Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/06/c12395-c0f8-4e05-8cb1-73a3d07d2c31/1/W3qQXiWk1czLLuvk4tXDkggZdY4.mft
File: W3qQXiWk1czLLuvk4tXDkggZdY4.mft (raw, json)
Hash identifier: iQbCICi3t1kvycUNgbD3DheAcGyR4cpVz9ntqj54xkI=
Subject key identifier: E1:C8:23:BC:D3:39:10:2E:55:C2:4D:C0:73:4A:8D:49:9B:97:8C:27
Authority key identifier: 5B:7A:90:5E:25:A4:D5:CC:CB:2E:EB:E4:E2:D5:C3:92:08:19:75:8E
Certificate issuer: /CN=5b7a905e25a4d5cccb2eebe4e2d5c3920819758e
Certificate serial: 01A0E1064D3D5BB15EDA1FDD905733BA380B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W3qQXiWk1czLLuvk4tXDkggZdY4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/c12395-c0f8-4e05-8cb1-73a3d07d2c31/1/W3qQXiWk1czLLuvk4tXDkggZdY4.mft
Manifest number: 1974
Signing time: Sun 27 Sep 2026 04:01:21 +0000
Manifest this update: Sun 27 Sep 2026 04:01:21 +0000
Manifest next update: Mon 28 Sep 2026 04:01:21 +0000
Files and hashes: 1: 1-vYQOdOZkiGteDHhx2OATUDPhTA.roa (hash: 17IIjb7LlCipVqQOC9WbNEQZCfvFgYW07a8Dgznq3+o=)
2: 2SrneGBZ78iMtO6G5dojAaHp_CA.roa (hash: mWJ7hPqfgdVi4+bEDJyz8jwgvKivAgyW0NZHOfU4mK0=)
3: W3qQXiWk1czLLuvk4tXDkggZdY4.crl (hash: QEw+qPM1fU4JW1XW5IiO8u6cvTkVqXIyb0zRfao5Lb4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/c12395-c0f8-4e05-8cb1-73a3d07d2c31/1/W3qQXiWk1czLLuvk4tXDkggZdY4.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/c12395-c0f8-4e05-8cb1-73a3d07d2c31/1/W3qQXiWk1czLLuvk4tXDkggZdY4.mft
rsync://rpki.ripe.net/repository/DEFAULT/W3qQXiWk1czLLuvk4tXDkggZdY4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 04:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e1:06:4d:3d:5b:b1:5e:da:1f:dd:90:57:33:ba:38:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b7a905e25a4d5cccb2eebe4e2d5c3920819758e
Validity
Not Before: Sep 27 04:01:21 2026 GMT
Not After : Sep 28 04:01:21 2026 GMT
Subject: CN=e1c823bcd339102e55c24dc0734a8d499b978c27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:e7:c9:24:f3:9f:d6:77:a8:9b:38:60:67:2a:
56:55:92:92:10:8c:f2:bb:35:84:c6:1b:e0:93:23:
e3:78:c4:94:fd:08:eb:81:03:9a:60:48:fc:36:55:
66:76:5d:d3:f8:6f:b8:e7:9c:00:89:8f:a4:25:88:
03:d6:40:51:44:26:06:a3:aa:eb:7c:96:b9:1a:ea:
c9:1a:5e:b7:99:da:e6:af:05:ef:fd:44:0b:7d:b2:
21:ba:72:ce:5d:90:ce:9c:54:e1:7c:78:fc:59:26:
7e:62:65:3b:eb:ad:f9:0e:22:6f:a4:79:06:e5:13:
1d:15:3d:f6:bb:39:73:d8:80:df:d0:e8:e8:80:43:
15:c2:3d:98:33:f0:23:15:d6:0e:77:af:91:6d:1c:
23:38:76:a6:a0:3f:b0:c3:2f:82:5d:49:4c:4c:82:
96:b8:55:86:43:92:9d:e9:16:88:f8:af:4f:b9:03:
17:f7:8b:0e:87:26:e0:18:54:08:f3:ff:01:c5:50:
b0:44:67:b3:ab:75:54:3c:5f:c3:df:3c:f3:19:a0:
a6:13:98:15:49:21:b3:5d:27:70:47:46:79:03:62:
82:47:ed:9c:73:02:e5:35:82:3f:93:d3:df:48:41:
d9:3b:ba:73:f2:d1:96:d8:9a:2f:3c:7e:00:b2:6a:
fd:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:C8:23:BC:D3:39:10:2E:55:C2:4D:C0:73:4A:8D:49:9B:97:8C:27
X509v3 Authority Key Identifier:
keyid:5B:7A:90:5E:25:A4:D5:CC:CB:2E:EB:E4:E2:D5:C3:92:08:19:75:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W3qQXiWk1czLLuvk4tXDkggZdY4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/c12395-c0f8-4e05-8cb1-73a3d07d2c31/1/W3qQXiWk1czLLuvk4tXDkggZdY4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/c12395-c0f8-4e05-8cb1-73a3d07d2c31/1/W3qQXiWk1czLLuvk4tXDkggZdY4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:32:6b:d7:1d:ec:51:15:5f:e1:a5:33:0a:25:83:cb:5d:de:
6e:bb:54:be:d6:6e:40:c8:e9:64:50:17:cc:c5:80:59:f8:f7:
7b:c4:77:f0:39:6d:f3:a7:7a:f9:64:80:12:b5:ac:80:c7:9e:
5a:f2:23:52:9b:d7:79:5e:ea:8f:32:78:92:c1:0d:ed:2c:f2:
43:b9:ad:aa:30:54:2e:d3:15:45:78:a3:d2:ca:81:87:fd:4f:
5c:08:90:66:c9:f1:72:6d:42:ae:14:17:c7:39:b2:11:d4:d8:
3d:ef:67:ff:92:20:00:7c:cf:41:c5:1c:60:63:91:b6:33:2a:
f0:18:21:ad:8f:bd:5c:00:2e:97:4e:22:6e:86:a3:76:d9:77:
aa:27:eb:a4:e7:96:14:06:49:a5:77:b0:e8:e4:8e:2d:22:92:
d1:1c:b4:1b:6d:86:bb:04:c3:9e:73:70:4a:37:67:3e:ce:6d:
85:d9:5e:35:7a:3d:b3:7b:7b:ad:58:2e:9d:d5:4f:28:b7:31:
e8:ad:6b:7d:c9:f7:1f:90:0c:9a:03:6f:b5:ee:19:58:ac:d3:
23:76:c8:d1:d9:34:07:cd:20:be:2e:eb:7e:c4:ae:6c:ea:59:
79:c1:0a:c2:08:99:cc:6c:94:72:bd:37:1e:6c:fc:cf:ca:6a:
db:9f:07:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 11:04:23 2026 by rpki-client