Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/37e363-84d1-470e-96a2-0ef1cac7418d/1/w7Q1HgpJXCbv3G5BXwuxifu9bt8.mft
File: w7Q1HgpJXCbv3G5BXwuxifu9bt8.mft (raw, json)
Hash identifier: SD396bhBml9g1lvJ/wIp1qWrvcU70l1gj4t1C9Ly/Js=
Subject key identifier: 0D:AD:9E:11:47:36:6D:5E:68:97:BE:F5:78:FF:1F:3A:6D:B3:0B:95
Authority key identifier: C3:B4:35:1E:0A:49:5C:26:EF:DC:6E:41:5F:0B:B1:89:FB:BD:6E:DF
Certificate issuer: /CN=c3b4351e0a495c26efdc6e415f0bb189fbbd6edf
Certificate serial: 019D9A06B4AF78B233104F4A1C2C26F660A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w7Q1HgpJXCbv3G5BXwuxifu9bt8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/37e363-84d1-470e-96a2-0ef1cac7418d/1/w7Q1HgpJXCbv3G5BXwuxifu9bt8.mft
Manifest number: 18C4
Signing time: Fri 17 Apr 2026 06:00:23 +0000
Manifest this update: Fri 17 Apr 2026 06:00:23 +0000
Manifest next update: Sat 18 Apr 2026 06:00:23 +0000
Files and hashes: 1: 1-Z88AMUmP4f9jCMcq7W-T-SR5yw.roa (hash: 5q6qg65y9JwUuOw3HEGI3kuvz/rp8QoSa+GfSi94XUM=)
2: T1HaQCOa922ywanRdZuOyFcSnLM.roa (hash: 0qKkM2h/9bHDgIcIK/Uz+qlsAYQ0n2pteQdmrD0+CB0=)
3: w7Q1HgpJXCbv3G5BXwuxifu9bt8.crl (hash: DjdjHO6bQee2xZIG2xJMh7pZtmq3cLAWo79RLs4+bOw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/37e363-84d1-470e-96a2-0ef1cac7418d/1/w7Q1HgpJXCbv3G5BXwuxifu9bt8.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/37e363-84d1-470e-96a2-0ef1cac7418d/1/w7Q1HgpJXCbv3G5BXwuxifu9bt8.mft
rsync://rpki.ripe.net/repository/DEFAULT/w7Q1HgpJXCbv3G5BXwuxifu9bt8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 06:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:06:b4:af:78:b2:33:10:4f:4a:1c:2c:26:f6:60:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3b4351e0a495c26efdc6e415f0bb189fbbd6edf
Validity
Not Before: Apr 17 06:00:23 2026 GMT
Not After : Apr 18 06:00:23 2026 GMT
Subject: CN=0dad9e1147366d5e6897bef578ff1f3a6db30b95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:31:2b:b1:b7:2a:12:f4:cd:38:10:8a:20:b9:
31:11:0d:1b:91:14:59:34:37:95:ac:72:9d:a6:b2:
5f:ad:de:81:82:d6:5d:a1:cf:8f:3e:30:df:c4:25:
60:93:08:38:cd:5a:9d:f7:a2:ae:2d:09:97:9a:cd:
d2:10:e6:4f:87:49:a0:53:cf:ae:6e:a7:04:4f:4c:
69:c2:e4:01:26:93:74:f4:a3:b5:b5:66:66:9a:56:
be:f3:0f:89:c5:15:94:9b:2b:57:71:96:50:8c:dc:
7c:fa:ec:e4:7e:cd:9f:bc:2b:6c:96:94:8f:ac:89:
59:75:9c:ea:6b:ba:ff:e2:74:44:3d:56:a9:03:99:
31:77:25:c7:ef:ee:7b:f9:7c:9b:31:08:af:26:1e:
2d:03:5c:7a:97:ed:16:8f:5e:aa:8f:51:be:48:37:
48:dd:3b:1c:cc:26:d9:d4:bc:96:0b:89:0e:1e:42:
79:7f:58:cd:3d:21:25:ad:a9:ad:f7:a3:94:57:34:
b0:a8:71:3f:32:e5:87:3c:67:d5:19:97:4a:5a:0e:
51:46:cf:2e:0f:c3:c7:e4:02:7f:bb:a5:f0:56:e6:
be:ca:c1:82:b7:4f:48:b4:70:45:fb:be:98:36:e3:
e1:6d:b5:33:8b:41:86:4e:74:80:cf:20:01:67:f4:
4b:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:AD:9E:11:47:36:6D:5E:68:97:BE:F5:78:FF:1F:3A:6D:B3:0B:95
X509v3 Authority Key Identifier:
keyid:C3:B4:35:1E:0A:49:5C:26:EF:DC:6E:41:5F:0B:B1:89:FB:BD:6E:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w7Q1HgpJXCbv3G5BXwuxifu9bt8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/37e363-84d1-470e-96a2-0ef1cac7418d/1/w7Q1HgpJXCbv3G5BXwuxifu9bt8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/37e363-84d1-470e-96a2-0ef1cac7418d/1/w7Q1HgpJXCbv3G5BXwuxifu9bt8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:80:a8:58:43:d2:75:51:5c:69:60:a1:de:a1:6e:0b:e4:98:
25:96:82:8d:81:d9:7b:a0:64:ff:d7:b2:a5:01:c7:14:ee:bf:
1f:59:7e:31:18:8d:e2:15:85:77:16:3d:8d:69:62:f1:25:c5:
4d:f1:f0:82:7f:7d:6e:6c:e8:a2:ba:80:dc:45:96:13:55:bb:
a4:52:e7:9b:b4:d4:a5:a7:0f:f1:ba:b8:86:03:d4:3b:6c:52:
a5:93:a4:64:4c:7e:c3:58:ff:da:6d:78:42:29:a1:55:45:be:
ee:e5:fa:32:37:83:c9:81:e9:67:64:ac:a2:7a:4d:3f:33:dd:
63:3f:73:64:c0:ae:5b:b6:85:18:8f:16:18:6f:40:ba:43:0a:
2d:eb:47:aa:dc:a3:57:0f:46:66:04:8e:0a:aa:34:9a:3c:ee:
e3:aa:ae:49:99:08:a3:1c:97:1a:57:8e:93:52:d5:d4:17:e2:
60:fd:83:2a:f8:6c:95:8f:a6:f7:4f:f5:ba:15:37:72:93:2c:
0b:bd:69:e7:53:23:05:7c:3e:6f:c4:ae:63:7e:ea:f5:0e:b8:
c0:04:19:c9:52:86:f8:41:81:3f:ec:68:bf:54:9e:56:02:84:
71:51:31:22:6e:fa:df:50:40:12:5a:a3:26:8c:c4:33:7f:24:
c9:f2:4a:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:50:22 2026 by rpki-client