Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/af9c78-6ede-40df-89c1-79725fa2e133/1/w3URP9S_vTixBDhDwwkmoRDMD1E.mft
File: w3URP9S_vTixBDhDwwkmoRDMD1E.mft (raw, json)
Hash identifier: Rp0EU2IGjg8DRK5U5U8h8uTMI5dm8P1cSXzf3DzQ0ds=
Subject key identifier: 61:AF:65:F7:C4:87:D9:7C:32:4E:66:71:30:E0:58:E2:3C:8D:3B:73
Authority key identifier: C3:75:11:3F:D4:BF:BD:38:B1:04:38:43:C3:09:26:A1:10:CC:0F:51
Certificate issuer: /CN=c375113fd4bfbd38b1043843c30926a110cc0f51
Certificate serial: 019D99D0570179ECD4309535AA8AC6451856
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w3URP9S_vTixBDhDwwkmoRDMD1E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/af9c78-6ede-40df-89c1-79725fa2e133/1/w3URP9S_vTixBDhDwwkmoRDMD1E.mft
Manifest number: 18C4
Signing time: Fri 17 Apr 2026 05:01:00 +0000
Manifest this update: Fri 17 Apr 2026 05:01:00 +0000
Manifest next update: Sat 18 Apr 2026 05:01:00 +0000
Files and hashes: 1: TYwN3t32Z7xKSSbdeezcjvxtZPw.roa (hash: vACqWvZBDZtntkC9z+JDWdjz/Gh+6JNnrhSbEy009gw=)
2: ZJWhX_sHEjs97qyEWeCy7JLXnqw.roa (hash: bAXAo9VS32osXOlNSknnXOi501Vm+Z7vmbwaL73CoDc=)
3: w3URP9S_vTixBDhDwwkmoRDMD1E.crl (hash: z6NbtKMQsndew0AxPz+zZ/TDM+4txyOHNrQVRjCLXDA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/af9c78-6ede-40df-89c1-79725fa2e133/1/w3URP9S_vTixBDhDwwkmoRDMD1E.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/af9c78-6ede-40df-89c1-79725fa2e133/1/w3URP9S_vTixBDhDwwkmoRDMD1E.mft
rsync://rpki.ripe.net/repository/DEFAULT/w3URP9S_vTixBDhDwwkmoRDMD1E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 05:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:d0:57:01:79:ec:d4:30:95:35:aa:8a:c6:45:18:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c375113fd4bfbd38b1043843c30926a110cc0f51
Validity
Not Before: Apr 17 05:01:00 2026 GMT
Not After : Apr 18 05:01:00 2026 GMT
Subject: CN=61af65f7c487d97c324e667130e058e23c8d3b73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:d0:08:d1:4d:64:d5:dc:96:b1:13:bd:5e:93:
c0:1a:79:a5:73:a6:eb:51:fb:41:d8:81:00:46:e7:
65:79:5c:43:95:24:5a:af:44:80:b3:a6:9d:03:76:
a6:b1:3d:8f:ed:0e:45:e3:7d:2a:ca:58:17:54:61:
c1:a0:1a:d3:cd:79:6a:66:40:2f:e2:38:d2:6e:0e:
e9:9f:25:b0:86:00:e9:9f:fc:d5:05:a0:d2:02:dc:
7f:15:64:4e:08:83:4a:8d:6a:72:60:1c:ed:7c:94:
44:d1:82:66:0a:99:e5:d5:c7:ca:14:fa:48:99:26:
91:39:37:e7:c2:97:11:0f:47:90:3d:18:05:00:9a:
d0:2d:94:f0:25:8e:23:c6:9d:88:4b:8b:fd:a1:d3:
5e:5b:fb:10:67:9b:6e:82:bd:42:8e:26:30:84:ab:
27:13:af:ae:ac:94:f2:92:63:8a:7d:3a:72:f8:5b:
25:c0:fb:28:58:e2:86:e1:fd:c4:50:00:1d:24:a5:
2f:16:d5:1a:a5:3c:8e:6a:c2:0b:a5:2c:52:88:a1:
4e:1d:f3:c3:a5:cf:14:d7:e7:4c:47:35:4b:3b:4a:
67:e2:13:4a:46:ce:38:3a:13:6b:74:96:52:e6:89:
5b:11:bc:a2:a0:dc:78:8d:ff:03:91:00:5c:1f:ab:
cc:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:AF:65:F7:C4:87:D9:7C:32:4E:66:71:30:E0:58:E2:3C:8D:3B:73
X509v3 Authority Key Identifier:
keyid:C3:75:11:3F:D4:BF:BD:38:B1:04:38:43:C3:09:26:A1:10:CC:0F:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w3URP9S_vTixBDhDwwkmoRDMD1E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/af9c78-6ede-40df-89c1-79725fa2e133/1/w3URP9S_vTixBDhDwwkmoRDMD1E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/af9c78-6ede-40df-89c1-79725fa2e133/1/w3URP9S_vTixBDhDwwkmoRDMD1E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:2b:63:de:5a:16:5d:e1:49:1e:73:0f:f4:bc:9d:b5:8f:7d:
29:22:1b:7a:85:1d:3b:90:ea:bd:95:79:e1:a1:00:ba:a0:d8:
0c:fa:ea:6d:5f:c5:ff:26:7f:ba:c4:b2:01:a4:e8:f4:62:6e:
97:1c:aa:65:f2:3a:3d:20:59:13:ac:22:87:bf:57:cb:ff:2b:
21:59:a2:e1:52:af:7f:75:3b:f9:db:d8:9e:be:cb:b4:5b:0b:
54:75:c5:fb:c6:36:8e:14:10:1a:d3:0c:b5:31:28:c1:85:48:
62:de:35:07:ca:f9:3a:87:c5:a7:f6:a6:da:a0:b2:14:ad:aa:
7c:52:4f:33:d5:a5:1a:93:d4:53:ca:22:f0:e6:2e:6d:37:d6:
3d:68:37:56:a1:a8:06:91:4b:5e:6d:df:a8:68:ed:21:e1:5d:
8b:c0:23:53:51:d3:46:6b:9c:53:11:a4:39:e5:1d:74:b6:37:
f9:00:3c:9f:7d:05:70:f7:c5:ff:5f:c9:91:73:86:2d:8f:46:
be:0f:fe:22:56:84:0f:8b:7b:7a:5d:e2:fa:4f:d7:58:27:ed:
f7:71:31:5e:bd:01:48:43:c0:fd:d7:32:eb:a2:25:06:7b:06:
0c:2b:bf:15:1f:53:f1:62:f2:04:89:5a:99:07:c7:47:04:05:
54:cc:fb:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:36:55 2026 by rpki-client