Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/9c5a00-0b5f-4a95-98a8-8bd976910dbf/1/w70m_iKV5GK-JnhTPvpTHiO38QI.mft
File: w70m_iKV5GK-JnhTPvpTHiO38QI.mft (raw, json)
Hash identifier: XbBoKUHSo3izzTT2QkDd+01Ig3f5doh7GDoIo4Dezvs=
Subject key identifier: 63:F8:D4:2B:3A:C2:93:8E:86:D3:0C:0C:A2:6F:8F:0D:05:CF:9E:79
Authority key identifier: C3:BD:26:FE:22:95:E4:62:BE:26:78:53:3E:FA:53:1E:23:B7:F1:02
Certificate issuer: /CN=c3bd26fe2295e462be2678533efa531e23b7f102
Certificate serial: 019EB76AAE85B958A4E99EFC9D795AE6ADC8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w70m_iKV5GK-JnhTPvpTHiO38QI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/9c5a00-0b5f-4a95-98a8-8bd976910dbf/1/w70m_iKV5GK-JnhTPvpTHiO38QI.mft
Manifest number: 1957
Signing time: Thu 11 Jun 2026 16:01:22 +0000
Manifest this update: Thu 11 Jun 2026 16:01:22 +0000
Manifest next update: Fri 12 Jun 2026 16:01:22 +0000
Files and hashes: 1: BpitMkNTOG0_ouRmz2bpaYkKoBY.roa (hash: YpWL3AH39Erg/3Vj3WOA5eh5wrqjLGB0H0SvsITlAwA=)
2: qKqi_rXQXOvxeFffB2pfRZ_x1CM.roa (hash: XYn4rn0UvMRvensr1fkhAzYC4HLrGdOg2tErj1J5QmQ=)
3: w70m_iKV5GK-JnhTPvpTHiO38QI.crl (hash: xs0dBMInauIOkoFTIhNYYvWucsGz5Pku+eeiFRKdnTE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/9c5a00-0b5f-4a95-98a8-8bd976910dbf/1/w70m_iKV5GK-JnhTPvpTHiO38QI.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/9c5a00-0b5f-4a95-98a8-8bd976910dbf/1/w70m_iKV5GK-JnhTPvpTHiO38QI.mft
rsync://rpki.ripe.net/repository/DEFAULT/w70m_iKV5GK-JnhTPvpTHiO38QI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 13:27:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b7:6a:ae:85:b9:58:a4:e9:9e:fc:9d:79:5a:e6:ad:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3bd26fe2295e462be2678533efa531e23b7f102
Validity
Not Before: Jun 11 16:01:22 2026 GMT
Not After : Jun 12 16:01:22 2026 GMT
Subject: CN=63f8d42b3ac2938e86d30c0ca26f8f0d05cf9e79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:ca:a2:c8:a4:68:91:d0:40:17:16:67:0e:33:
35:b2:09:1e:7b:5e:2f:bf:ac:3f:c6:db:23:34:a9:
1e:b6:07:f2:79:62:a3:98:3e:6f:f8:36:02:d6:8c:
cc:f3:85:89:c5:ce:6d:15:13:e5:ae:53:93:cc:6d:
3b:3a:ce:b5:43:30:19:98:77:92:63:b5:a4:a5:2e:
ac:b4:26:44:ca:b1:46:00:14:f0:4a:bb:21:e8:4e:
38:52:45:53:f5:71:d0:93:f1:38:0c:42:81:70:9d:
91:5a:13:36:7c:b3:ac:2f:86:29:92:fb:99:cc:38:
fc:ff:09:50:b7:18:82:82:aa:00:82:df:dc:6d:8f:
53:9b:94:01:12:40:ea:dc:ce:ed:ce:4d:d0:8a:fb:
f3:9d:d0:73:ff:55:1b:a9:93:eb:45:aa:5f:55:52:
5f:ae:ef:c0:ef:18:73:df:34:ec:a6:78:7b:cc:32:
e8:d9:01:b1:b8:74:c3:04:10:cb:c3:50:03:9a:bc:
15:f8:f4:ea:bf:b5:92:19:5b:3a:1a:ec:1d:41:d7:
c0:6e:ff:5e:a8:ab:d5:f0:a2:f9:d4:8a:33:7e:50:
af:6a:d0:0b:e4:df:4f:3d:ee:50:dc:2f:6a:41:e2:
c8:c5:df:7b:0e:e4:8f:69:43:64:d6:ea:66:f8:49:
7a:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:F8:D4:2B:3A:C2:93:8E:86:D3:0C:0C:A2:6F:8F:0D:05:CF:9E:79
X509v3 Authority Key Identifier:
keyid:C3:BD:26:FE:22:95:E4:62:BE:26:78:53:3E:FA:53:1E:23:B7:F1:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w70m_iKV5GK-JnhTPvpTHiO38QI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/9c5a00-0b5f-4a95-98a8-8bd976910dbf/1/w70m_iKV5GK-JnhTPvpTHiO38QI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/9c5a00-0b5f-4a95-98a8-8bd976910dbf/1/w70m_iKV5GK-JnhTPvpTHiO38QI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:be:53:d0:13:97:8d:8c:0f:37:59:fc:b7:60:79:68:85:8e:
db:cf:40:02:6c:38:3a:b0:d9:64:9f:57:e9:56:75:5a:eb:9d:
c2:43:c2:d3:d5:42:e2:e0:68:d9:c6:05:78:23:a2:11:21:65:
e6:74:9a:88:b0:0c:58:fc:aa:69:e4:c8:e4:21:3f:13:39:20:
77:eb:ff:23:a6:1f:6a:7e:0b:f1:f9:89:36:b4:78:20:1c:f4:
03:30:62:96:88:b9:67:7f:5a:69:b7:60:bc:e3:42:ad:35:a5:
f3:c5:28:0a:84:e1:59:d7:01:a2:a4:cf:30:d0:c5:36:bf:51:
59:1d:27:47:54:7d:f1:ed:26:6b:52:a9:dc:b2:de:1e:ed:6f:
6d:45:92:00:f2:91:4f:bd:70:3b:40:1f:18:cd:74:3a:d9:ce:
64:95:52:a7:20:76:5d:eb:e1:fb:a5:48:a5:dd:14:8a:01:f4:
66:27:fe:4e:70:ce:71:46:c7:2c:45:93:9d:2c:ac:a8:f1:45:
83:13:e3:da:2f:2f:5d:52:5f:ea:38:29:16:ae:9d:c3:44:fa:
6d:52:30:b7:a3:ad:97:54:68:27:2a:02:a5:a8:91:1c:c9:70:
78:3a:2c:40:1a:53:0e:de:f3:17:c4:9c:e3:e2:17:92:1a:43:
33:93:33:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 17:54:05 2026 by rpki-client