Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/c12395-c0f8-4e05-8cb1-73a3d07d2c31/1/W3qQXiWk1czLLuvk4tXDkggZdY4.mft
File: W3qQXiWk1czLLuvk4tXDkggZdY4.mft (raw, json)
Hash identifier: tR7c1flEIVHKmxgOoSr9nUXn3q39Pbi2mtAAvTOrZWI=
Subject key identifier: E1:43:91:73:84:84:27:BE:AC:6B:81:46:81:2D:EE:B3:28:8E:B6:E2
Authority key identifier: 5B:7A:90:5E:25:A4:D5:CC:CB:2E:EB:E4:E2:D5:C3:92:08:19:75:8E
Certificate issuer: /CN=5b7a905e25a4d5cccb2eebe4e2d5c3920819758e
Certificate serial: 019E751C2EFD02B5E53A3C011D2AFC44D741
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W3qQXiWk1czLLuvk4tXDkggZdY4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/c12395-c0f8-4e05-8cb1-73a3d07d2c31/1/W3qQXiWk1czLLuvk4tXDkggZdY4.mft
Manifest number: 1833
Signing time: Fri 29 May 2026 19:00:41 +0000
Manifest this update: Fri 29 May 2026 19:00:41 +0000
Manifest next update: Sat 30 May 2026 19:00:41 +0000
Files and hashes: 1: 1-vYQOdOZkiGteDHhx2OATUDPhTA.roa (hash: 17IIjb7LlCipVqQOC9WbNEQZCfvFgYW07a8Dgznq3+o=)
2: 2SrneGBZ78iMtO6G5dojAaHp_CA.roa (hash: mWJ7hPqfgdVi4+bEDJyz8jwgvKivAgyW0NZHOfU4mK0=)
3: W3qQXiWk1czLLuvk4tXDkggZdY4.crl (hash: eQQyB6UBRjVFlJr4gNwV4K+o5PywNFn0aw5/jDUksAk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/c12395-c0f8-4e05-8cb1-73a3d07d2c31/1/W3qQXiWk1czLLuvk4tXDkggZdY4.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/c12395-c0f8-4e05-8cb1-73a3d07d2c31/1/W3qQXiWk1czLLuvk4tXDkggZdY4.mft
rsync://rpki.ripe.net/repository/DEFAULT/W3qQXiWk1czLLuvk4tXDkggZdY4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 30 May 2026 19:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:75:1c:2e:fd:02:b5:e5:3a:3c:01:1d:2a:fc:44:d7:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b7a905e25a4d5cccb2eebe4e2d5c3920819758e
Validity
Not Before: May 29 19:00:41 2026 GMT
Not After : May 30 19:00:41 2026 GMT
Subject: CN=e1439173848427beac6b8146812deeb3288eb6e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:12:1d:89:bd:03:10:ef:16:b4:b9:af:73:5b:
0a:02:80:41:ea:48:9a:2b:f3:6b:56:e8:03:87:d3:
bd:f0:73:4a:85:d5:bc:2b:85:d6:b0:61:6d:93:20:
37:ae:bc:73:14:11:4a:5e:53:32:97:97:17:c9:66:
81:8f:04:1e:86:38:fd:9b:54:4a:d1:56:fa:7b:12:
42:ae:d3:b4:04:d1:4d:92:b8:04:00:c6:80:5b:ba:
c2:11:5a:53:f3:98:5a:2c:46:b2:fe:16:ec:7d:53:
0b:4e:5d:ba:d4:61:1c:a2:60:81:78:9b:48:5a:98:
70:64:1e:93:0f:bc:87:93:49:de:17:68:89:4c:7f:
a4:6f:f5:19:1b:01:ac:46:61:f4:7d:b5:df:e7:d2:
26:62:3b:59:c3:f8:64:31:6b:b1:16:4a:8e:7d:cd:
4e:e5:54:b8:30:b4:57:9a:ce:2d:da:a1:fd:ec:41:
17:9c:ba:bb:7e:2f:54:7b:f4:cc:59:56:37:ee:8f:
e8:cb:28:79:bd:25:8e:9a:7f:7c:3e:70:10:7e:f4:
b2:ae:33:7d:d3:74:55:49:25:d2:62:eb:46:50:d7:
f7:34:06:61:6f:51:36:fc:72:8a:f5:29:51:d2:e9:
14:aa:b3:b1:fc:8a:77:f7:df:80:4a:ae:1b:a7:46:
58:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:43:91:73:84:84:27:BE:AC:6B:81:46:81:2D:EE:B3:28:8E:B6:E2
X509v3 Authority Key Identifier:
keyid:5B:7A:90:5E:25:A4:D5:CC:CB:2E:EB:E4:E2:D5:C3:92:08:19:75:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W3qQXiWk1czLLuvk4tXDkggZdY4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/c12395-c0f8-4e05-8cb1-73a3d07d2c31/1/W3qQXiWk1czLLuvk4tXDkggZdY4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/c12395-c0f8-4e05-8cb1-73a3d07d2c31/1/W3qQXiWk1czLLuvk4tXDkggZdY4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:87:49:d8:74:b7:79:76:4a:eb:4a:5f:43:29:d6:d7:36:98:
66:98:e4:38:5c:83:42:1a:da:7e:4e:51:eb:3b:ba:49:d8:a4:
93:8e:c1:31:cb:cf:b5:6f:c8:41:e6:5c:35:0c:86:65:77:aa:
ea:75:f7:5c:d0:5b:f5:20:ea:1e:ba:26:9c:1e:1a:d4:77:c7:
59:29:e9:da:96:80:22:82:35:6f:70:46:11:f4:75:7d:94:7c:
21:de:ce:74:bb:75:5e:e3:e8:b2:97:3c:3a:89:1b:55:dc:bf:
22:3b:0d:a5:ad:e9:ca:3a:21:58:69:7e:c2:61:c6:b2:77:26:
7e:76:62:52:47:f2:0f:64:aa:7a:e8:fc:7c:19:98:d4:34:3d:
3d:84:9d:ff:ac:ab:a1:0f:30:60:81:bf:01:fd:d4:04:33:a7:
20:1f:9d:20:04:79:5e:90:11:f4:2b:f5:95:00:0b:23:d4:fb:
b7:01:be:92:35:8a:82:fc:aa:a2:76:71:52:b8:de:2e:08:a1:
27:a9:2b:53:98:5e:3f:10:30:e7:6b:56:36:62:89:25:24:0f:
56:00:7e:18:2a:d1:27:b5:e6:59:ea:b1:26:d6:11:9d:47:f1:
66:f6:2e:70:d4:35:36:8a:ab:be:d5:00:0e:74:a8:f0:9d:8b:
a6:23:cf:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 30 04:45:06 2026 by rpki-client