Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/9c5a00-0b5f-4a95-98a8-8bd976910dbf/1/w70m_iKV5GK-JnhTPvpTHiO38QI.mft
File: w70m_iKV5GK-JnhTPvpTHiO38QI.mft (raw, json)
Hash identifier: rhK5rkyii4DsXzXkmVx4lPZfo5syU23lZ7JAiq/wagQ=
Subject key identifier: F7:5F:BA:0B:BC:DE:98:83:E1:47:81:3C:64:0E:4F:80:50:EE:50:7D
Authority key identifier: C3:BD:26:FE:22:95:E4:62:BE:26:78:53:3E:FA:53:1E:23:B7:F1:02
Certificate issuer: /CN=c3bd26fe2295e462be2678533efa531e23b7f102
Certificate serial: 019FACAD3C5FACB1923122080FBEBEFCCB0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w70m_iKV5GK-JnhTPvpTHiO38QI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/9c5a00-0b5f-4a95-98a8-8bd976910dbf/1/w70m_iKV5GK-JnhTPvpTHiO38QI.mft
Manifest number: 19D6
Signing time: Wed 29 Jul 2026 07:01:01 +0000
Manifest this update: Wed 29 Jul 2026 07:01:01 +0000
Manifest next update: Thu 30 Jul 2026 07:01:01 +0000
Files and hashes: 1: BpitMkNTOG0_ouRmz2bpaYkKoBY.roa (hash: YpWL3AH39Erg/3Vj3WOA5eh5wrqjLGB0H0SvsITlAwA=)
2: qKqi_rXQXOvxeFffB2pfRZ_x1CM.roa (hash: XYn4rn0UvMRvensr1fkhAzYC4HLrGdOg2tErj1J5QmQ=)
3: w70m_iKV5GK-JnhTPvpTHiO38QI.crl (hash: LLRsycxz4KhGfLAfgKEbYqVxHeSNfWyTLu8sSQ9KEjU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/9c5a00-0b5f-4a95-98a8-8bd976910dbf/1/w70m_iKV5GK-JnhTPvpTHiO38QI.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/9c5a00-0b5f-4a95-98a8-8bd976910dbf/1/w70m_iKV5GK-JnhTPvpTHiO38QI.mft
rsync://rpki.ripe.net/repository/DEFAULT/w70m_iKV5GK-JnhTPvpTHiO38QI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 07:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:ad:3c:5f:ac:b1:92:31:22:08:0f:be:be:fc:cb:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3bd26fe2295e462be2678533efa531e23b7f102
Validity
Not Before: Jul 29 07:01:01 2026 GMT
Not After : Jul 30 07:01:01 2026 GMT
Subject: CN=f75fba0bbcde9883e147813c640e4f8050ee507d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:d1:f1:63:77:bd:98:d2:bb:13:c6:17:67:9a:
c9:dd:e7:9b:c7:b6:43:33:93:25:aa:e4:86:c8:fe:
ed:8b:0f:57:4a:6f:b6:10:de:13:09:3d:08:d9:f0:
5e:86:1d:ca:25:65:2f:4f:65:23:2f:a0:35:47:94:
c3:ca:f7:54:ad:c7:79:c0:07:4c:55:6e:07:d6:a8:
a0:41:16:c9:f5:06:ee:cd:4e:6f:01:49:3e:70:b6:
72:13:28:58:dd:00:cc:3e:7c:cf:41:5c:54:a4:76:
23:2f:0b:8d:1e:71:c7:64:bc:34:e1:db:9b:f9:6c:
64:4d:25:47:1d:d3:47:ee:16:76:39:4e:f4:87:5f:
05:dd:f1:2e:38:bc:14:7e:dc:56:a0:eb:6c:25:c5:
d4:b5:64:e3:3e:3c:88:7a:2d:b9:dc:a3:5d:8f:de:
7d:a6:96:1e:b8:10:0e:77:cb:94:e8:c3:6d:89:d1:
a7:ac:58:0c:c6:ed:57:b1:94:91:f0:b1:2f:1c:3d:
eb:0f:62:a6:b2:e0:a9:93:04:a0:bc:03:9b:89:bf:
70:29:b4:3b:b4:8a:42:9c:09:3d:7a:08:6e:38:31:
1b:cb:18:13:8f:3f:a3:c7:2e:ae:47:94:c1:f0:fd:
86:90:48:be:ea:cb:89:07:11:0b:d2:d2:f7:fc:e9:
68:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:5F:BA:0B:BC:DE:98:83:E1:47:81:3C:64:0E:4F:80:50:EE:50:7D
X509v3 Authority Key Identifier:
keyid:C3:BD:26:FE:22:95:E4:62:BE:26:78:53:3E:FA:53:1E:23:B7:F1:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w70m_iKV5GK-JnhTPvpTHiO38QI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/9c5a00-0b5f-4a95-98a8-8bd976910dbf/1/w70m_iKV5GK-JnhTPvpTHiO38QI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/9c5a00-0b5f-4a95-98a8-8bd976910dbf/1/w70m_iKV5GK-JnhTPvpTHiO38QI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:f4:e6:1c:62:00:ed:69:b0:b9:40:2c:1d:6e:aa:1b:7f:41:
d6:d6:99:55:67:4a:39:6b:f3:a8:cb:6b:f8:71:a3:6a:5e:e9:
ed:b9:3f:da:e5:7c:13:bc:fa:1a:f2:78:0c:dd:8f:20:47:d3:
26:d8:76:53:1b:65:1c:49:7c:c4:0c:64:b9:70:da:40:ec:74:
3f:21:a4:7f:62:5f:3b:22:41:5c:66:43:29:ce:7e:ad:10:a2:
4f:5e:2f:da:7a:da:90:2d:d0:a2:cc:4f:9d:31:cd:51:87:81:
eb:25:96:08:85:8b:9c:e0:c3:5c:4a:5e:b7:7f:b5:e7:8d:a3:
50:e3:84:5e:5c:95:69:32:5d:43:27:7f:e0:ae:23:94:50:59:
12:4f:7f:21:08:1c:13:27:05:79:6b:dd:f6:a9:a2:89:97:46:
05:49:79:7f:b7:88:30:39:c1:18:45:71:4c:a9:bf:0d:51:e9:
d2:ac:65:b6:a3:af:ba:11:16:f5:e6:e8:84:99:94:dd:14:5a:
df:0c:a0:32:d9:b5:f5:d1:c9:36:96:d6:85:07:af:c8:e5:65:
f2:b4:51:ee:45:e6:e6:3b:38:5e:c2:02:73:1b:bb:8e:d7:a1:
a5:83:fe:f2:c7:10:31:1b:27:2b:9a:0e:af:aa:a3:e8:21:46:
cb:c3:b6:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 14:14:55 2026 by rpki-client