Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/f99db4-987e-43b1-a0ca-20f27e870d01/1/w3Q8id807HcKZZc_EAUUa_sysPI.mft
File: w3Q8id807HcKZZc_EAUUa_sysPI.mft (raw, json)
Hash identifier: TgniTXZTAre4fMQnzoQ8cxqgbocmgeK8W4kp0iytwAQ=
Subject key identifier: F0:C5:C7:33:04:7C:D9:F7:79:F7:3E:01:27:F1:9A:CF:08:80:23:26
Authority key identifier: C3:74:3C:89:DF:34:EC:77:0A:65:97:3F:10:05:14:6B:FB:32:B0:F2
Certificate issuer: /CN=c3743c89df34ec770a65973f1005146bfb32b0f2
Certificate serial: 019FAABF096F9671E049CBCE85BA36E64FBE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w3Q8id807HcKZZc_EAUUa_sysPI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/f99db4-987e-43b1-a0ca-20f27e870d01/1/w3Q8id807HcKZZc_EAUUa_sysPI.mft
Manifest number: 10B5
Signing time: Tue 28 Jul 2026 22:01:14 +0000
Manifest this update: Tue 28 Jul 2026 22:01:14 +0000
Manifest next update: Wed 29 Jul 2026 22:01:14 +0000
Files and hashes: 1: w3Q8id807HcKZZc_EAUUa_sysPI.crl (hash: vNwAZ9xC1MGkfVeN/nAnXh16plA73kMo2hEdW5wPucI=)
2: wUc3S_D16XdipknJCTPDOkYeAwY.roa (hash: 0ohTvuZNcLXWt6aaBFxx4qj0TlX4E91Ut4sGjwIPaz4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/f99db4-987e-43b1-a0ca-20f27e870d01/1/w3Q8id807HcKZZc_EAUUa_sysPI.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/f99db4-987e-43b1-a0ca-20f27e870d01/1/w3Q8id807HcKZZc_EAUUa_sysPI.mft
rsync://rpki.ripe.net/repository/DEFAULT/w3Q8id807HcKZZc_EAUUa_sysPI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 22:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:bf:09:6f:96:71:e0:49:cb:ce:85:ba:36:e6:4f:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3743c89df34ec770a65973f1005146bfb32b0f2
Validity
Not Before: Jul 28 22:01:14 2026 GMT
Not After : Jul 29 22:01:14 2026 GMT
Subject: CN=f0c5c733047cd9f779f73e0127f19acf08802326
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:cf:11:00:41:62:39:42:e8:29:af:3b:4e:a7:
50:dc:8a:a2:38:b8:28:7b:44:81:1a:81:2e:92:5e:
f7:20:98:0c:6d:9e:b0:dc:38:7a:59:b1:95:97:cf:
8a:eb:6d:d9:be:34:29:62:8f:d8:0a:63:82:c8:b9:
6c:46:b5:8c:6c:d3:b5:a0:5b:0a:55:83:a1:4e:6e:
26:14:07:89:3e:10:f0:da:04:bd:d4:df:0d:a3:92:
82:41:07:89:d3:90:b5:64:69:12:4a:a2:c5:21:d7:
5f:34:8e:0c:75:fd:af:84:a7:83:59:67:f8:f1:77:
a3:ec:1a:bb:cc:e2:ca:8d:32:eb:ea:79:fa:a8:05:
79:ca:48:48:d5:09:55:94:42:4c:62:83:ca:d6:7e:
63:8a:95:71:34:bd:8d:4f:a1:c8:89:54:da:3f:78:
e3:1b:61:32:cf:8c:f1:ed:a0:aa:0f:b7:6d:bb:0e:
a6:c7:e4:8f:9e:60:05:66:2f:11:88:c8:a9:2e:17:
3e:a3:1f:cb:4f:b6:4a:f8:e9:c3:02:c7:ad:c2:60:
23:96:38:5e:3e:f7:dc:d2:86:de:53:2b:a8:35:54:
d8:99:ed:b5:e1:72:65:41:c3:49:c3:10:ad:96:a0:
08:a7:ec:6c:c0:62:2b:ab:b2:7f:6a:27:50:52:9e:
75:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:C5:C7:33:04:7C:D9:F7:79:F7:3E:01:27:F1:9A:CF:08:80:23:26
X509v3 Authority Key Identifier:
keyid:C3:74:3C:89:DF:34:EC:77:0A:65:97:3F:10:05:14:6B:FB:32:B0:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w3Q8id807HcKZZc_EAUUa_sysPI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f99db4-987e-43b1-a0ca-20f27e870d01/1/w3Q8id807HcKZZc_EAUUa_sysPI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f99db4-987e-43b1-a0ca-20f27e870d01/1/w3Q8id807HcKZZc_EAUUa_sysPI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:86:dc:cd:ff:da:22:88:b5:5d:8f:28:c8:27:cf:4f:29:7f:
02:62:87:e6:3a:5f:0c:f6:aa:0a:4c:98:ea:b8:e2:33:50:8d:
a4:ff:f9:ce:54:07:67:6d:46:5b:fa:e3:e7:d9:3b:3e:b3:60:
60:75:ea:b2:a2:79:d2:35:2b:29:d1:0a:0e:05:a4:5a:5b:ec:
59:27:a4:30:64:b7:ac:59:8f:ef:d0:f2:d5:ea:07:3f:28:28:
61:db:12:fc:d0:5c:c1:19:a3:fc:47:11:9b:f4:8b:f9:be:a5:
65:ba:ea:e0:2c:ab:e0:7e:f5:f2:a1:42:3e:32:32:a4:2c:29:
5c:3d:aa:06:64:f6:61:ee:38:8d:79:1e:aa:14:52:e2:80:a7:
9c:e5:80:bc:6f:86:cb:08:9b:c7:21:bd:57:ad:e9:7c:36:b7:
6e:3d:8d:b0:e0:98:2b:c5:6c:69:44:87:63:8d:dd:19:2a:db:
7e:7a:4e:43:7b:2c:98:0a:f4:d2:e8:d0:44:90:fb:91:2f:b2:
3a:99:55:04:6f:5b:c2:d4:81:81:42:b2:8f:74:ef:99:ac:12:
d8:de:36:46:d1:ae:0f:52:26:bb:fc:70:7e:ed:62:19:89:00:
3f:87:f9:d3:0a:88:7a:97:56:96:a7:ea:dc:f6:8b:f9:b2:1d:
e4:4d:76:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 00:43:41 2026 by rpki-client