Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/9c5a00-0b5f-4a95-98a8-8bd976910dbf/1/w70m_iKV5GK-JnhTPvpTHiO38QI.mft
File: w70m_iKV5GK-JnhTPvpTHiO38QI.mft (raw, json)
Hash identifier: gWqpbWeIDklLX806VYEd+ohRk22iGKIv1E3BqYwE+i8=
Subject key identifier: 48:C4:E5:5D:CD:52:DA:C1:C1:6C:82:9D:61:BF:88:03:3E:92:17:D2
Authority key identifier: C3:BD:26:FE:22:95:E4:62:BE:26:78:53:3E:FA:53:1E:23:B7:F1:02
Certificate issuer: /CN=c3bd26fe2295e462be2678533efa531e23b7f102
Certificate serial: 019CAC10267A6D67CDFAE0A4184540A28B5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w70m_iKV5GK-JnhTPvpTHiO38QI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/9c5a00-0b5f-4a95-98a8-8bd976910dbf/1/w70m_iKV5GK-JnhTPvpTHiO38QI.mft
Manifest number: 1848
Signing time: Mon 02 Mar 2026 01:01:05 +0000
Manifest this update: Mon 02 Mar 2026 01:01:05 +0000
Manifest next update: Tue 03 Mar 2026 01:01:05 +0000
Files and hashes: 1: BpitMkNTOG0_ouRmz2bpaYkKoBY.roa (hash: YpWL3AH39Erg/3Vj3WOA5eh5wrqjLGB0H0SvsITlAwA=)
2: qKqi_rXQXOvxeFffB2pfRZ_x1CM.roa (hash: XYn4rn0UvMRvensr1fkhAzYC4HLrGdOg2tErj1J5QmQ=)
3: w70m_iKV5GK-JnhTPvpTHiO38QI.crl (hash: 6UTco0zJFUgQ71zd0YqyMquRrfqtJ01q190kOD/3rjM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/9c5a00-0b5f-4a95-98a8-8bd976910dbf/1/w70m_iKV5GK-JnhTPvpTHiO38QI.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/9c5a00-0b5f-4a95-98a8-8bd976910dbf/1/w70m_iKV5GK-JnhTPvpTHiO38QI.mft
rsync://rpki.ripe.net/repository/DEFAULT/w70m_iKV5GK-JnhTPvpTHiO38QI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:10:26:7a:6d:67:cd:fa:e0:a4:18:45:40:a2:8b:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3bd26fe2295e462be2678533efa531e23b7f102
Validity
Not Before: Mar 2 01:01:05 2026 GMT
Not After : Mar 3 01:01:05 2026 GMT
Subject: CN=48c4e55dcd52dac1c16c829d61bf88033e9217d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:2f:9a:15:f0:a3:b9:4d:42:33:7a:c2:66:8e:
d6:36:56:8a:70:23:e1:4f:15:33:7a:f8:95:18:96:
44:d0:3d:b8:70:88:37:2e:10:9b:53:1a:91:ca:70:
69:4c:2f:63:47:62:0a:35:8f:cf:61:4b:c2:2f:04:
6b:eb:fc:01:fb:47:b8:3b:07:be:cb:3a:66:44:3e:
3b:5d:09:a3:04:57:43:91:48:d4:49:11:d4:f6:88:
c0:48:55:2b:12:20:60:a7:b6:25:bd:bc:40:ea:4b:
6e:f0:e4:80:46:c2:8a:ec:18:dd:5f:2f:ed:e2:75:
a3:50:ce:dd:0c:68:f1:c2:be:c7:49:83:3b:a2:3b:
28:a0:64:5e:5c:b4:b2:09:6c:26:ed:f9:74:e4:60:
73:23:4b:be:a6:14:ea:db:c3:a6:65:7a:ab:c5:58:
75:e1:74:07:a4:7e:c7:15:52:06:aa:50:c4:3e:cd:
8a:77:ce:e0:de:81:be:94:e2:35:cc:78:34:b9:37:
e3:f2:82:e4:ed:50:b5:07:72:a6:a7:30:03:ef:11:
09:27:b8:4c:2d:30:0b:64:c3:e9:fd:5f:c3:f0:bb:
4c:00:bb:22:60:dc:b8:2f:76:74:8c:89:df:0d:76:
68:d7:d8:71:c9:70:f1:91:58:49:c5:bb:1f:55:33:
a0:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:C4:E5:5D:CD:52:DA:C1:C1:6C:82:9D:61:BF:88:03:3E:92:17:D2
X509v3 Authority Key Identifier:
keyid:C3:BD:26:FE:22:95:E4:62:BE:26:78:53:3E:FA:53:1E:23:B7:F1:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w70m_iKV5GK-JnhTPvpTHiO38QI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/9c5a00-0b5f-4a95-98a8-8bd976910dbf/1/w70m_iKV5GK-JnhTPvpTHiO38QI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/9c5a00-0b5f-4a95-98a8-8bd976910dbf/1/w70m_iKV5GK-JnhTPvpTHiO38QI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:02:6b:fe:cf:0c:d4:e1:f7:a6:50:c4:bd:8e:07:cf:f7:9f:
c2:cd:77:40:a6:17:7a:9f:2a:66:92:c9:c3:4d:17:74:86:39:
28:f8:59:0a:6d:04:40:4b:99:66:9a:12:86:ed:17:75:9d:e8:
e6:ed:01:01:c1:68:3a:23:24:7d:8e:0f:42:11:ee:11:62:c1:
c2:76:a4:97:76:91:50:86:d2:49:58:e5:77:0d:bc:8f:7d:24:
07:2d:29:bf:35:66:d7:ff:8f:ce:19:a5:1c:3a:36:76:30:aa:
ae:d4:cc:7d:ae:c9:41:38:12:1a:9c:1b:b3:46:be:90:5c:6b:
24:2a:ba:87:31:0f:3a:1d:68:a5:e4:4a:a8:f6:20:34:b5:38:
b8:e9:a3:f8:2e:50:06:aa:05:4a:c1:4e:f1:2c:67:ab:e3:45:
44:29:7c:b8:8d:9b:ca:a9:af:25:20:bb:00:4d:4a:71:f1:5c:
4f:99:91:3d:2a:20:6a:8a:cb:33:85:53:66:46:55:b2:fc:5f:
1c:b0:c7:0e:9e:95:67:e1:5c:bf:67:bc:2d:04:5c:17:74:8e:
02:1c:68:0e:aa:76:20:e1:0c:ec:2c:8a:a8:ce:1b:8b:05:b8:
97:ee:a9:19:06:c5:e9:e5:4c:29:e3:a8:fe:11:0f:0e:84:7c:
3c:d5:1c:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:21:02 2026 by rpki-client