Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/40/9c5a00-0b5f-4a95-98a8-8bd976910dbf/1/w70m_iKV5GK-JnhTPvpTHiO38QI.mft
File: w70m_iKV5GK-JnhTPvpTHiO38QI.mft (raw, json)
Hash identifier: 6g9bLHzQJZS7pXMA2ynAM/0lPNqJH7snh+Uq2AgVO9s=
Subject key identifier: 5E:EA:DE:AD:FE:C0:20:6F:E8:0C:F3:62:92:79:02:F0:1D:68:19:EC
Authority key identifier: C3:BD:26:FE:22:95:E4:62:BE:26:78:53:3E:FA:53:1E:23:B7:F1:02
Certificate issuer: /CN=c3bd26fe2295e462be2678533efa531e23b7f102
Certificate serial: 01A1065C4AAA2887EFED7322A5751EB0F5B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w70m_iKV5GK-JnhTPvpTHiO38QI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/9c5a00-0b5f-4a95-98a8-8bd976910dbf/1/w70m_iKV5GK-JnhTPvpTHiO38QI.mft
Manifest number: 1A89
Signing time: Sun 04 Oct 2026 10:01:14 +0000
Manifest this update: Sun 04 Oct 2026 10:01:14 +0000
Manifest next update: Mon 05 Oct 2026 10:01:14 +0000
Files and hashes: 1: BpitMkNTOG0_ouRmz2bpaYkKoBY.roa (hash: YpWL3AH39Erg/3Vj3WOA5eh5wrqjLGB0H0SvsITlAwA=)
2: qKqi_rXQXOvxeFffB2pfRZ_x1CM.roa (hash: XYn4rn0UvMRvensr1fkhAzYC4HLrGdOg2tErj1J5QmQ=)
3: w70m_iKV5GK-JnhTPvpTHiO38QI.crl (hash: FNsyH+CQRZViGt/PsKrv/WZLv0unJo5guynWNszFu7Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/9c5a00-0b5f-4a95-98a8-8bd976910dbf/1/w70m_iKV5GK-JnhTPvpTHiO38QI.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/9c5a00-0b5f-4a95-98a8-8bd976910dbf/1/w70m_iKV5GK-JnhTPvpTHiO38QI.mft
rsync://rpki.ripe.net/repository/DEFAULT/w70m_iKV5GK-JnhTPvpTHiO38QI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 10:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:06:5c:4a:aa:28:87:ef:ed:73:22:a5:75:1e:b0:f5:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3bd26fe2295e462be2678533efa531e23b7f102
Validity
Not Before: Oct 4 10:01:14 2026 GMT
Not After : Oct 5 10:01:14 2026 GMT
Subject: CN=5eeadeadfec0206fe80cf362927902f01d6819ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:ef:a8:e9:6d:bf:59:34:2b:96:19:4d:d9:09:
bf:1f:81:1f:79:8a:eb:bc:71:9e:fd:db:58:65:e8:
99:5c:b0:e9:87:d2:ac:c4:d8:4e:65:f0:8a:d3:7c:
52:ad:52:dc:7e:b8:51:f4:02:8e:e2:ae:6a:9e:29:
9a:0f:92:39:a9:16:da:ba:31:78:20:9f:49:e3:67:
08:6f:ce:35:08:ea:e4:5e:8f:b2:d0:a4:e8:13:d6:
b9:1a:f4:65:86:76:87:bf:39:fe:13:7d:29:34:42:
35:74:48:63:d5:a4:a1:23:60:64:a1:85:7c:b2:e9:
96:61:1a:37:6f:e8:14:71:59:a9:b3:ce:8c:8f:27:
c6:55:2f:a6:3e:a6:1c:a0:d1:82:84:50:66:a3:09:
ef:d8:c3:d5:99:fe:4e:da:4b:24:15:9d:44:54:3e:
3c:a5:94:72:45:de:84:31:2a:ee:25:7e:f5:ce:78:
d8:be:78:36:f0:1c:19:81:f2:2b:a9:22:c3:a7:20:
c4:0d:24:3c:d4:a2:d1:06:5c:a0:42:3e:cf:3c:4a:
75:8c:a3:ba:76:81:61:0f:52:69:02:56:f6:a0:05:
93:c9:3c:f1:e4:47:94:25:f8:e4:35:3c:11:18:34:
2e:f4:4b:44:ed:07:3c:3a:b6:2b:24:d9:57:5c:33:
a9:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:EA:DE:AD:FE:C0:20:6F:E8:0C:F3:62:92:79:02:F0:1D:68:19:EC
X509v3 Authority Key Identifier:
