gYvYFOEEoi0RuLg3tWy8uc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:f0:05:2e:f2:e9:a1:f0:b5:7f:d8:b1:50:dc:d0:dc:84:bf:
aa:09:80:1b:11:08:c3:b4:71:ff:34:19:4b:d9:88:f0:10:1b:
47:f4:3f:26:75:b7:d4:a1:60:07:32:af:0c:93:a9:03:2d:5f:
c0:07:6b:5d:30:05:9a:dc:3e:51:4b:31:a4:43:68:2e:da:e2:
cc:28:b5:cb:d1:73:d8:53:60:1b:4a:cf:bd:6d:49:81:50:97:
cc:ca:ca:16:ac:89:b8:a6:aa:ca:cb:ad:db:d1:92:99:b6:b4:
fc:4d:b2:61:7a:5c:d9:0c:80:9e:05:f2:46:9a:5a:50:3b:4d:
17:e8:53:53:ac:4d:b0:dd:00:a8:d8:10:0d:29:fe:b6:ef:00:
87:c9:69:f3:ac:95:31:79:09:d5:ab:47:0b:44:ed:5d:f7:92:
23:71:ed:cf:8a:e8:0f:87:85:3f:99:f3:1f:c4:9e:1e:72:7a:
27:1d:98:6f:92:12:bf:e9:07:c0:c2:82:40:a7:aa:e6:16:b8:
3d:0b:88:6c:45:da:c8:68:58:27:98:ed:83:b0:d5:21:b8:9b:
b6:83:30:e7:f9:99:2a:f2:5b:00:d8:d5:dc:45:4b:0c:01:fe:
f6:39:5e:22:b2:c2:94:1c:f6:40:d9:19:da:5a:37:65:e0:87:
bd:cb:ba:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:19:07 2026 by rpki-client