Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/04e8dd-de3c-47fa-a024-f33797e39bb2/1/w6SfZaPWgMQo_ZTWfmWicJ8Cks8.mft
File: w6SfZaPWgMQo_ZTWfmWicJ8Cks8.mft (raw, json)
Hash identifier: Q/6wmfj7GbdLEgyhFFiLkjNobb4arNaf/wsbgfLs9/E=
Subject key identifier: AD:77:C5:A8:92:E2:FE:E9:F9:78:DB:7C:ED:A3:86:23:3C:85:97:B2
Authority key identifier: C3:A4:9F:65:A3:D6:80:C4:28:FD:94:D6:7E:65:A2:70:9F:02:92:CF
Certificate issuer: /CN=c3a49f65a3d680c428fd94d67e65a2709f0292cf
Certificate serial: 019D9C2D59166C40C0688A94F0F8779A407F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w6SfZaPWgMQo_ZTWfmWicJ8Cks8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/04e8dd-de3c-47fa-a024-f33797e39bb2/1/w6SfZaPWgMQo_ZTWfmWicJ8Cks8.mft
Manifest number: 18C3
Signing time: Fri 17 Apr 2026 16:01:50 +0000
Manifest this update: Fri 17 Apr 2026 16:01:50 +0000
Manifest next update: Sat 18 Apr 2026 16:01:50 +0000
Files and hashes: 1: dkQTrdNvtvje7aKttedC3FE0Fck.roa (hash: IBLR02ROwGRE+mKgwpI/u7N2DEv8jHgVC6B9SzrNPZc=)
2: jkV0poRpEabjs8GbnFFp-G9LAo4.roa (hash: FGABQx3WiC5iQbCtEVt4c6hjkgReQfgzufO5sALc4Wg=)
3: w6SfZaPWgMQo_ZTWfmWicJ8Cks8.crl (hash: F3cai9DQdeCBnrKsqlFL+HeW/sIe50Pq9xliyVMA4Es=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/04e8dd-de3c-47fa-a024-f33797e39bb2/1/w6SfZaPWgMQo_ZTWfmWicJ8Cks8.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/04e8dd-de3c-47fa-a024-f33797e39bb2/1/w6SfZaPWgMQo_ZTWfmWicJ8Cks8.mft
rsync://rpki.ripe.net/repository/DEFAULT/w6SfZaPWgMQo_ZTWfmWicJ8Cks8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9c:2d:59:16:6c:40:c0:68:8a:94:f0:f8:77:9a:40:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3a49f65a3d680c428fd94d67e65a2709f0292cf
Validity
Not Before: Apr 17 16:01:50 2026 GMT
Not After : Apr 18 16:01:50 2026 GMT
Subject: CN=ad77c5a892e2fee9f978db7ceda386233c8597b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:7d:18:61:06:4e:8f:fb:16:4f:4f:2c:8b:e8:
41:9f:9e:3f:4f:9f:7f:05:84:2c:48:2a:b2:2a:8d:
50:d2:e9:f9:0a:4f:a1:b8:dc:09:1a:45:43:89:f0:
a7:46:4f:3c:ad:d6:d0:d9:a1:ce:aa:09:5f:0d:e5:
d0:78:d0:33:87:78:ec:03:e5:5b:72:da:7e:92:90:
50:79:68:ed:71:e9:b1:cf:0d:65:d7:7b:22:bf:9d:
4d:77:43:22:bf:0d:40:e1:b1:69:fb:7d:e6:8e:01:
15:13:36:2d:e3:d6:aa:b9:05:33:76:48:b3:f2:91:
fc:24:df:b8:f3:81:5a:fa:30:21:91:4c:7e:54:86:
3d:b7:b8:fc:d4:ac:9c:3c:0f:10:a8:bd:75:f1:b4:
61:8c:5b:29:b0:57:6d:da:28:35:3e:47:45:49:04:
86:9e:81:99:d2:1b:f7:4c:94:0f:fb:96:61:e5:2a:
4d:c6:a7:00:bb:30:7e:97:b0:b0:10:63:89:31:6e:
cf:96:f3:20:fd:e1:58:23:16:91:53:b6:75:9e:17:
e5:29:3f:80:f8:f4:66:a7:fb:ad:87:8f:f9:58:29:
b5:f3:90:d2:36:81:5d:60:81:f7:e3:f2:2a:08:7e:
bf:78:9c:03:f1:d2:27:9d:f1:ca:2b:59:1b:f6:2c:
2c:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:77:C5:A8:92:E2:FE:E9:F9:78:DB:7C:ED:A3:86:23:3C:85:97:B2
X509v3 Authority Key Identifier:
keyid:C3:A4:9F:65:A3:D6:80:C4:28:FD:94:D6:7E:65:A2:70:9F:02:92:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w6SfZaPWgMQo_ZTWfmWicJ8Cks8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/04e8dd-de3c-47fa-a024-f33797e39bb2/1/w6SfZaPWgMQo_ZTWfmWicJ8Cks8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/04e8dd-de3c-47fa-a024-f33797e39bb2/1/w6SfZaPWgMQo_ZTWfmWicJ8Cks8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:d1:77:b4:22:1c:9b:ef:68:62:3d:fa:b5:b1:ca:c3:3c:0e:
4b:c7:82:24:a5:71:f6:16:fa:6c:c0:4e:17:6f:c3:bf:ca:aa:
42:0f:05:65:cb:7d:be:d8:d8:ac:31:8d:12:c0:3e:ba:bf:fb:
94:fb:63:b0:9f:8f:88:65:3a:21:12:0a:a3:e0:c9:ba:d6:1e:
1a:b4:75:d8:59:5d:61:42:1d:cb:45:84:c5:4e:94:77:53:fe:
b8:39:a0:cf:b0:0d:8e:9d:dc:be:ad:73:05:11:85:fc:8a:a2:
42:6e:3d:29:f4:78:75:7c:d9:fb:bd:f7:fd:22:86:19:43:e8:
e8:20:30:a2:14:71:21:19:8a:01:14:3b:9d:38:b5:1a:b6:87:
d1:87:68:ea:8a:fe:ab:a4:2e:9c:c1:d8:c4:cd:e3:61:84:c7:
5f:77:fe:e3:21:75:cd:31:33:58:6b:a6:68:bd:b0:af:1c:5a:
27:3a:44:35:cf:79:7f:2d:d3:17:b9:c8:1b:62:9d:f5:51:b2:
74:bd:4f:5e:5d:f1:76:74:f5:b6:92:e2:f6:08:2e:7b:24:a3:
e9:3b:20:7b:25:9e:3d:35:5b:4a:90:3f:eb:a9:c9:02:02:29:
83:15:26:84:9e:b2:ea:f0:3a:69:84:33:52:26:8d:12:2a:22:
4a:ff:83:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 02:31:23 2026 by rpki-client