
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/363ba7-89e3-495f-aa2e-c1eb73ffd416/1/w2gG6gYvYFOEEoi0RuLg3tWy8uc.mft
File: w2gG6gYvYFOEEoi0RuLg3tWy8uc.mft (raw, json)
Hash identifier: AT1nV9AJkoQh+z52Rk4LpfnLubT59N7iGZxvQclS5Z4=
Subject key identifier: 99:C7:A5:1D:18:F1:E1:27:63:F7:5C:A7:A8:2D:F1:6F:FD:0C:1B:97
Authority key identifier: C3:68:06:EA:06:2F:60:53:84:12:88:B4:46:E2:E0:DE:D5:B2:F2:E7
Certificate issuer: /CN=c36806ea062f6053841288b446e2e0ded5b2f2e7
Certificate serial: 019ED34F2ACAEA7334457EB4D65F65DDD8B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w2gG6gYvYFOEEoi0RuLg3tWy8uc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/363ba7-89e3-495f-aa2e-c1eb73ffd416/1/w2gG6gYvYFOEEoi0RuLg3tWy8uc.mft
Manifest number: 1965
Signing time: Wed 17 Jun 2026 02:00:41 +0000
Manifest this update: Wed 17 Jun 2026 02:00:41 +0000
Manifest next update: Thu 18 Jun 2026 02:00:41 +0000
Files and hashes: 1: HKW_JvuPX0mHM7lazYSgyR0g0uM.roa (hash: Jh1Szq0fa2LL5rNZCDMcjRVX03Rzj5K0HXlv8wVQfI0=)
2: TZ8ebUDvVSJ909itJWgZrOe21gA.roa (hash: Lbig1GSFrk10qV21/rpvsSSWNduF4FEdkvJj9QTS+kg=)
3: w2gG6gYvYFOEEoi0RuLg3tWy8uc.crl (hash: 3gebgJPhjM3xzq0Is+v6ov8f7y9xXmGkmbj3Km/WEFM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/363ba7-89e3-495f-aa2e-c1eb73ffd416/1/w2gG6gYvYFOEEoi0RuLg3tWy8uc.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/363ba7-89e3-495f-aa2e-c1eb73ffd416/1/w2gG6gYvYFOEEoi0RuLg3tWy8uc.mft
rsync://rpki.ripe.net/repository/DEFAULT/w2gG6gYvYFOEEoi0RuLg3tWy8uc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 18 Jun 2026 02:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:d3:4f:2a:ca:ea:73:34:45:7e:b4:d6:5f:65:dd:d8:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c36806ea062f6053841288b446e2e0ded5b2f2e7
Validity
Not Before: Jun 17 02:00:41 2026 GMT
Not After : Jun 18 02:00:41 2026 GMT
Subject: CN=99c7a51d18f1e12763f75ca7a82df16ffd0c1b97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:fe:bf:13:43:16:ac:0c:71:9f:77:ff:0f:f4:
93:64:bd:34:29:59:a7:78:ef:14:39:5b:f1:4d:fa:
52:d3:0a:17:6e:d1:a7:83:22:7a:9a:ea:b0:c1:e3:
39:8b:2e:2b:ca:b7:f6:24:b0:98:a2:1d:68:3b:7a:
f3:6c:c8:48:69:72:ac:d9:59:20:6c:fd:3c:db:f1:
e2:bd:bf:06:46:e6:aa:dc:86:30:63:7f:e5:64:d1:
c7:5d:35:c1:bd:b9:5c:1b:c7:9c:a6:62:ff:c2:31:
bd:3b:ac:e8:5f:1c:de:5a:e0:9a:46:64:14:c2:33:
48:4c:df:25:e8:8e:20:ac:e2:3d:4b:77:fd:c9:3b:
1c:65:60:30:eb:97:2a:75:c2:28:26:55:4a:bd:41:
cc:9f:c3:48:9f:af:e2:17:b5:bf:4d:74:9b:62:90:
f2:19:05:4f:b5:2c:53:29:19:58:4c:6c:a6:16:83:
3b:65:d3:30:3d:67:c2:b7:3f:80:08:e8:83:ed:a8:
a3:8d:7f:8c:e8:b6:13:08:71:ff:5a:be:60:e6:ed:
ad:b5:91:3c:a0:76:4a:eb:43:f7:ff:23:13:34:37:
26:88:cc:55:91:ad:65:b1:b4:12:78:33:a6:13:f3:
cb:df:57:ad:07:1c:f3:4b:48:31:a8:c0:c7:91:0a:
f8:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:C7:A5:1D:18:F1:E1:27:63:F7:5C:A7:A8:2D:F1:6F:FD:0C:1B:97
X509v3 Authority Key Identifier:
keyid:C3:68:06:EA:06:2F:60:53:84:12:88:B4:46:E2:E0:DE:D5:B2:F2:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w2gG6gYvYFOEEoi0RuLg3tWy8uc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/363ba7-89e3-495f-aa2e-c1eb73ffd416/1/w2gG6gYvYFOEEoi0RuLg3tWy8uc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/363ba7-89e3-495f-aa2e-c1eb73ffd416/1/w2gG6gYvYFOEEoi0RuLg3tWy8uc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:9b:41:ab:f4:58:9f:49:da:17:6d:27:a2:af:45:ab:60:e8:
ed:8c:83:f0:6c:07:27:ad:23:ba:a9:11:2d:ce:b2:ad:43:11:
c0:18:7f:8b:6d:db:37:50:9f:f0:4e:43:06:ff:ea:85:65:95:
db:d1:8c:40:d6:f0:32:79:84:5c:4d:cb:74:b6:6c:27:9d:78:
e4:ec:ab:11:bf:72:9d:3b:5e:07:b0:0c:cb:24:df:00:25:03:
6e:66:53:f1:72:e6:76:9f:28:f6:12:43:29:b9:95:1c:c1:a3:
0a:6b:fe:05:ea:88:5c:07:8d:26:de:6f:b5:03:a5:e1:43:ad:
b1:45:cf:28:9b:a6:75:e3:d9:c4:9b:db:22:ad:43:81:b8:d7:
e1:9f:42:df:52:ba:2b:f3:ee:9e:93:89:cf:b3:e8:8f:56:2e:
1f:c0:b0:20:4c:7e:76:a8:d2:77:76:21:3a:aa:7f:dc:46:e0:
92:90:f5:7b:4d:28:8f:8f:65:c1:4f:00:5a:e3:ee:31:7c:30:
ba:ae:e9:cf:f4:f8:aa:57:e3:27:16:5d:5a:d7:86:95:b1:52:
78:dc:7c:55:cd:b2:3e:e8:51:0e:a5:62:9c:48:9d:59:78:27:
97:eb:c4:89:e9:d7:fc:23:44:63:e7:4b:1e:05:0e:3f:6a:1b:
3e:37:7f:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 11:54:24 2026 by rpki-client