Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/289fc2-f278-4f66-b8ec-c743cb6d2fc3/1/w18DlJ5mHiS-Dx4Ixk2tBeMcTq8.mft
File: w18DlJ5mHiS-Dx4Ixk2tBeMcTq8.mft (raw, json)
Hash identifier: 4jI6BhWfTwVKBplFcHRSBTQNVP2tdhuowFBO3+tOc98=
Subject key identifier: F2:56:E1:A8:13:D9:89:82:B8:9D:32:A9:F9:6E:5C:68:1A:9D:29:C5
Authority key identifier: C3:5F:03:94:9E:66:1E:24:BE:0F:1E:08:C6:4D:AD:05:E3:1C:4E:AF
Certificate issuer: /CN=c35f03949e661e24be0f1e08c64dad05e31c4eaf
Certificate serial: 019F92B5F2C362B642E13F00C797E59F563E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w18DlJ5mHiS-Dx4Ixk2tBeMcTq8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/289fc2-f278-4f66-b8ec-c743cb6d2fc3/1/w18DlJ5mHiS-Dx4Ixk2tBeMcTq8.mft
Manifest number: 19D2
Signing time: Fri 24 Jul 2026 06:00:25 +0000
Manifest this update: Fri 24 Jul 2026 06:00:25 +0000
Manifest next update: Sat 25 Jul 2026 06:00:25 +0000
Files and hashes: 1: 77h1Q6qUz5qlMm7h_AznswYtOZ0.roa (hash: sRXxLopp6/463zgP26zWNJzhuSr+AeItnoxYVZGJazU=)
2: HN1urgNHkidDzjrtQwQt8embI9M.roa (hash: EeB/nRcF8dH+A2iZTqxjbaTiyibP5r0zfqmmI1yddPU=)
3: w18DlJ5mHiS-Dx4Ixk2tBeMcTq8.crl (hash: OEoc9whstJ0hE/wNYIu9yXNgLGRgSQ+M+rkIueM0hZI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/289fc2-f278-4f66-b8ec-c743cb6d2fc3/1/w18DlJ5mHiS-Dx4Ixk2tBeMcTq8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/289fc2-f278-4f66-b8ec-c743cb6d2fc3/1/w18DlJ5mHiS-Dx4Ixk2tBeMcTq8.mft
rsync://rpki.ripe.net/repository/DEFAULT/w18DlJ5mHiS-Dx4Ixk2tBeMcTq8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 06:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:b5:f2:c3:62:b6:42:e1:3f:00:c7:97:e5:9f:56:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c35f03949e661e24be0f1e08c64dad05e31c4eaf
Validity
Not Before: Jul 24 06:00:25 2026 GMT
Not After : Jul 25 06:00:25 2026 GMT
Subject: CN=f256e1a813d98982b89d32a9f96e5c681a9d29c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:76:b2:3e:41:6e:d8:29:7b:b5:56:d4:e6:21:
9e:e1:ba:c2:63:34:e4:68:4e:20:49:fc:13:47:7e:
6f:66:ec:23:d2:6c:66:73:19:d9:9c:ce:27:3f:da:
90:4c:ac:62:81:76:77:49:b9:21:9f:47:12:97:a1:
54:d6:45:d4:7c:dd:d9:05:42:f6:0b:29:4b:91:65:
87:9c:4a:43:1c:ec:93:73:f8:6c:a7:ab:be:f1:c1:
0e:3c:7d:e2:a3:52:90:19:a6:8c:3e:85:9f:64:94:
14:4d:9c:25:f4:90:36:5f:36:39:e2:5c:9d:60:34:
a8:98:08:93:29:27:43:cf:4a:a6:78:09:2a:e6:52:
24:fc:b9:97:e9:fb:ed:fa:9c:81:e1:20:6d:32:c5:
83:98:13:b9:64:1f:49:ba:91:6d:57:ba:bc:24:23:
a2:b0:5a:ce:78:1e:7e:fb:fb:80:58:1f:69:81:fc:
11:aa:f4:82:6b:8b:e1:59:28:51:0a:02:d6:52:6f:
44:0e:55:56:b0:25:ff:c5:a3:62:a6:d3:20:bf:26:
a0:40:e4:66:2e:c7:7a:08:ad:15:33:65:69:96:61:
1d:8d:e3:6c:80:98:93:bb:b0:8b:6d:7e:07:85:5e:
5e:34:dd:bf:bd:ba:f1:64:0d:7c:6c:02:bb:6a:30:
ad:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:56:E1:A8:13:D9:89:82:B8:9D:32:A9:F9:6E:5C:68:1A:9D:29:C5
X509v3 Authority Key Identifier:
keyid:C3:5F:03:94:9E:66:1E:24:BE:0F:1E:08:C6:4D:AD:05:E3:1C:4E:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w18DlJ5mHiS-Dx4Ixk2tBeMcTq8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/289fc2-f278-4f66-b8ec-c743cb6d2fc3/1/w18DlJ5mHiS-Dx4Ixk2tBeMcTq8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/289fc2-f278-4f66-b8ec-c743cb6d2fc3/1/w18DlJ5mHiS-Dx4Ixk2tBeMcTq8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:f6:59:aa:78:a2:f8:41:71:de:d9:e5:5c:9a:d4:80:af:16:
b4:af:59:fb:fa:83:75:31:00:b1:7a:0a:9c:1d:6e:2d:f8:3a:
1c:c7:e6:a3:94:e2:3b:ae:7f:77:cd:f7:41:53:48:8b:e8:5e:
74:80:f3:ed:78:52:55:11:e0:77:f3:ab:7b:ce:61:7c:33:a3:
c1:fc:95:17:88:9e:9f:b9:57:fa:35:ac:35:ab:1b:f3:15:a7:
12:63:bd:fb:15:19:98:ee:35:4b:3e:4f:e2:24:ba:06:3e:45:
ff:11:ff:1a:b5:c3:35:6d:12:27:9e:da:ca:28:5a:51:29:c6:
0a:36:54:c0:2f:a4:39:95:8d:95:9b:88:b7:26:7a:b6:7f:97:
35:e3:3a:57:f2:77:a4:48:d0:2b:e7:4e:76:19:32:29:cd:fd:
85:bf:5a:3e:97:57:b3:a0:b5:42:82:dc:89:51:a6:27:2e:0e:
4c:82:c6:a5:cc:f7:98:42:f4:9e:7b:fd:fb:8a:32:ef:6d:6e:
2b:01:7c:32:3b:61:84:45:a0:6a:33:f9:d3:a1:5d:6e:d4:12:
c2:9f:26:a8:fb:8a:a9:7e:68:b6:42:f5:89:0b:b0:5e:14:e1:
1b:1b:34:9a:8f:93:a9:1c:09:7b:b5:4a:bd:28:2f:7c:df:e6:
d8:1d:be:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:48:21 2026 by rpki-client