Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/06/c12395-c0f8-4e05-8cb1-73a3d07d2c31/1/W3qQXiWk1czLLuvk4tXDkggZdY4.mft
File: W3qQXiWk1czLLuvk4tXDkggZdY4.mft (raw, json)
Hash identifier: ODYGrYS869ViKyBt2iEdgVbMaetdvBB/FwLg5o8ekx8=
Subject key identifier: 20:D4:A7:42:FB:E2:EB:54:51:50:DC:BD:82:72:AF:F3:B2:35:5D:F5
Authority key identifier: 5B:7A:90:5E:25:A4:D5:CC:CB:2E:EB:E4:E2:D5:C3:92:08:19:75:8E
Certificate issuer: /CN=5b7a905e25a4d5cccb2eebe4e2d5c3920819758e
Certificate serial: 01A07103D0CBCBED1566063C5DFA888FD637
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W3qQXiWk1czLLuvk4tXDkggZdY4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/c12395-c0f8-4e05-8cb1-73a3d07d2c31/1/W3qQXiWk1czLLuvk4tXDkggZdY4.mft
Manifest number: 193A
Signing time: Sat 05 Sep 2026 10:01:10 +0000
Manifest this update: Sat 05 Sep 2026 10:01:10 +0000
Manifest next update: Sun 06 Sep 2026 10:01:10 +0000
Files and hashes: 1: 1-vYQOdOZkiGteDHhx2OATUDPhTA.roa (hash: 17IIjb7LlCipVqQOC9WbNEQZCfvFgYW07a8Dgznq3+o=)
2: 2SrneGBZ78iMtO6G5dojAaHp_CA.roa (hash: mWJ7hPqfgdVi4+bEDJyz8jwgvKivAgyW0NZHOfU4mK0=)
3: W3qQXiWk1czLLuvk4tXDkggZdY4.crl (hash: adU9ICORIeH09Qhp22CXDkIiof0noyPNBuKJl4dJqy8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/c12395-c0f8-4e05-8cb1-73a3d07d2c31/1/W3qQXiWk1czLLuvk4tXDkggZdY4.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/c12395-c0f8-4e05-8cb1-73a3d07d2c31/1/W3qQXiWk1czLLuvk4tXDkggZdY4.mft
rsync://rpki.ripe.net/repository/DEFAULT/W3qQXiWk1czLLuvk4tXDkggZdY4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Sep 2026 10:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:71:03:d0:cb:cb:ed:15:66:06:3c:5d:fa:88:8f:d6:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b7a905e25a4d5cccb2eebe4e2d5c3920819758e
Validity
Not Before: Sep 5 10:01:10 2026 GMT
Not After : Sep 6 10:01:10 2026 GMT
Subject: CN=20d4a742fbe2eb545150dcbd8272aff3b2355df5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:b6:10:b8:43:b7:e7:b3:1f:bc:47:9e:4e:e7:
c5:af:62:30:b3:cb:1e:48:84:84:97:b8:91:8d:37:
f8:ad:93:f0:f4:89:c8:e8:cb:9e:57:c5:9c:60:f2:
59:7e:63:e7:17:23:1c:1a:06:f9:5a:72:b9:3a:82:
0b:14:18:ac:79:c3:c3:22:f6:75:4f:0e:3c:35:50:
2a:7b:60:b8:f5:ba:dc:ae:a9:90:fe:36:f8:9a:dd:
72:60:75:3a:3e:3d:b5:88:75:9d:6e:6e:46:d2:cb:
87:ac:6e:ad:f5:69:5e:af:fe:37:f3:2b:38:52:c5:
b7:8d:5c:e2:ee:22:54:6f:e8:dc:20:3d:8e:e3:3f:
f9:0b:3f:72:24:e5:8b:3a:ea:e0:d7:42:16:c6:99:
20:4b:6e:c0:bf:6f:79:a8:74:6c:54:1b:14:9c:cf:
8d:cf:11:28:e6:ab:b1:d9:d6:4a:d9:ed:48:18:b2:
19:88:5a:fa:23:4b:50:77:43:d5:3f:41:dd:03:7b:
e4:d9:60:7c:39:83:f0:62:4e:bb:90:24:dd:6a:98:
83:38:d1:d7:67:8b:00:44:f6:ea:04:26:08:1f:27:
07:6c:7c:08:00:c1:92:88:c6:db:0a:77:b6:8b:37:
0f:35:c1:81:49:89:57:12:3d:3c:68:69:82:8b:6a:
10:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:D4:A7:42:FB:E2:EB:54:51:50:DC:BD:82:72:AF:F3:B2:35:5D:F5
X509v3 Authority Key Identifier:
keyid:5B:7A:90:5E:25:A4:D5:CC:CB:2E:EB:E4:E2:D5:C3:92:08:19:75:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W3qQXiWk1czLLuvk4tXDkggZdY4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/c12395-c0f8-4e05-8cb1-73a3d07d2c31/1/W3qQXiWk1czLLuvk4tXDkggZdY4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/c12395-c0f8-4e05-8cb1-73a3d07d2c31/1/W3qQXiWk1czLLuvk4tXDkggZdY4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:e6:fb:9e:74:7e:78:58:eb:6c:f9:f0:55:3f:4b:bc:bb:ba:
7b:b9:6f:a3:c2:98:74:ba:d2:70:69:cf:ea:9e:1a:54:67:28:
4f:18:57:8e:ad:3b:a1:28:0f:8f:98:0c:9c:53:ae:07:07:69:
f7:3f:20:97:1d:31:03:d0:f0:b4:d3:62:61:d1:7f:05:93:58:
12:48:51:15:ba:01:43:ce:85:df:68:ef:f8:32:be:c4:3f:da:
fc:7c:e4:2e:66:bb:4d:20:6e:ff:f8:c3:e5:c8:eb:31:b1:eb:
df:42:d0:b9:94:9c:b5:b8:22:18:ae:d2:de:ac:bb:e1:94:fb:
85:ce:dd:20:37:51:e5:b5:0e:1e:4c:81:e7:a7:10:4a:c0:40:
d9:14:3a:6f:07:e1:2f:f4:a9:0c:46:c9:62:10:04:f9:3b:1f:
af:2c:cd:48:c3:fa:42:85:98:05:c3:0a:22:73:5e:4a:c0:99:
69:17:2a:2e:21:c5:92:e5:39:d8:d9:b3:05:0c:1a:e1:a9:f0:
8f:f7:24:e1:f8:46:63:04:6f:59:fc:b4:ea:2f:f4:ff:7a:74:
d1:a7:62:37:1e:11:ad:b3:60:24:58:f7:00:cf:7e:17:94:03:
e3:c3:de:34:49:e2:49:92:60:3f:0d:4f:ad:2f:d3:f3:82:97:
2e:65:9c:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 17:46:18 2026 by rpki-client