Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f5/af9c78-6ede-40df-89c1-79725fa2e133/1/w3URP9S_vTixBDhDwwkmoRDMD1E.mft
File: w3URP9S_vTixBDhDwwkmoRDMD1E.mft (raw, json)
Hash identifier: KVDVDrcXzZvLQ2qS9t0ZDSUuvDlrUIbtSIAbEDhJBgg=
Subject key identifier: F3:E3:1B:64:55:A5:D2:D4:93:D3:89:43:8C:E4:6E:1B:11:6F:FC:F3
Authority key identifier: C3:75:11:3F:D4:BF:BD:38:B1:04:38:43:C3:09:26:A1:10:CC:0F:51
Certificate issuer: /CN=c375113fd4bfbd38b1043843c30926a110cc0f51
Certificate serial: 01A1103B9DD499782369ECD790BB825C823B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w3URP9S_vTixBDhDwwkmoRDMD1E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/af9c78-6ede-40df-89c1-79725fa2e133/1/w3URP9S_vTixBDhDwwkmoRDMD1E.mft
Manifest number: 1A8F
Signing time: Tue 06 Oct 2026 08:01:44 +0000
Manifest this update: Tue 06 Oct 2026 08:01:44 +0000
Manifest next update: Wed 07 Oct 2026 08:01:44 +0000
Files and hashes: 1: TYwN3t32Z7xKSSbdeezcjvxtZPw.roa (hash: vACqWvZBDZtntkC9z+JDWdjz/Gh+6JNnrhSbEy009gw=)
2: ZJWhX_sHEjs97qyEWeCy7JLXnqw.roa (hash: bAXAo9VS32osXOlNSknnXOi501Vm+Z7vmbwaL73CoDc=)
3: w3URP9S_vTixBDhDwwkmoRDMD1E.crl (hash: qQXOygQkHZkPmal/XJvvCwGdKHCUmUb8L9zyRf9mv8s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/af9c78-6ede-40df-89c1-79725fa2e133/1/w3URP9S_vTixBDhDwwkmoRDMD1E.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/af9c78-6ede-40df-89c1-79725fa2e133/1/w3URP9S_vTixBDhDwwkmoRDMD1E.mft
rsync://rpki.ripe.net/repository/DEFAULT/w3URP9S_vTixBDhDwwkmoRDMD1E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 Oct 2026 08:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:10:3b:9d:d4:99:78:23:69:ec:d7:90:bb:82:5c:82:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c375113fd4bfbd38b1043843c30926a110cc0f51
Validity
Not Before: Oct 6 08:01:44 2026 GMT
Not After : Oct 7 08:01:44 2026 GMT
Subject: CN=f3e31b6455a5d2d493d389438ce46e1b116ffcf3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:c0:11:4f:42:66:47:2d:97:24:57:6a:1c:72:
13:14:dc:db:78:49:7b:e5:0b:8d:57:44:60:28:05:
90:9f:77:cd:99:48:43:ce:f7:84:4f:0a:c8:7d:a9:
5b:62:a7:be:65:c2:fe:74:42:7c:64:ce:73:94:e3:
8c:d3:a4:48:8c:07:ce:3d:13:c6:62:41:86:92:99:
32:1f:65:b5:63:13:20:8c:96:af:98:45:54:51:ff:
da:2e:dd:b5:26:c5:2e:8d:e8:05:9a:06:26:e1:d7:
6a:32:2c:b8:c0:25:e1:37:d3:40:35:68:15:a7:9c:
2e:d9:c6:b5:7e:18:08:33:fb:b9:87:83:fd:39:5c:
51:b0:54:6d:00:2b:4b:76:29:82:72:c1:12:95:dc:
1a:5c:ef:f0:e9:3a:a9:49:7c:c1:d0:fe:ef:93:30:
e2:78:b1:a3:85:23:c0:d4:cb:55:2c:dd:e9:97:38:
f5:cc:05:50:73:63:74:4c:97:83:b0:0b:fe:43:f4:
91:61:49:77:60:7a:d7:fd:83:86:05:a9:de:b3:6d:
d6:cf:fa:f8:5c:93:f8:70:46:3c:d3:a5:b0:23:8a:
e7:a4:76:ac:c3:30:47:77:4b:fc:e1:29:60:ac:e5:
c4:8e:74:39:91:1e:4a:c4:50:61:40:66:58:c6:bc:
1c:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:E3:1B:64:55:A5:D2:D4:93:D3:89:43:8C:E4:6E:1B:11:6F:FC:F3
X509v3 Authority Key Identifier:
keyid:C3:75:11:3F:D4:BF:BD:38:B1:04:38:43:C3:09:26:A1:10:CC:0F:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w3URP9S_vTixBDhDwwkmoRDMD1E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/af9c78-6ede-40df-89c1-79725fa2e133/1/w3URP9S_vTixBDhDwwkmoRDMD1E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/af9c78-6ede-40df-89c1-79725fa2e133/1/w3URP9S_vTixBDhDwwkmoRDMD1E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:3e:91:fd:13:92:c4:e3:2f:5a:69:af:08:37:7e:fa:6d:b0:
63:3d:0d:2e:75:7d:0e:0f:02:eb:14:ea:35:ea:1f:1d:c6:40:
7a:7b:82:0c:22:4d:1a:63:67:26:db:82:7a:6f:9f:f5:6e:c5:
87:66:3f:73:76:82:46:08:e8:dd:7e:aa:11:32:f9:1d:c0:d5:
09:73:d3:88:d4:a5:6f:82:b1:1e:e4:a3:19:55:f9:f2:16:1b:
14:f8:53:7d:60:81:cb:cf:67:eb:7f:68:d8:4c:32:6e:f9:7b:
07:7e:4b:ef:34:82:72:59:a3:e3:f5:a1:0e:78:7e:e9:9e:05:
85:c9:a1:0c:8b:d2:89:40:1b:bd:35:22:b7:d9:5e:b6:09:fd:
80:fe:db:45:3c:67:4e:56:a2:bc:42:b7:9b:8b:5d:d7:b2:13:
3d:b3:37:6b:2d:84:62:a3:2d:78:74:2b:e1:c9:85:31:60:24:
3b:b1:c5:2a:bf:46:56:d4:69:60:44:06:57:c5:09:79:49:cd:
b3:1f:4a:44:75:85:e7:27:72:aa:33:45:f1:57:e9:67:d3:88:
f5:b4:48:42:12:2a:76:80:66:8e:96:a1:41:88:27:cd:68:9e:
72:34:e3:1f:31:69:ed:86:b3:49:4c:0e:ef:8e:7c:02:01:88:
61:cb:fd:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 14:48:55 2026 by rpki-client