Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/c12395-c0f8-4e05-8cb1-73a3d07d2c31/1/W3qQXiWk1czLLuvk4tXDkggZdY4.mft
File: W3qQXiWk1czLLuvk4tXDkggZdY4.mft (raw, json)
Hash identifier: 9b8850CKnqdlpCvqtJk/OPfYHtV+csQ4F3doxXSeyyI=
Subject key identifier: 4C:44:3D:CD:4D:56:71:F5:77:5E:0B:F2:F4:52:77:DE:04:37:84:1B
Authority key identifier: 5B:7A:90:5E:25:A4:D5:CC:CB:2E:EB:E4:E2:D5:C3:92:08:19:75:8E
Certificate issuer: /CN=5b7a905e25a4d5cccb2eebe4e2d5c3920819758e
Certificate serial: 019F74076588854BBC5209BE3012C67BF956
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W3qQXiWk1czLLuvk4tXDkggZdY4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/c12395-c0f8-4e05-8cb1-73a3d07d2c31/1/W3qQXiWk1czLLuvk4tXDkggZdY4.mft
Manifest number: 18B7
Signing time: Sat 18 Jul 2026 07:01:09 +0000
Manifest this update: Sat 18 Jul 2026 07:01:09 +0000
Manifest next update: Sun 19 Jul 2026 07:01:09 +0000
Files and hashes: 1: 1-vYQOdOZkiGteDHhx2OATUDPhTA.roa (hash: 17IIjb7LlCipVqQOC9WbNEQZCfvFgYW07a8Dgznq3+o=)
2: 2SrneGBZ78iMtO6G5dojAaHp_CA.roa (hash: mWJ7hPqfgdVi4+bEDJyz8jwgvKivAgyW0NZHOfU4mK0=)
3: W3qQXiWk1czLLuvk4tXDkggZdY4.crl (hash: tuToWue43PKGFQ4z/a5RN+UcVRTFq0mDzUNe8TWzvkE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/c12395-c0f8-4e05-8cb1-73a3d07d2c31/1/W3qQXiWk1czLLuvk4tXDkggZdY4.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/c12395-c0f8-4e05-8cb1-73a3d07d2c31/1/W3qQXiWk1czLLuvk4tXDkggZdY4.mft
rsync://rpki.ripe.net/repository/DEFAULT/W3qQXiWk1czLLuvk4tXDkggZdY4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 Jul 2026 02:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:74:07:65:88:85:4b:bc:52:09:be:30:12:c6:7b:f9:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b7a905e25a4d5cccb2eebe4e2d5c3920819758e
Validity
Not Before: Jul 18 07:01:09 2026 GMT
Not After : Jul 19 07:01:09 2026 GMT
Subject: CN=4c443dcd4d5671f5775e0bf2f45277de0437841b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:bb:4e:46:d0:98:5a:6d:3f:e3:2f:05:dc:3b:
0f:3f:eb:a6:7f:e5:e9:2a:8c:c4:a1:a6:67:f7:48:
ec:70:c6:c9:2c:08:61:cb:52:08:00:2a:97:3c:9a:
b6:78:ab:3e:2c:4c:ca:b7:d3:2e:51:31:88:75:b8:
fa:56:c6:11:d5:85:d8:4c:72:eb:e9:39:64:55:4a:
c9:20:c7:c7:f5:f4:6e:f3:86:1f:70:08:4f:8a:67:
ec:db:a5:99:78:b8:b4:14:92:66:64:25:eb:3e:d5:
c7:bd:66:1f:ad:30:fa:57:67:29:2b:9a:cb:2f:b4:
0d:2c:cd:14:40:b9:b1:85:97:51:bc:f0:bd:c4:e7:
ff:53:b0:a9:c3:c6:66:ea:10:16:b5:52:ff:bc:3d:
50:5e:c2:03:f1:ab:f4:b5:c3:58:83:af:ae:18:db:
5d:b7:73:60:f3:7d:5b:ca:0e:8d:6f:36:59:c5:b3:
66:64:47:fa:4a:5e:94:d9:9d:a3:df:fb:33:9c:e9:
4c:b2:4f:d5:b3:d0:1d:08:9f:b2:3e:dd:ce:72:ad:
25:03:08:f2:d4:6a:44:a5:2d:83:e2:40:86:f3:0b:
72:68:95:5f:43:9c:17:3a:1c:04:f1:cd:74:c2:8b:
21:8d:d8:3b:9a:48:e8:31:fd:4e:c3:4d:d4:ce:4e:
44:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:44:3D:CD:4D:56:71:F5:77:5E:0B:F2:F4:52:77:DE:04:37:84:1B
X509v3 Authority Key Identifier:
keyid:5B:7A:90:5E:25:A4:D5:CC:CB:2E:EB:E4:E2:D5:C3:92:08:19:75:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W3qQXiWk1czLLuvk4tXDkggZdY4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/c12395-c0f8-4e05-8cb1-73a3d07d2c31/1/W3qQXiWk1czLLuvk4tXDkggZdY4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/c12395-c0f8-4e05-8cb1-73a3d07d2c31/1/W3qQXiWk1czLLuvk4tXDkggZdY4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:af:f2:05:4a:98:42:d2:f2:ff:10:49:cc:13:86:6c:70:e0:
8b:05:c6:b1:a0:25:78:2c:fc:b0:04:32:30:ee:21:04:84:08:
8f:15:e5:2f:e5:8c:d9:90:64:93:2e:6b:a0:00:fa:b3:f4:f4:
c0:58:31:55:bf:a1:46:92:18:58:a6:8a:8a:32:93:8c:bc:85:
0d:7d:fc:87:61:47:62:01:88:57:1e:e5:55:a3:25:e3:77:15:
35:21:9e:98:c1:f1:d9:2d:b3:91:fa:cc:18:67:2b:0a:7b:08:
06:6f:05:00:12:97:4a:42:65:d9:88:37:6d:58:66:12:bd:d9:
f2:fe:ae:17:14:8a:65:b6:43:0e:60:1d:dc:a5:9a:76:e3:c1:
33:08:9c:af:a4:b4:42:92:4d:f3:48:f7:2b:68:62:e0:03:63:
e4:99:77:82:9e:40:0f:a4:69:b8:52:25:12:9f:b5:81:ef:78:
ef:44:04:b2:eb:4e:5e:05:f8:59:23:cc:3f:cd:b2:8a:98:50:
46:a2:13:49:3b:d7:30:4b:2d:f5:d5:47:c3:6f:c5:aa:30:8e:
73:3d:a6:2c:66:81:2a:25:e9:28:e2:a6:66:d7:d3:05:b3:22:
f1:03:09:13:4e:9b:cc:6e:1f:32:f9:90:d6:52:1e:28:44:33:
9f:04:ac:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 11:10:37 2026 by rpki-client