Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/93620e-7528-4aac-9212-c7857a033962/1/w6iCsQ8bqepLofp3BttkdH5ipBM.mft
File: w6iCsQ8bqepLofp3BttkdH5ipBM.mft (raw, json)
Hash identifier: KxR/StDNNrkxtLpTkVqoPSKSpRV2JRWjM8fPTxOW6CM=
Subject key identifier: 49:A2:7E:0B:7B:23:45:A2:85:9A:1C:CB:76:1D:C7:57:3D:4E:1C:CC
Authority key identifier: C3:A8:82:B1:0F:1B:A9:EA:4B:A1:FA:77:06:DB:64:74:7E:62:A4:13
Certificate issuer: /CN=c3a882b10f1ba9ea4ba1fa7706db64747e62a413
Certificate serial: 019FAA88868ACCFC9CC67690049614C0FCB2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w6iCsQ8bqepLofp3BttkdH5ipBM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/93620e-7528-4aac-9212-c7857a033962/1/w6iCsQ8bqepLofp3BttkdH5ipBM.mft
Manifest number: 19D3
Signing time: Tue 28 Jul 2026 21:01:41 +0000
Manifest this update: Tue 28 Jul 2026 21:01:41 +0000
Manifest next update: Wed 29 Jul 2026 21:01:41 +0000
Files and hashes: 1: 3zDXj12FVAF9XeXyFE67e6JY6lg.roa (hash: yDL38rTQ8XpaiZahcdQcgu5FHofBAzcqqnIqz6pUsPE=)
2: QDqYZmLzV23YVoA-rNr3_dudehM.roa (hash: DU7wizlaOucg4WwRR/OJogCxUlPPjJyoBT/zCr/m24w=)
3: w6iCsQ8bqepLofp3BttkdH5ipBM.crl (hash: TNuLmyweJA8/vdnkmqwZ9kxM0G3b5KbQBQnLzBsyXKs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/93620e-7528-4aac-9212-c7857a033962/1/w6iCsQ8bqepLofp3BttkdH5ipBM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/93620e-7528-4aac-9212-c7857a033962/1/w6iCsQ8bqepLofp3BttkdH5ipBM.mft
rsync://rpki.ripe.net/repository/DEFAULT/w6iCsQ8bqepLofp3BttkdH5ipBM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 21:01:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:88:86:8a:cc:fc:9c:c6:76:90:04:96:14:c0:fc:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3a882b10f1ba9ea4ba1fa7706db64747e62a413
Validity
Not Before: Jul 28 21:01:41 2026 GMT
Not After : Jul 29 21:01:41 2026 GMT
Subject: CN=49a27e0b7b2345a2859a1ccb761dc7573d4e1ccc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:ee:db:7f:43:c9:d4:a2:55:c3:be:4d:6b:34:
70:ca:d8:f0:c2:22:70:06:01:57:50:92:bf:9f:8e:
bf:e1:75:dc:14:0b:ca:10:a5:12:21:e3:dc:5d:a2:
81:1e:29:61:e5:4e:d5:98:2e:51:6f:28:fb:ca:92:
21:6e:e1:c3:4e:1a:5b:58:60:23:d0:ef:d4:42:dc:
61:b8:60:9b:46:21:9f:29:06:2c:03:1a:85:a2:35:
77:36:c3:e3:07:76:23:8a:5e:f1:e9:9b:00:bd:be:
9a:ea:42:49:74:cf:1a:09:bb:c1:75:c0:73:f6:84:
eb:df:7a:d8:3c:60:0d:e5:ae:b6:db:0d:05:e1:35:
09:b7:a2:74:60:05:08:c2:38:8e:53:8d:6d:44:4a:
c7:06:93:68:47:92:c5:49:04:84:bc:12:cb:33:32:
41:5e:61:f6:01:94:7f:42:7a:a0:1c:99:1d:95:66:
82:93:c8:82:11:1a:77:c6:a9:c8:b5:28:c0:bb:5f:
45:e7:69:6b:5c:a0:c4:1e:e5:67:1c:53:93:49:ea:
3b:25:6c:1f:ed:4e:54:88:04:b6:13:29:a0:9b:3d:
b1:5e:aa:91:eb:fa:29:44:9b:b5:02:d1:87:21:8b:
ad:e6:5a:7e:b2:8d:41:9d:13:a3:1a:42:7a:ad:5f:
a7:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:A2:7E:0B:7B:23:45:A2:85:9A:1C:CB:76:1D:C7:57:3D:4E:1C:CC
X509v3 Authority Key Identifier:
keyid:C3:A8:82:B1:0F:1B:A9:EA:4B:A1:FA:77:06:DB:64:74:7E:62:A4:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w6iCsQ8bqepLofp3BttkdH5ipBM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/93620e-7528-4aac-9212-c7857a033962/1/w6iCsQ8bqepLofp3BttkdH5ipBM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/93620e-7528-4aac-9212-c7857a033962/1/w6iCsQ8bqepLofp3BttkdH5ipBM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:81:b8:10:d5:b5:6c:85:c8:23:e6:eb:91:c4:c0:6d:39:93:
6c:62:84:cd:bf:5c:d3:35:d1:11:80:7c:1c:d4:c6:d7:48:1d:
91:66:7c:f5:a0:02:51:48:d5:bc:87:3f:68:bc:28:6c:43:df:
dd:35:a9:ee:54:52:0c:27:e4:56:78:66:2a:58:94:d5:db:9c:
9e:6b:c7:e1:c0:c7:e5:93:fd:b3:1b:16:81:c2:ce:74:93:99:
b7:f7:6f:f4:c4:0e:27:a0:4c:02:7d:23:2e:99:75:26:24:b4:
1f:7c:36:64:0a:26:b8:4a:93:b7:48:21:f0:b7:8f:8c:e4:78:
5c:3a:52:81:7a:c6:60:98:21:3d:c6:8c:2c:2a:19:ee:7f:7e:
31:41:8d:16:9b:71:45:01:74:ef:94:52:29:ca:f3:06:77:f8:
bb:c3:d6:4c:22:6e:11:62:22:ca:11:8b:0e:99:31:67:6c:63:
2a:04:5d:6b:f2:d5:1a:09:70:5e:e4:e7:63:a5:4a:85:a2:ae:
bf:f0:95:d5:e2:20:32:fb:19:d1:19:6e:5b:9d:1a:bc:dd:36:
98:00:65:4c:11:ae:bf:84:8d:05:20:8f:ff:44:c3:98:f3:a5:
47:9f:52:a5:9f:2a:a6:e9:06:d9:d3:2b:06:fd:d8:4c:90:fe:
2f:21:c7:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:28:55 2026 by rpki-client