Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/363ba7-89e3-495f-aa2e-c1eb73ffd416/1/w2gG6gYvYFOEEoi0RuLg3tWy8uc.mft
File: w2gG6gYvYFOEEoi0RuLg3tWy8uc.mft (raw, json)
Hash identifier: 0A1WhSOvOwG2BW0YJN8FwyA/Hu2NQxwsrVChjTSr3Qc=
Subject key identifier: 81:DF:29:BA:D8:3C:75:69:3A:47:B7:DF:EF:2F:B4:5A:03:54:3C:11
Authority key identifier: C3:68:06:EA:06:2F:60:53:84:12:88:B4:46:E2:E0:DE:D5:B2:F2:E7
Certificate issuer: /CN=c36806ea062f6053841288b446e2e0ded5b2f2e7
Certificate serial: 019F946DC3574120FB21E4F7E3B9BA330E36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w2gG6gYvYFOEEoi0RuLg3tWy8uc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/363ba7-89e3-495f-aa2e-c1eb73ffd416/1/w2gG6gYvYFOEEoi0RuLg3tWy8uc.mft
Manifest number: 19C9
Signing time: Fri 24 Jul 2026 14:00:48 +0000
Manifest this update: Fri 24 Jul 2026 14:00:48 +0000
Manifest next update: Sat 25 Jul 2026 14:00:48 +0000
Files and hashes: 1: HKW_JvuPX0mHM7lazYSgyR0g0uM.roa (hash: Jh1Szq0fa2LL5rNZCDMcjRVX03Rzj5K0HXlv8wVQfI0=)
2: TZ8ebUDvVSJ909itJWgZrOe21gA.roa (hash: Lbig1GSFrk10qV21/rpvsSSWNduF4FEdkvJj9QTS+kg=)
3: w2gG6gYvYFOEEoi0RuLg3tWy8uc.crl (hash: arBiaagvKkHHorE8E4PPHDaivx/10+rO89oCcmzl884=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/363ba7-89e3-495f-aa2e-c1eb73ffd416/1/w2gG6gYvYFOEEoi0RuLg3tWy8uc.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/363ba7-89e3-495f-aa2e-c1eb73ffd416/1/w2gG6gYvYFOEEoi0RuLg3tWy8uc.mft
rsync://rpki.ripe.net/repository/DEFAULT/w2gG6gYvYFOEEoi0RuLg3tWy8uc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:6d:c3:57:41:20:fb:21:e4:f7:e3:b9:ba:33:0e:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c36806ea062f6053841288b446e2e0ded5b2f2e7
Validity
Not Before: Jul 24 14:00:48 2026 GMT
Not After : Jul 25 14:00:48 2026 GMT
Subject: CN=81df29bad83c75693a47b7dfef2fb45a03543c11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:7d:83:72:c6:61:2a:dd:a1:b8:c3:72:ea:47:
ef:51:cd:a1:dc:02:81:b6:8d:c4:47:ea:73:35:85:
38:d6:df:81:26:b7:58:d8:bf:15:4d:32:50:ef:28:
a1:43:5e:c0:61:e0:26:db:cf:a6:02:3d:07:63:57:
42:90:b2:00:cf:64:57:c3:fd:c9:ae:f2:8b:a7:a8:
7f:3d:ed:8f:c1:f5:30:f9:e8:52:f0:49:cb:9f:df:
59:5f:02:2a:03:64:ae:af:47:7d:d0:c3:d6:4d:8a:
f4:86:ed:f4:52:28:03:55:2a:5b:58:c6:99:5c:80:
4e:57:95:31:cc:2c:d1:47:14:d7:df:66:57:45:df:
98:64:f1:b3:71:3c:6f:0e:26:9c:c3:59:6e:96:df:
a1:ac:e8:df:66:ce:89:de:d2:58:5d:5c:2a:5d:ce:
3b:39:42:37:1b:42:7e:9e:6e:d8:68:6b:78:73:59:
d4:8d:c9:ca:5b:9f:82:0a:b3:a6:0e:87:5e:3c:c8:
8c:72:62:12:54:a3:92:9d:08:ab:55:85:76:2c:3a:
d4:5f:3c:db:30:f8:ab:9e:81:01:a4:c1:49:33:77:
a3:ed:79:91:1e:4e:81:22:08:34:8e:4d:73:cd:be:
0e:aa:40:36:db:c6:50:b9:2d:c0:05:02:e1:ee:17:
20:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:DF:29:BA:D8:3C:75:69:3A:47:B7:DF:EF:2F:B4:5A:03:54:3C:11
X509v3 Authority Key Identifier:
keyid:C3:68:06:EA:06:2F:60:53:84:12:88:B4:46:E2:E0:DE:D5:B2:F2:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w2gG6gYvYFOEEoi0RuLg3tWy8uc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/363ba7-89e3-495f-aa2e-c1eb73ffd416/1/w2gG6gYvYFOEEoi0RuLg3tWy8uc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/363ba7-89e3-495f-aa2e-c1eb73ffd416/1/w2gG6gYvYFOEEoi0RuLg3tWy8uc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:77:12:52:92:e5:13:57:5d:f8:f1:e0:8e:f4:25:e1:2f:fc:
d3:49:77:39:68:7b:c8:3a:57:6a:df:13:57:7a:27:ed:d6:b6:
56:15:a5:8c:eb:7d:69:89:45:36:b3:4e:27:81:cb:4d:1f:8c:
f0:96:08:20:88:e1:5e:95:fe:6f:58:6f:b2:41:a0:ba:88:75:
35:43:ed:97:b6:90:77:50:36:7e:f3:fd:f4:a5:64:af:68:39:
f8:7f:da:86:c0:15:32:73:7d:46:36:7c:20:63:b8:3c:73:5a:
f0:b9:f5:6e:84:84:66:50:f3:8b:d0:28:1b:2b:2b:6c:61:47:
0f:d8:cb:41:2e:e1:9d:46:52:99:43:29:3f:8a:1d:e5:32:0b:
11:ff:0a:d4:b8:e4:21:59:ce:2b:1b:69:28:ae:81:b2:97:2a:
0f:f6:2c:d1:3a:9f:69:fc:60:c2:87:8f:e1:5f:66:f3:11:52:
a9:64:32:80:74:2a:be:8b:9f:dc:28:17:b4:63:0e:ce:8f:52:
c3:6e:92:d9:89:08:97:7e:52:ea:42:2c:ae:68:b0:92:52:f3:
fc:75:03:3a:2d:94:fd:63:e9:d1:b2:90:14:0a:b8:c9:d7:0b:
28:d5:1f:54:16:df:47:b6:2c:b6:ed:19:a3:9b:2a:f3:43:2f:
c2:5d:67:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:27:00 2026 by rpki-client