Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/9c5a00-0b5f-4a95-98a8-8bd976910dbf/1/w70m_iKV5GK-JnhTPvpTHiO38QI.mft
File: w70m_iKV5GK-JnhTPvpTHiO38QI.mft (raw, json)
Hash identifier: WtIojU+Jgz4jFW9yUcgFuowqtPuDTkjphaD9irrL+gg=
Subject key identifier: 69:16:07:00:4C:EE:BD:6A:74:7F:C8:98:48:56:73:70:7A:17:13:61
Authority key identifier: C3:BD:26:FE:22:95:E4:62:BE:26:78:53:3E:FA:53:1E:23:B7:F1:02
Certificate issuer: /CN=c3bd26fe2295e462be2678533efa531e23b7f102
Certificate serial: 019D39099A25EE65D3893B6AF5D000BC0432
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w70m_iKV5GK-JnhTPvpTHiO38QI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/9c5a00-0b5f-4a95-98a8-8bd976910dbf/1/w70m_iKV5GK-JnhTPvpTHiO38QI.mft
Manifest number: 1891
Signing time: Sun 29 Mar 2026 10:00:23 +0000
Manifest this update: Sun 29 Mar 2026 10:00:23 +0000
Manifest next update: Mon 30 Mar 2026 10:00:23 +0000
Files and hashes: 1: BpitMkNTOG0_ouRmz2bpaYkKoBY.roa (hash: YpWL3AH39Erg/3Vj3WOA5eh5wrqjLGB0H0SvsITlAwA=)
2: qKqi_rXQXOvxeFffB2pfRZ_x1CM.roa (hash: XYn4rn0UvMRvensr1fkhAzYC4HLrGdOg2tErj1J5QmQ=)
3: w70m_iKV5GK-JnhTPvpTHiO38QI.crl (hash: /uR32qEOXrkS9oOpavC1HsNHt7ndReIuGWgTUxTt+bU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/9c5a00-0b5f-4a95-98a8-8bd976910dbf/1/w70m_iKV5GK-JnhTPvpTHiO38QI.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/9c5a00-0b5f-4a95-98a8-8bd976910dbf/1/w70m_iKV5GK-JnhTPvpTHiO38QI.mft
rsync://rpki.ripe.net/repository/DEFAULT/w70m_iKV5GK-JnhTPvpTHiO38QI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 10:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:09:9a:25:ee:65:d3:89:3b:6a:f5:d0:00:bc:04:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3bd26fe2295e462be2678533efa531e23b7f102
Validity
Not Before: Mar 29 10:00:23 2026 GMT
Not After : Mar 30 10:00:23 2026 GMT
Subject: CN=691607004ceebd6a747fc898485673707a171361
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:04:53:f7:96:4e:16:04:44:1d:a5:0f:d8:64:
8e:f9:32:4f:d6:60:6c:53:ee:73:ca:93:d4:9d:b0:
6f:ac:33:4e:61:a9:31:5b:3d:20:24:e7:c9:9c:17:
45:63:a5:3f:23:8d:6f:76:10:c8:23:dd:b8:fe:ef:
9f:d8:b6:c8:d3:89:d6:62:83:72:a7:e1:e1:57:4a:
c2:19:d3:c4:9d:3f:76:12:93:d1:31:92:68:96:50:
e9:c0:4c:9d:d8:27:70:98:1f:39:a9:3d:0b:29:28:
d4:f0:c9:ff:15:57:88:c3:69:3e:4a:63:f8:e5:4a:
0f:c6:0e:a0:e1:e3:5e:c5:c3:55:eb:17:38:ba:77:
6f:93:97:d8:cc:f6:af:54:44:ee:25:a6:4c:db:92:
93:c6:f7:7a:db:a0:0a:96:9a:a1:63:63:ed:cb:ea:
3b:8d:ab:04:9f:d7:9f:ee:d5:49:d4:a1:c0:b0:f0:
ac:78:38:8f:23:3d:04:49:97:11:b4:f8:44:4a:81:
ec:67:94:e2:e7:99:65:3a:3d:85:0e:df:fd:5e:f5:
cb:7c:2b:fe:4a:94:40:3d:22:d5:d9:22:2e:5d:e6:
73:bb:e5:a8:84:5e:81:1d:94:4a:76:4a:ee:58:ec:
47:a4:c9:a4:c6:10:2a:80:53:df:be:89:55:29:34:
49:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:16:07:00:4C:EE:BD:6A:74:7F:C8:98:48:56:73:70:7A:17:13:61
X509v3 Authority Key Identifier:
keyid:C3:BD:26:FE:22:95:E4:62:BE:26:78:53:3E:FA:53:1E:23:B7:F1:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w70m_iKV5GK-JnhTPvpTHiO38QI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/9c5a00-0b5f-4a95-98a8-8bd976910dbf/1/w70m_iKV5GK-JnhTPvpTHiO38QI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/9c5a00-0b5f-4a95-98a8-8bd976910dbf/1/w70m_iKV5GK-JnhTPvpTHiO38QI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:03:37:f9:e5:11:33:1b:45:9e:dc:d1:38:0c:7e:78:aa:13:
9a:f9:cb:d8:04:5a:de:fd:25:30:f2:0e:29:22:04:f0:3f:d3:
f6:df:4a:c0:ad:c6:2a:b7:c6:71:d1:4e:65:87:34:d3:6f:df:
17:e6:94:05:10:f1:fa:a0:39:40:8d:37:a3:ac:ef:18:42:ed:
ca:70:f7:0d:be:be:50:49:cb:42:56:df:f7:73:74:22:4b:1a:
d4:d2:4a:03:4f:4d:cd:4d:6c:db:8f:45:d6:53:75:91:c4:54:
4c:27:cc:d3:b5:d7:0c:d1:3b:2d:b6:0f:01:aa:14:17:98:0d:
53:68:88:30:12:cc:70:44:a3:98:c6:5b:9a:2f:3f:9f:80:9d:
8b:88:ba:99:97:27:81:23:e5:87:8f:32:51:99:5f:ae:56:5a:
86:3f:9b:d7:fa:97:f4:74:7d:db:f5:9d:7a:28:c4:2b:72:00:
19:3f:d4:d2:e5:91:88:af:ab:52:48:4e:d1:af:ae:37:9c:04:
8e:86:fa:de:26:7d:69:d3:b2:6b:10:1f:15:14:db:6b:02:c4:
09:b0:6f:84:22:89:b3:22:20:2c:85:1f:02:c6:0f:5d:8b:b0:
29:a8:02:ca:ef:75:9f:7e:63:57:d4:e0:1c:e7:70:bc:1c:98:
ef:d3:e1:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 20:02:10 2026 by rpki-client