Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/93620e-7528-4aac-9212-c7857a033962/1/w6iCsQ8bqepLofp3BttkdH5ipBM.mft
File: w6iCsQ8bqepLofp3BttkdH5ipBM.mft (raw, json)
Hash identifier: 7g23X8Rt5EFytan+hngPq4KMhvpBidnU4H5y9d9vbCw=
Subject key identifier: FF:76:70:6D:C9:F9:88:BF:43:E9:04:32:76:1E:3F:4B:E7:B9:F9:74
Authority key identifier: C3:A8:82:B1:0F:1B:A9:EA:4B:A1:FA:77:06:DB:64:74:7E:62:A4:13
Certificate issuer: /CN=c3a882b10f1ba9ea4ba1fa7706db64747e62a413
Certificate serial: 019F81F92CDB4504A29F77A2EE6C159AB915
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w6iCsQ8bqepLofp3BttkdH5ipBM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/93620e-7528-4aac-9212-c7857a033962/1/w6iCsQ8bqepLofp3BttkdH5ipBM.mft
Manifest number: 19BE
Signing time: Tue 21 Jul 2026 00:00:18 +0000
Manifest this update: Tue 21 Jul 2026 00:00:18 +0000
Manifest next update: Wed 22 Jul 2026 00:00:18 +0000
Files and hashes: 1: 3zDXj12FVAF9XeXyFE67e6JY6lg.roa (hash: yDL38rTQ8XpaiZahcdQcgu5FHofBAzcqqnIqz6pUsPE=)
2: QDqYZmLzV23YVoA-rNr3_dudehM.roa (hash: DU7wizlaOucg4WwRR/OJogCxUlPPjJyoBT/zCr/m24w=)
3: w6iCsQ8bqepLofp3BttkdH5ipBM.crl (hash: X2KfdQW2gopCwc7WrGFuzHudRC5rMbRCJBnSuzpMRd8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/93620e-7528-4aac-9212-c7857a033962/1/w6iCsQ8bqepLofp3BttkdH5ipBM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/93620e-7528-4aac-9212-c7857a033962/1/w6iCsQ8bqepLofp3BttkdH5ipBM.mft
rsync://rpki.ripe.net/repository/DEFAULT/w6iCsQ8bqepLofp3BttkdH5ipBM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:81:f9:2c:db:45:04:a2:9f:77:a2:ee:6c:15:9a:b9:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3a882b10f1ba9ea4ba1fa7706db64747e62a413
Validity
Not Before: Jul 21 00:00:18 2026 GMT
Not After : Jul 22 00:00:18 2026 GMT
Subject: CN=ff76706dc9f988bf43e90432761e3f4be7b9f974
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:c0:70:d9:e8:69:b2:4b:f7:21:2f:65:eb:78:
ee:a1:d6:cf:b9:5a:94:c8:f5:5a:0d:d7:ca:61:b4:
62:7a:9d:28:b5:00:e7:17:0d:60:14:47:e1:af:61:
a1:ac:7d:35:1a:fa:65:bb:35:65:8c:21:fa:9f:ab:
aa:28:00:f2:51:44:c1:a1:9c:aa:6d:cc:e2:7a:17:
2d:5c:80:07:e3:2e:b9:99:f8:17:f9:3d:85:89:a8:
bf:c5:46:6a:0e:ac:73:36:d1:17:1c:ba:ad:a7:8b:
8c:cf:98:f4:91:e6:fb:af:89:f7:89:7b:74:fd:46:
ae:95:52:d4:f8:9d:6a:5d:fe:9c:db:e1:de:a7:de:
09:c1:e9:44:9c:b7:4d:4d:83:20:eb:29:36:a3:7c:
9e:a9:d9:2b:c1:81:7b:f3:e8:27:de:4c:47:d1:c1:
ef:9e:4e:e4:65:d2:de:6c:fe:72:5e:93:06:d5:d4:
61:f8:9d:ab:d1:60:68:a4:36:69:31:c8:49:86:b9:
e8:f6:68:22:7a:cb:99:7f:00:c2:89:ad:d4:0b:9b:
93:01:cd:2b:5b:6a:cb:ec:0e:54:a4:83:12:95:83:
26:3b:1a:c0:e3:e3:40:20:39:d4:a6:01:d8:71:49:
5c:9d:e7:26:af:2a:95:d5:b6:82:e2:87:09:e3:f6:
0f:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:76:70:6D:C9:F9:88:BF:43:E9:04:32:76:1E:3F:4B:E7:B9:F9:74
X509v3 Authority Key Identifier:
keyid:C3:A8:82:B1:0F:1B:A9:EA:4B:A1:FA:77:06:DB:64:74:7E:62:A4:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w6iCsQ8bqepLofp3BttkdH5ipBM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/93620e-7528-4aac-9212-c7857a033962/1/w6iCsQ8bqepLofp3BttkdH5ipBM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/93620e-7528-4aac-9212-c7857a033962/1/w6iCsQ8bqepLofp3BttkdH5ipBM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:b0:0a:84:61:eb:d8:67:a9:08:f8:37:db:4b:31:73:87:35:
07:3f:4c:20:c9:c1:e5:72:73:75:aa:ec:46:bd:9e:6f:30:6f:
ca:aa:03:52:34:71:fc:39:04:91:e7:be:b6:16:43:74:0d:44:
3d:32:e3:e3:6d:71:7d:82:ec:48:a9:c0:5b:f7:f6:b5:ca:59:
39:1c:ab:0b:ab:9a:87:90:16:bf:9f:0c:11:f6:1e:ba:20:60:
34:12:7f:b3:70:03:7f:ee:10:42:70:59:62:ea:f8:9b:86:3c:
bd:d7:62:a5:f9:17:63:7e:fe:54:0f:e5:f3:11:fd:41:72:5a:
f3:3d:14:d8:37:97:cb:7f:ab:83:16:dc:7e:38:01:2c:5c:58:
8c:50:37:df:20:22:cb:5b:1c:c9:57:34:27:4d:ee:78:06:0c:
8c:fc:54:04:74:ff:e4:40:79:f2:9a:9f:d7:66:8f:e1:b1:55:
1d:9d:6d:6c:ee:97:2a:ce:77:cc:7a:7c:de:69:ad:02:0f:fa:
a8:5e:71:ca:45:69:50:d5:55:71:8b:81:5c:af:38:71:17:5b:
3f:1d:1f:da:30:67:3d:9a:0b:f3:52:05:09:96:66:ad:b1:7e:
a4:c3:52:cf:1b:54:fb:23:f2:d2:f6:11:34:ba:67:44:12:fb:
78:dc:2d:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 07:07:42 2026 by rpki-client