keyid:C3:BD:26:FE:22:95:E4:62:BE:26:78:53:3E:FA:53:1E:23:B7:F1:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w70m_iKV5GK-JnhTPvpTHiO38QI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/9c5a00-0b5f-4a95-98a8-8bd976910dbf/1/w70m_iKV5GK-JnhTPvpTHiO38QI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/9c5a00-0b5f-4a95-98a8-8bd976910dbf/1/w70m_iKV5GK-JnhTPvpTHiO38QI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:64:47:7c:ee:02:16:cf:aa:17:f1:e2:58:cb:36:80:ef:e1:
d5:fb:e8:6a:7f:41:ac:21:41:7f:d2:b1:1e:9f:65:e2:ae:62:
fd:b3:79:11:db:bd:a2:d2:fe:ad:7d:bd:bb:b7:e7:b6:24:0b:
b8:fa:51:4e:27:e9:11:9e:5f:e0:3a:32:da:37:04:4b:ca:27:
17:47:a1:da:d6:83:f4:5b:d8:2d:94:61:f5:e0:f6:20:b9:1e:
75:5c:14:96:80:5a:39:e3:67:c2:f3:15:8c:99:41:36:dd:1f:
91:6f:e0:7b:20:22:e6:23:e2:0a:d9:cc:22:19:7a:9a:9d:d2:
9b:29:4f:b9:8c:ba:48:cd:65:7a:32:79:b0:ef:36:e7:60:9e:
5e:97:1e:2a:e8:80:6c:6e:35:1d:e4:4d:7e:da:64:17:3e:a5:
54:90:5e:2e:46:90:f0:9e:25:aa:ed:8a:89:94:87:4d:16:b1:
90:fd:0d:8f:53:27:bd:29:15:d1:23:eb:ab:c8:3a:46:ff:4e:
ff:7d:69:44:38:35:0b:4b:af:b6:84:6e:85:46:a9:53:c3:45:
fe:85:07:a8:30:9e:e9:1d:31:32:77:e0:6f:1b:45:d1:55:0e:
9c:62:44:6e:26:c2:38:e9:9d:ee:09:3c:4f:7e:70:67:57:17:
ab:94:38:7b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEGXEqqKIfv7XMipXUesPW5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMzYmQyNmZlMjI5NWU0NjJiZTI2Nzg1MzNlZmE1MzFlMjNi
N2YxMDIwHhcNMjYxMDA0MTAwMTE0WhcNMjYxMDA1MTAwMTE0WjAzMTEwLwYDVQQD
Eyg1ZWVhZGVhZGZlYzAyMDZmZTgwY2YzNjI5Mjc5MDJmMDFkNjgxOWVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3++o6W2/WTQrlhlN2Qm/H4EfeYrr
vHGe/dtYZeiZXLDph9KsxNhOZfCK03xSrVLcfrhR9AKO4q5qnimaD5I5qRbaujF4
IJ9J42cIb841COrkXo+y0KToE9a5GvRlhnaHvzn+E30pNEI1dEhj1aShI2BkoYV8
sumWYRo3b+gUcVmps86MjyfGVS+mPqYcoNGChFBmownv2MPVmf5O2kskFZ1EVD48
pZRyRd6EMSruJX71znjYvng28BwZgfIrqSLDpyDEDSQ81KLRBlygQj7PPEp1jKO6
doFhD1JpAlb2oAWTyTzx5EeUJfjkNTwRGDQu9EtE7Qc8OrYrJNlXXDOpRQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF7q3q3+wCBv6AzzYpJ5AvAdaBnsMB8GA1UdIwQY
MBaAFMO9Jv4ileRiviZ4Uz76Ux4jt/ECMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdzcwbV9pS1Y1R0stSm5oVFB2cFRIaU8zOFFJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC85YzVhMDAtMGI1Zi00YTk1LTk4YTgt
OGJkOTc2OTEwZGJmLzEvdzcwbV9pS1Y1R0stSm5oVFB2cFRIaU8zOFFJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MC85YzVhMDAtMGI1Zi00YTk1LTk4YTgtOGJkOTc2OTEwZGJm
LzEvdzcwbV9pS1Y1R0stSm5oVFB2cFRIaU8zOFFJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlmRHfO4C
Fs+qF/HiWMs2gO/h1fvoan9BrCFBf9KxHp9l4q5i/bN5Edu9otL+rX29u7fntiQL
uPpRTifpEZ5f4Doy2jcES8onF0eh2taD9FvYLZRh9eD2ILkedVwUloBaOeNnwvMV
jJlBNt0fkW/geyAi5iPiCtnMIhl6mp3SmylPuYy6SM1lejJ5sO8252CeXpceKuiA
bG41HeRNftpkFz6lVJBeLkaQ8J4lqu2KiZSHTRaxkP0Nj1MnvSkV0SPrq8g6Rv9O
/31pRDg1C0uvtoRuhUapU8NF/oUHqDCe6R0xMnfgbxtF0VUOnGJEbibCOOmd7gk8
T35wZ1cXq5Q4ew==
-----END CERTIFICATE-----
Generated at Sun Oct 4 21:13:46 2026 by rpki-client