Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/9c5a00-0b5f-4a95-98a8-8bd976910dbf/1/w70m_iKV5GK-JnhTPvpTHiO38QI.mft
File: w70m_iKV5GK-JnhTPvpTHiO38QI.mft (raw, json)
Hash identifier: dTlSK8nfZ3NwtnKaZXk2omGALEr4sTI9Q8u3QuITzk4=
Subject key identifier: 08:64:0A:C6:1F:B1:F5:27:E8:56:E5:98:55:8A:42:43:5A:1F:27:35
Authority key identifier: C3:BD:26:FE:22:95:E4:62:BE:26:78:53:3E:FA:53:1E:23:B7:F1:02
Certificate issuer: /CN=c3bd26fe2295e462be2678533efa531e23b7f102
Certificate serial: 019D9B8774D365E5FE4B9B666E0C4D8122E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w70m_iKV5GK-JnhTPvpTHiO38QI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/9c5a00-0b5f-4a95-98a8-8bd976910dbf/1/w70m_iKV5GK-JnhTPvpTHiO38QI.mft
Manifest number: 18C4
Signing time: Fri 17 Apr 2026 13:00:38 +0000
Manifest this update: Fri 17 Apr 2026 13:00:38 +0000
Manifest next update: Sat 18 Apr 2026 13:00:38 +0000
Files and hashes: 1: BpitMkNTOG0_ouRmz2bpaYkKoBY.roa (hash: YpWL3AH39Erg/3Vj3WOA5eh5wrqjLGB0H0SvsITlAwA=)
2: qKqi_rXQXOvxeFffB2pfRZ_x1CM.roa (hash: XYn4rn0UvMRvensr1fkhAzYC4HLrGdOg2tErj1J5QmQ=)
3: w70m_iKV5GK-JnhTPvpTHiO38QI.crl (hash: XvZj7a4cpYU1WYyQrHWeX74rCji0NpWVRehpCXZSkXI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/9c5a00-0b5f-4a95-98a8-8bd976910dbf/1/w70m_iKV5GK-JnhTPvpTHiO38QI.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/9c5a00-0b5f-4a95-98a8-8bd976910dbf/1/w70m_iKV5GK-JnhTPvpTHiO38QI.mft
rsync://rpki.ripe.net/repository/DEFAULT/w70m_iKV5GK-JnhTPvpTHiO38QI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:87:74:d3:65:e5:fe:4b:9b:66:6e:0c:4d:81:22:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3bd26fe2295e462be2678533efa531e23b7f102
Validity
Not Before: Apr 17 13:00:38 2026 GMT
Not After : Apr 18 13:00:38 2026 GMT
Subject: CN=08640ac61fb1f527e856e598558a42435a1f2735
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:e7:ba:d8:18:7c:25:f3:38:f8:5b:26:f5:51:
d1:2f:af:3b:06:38:38:4b:9e:ec:44:e0:ee:e5:80:
2c:bb:4e:fd:9d:8a:a0:c2:9d:4d:c3:e7:f0:b4:c5:
a7:2b:73:6f:ee:d5:1b:bc:9c:e4:d3:f5:62:dd:e2:
8e:38:f3:b0:60:90:66:1a:90:33:f2:1c:0a:83:cc:
d3:68:f4:12:f4:87:33:ef:fa:38:7a:69:0c:e9:4b:
29:62:b5:95:7a:47:ce:ad:40:d8:d9:27:76:03:01:
49:04:bf:d0:71:ac:5e:f0:cf:18:4e:f7:36:f2:a2:
73:d4:7f:01:eb:f1:11:cc:99:5d:df:a6:ce:ff:74:
bf:e4:cc:5b:1c:58:a6:d6:2f:15:f5:45:a1:0e:56:
3a:4d:2b:a1:2d:58:9e:c4:bd:96:85:b7:90:f8:18:
40:48:5d:fa:d7:1e:ac:1e:4b:54:2e:1d:83:60:4c:
b0:b0:fb:7b:7b:23:ad:a2:6b:4f:1d:7e:57:d1:59:
c8:b5:95:cc:3b:63:e1:ae:a9:38:48:65:a4:15:ba:
f9:fc:81:9d:8f:2f:62:40:45:ca:37:62:37:21:94:
7e:91:d5:b4:7b:e1:f8:d3:39:4c:ac:3d:29:58:a7:
57:46:b5:31:f5:41:92:ef:b1:d6:69:f8:f5:a8:18:
a1:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:64:0A:C6:1F:B1:F5:27:E8:56:E5:98:55:8A:42:43:5A:1F:27:35
X509v3 Authority Key Identifier:
keyid:C3:BD:26:FE:22:95:E4:62:BE:26:78:53:3E:FA:53:1E:23:B7:F1:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w70m_iKV5GK-JnhTPvpTHiO38QI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/9c5a00-0b5f-4a95-98a8-8bd976910dbf/1/w70m_iKV5GK-JnhTPvpTHiO38QI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/9c5a00-0b5f-4a95-98a8-8bd976910dbf/1/w70m_iKV5GK-JnhTPvpTHiO38QI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:42:13:2d:b1:e2:7c:0c:2f:a8:ab:c7:af:c9:da:ea:59:54:
bf:8c:0a:46:1f:ca:6f:99:6e:b4:bd:f7:4b:ff:c8:ed:df:70:
7f:dd:05:e8:2c:b0:51:ec:26:ad:48:44:06:9d:a4:ff:ce:f9:
88:07:a7:e9:f5:19:88:00:a6:e6:45:f4:57:a2:d8:b6:ae:06:
aa:ef:c1:09:e2:aa:43:1d:f3:da:9b:14:0a:d9:b0:52:85:9e:
f5:dd:88:b5:ee:a5:53:18:63:fa:c7:04:a2:7c:de:06:04:ad:
56:44:43:77:c3:eb:cb:3d:79:66:7d:ed:26:40:45:ad:de:48:
07:3a:68:76:49:ed:d5:0e:d9:9e:ba:e0:1c:5a:67:4e:08:60:
89:3a:4b:53:f2:fd:5e:5b:4c:2e:32:4b:9f:83:61:28:ab:21:
56:65:b4:94:10:ed:6d:30:37:dd:b8:93:fc:3b:94:2e:80:33:
fe:4a:7a:ea:6a:5c:66:64:f7:23:b6:a4:bb:d3:38:f1:57:ba:
5d:8f:9d:d1:46:f4:f7:e7:44:ac:bd:30:ac:70:e2:e0:7f:61:
05:3b:5a:67:69:c1:34:6f:c3:34:6a:3c:d4:6e:98:38:37:98:
98:90:65:27:c5:8e:25:44:0a:53:a0:96:9c:02:27:de:44:48:
a5:2f:02:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:24:08 2026 by rpki-client