Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/06/c12395-c0f8-4e05-8cb1-73a3d07d2c31/1/W3qQXiWk1czLLuvk4tXDkggZdY4.mft
File: W3qQXiWk1czLLuvk4tXDkggZdY4.mft (raw, json)
Hash identifier: fMoG58KvBIDsiQchLl7C+ALREEsef6mGWLAxObAGg4E=
Subject key identifier: CC:BF:9C:64:E6:CF:63:D5:14:C4:71:72:C8:44:29:31:E6:C6:BA:E2
Authority key identifier: 5B:7A:90:5E:25:A4:D5:CC:CB:2E:EB:E4:E2:D5:C3:92:08:19:75:8E
Certificate issuer: /CN=5b7a905e25a4d5cccb2eebe4e2d5c3920819758e
Certificate serial: 01A17995D8E9D606B925E4C3005A7038565D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W3qQXiWk1czLLuvk4tXDkggZdY4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/c12395-c0f8-4e05-8cb1-73a3d07d2c31/1/W3qQXiWk1czLLuvk4tXDkggZdY4.mft
Manifest number: 19C3
Signing time: Mon 26 Oct 2026 19:00:25 +0000
Manifest this update: Mon 26 Oct 2026 19:00:25 +0000
Manifest next update: Tue 27 Oct 2026 19:00:25 +0000
Files and hashes: 1: 1-vYQOdOZkiGteDHhx2OATUDPhTA.roa (hash: 17IIjb7LlCipVqQOC9WbNEQZCfvFgYW07a8Dgznq3+o=)
2: 2SrneGBZ78iMtO6G5dojAaHp_CA.roa (hash: mWJ7hPqfgdVi4+bEDJyz8jwgvKivAgyW0NZHOfU4mK0=)
3: W3qQXiWk1czLLuvk4tXDkggZdY4.crl (hash: fOca5gCjS21GmFcmknOHcvmMduKQh271+w5OJvXAihI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/c12395-c0f8-4e05-8cb1-73a3d07d2c31/1/W3qQXiWk1czLLuvk4tXDkggZdY4.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/c12395-c0f8-4e05-8cb1-73a3d07d2c31/1/W3qQXiWk1czLLuvk4tXDkggZdY4.mft
rsync://rpki.ripe.net/repository/DEFAULT/W3qQXiWk1czLLuvk4tXDkggZdY4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 19:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:79:95:d8:e9:d6:06:b9:25:e4:c3:00:5a:70:38:56:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b7a905e25a4d5cccb2eebe4e2d5c3920819758e
Validity
Not Before: Oct 26 19:00:25 2026 GMT
Not After : Oct 27 19:00:25 2026 GMT
Subject: CN=ccbf9c64e6cf63d514c47172c8442931e6c6bae2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:f5:8f:80:17:df:c8:19:5a:1e:30:ee:3a:5b:
13:55:2f:2f:03:fc:d4:fa:2d:2b:69:65:0d:c0:a3:
dd:aa:82:40:29:fe:fa:87:4b:44:12:d1:f0:33:66:
70:cc:0d:14:d4:1d:f9:a3:22:0f:7e:25:93:28:3b:
15:d2:53:c2:ec:dc:8a:a1:06:a5:97:07:74:fc:c9:
65:d7:04:ea:75:d9:9b:1a:05:90:cc:54:40:a4:97:
0a:6b:72:d2:52:36:54:69:4c:85:30:5e:39:ab:6e:
d5:44:56:c3:af:45:6e:12:b9:8e:89:0c:09:e1:ea:
74:49:45:b4:2a:1c:f0:72:24:c9:28:13:5e:35:42:
24:9e:e3:e4:2b:81:76:ae:b2:ff:07:79:60:d7:d5:
99:d7:b3:2c:eb:57:56:14:f7:6b:a3:86:b3:b8:2c:
0f:2d:4e:5b:df:30:ea:63:3a:6d:3e:52:42:df:07:
a6:6d:19:f4:14:d2:e1:34:60:0a:56:c6:89:fc:2e:
fe:81:d6:39:f4:e3:81:e8:ce:c3:05:a0:20:61:3f:
80:fc:2f:28:46:82:77:32:b4:6b:46:8e:c3:7b:db:
a0:34:c7:f0:30:4e:53:a5:95:20:ec:23:46:27:7c:
b7:14:79:95:1a:fb:70:cd:bb:32:8d:66:59:43:32:
8a:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:BF:9C:64:E6:CF:63:D5:14:C4:71:72:C8:44:29:31:E6:C6:BA:E2
X509v3 Authority Key Identifier:
keyid:5B:7A:90:5E:25:A4:D5:CC:CB:2E:EB:E4:E2:D5:C3:92:08:19:75:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W3qQXiWk1czLLuvk4tXDkggZdY4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/c12395-c0f8-4e05-8cb1-73a3d07d2c31/1/W3qQXiWk1czLLuvk4tXDkggZdY4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/c12395-c0f8-4e05-8cb1-73a3d07d2c31/1/W3qQXiWk1czLLuvk4tXDkggZdY4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:4d:74:b0:16:e5:09:6e:2b:e3:00:9b:1c:5f:a8:43:18:6b:
ac:53:70:44:8f:33:20:5b:80:db:69:fc:81:be:66:f9:74:b7:
9c:d5:24:2e:0e:f1:c4:8d:81:2b:27:21:8a:61:66:33:0e:4e:
a4:f0:f3:d6:a4:d1:5c:00:e1:2a:3a:52:9a:58:71:6f:5b:11:
3a:43:52:d0:90:88:b0:df:43:88:19:98:5e:27:8b:2b:bc:63:
6e:5a:b0:a7:83:6a:f8:6c:e4:75:9f:d5:54:b6:90:52:52:ac:
46:7a:63:6b:c1:9c:de:2a:d9:cf:3e:aa:00:5b:e1:14:7e:b2:
80:be:7e:6a:69:e3:99:2a:cf:ce:70:03:9a:3d:95:7f:4f:92:
b4:19:dc:ef:68:30:21:f7:2c:0c:3a:f4:f3:73:5d:bc:a7:f8:
d3:b3:30:ee:b8:b1:1a:bb:63:e9:cd:67:84:73:bb:7a:98:b0:
f9:57:3c:ba:f9:7a:32:d0:2e:a4:ea:22:a2:32:09:c9:34:23:
72:13:98:1f:ac:32:92:dd:b4:e2:b1:27:54:93:2f:74:b5:c9:
44:25:b1:fc:90:e8:86:4b:70:47:56:dc:66:47:3a:36:c7:8d:
2f:be:a6:77:61:1e:86:0b:bc:44:18:20:50:ef:54:e6:e6:27:
fa:5d:58:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 04:45:16 2026 by rpki-client