Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/c12395-c0f8-4e05-8cb1-73a3d07d2c31/1/W3qQXiWk1czLLuvk4tXDkggZdY4.mft
File: W3qQXiWk1czLLuvk4tXDkggZdY4.mft (raw, json)
Hash identifier: O/CimUnjHGfrCgjd5vQNep3UwoFIGoT/4GJzKH5DpBE=
Subject key identifier: C8:D3:28:84:49:5A:D1:9B:CD:03:86:7C:AA:08:CF:F6:22:0C:65:86
Authority key identifier: 5B:7A:90:5E:25:A4:D5:CC:CB:2E:EB:E4:E2:D5:C3:92:08:19:75:8E
Certificate issuer: /CN=5b7a905e25a4d5cccb2eebe4e2d5c3920819758e
Certificate serial: 019D38655ABFE3BFE493C4CCAAFED7C15B6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W3qQXiWk1czLLuvk4tXDkggZdY4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/c12395-c0f8-4e05-8cb1-73a3d07d2c31/1/W3qQXiWk1czLLuvk4tXDkggZdY4.mft
Manifest number: 178F
Signing time: Sun 29 Mar 2026 07:00:59 +0000
Manifest this update: Sun 29 Mar 2026 07:00:59 +0000
Manifest next update: Mon 30 Mar 2026 07:00:59 +0000
Files and hashes: 1: 1-vYQOdOZkiGteDHhx2OATUDPhTA.roa (hash: 17IIjb7LlCipVqQOC9WbNEQZCfvFgYW07a8Dgznq3+o=)
2: 2SrneGBZ78iMtO6G5dojAaHp_CA.roa (hash: mWJ7hPqfgdVi4+bEDJyz8jwgvKivAgyW0NZHOfU4mK0=)
3: W3qQXiWk1czLLuvk4tXDkggZdY4.crl (hash: D9uyk43c2cqfgc3A1f9Nv9ia9m1DKbmIOl0KV/RW0do=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/c12395-c0f8-4e05-8cb1-73a3d07d2c31/1/W3qQXiWk1czLLuvk4tXDkggZdY4.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/c12395-c0f8-4e05-8cb1-73a3d07d2c31/1/W3qQXiWk1czLLuvk4tXDkggZdY4.mft
rsync://rpki.ripe.net/repository/DEFAULT/W3qQXiWk1czLLuvk4tXDkggZdY4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:5a:bf:e3:bf:e4:93:c4:cc:aa:fe:d7:c1:5b:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b7a905e25a4d5cccb2eebe4e2d5c3920819758e
Validity
Not Before: Mar 29 07:00:59 2026 GMT
Not After : Mar 30 07:00:59 2026 GMT
Subject: CN=c8d32884495ad19bcd03867caa08cff6220c6586
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:1c:fa:6e:6b:69:73:29:a9:79:74:b2:26:35:
4c:93:b9:41:7e:ca:ec:3c:fc:ca:23:57:a2:eb:b4:
d4:f3:cd:e3:b0:c7:63:39:a3:da:b9:37:48:71:ea:
1c:f8:9c:3e:e9:da:ea:87:55:29:1b:a9:a3:b0:a7:
55:d1:28:67:f4:4b:3f:32:5c:75:c0:8f:e0:af:c3:
c3:e6:64:2d:69:f6:8a:61:e6:62:fa:9a:b5:b8:7d:
9a:9a:0c:78:1d:ad:bb:ff:bf:3c:70:d2:29:dd:7d:
eb:a3:2d:8b:e9:1f:68:76:78:d7:3f:65:0c:1f:02:
0e:80:43:6a:53:70:66:b9:e7:de:e6:83:e9:9b:7d:
be:5e:b5:83:e2:31:7b:26:a4:f2:00:e6:12:85:84:
98:35:0d:a2:40:6d:93:8b:3f:7c:da:c6:53:ce:c7:
59:c1:7a:13:c4:b8:41:a7:20:8f:f0:11:b5:08:e6:
62:e7:80:a9:6f:81:95:69:8f:ad:c9:cd:d3:54:e6:
55:f0:1a:d1:54:0b:cb:ae:c7:8f:5f:ca:29:d1:d4:
cc:4c:af:3a:cd:02:45:53:a3:27:a2:07:70:f7:d6:
26:4a:ff:5e:aa:7f:fd:3d:8a:c8:a6:87:b9:41:c6:
d4:fe:12:75:33:73:53:6a:74:07:dd:b4:b1:92:f2:
64:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:D3:28:84:49:5A:D1:9B:CD:03:86:7C:AA:08:CF:F6:22:0C:65:86
X509v3 Authority Key Identifier:
keyid:5B:7A:90:5E:25:A4:D5:CC:CB:2E:EB:E4:E2:D5:C3:92:08:19:75:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W3qQXiWk1czLLuvk4tXDkggZdY4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/c12395-c0f8-4e05-8cb1-73a3d07d2c31/1/W3qQXiWk1czLLuvk4tXDkggZdY4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/c12395-c0f8-4e05-8cb1-73a3d07d2c31/1/W3qQXiWk1czLLuvk4tXDkggZdY4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:97:6a:c6:a3:77:0f:28:b0:09:cc:aa:29:3f:9b:b1:dd:1b:
96:77:c0:80:b4:6d:93:37:b6:20:4b:72:8f:1e:a6:36:47:93:
40:e6:4e:2d:8f:71:a0:0a:cd:ab:ac:4e:d5:e1:df:b3:7a:8b:
08:62:35:b0:a6:1e:9d:82:55:83:17:f4:34:f9:16:6b:0a:85:
69:bc:c2:3d:61:c7:0e:97:2d:d4:da:aa:a3:06:ff:4b:f7:60:
b4:57:f3:41:9d:b6:3f:8b:5f:0d:63:2c:e9:f3:0f:f4:75:9f:
4a:fc:74:e0:ed:36:da:fd:35:4f:63:ed:c9:3b:b4:21:da:8e:
e5:3c:34:50:b6:21:ba:ca:51:80:55:fe:11:93:99:de:91:14:
94:dc:63:4d:0d:06:cb:f4:61:c7:78:b8:6f:96:78:6a:0a:e7:
e3:36:63:94:b3:f0:75:6d:cb:ff:e5:76:f9:ec:8f:c7:9f:4c:
5f:9f:11:e1:f4:85:40:b5:83:ff:8f:a4:2c:22:12:44:9b:a2:
51:3a:a5:11:d6:12:ee:b8:cd:d3:78:c9:33:8c:4d:40:74:02:
3b:df:28:54:24:22:46:0c:c1:0d:fb:53:dd:a7:57:18:52:d7:
29:96:ce:90:04:5c:f0:3a:77:bb:df:90:24:2b:bd:5d:b3:41:
9f:28:88:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:45:23 2026 by rpki-client