Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/af9c78-6ede-40df-89c1-79725fa2e133/1/w3URP9S_vTixBDhDwwkmoRDMD1E.mft
File: w3URP9S_vTixBDhDwwkmoRDMD1E.mft (raw, json)
Hash identifier: wUvw13yPGJM+8GL4BC/Xl0I7WAkSH0dYukID472CgFM=
Subject key identifier: 0C:07:00:4D:F4:43:6F:F8:A9:12:34:A8:26:84:1F:8C:C2:1C:FF:68
Authority key identifier: C3:75:11:3F:D4:BF:BD:38:B1:04:38:43:C3:09:26:A1:10:CC:0F:51
Certificate issuer: /CN=c375113fd4bfbd38b1043843c30926a110cc0f51
Certificate serial: 019F95B76C379AADA4D71C58E27645F6C9DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w3URP9S_vTixBDhDwwkmoRDMD1E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/af9c78-6ede-40df-89c1-79725fa2e133/1/w3URP9S_vTixBDhDwwkmoRDMD1E.mft
Manifest number: 19CB
Signing time: Fri 24 Jul 2026 20:00:53 +0000
Manifest this update: Fri 24 Jul 2026 20:00:53 +0000
Manifest next update: Sat 25 Jul 2026 20:00:53 +0000
Files and hashes: 1: TYwN3t32Z7xKSSbdeezcjvxtZPw.roa (hash: vACqWvZBDZtntkC9z+JDWdjz/Gh+6JNnrhSbEy009gw=)
2: ZJWhX_sHEjs97qyEWeCy7JLXnqw.roa (hash: bAXAo9VS32osXOlNSknnXOi501Vm+Z7vmbwaL73CoDc=)
3: w3URP9S_vTixBDhDwwkmoRDMD1E.crl (hash: nlhKdVARneRroIQ+D3LnI+e6yzZn/IQFm2qnjN//TyE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/af9c78-6ede-40df-89c1-79725fa2e133/1/w3URP9S_vTixBDhDwwkmoRDMD1E.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/af9c78-6ede-40df-89c1-79725fa2e133/1/w3URP9S_vTixBDhDwwkmoRDMD1E.mft
rsync://rpki.ripe.net/repository/DEFAULT/w3URP9S_vTixBDhDwwkmoRDMD1E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:95:b7:6c:37:9a:ad:a4:d7:1c:58:e2:76:45:f6:c9:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c375113fd4bfbd38b1043843c30926a110cc0f51
Validity
Not Before: Jul 24 20:00:53 2026 GMT
Not After : Jul 25 20:00:53 2026 GMT
Subject: CN=0c07004df4436ff8a91234a826841f8cc21cff68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:e3:7f:fd:c4:cb:38:ee:c8:7f:fb:9e:60:26:
ef:17:34:97:c3:43:93:4e:e1:4f:a4:c7:f2:09:8d:
d8:68:e7:f1:f6:3f:14:aa:30:db:72:ec:2d:fa:25:
31:4c:e2:58:fd:f2:d9:c7:6c:bc:fc:95:00:b0:05:
02:3b:c1:8a:10:d0:e4:94:56:49:49:c0:4b:9a:a5:
60:b2:c3:82:e9:4f:68:a8:8d:3d:e8:f5:46:c1:0a:
b5:43:f9:22:f8:ba:15:13:c3:fc:3c:94:0c:01:f1:
3d:21:0b:4b:b4:4b:37:6d:17:51:41:36:d5:c5:a3:
36:ed:dd:22:5b:be:eb:36:f3:0c:9d:23:b5:d4:8e:
01:be:8d:f3:71:92:ff:a7:ae:b9:d6:64:d4:01:87:
15:ef:48:3c:92:24:36:a9:34:e1:ba:b2:ee:49:92:
92:d9:42:2d:5c:82:7d:e6:38:db:75:c4:5e:af:8b:
06:0b:da:ff:2e:21:fa:2a:d6:ef:48:0d:b8:d4:0b:
7b:f8:85:7b:33:db:05:26:54:a5:b2:30:17:25:ed:
09:bd:1d:09:d6:a3:62:5c:90:16:cd:df:22:48:64:
b9:60:90:42:7a:58:68:e8:8c:28:90:85:6a:9c:78:
42:f5:49:9d:54:b3:c6:cf:b8:b6:38:a8:38:37:b6:
64:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:07:00:4D:F4:43:6F:F8:A9:12:34:A8:26:84:1F:8C:C2:1C:FF:68
X509v3 Authority Key Identifier:
keyid:C3:75:11:3F:D4:BF:BD:38:B1:04:38:43:C3:09:26:A1:10:CC:0F:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w3URP9S_vTixBDhDwwkmoRDMD1E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/af9c78-6ede-40df-89c1-79725fa2e133/1/w3URP9S_vTixBDhDwwkmoRDMD1E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/af9c78-6ede-40df-89c1-79725fa2e133/1/w3URP9S_vTixBDhDwwkmoRDMD1E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:70:ef:9d:85:40:f5:65:3d:90:4e:77:f5:4d:c9:4b:d3:b0:
81:d5:e8:66:84:b7:b3:2a:40:0b:da:3f:d6:f4:7a:9b:fd:6e:
6d:c3:f8:72:f1:16:78:78:3a:ce:e6:54:c2:07:91:3e:fd:25:
cd:87:00:ce:9b:30:6d:ec:7f:7c:db:92:45:8a:cc:16:29:7a:
f9:2d:71:f6:d6:8d:69:75:6b:5e:b1:3e:e1:76:d3:cf:4a:72:
42:8c:60:87:dd:c8:66:9b:06:43:30:6a:8f:fc:14:a2:a3:b2:
e4:ea:2e:55:03:2e:1c:42:c6:e2:76:5d:f8:62:61:13:aa:c7:
c7:08:92:f5:86:c2:66:e2:fe:d3:a9:77:1e:09:2c:1d:fb:e8:
48:84:c8:34:f9:15:93:fb:1d:d5:38:d2:e6:f4:1a:f1:88:da:
75:c1:7e:3f:07:95:96:77:61:29:76:44:69:77:62:2e:23:97:
e6:8b:2d:c6:4f:7d:62:ca:a7:62:bf:05:e0:37:c8:17:f2:ce:
16:c1:36:5b:4c:b3:5c:05:71:bc:7b:73:32:0f:e7:d6:d9:a1:
56:8e:a8:12:5a:61:ef:a0:aa:a9:98:e8:d9:52:b8:97:9d:e2:
b8:98:43:a3:5b:b0:9b:a0:82:52:61:58:17:ae:1b:c7:cd:44:
ae:0c:3b:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 22:15:00 2026 by rpki-client