Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/c12395-c0f8-4e05-8cb1-73a3d07d2c31/1/W3qQXiWk1czLLuvk4tXDkggZdY4.mft
File: W3qQXiWk1czLLuvk4tXDkggZdY4.mft (raw, json)
Hash identifier: Tw6KFT9f99ryB9YCBvJBh5tRklSGC5/LYEfU5lZROPo=
Subject key identifier: 3B:65:7A:29:97:C9:B0:ED:FA:5E:3A:ED:4F:7D:47:F1:D7:91:92:D7
Authority key identifier: 5B:7A:90:5E:25:A4:D5:CC:CB:2E:EB:E4:E2:D5:C3:92:08:19:75:8E
Certificate issuer: /CN=5b7a905e25a4d5cccb2eebe4e2d5c3920819758e
Certificate serial: 019FAC08E42D50A2C6907DA56D8272CC2A06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W3qQXiWk1czLLuvk4tXDkggZdY4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/c12395-c0f8-4e05-8cb1-73a3d07d2c31/1/W3qQXiWk1czLLuvk4tXDkggZdY4.mft
Manifest number: 18D4
Signing time: Wed 29 Jul 2026 04:01:31 +0000
Manifest this update: Wed 29 Jul 2026 04:01:31 +0000
Manifest next update: Thu 30 Jul 2026 04:01:31 +0000
Files and hashes: 1: 1-vYQOdOZkiGteDHhx2OATUDPhTA.roa (hash: 17IIjb7LlCipVqQOC9WbNEQZCfvFgYW07a8Dgznq3+o=)
2: 2SrneGBZ78iMtO6G5dojAaHp_CA.roa (hash: mWJ7hPqfgdVi4+bEDJyz8jwgvKivAgyW0NZHOfU4mK0=)
3: W3qQXiWk1czLLuvk4tXDkggZdY4.crl (hash: zLZvLO6SeDuXzmtWPVaHXoneqde8xV74DagUU7JYlUA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/c12395-c0f8-4e05-8cb1-73a3d07d2c31/1/W3qQXiWk1czLLuvk4tXDkggZdY4.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/c12395-c0f8-4e05-8cb1-73a3d07d2c31/1/W3qQXiWk1czLLuvk4tXDkggZdY4.mft
rsync://rpki.ripe.net/repository/DEFAULT/W3qQXiWk1czLLuvk4tXDkggZdY4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:08:e4:2d:50:a2:c6:90:7d:a5:6d:82:72:cc:2a:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b7a905e25a4d5cccb2eebe4e2d5c3920819758e
Validity
Not Before: Jul 29 04:01:31 2026 GMT
Not After : Jul 30 04:01:31 2026 GMT
Subject: CN=3b657a2997c9b0edfa5e3aed4f7d47f1d79192d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:ca:56:76:e1:8a:4e:f2:35:76:f0:51:f3:fd:
f0:d3:c4:c1:78:a6:76:6d:bd:ae:6c:7f:5c:57:2b:
32:09:c3:4f:03:e7:99:39:3f:9b:fc:af:fe:a4:fb:
de:15:d4:06:98:1e:70:c4:b0:6e:8a:cb:7d:e5:4f:
89:f2:b6:df:1c:d0:cf:8c:ee:c1:5f:ca:9b:34:6f:
45:4e:dd:83:13:5c:d6:d6:d3:1a:46:5f:1e:06:8f:
67:3b:9b:74:94:7f:8b:1c:d2:1a:90:70:aa:45:68:
13:7f:e7:ef:05:0f:d3:27:ee:a1:87:b9:e0:ae:65:
43:93:7d:9f:8f:a1:45:16:09:f5:ea:ae:69:d3:33:
d1:42:a7:a4:6d:a3:4e:35:a9:d4:68:66:ac:c8:9f:
d8:a7:52:89:ea:98:26:66:a1:2d:8c:bd:1b:46:30:
07:99:b2:44:cc:c0:71:21:5a:ad:95:d5:14:d0:45:
ec:72:a0:9f:3d:67:c7:cf:de:a7:9b:8d:07:27:32:
eb:c1:16:08:30:41:5f:75:a2:f3:d8:69:92:b6:fa:
96:ad:a7:42:fd:13:d5:a1:ac:85:d9:ea:f0:24:60:
59:16:c4:47:60:a8:b5:c2:d4:77:a6:47:57:cc:6f:
d7:c9:8e:bd:f8:d1:fb:4f:3e:fd:1a:f9:43:58:31:
49:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:65:7A:29:97:C9:B0:ED:FA:5E:3A:ED:4F:7D:47:F1:D7:91:92:D7
X509v3 Authority Key Identifier:
keyid:5B:7A:90:5E:25:A4:D5:CC:CB:2E:EB:E4:E2:D5:C3:92:08:19:75:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W3qQXiWk1czLLuvk4tXDkggZdY4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/c12395-c0f8-4e05-8cb1-73a3d07d2c31/1/W3qQXiWk1czLLuvk4tXDkggZdY4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/c12395-c0f8-4e05-8cb1-73a3d07d2c31/1/W3qQXiWk1czLLuvk4tXDkggZdY4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:24:43:8c:85:ab:5a:df:e2:92:2f:75:20:f4:12:0c:b5:ff:
0f:1e:05:5f:4e:db:af:a3:46:d6:b0:bc:d9:88:a6:1d:b5:57:
0e:c2:f3:7f:84:e6:8a:78:c8:3b:dc:65:3a:8d:34:5f:d3:a6:
f5:79:69:7f:5c:16:23:e3:c1:46:65:4a:d2:67:3c:f4:5a:56:
90:3e:1d:34:1e:c8:00:4e:13:41:72:ac:de:8e:82:9c:55:0f:
c7:5c:19:d1:86:90:63:4a:11:c1:c0:86:03:e3:e0:c6:37:a7:
07:a0:6f:93:6d:47:d7:03:37:42:59:43:96:06:71:a1:34:82:
d2:24:63:19:c2:0c:c3:93:53:41:2b:83:45:e6:ba:38:b3:27:
99:5e:df:f7:ff:95:45:65:f0:67:94:8e:94:36:b7:0e:3f:52:
60:11:b5:f8:f9:3a:c6:a8:ad:df:6b:5c:8e:19:d1:10:88:4d:
92:5b:d6:16:6e:23:cb:0f:2d:a7:98:51:89:e9:f6:bb:be:59:
34:ae:0a:7d:38:b4:e1:8f:5f:75:5e:a9:47:e5:0b:33:85:a3:
b2:a9:ef:15:23:71:b4:24:16:b7:16:b3:4a:3e:12:eb:55:0c:
69:78:79:71:7b:96:a9:05:73:0e:80:47:88:ae:08:41:3a:de:
3d:a7:d7:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 06:46:13 2026 by rpki-client