
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/363ba7-89e3-495f-aa2e-c1eb73ffd416/1/w2gG6gYvYFOEEoi0RuLg3tWy8uc.mft
File: w2gG6gYvYFOEEoi0RuLg3tWy8uc.mft (raw, json)
Hash identifier: SBETB7Sa6fj/HMeCEbpaEm1blLFo+bNU35yjzL5hPro=
Subject key identifier: 62:9B:E7:B6:81:A2:F7:E6:A0:18:6D:8F:17:78:91:08:50:29:EB:8E
Authority key identifier: C3:68:06:EA:06:2F:60:53:84:12:88:B4:46:E2:E0:DE:D5:B2:F2:E7
Certificate issuer: /CN=c36806ea062f6053841288b446e2e0ded5b2f2e7
Certificate serial: 019E1FB59DB4A5941DA5D65D26B717EE7376
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w2gG6gYvYFOEEoi0RuLg3tWy8uc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/363ba7-89e3-495f-aa2e-c1eb73ffd416/1/w2gG6gYvYFOEEoi0RuLg3tWy8uc.mft
Manifest number: 1908
Signing time: Wed 13 May 2026 05:00:56 +0000
Manifest this update: Wed 13 May 2026 05:00:56 +0000
Manifest next update: Thu 14 May 2026 05:00:56 +0000
Files and hashes: 1: HKW_JvuPX0mHM7lazYSgyR0g0uM.roa (hash: Jh1Szq0fa2LL5rNZCDMcjRVX03Rzj5K0HXlv8wVQfI0=)
2: TZ8ebUDvVSJ909itJWgZrOe21gA.roa (hash: Lbig1GSFrk10qV21/rpvsSSWNduF4FEdkvJj9QTS+kg=)
3: w2gG6gYvYFOEEoi0RuLg3tWy8uc.crl (hash: dnkYSF135OMN8Kkqr7Nx3hOvnDHEwt8G65HGczuo4pE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/363ba7-89e3-495f-aa2e-c1eb73ffd416/1/w2gG6gYvYFOEEoi0RuLg3tWy8uc.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/363ba7-89e3-495f-aa2e-c1eb73ffd416/1/w2gG6gYvYFOEEoi0RuLg3tWy8uc.mft
rsync://rpki.ripe.net/repository/DEFAULT/w2gG6gYvYFOEEoi0RuLg3tWy8uc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:b5:9d:b4:a5:94:1d:a5:d6:5d:26:b7:17:ee:73:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c36806ea062f6053841288b446e2e0ded5b2f2e7
Validity
Not Before: May 13 05:00:56 2026 GMT
Not After : May 14 05:00:56 2026 GMT
Subject: CN=629be7b681a2f7e6a0186d8f177891085029eb8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:c8:a8:83:b1:d1:a3:74:59:d3:98:3b:a1:b2:
c7:f0:2c:d5:7c:d1:92:2a:6f:3d:9b:0d:b8:14:93:
1e:f7:6e:a8:ea:53:97:bb:7f:54:15:e0:0d:4d:57:
65:04:c9:fd:0e:f2:a3:a6:21:67:4b:3e:bc:d5:0e:
00:6d:4b:96:3a:8d:72:33:f6:37:ef:3f:aa:a8:e1:
d7:6c:0c:fe:d5:b5:ff:e2:d1:59:7a:4c:5d:66:d8:
e1:d5:35:69:ba:fc:bd:ec:ff:24:f4:08:05:52:18:
29:b3:9a:1a:93:a8:5d:db:79:cf:6c:cf:e5:88:21:
a4:22:49:1a:54:a1:16:fe:25:3b:5a:f9:09:c2:08:
c4:7f:bf:a8:e5:97:c7:fa:a6:80:4c:7d:7b:2a:5c:
0c:03:2a:68:c2:4e:f4:9e:ed:e5:d8:5b:33:99:ed:
1f:0f:0d:8f:10:03:d0:a8:d9:ec:2e:81:ec:da:bc:
4f:f6:dd:9b:34:5a:47:ae:02:cb:43:c7:e6:a3:ea:
94:90:fb:83:7d:2a:6f:85:ca:ba:13:0e:6a:52:97:
d3:5f:73:b3:06:eb:73:6b:60:90:61:80:07:a1:9d:
21:5f:d6:d0:a4:48:0e:b4:7f:9d:b7:99:23:36:f9:
18:e9:58:e5:ad:ae:ef:f0:e4:30:1f:b3:07:04:0f:
61:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:9B:E7:B6:81:A2:F7:E6:A0:18:6D:8F:17:78:91:08:50:29:EB:8E
X509v3 Authority Key Identifier:
keyid:C3:68:06:EA:06:2F:60:53:84:12:88:B4:46:E2:E0:DE:D5:B2:F2:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w2gG6gYvYFOEEoi0RuLg3tWy8uc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/363ba7-89e3-495f-aa2e-c1eb73ffd416/1/w2gG6gYvYFOEEoi0RuLg3tWy8uc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/363ba7-89e3-495f-aa2e-c1eb73ffd416/1/w2gG6gYvYFOEEoi0RuLg3tWy8uc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:fb:f6:e8:6d:ff:28:6c:7d:de:00:62:f1:7d:53:d2:46:70:
17:9f:e4:84:a5:95:dd:aa:81:7f:e1:8c:41:37:c4:ff:59:98:
da:22:9b:9b:e7:83:cc:47:aa:cc:42:ee:66:32:44:13:4a:68:
86:e3:4b:21:e2:d4:02:14:cc:8e:d6:8c:ca:14:9c:2e:f0:ad:
85:62:a3:66:3b:ed:6e:75:15:7a:84:68:68:4b:7f:3a:a3:62:
3d:cd:76:02:b3:1f:36:7b:69:4e:fa:21:30:9a:9b:af:66:25:
47:55:12:fa:0a:7f:d6:da:3d:24:ff:38:94:03:1f:d7:e3:15:
d5:a6:c3:d7:0c:78:5d:41:fb:85:89:57:1d:50:26:e5:25:93:
87:e8:d2:9c:b9:aa:e3:70:5d:0a:c1:88:31:bc:aa:3e:7f:64:
f5:a3:bc:ad:47:bb:2a:6b:98:7a:93:ea:12:e8:ff:44:7b:65:
d8:d2:e4:6d:d0:84:f8:69:61:25:3d:01:53:d1:d0:82:4b:2a:
5b:91:dd:53:2f:f9:b5:84:52:1a:88:5a:85:37:91:70:5b:b2:
c6:50:78:79:79:8c:f2:79:d3:b5:92:3c:db:fb:ee:47:af:54:
10:32:6f:2d:3b:51:52:e0:6b:1c:3d:b5:de:80:d9:36:cf:bf:
8f:c6:90:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:53:54 2026 by rpki-client