Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/40/9c5a00-0b5f-4a95-98a8-8bd976910dbf/1/w70m_iKV5GK-JnhTPvpTHiO38QI.mft
File: w70m_iKV5GK-JnhTPvpTHiO38QI.mft (raw, json)
Hash identifier: BlES6zPBhUS3kWlXydYgNIHN48efVwDA7mJnsAwUuo8=
Subject key identifier: 03:D0:A2:02:55:9E:51:8F:3C:96:36:C8:92:6D:26:C5:CC:A4:03:EB
Authority key identifier: C3:BD:26:FE:22:95:E4:62:BE:26:78:53:3E:FA:53:1E:23:B7:F1:02
Certificate issuer: /CN=c3bd26fe2295e462be2678533efa531e23b7f102
Certificate serial: 01A17A3B1B4066B7BC7C33D20E7A56FAC958
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w70m_iKV5GK-JnhTPvpTHiO38QI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/9c5a00-0b5f-4a95-98a8-8bd976910dbf/1/w70m_iKV5GK-JnhTPvpTHiO38QI.mft
Manifest number: 1AC5
Signing time: Mon 26 Oct 2026 22:00:56 +0000
Manifest this update: Mon 26 Oct 2026 22:00:56 +0000
Manifest next update: Tue 27 Oct 2026 22:00:56 +0000
Files and hashes: 1: BpitMkNTOG0_ouRmz2bpaYkKoBY.roa (hash: YpWL3AH39Erg/3Vj3WOA5eh5wrqjLGB0H0SvsITlAwA=)
2: qKqi_rXQXOvxeFffB2pfRZ_x1CM.roa (hash: XYn4rn0UvMRvensr1fkhAzYC4HLrGdOg2tErj1J5QmQ=)
3: w70m_iKV5GK-JnhTPvpTHiO38QI.crl (hash: RR+vqCJ2snClqGluWtC994o39E5UvlWKvbrfSNA7Qnc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/9c5a00-0b5f-4a95-98a8-8bd976910dbf/1/w70m_iKV5GK-JnhTPvpTHiO38QI.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/9c5a00-0b5f-4a95-98a8-8bd976910dbf/1/w70m_iKV5GK-JnhTPvpTHiO38QI.mft
rsync://rpki.ripe.net/repository/DEFAULT/w70m_iKV5GK-JnhTPvpTHiO38QI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7a:3b:1b:40:66:b7:bc:7c:33:d2:0e:7a:56:fa:c9:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3bd26fe2295e462be2678533efa531e23b7f102
Validity
Not Before: Oct 26 22:00:56 2026 GMT
Not After : Oct 27 22:00:56 2026 GMT
Subject: CN=03d0a202559e518f3c9636c8926d26c5cca403eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:6e:79:23:c5:c0:30:23:ab:e8:e6:a4:15:7f:
a7:bf:fa:c3:0c:f1:fe:36:14:5d:f2:d6:78:97:ad:
94:dd:6b:f4:02:93:0e:f6:d8:53:ca:56:37:d8:36:
ac:b2:ef:7e:cc:f0:78:0f:74:c4:e8:04:e2:05:4e:
58:56:59:d7:68:b5:b8:b5:5e:a9:50:34:14:cc:fe:
3d:e0:33:bd:e2:65:b0:35:9e:ab:bd:e2:87:3a:14:
9c:72:bc:40:5b:59:77:33:3b:e0:03:b8:de:56:8e:
a1:2b:ce:95:48:cb:f3:59:f5:05:c9:6c:bd:2b:bf:
8c:2e:7f:b4:04:fc:b9:dd:8a:9b:83:71:f6:52:b1:
f2:f9:b1:0d:23:ee:f5:7f:56:a0:75:9e:c3:0d:71:
24:9d:4a:2f:db:5a:4b:29:4d:4d:0b:cc:da:57:04:
38:68:0d:18:92:4d:f5:6b:cc:bb:30:41:39:12:08:
c3:b4:13:4c:28:0b:56:34:07:af:d1:76:de:42:12:
97:de:b1:57:3c:73:f5:5b:df:38:5d:fc:51:34:2a:
d1:cd:ab:31:86:e4:ec:49:53:ec:c5:b1:34:06:71:
44:3b:bf:b0:d6:dc:a3:f8:a7:41:d0:0e:df:3b:e1:
8b:1f:17:10:3e:09:a1:93:37:ae:d2:47:6d:fd:7a:
14:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:D0:A2:02:55:9E:51:8F:3C:96:36:C8:92:6D:26:C5:CC:A4:03:EB
X509v3 Authority Key Identifier:
keyid:C3:BD:26:FE:22:95:E4:62:BE:26:78:53:3E:FA:53:1E:23:B7:F1:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w70m_iKV5GK-JnhTPvpTHiO38QI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/9c5a00-0b5f-4a95-98a8-8bd976910dbf/1/w70m_iKV5GK-JnhTPvpTHiO38QI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/9c5a00-0b5f-4a95-98a8-8bd976910dbf/1/w70m_iKV5GK-JnhTPvpTHiO38QI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:84:2b:bf:90:44:a2:b6:ad:5f:c0:a8:35:df:3f:7b:ce:cd:
39:78:04:db:ae:1b:f5:63:ec:6c:ca:e9:6e:12:60:70:24:92:
f2:58:0f:05:aa:03:51:3e:c0:d3:6f:53:32:b8:c6:5c:24:84:
ce:02:0e:9f:3d:7b:cd:40:8c:84:20:34:b1:f9:7b:e4:48:9e:
c6:d9:0a:39:56:a6:b0:a2:0d:a5:4a:2d:67:70:4c:e5:9b:e6:
f0:58:50:f7:74:6f:0f:07:66:a7:00:35:96:39:40:74:38:0b:
75:0f:b1:5b:1d:8d:71:36:71:7d:02:b4:5e:f9:ef:d6:f7:01:
49:2a:6a:33:a1:fc:ec:7f:5f:f8:f4:31:75:7e:63:11:e4:9a:
47:eb:ff:c1:00:b6:8a:92:b9:93:a6:67:ec:87:e0:62:2d:35:
2f:b2:88:0f:ce:88:c2:99:6e:73:5a:46:54:85:83:1a:25:8e:
eb:b4:16:73:a6:1e:d2:a5:df:ab:4b:23:6a:b4:e1:f4:db:c4:
fc:ec:37:ad:3c:d7:cd:bf:59:12:e9:70:fd:0a:1e:d2:ad:08:
2d:9e:0a:9c:05:8e:d1:77:6b:ba:68:81:96:81:f9:5f:58:bd:
c4:e0:61:31:39:43:d5:dc:b9:a1:5e:6c:92:47:c1:07:2b:9f:
83:0f:00:57
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaF6OxtAZre8fDPSDnpW+slYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMzYmQyNmZlMjI5NWU0NjJiZTI2Nzg1MzNlZmE1MzFlMjNi
N2YxMDIwHhcNMjYxMDI2MjIwMDU2WhcNMjYxMDI3MjIwMDU2WjAzMTEwLwYDVQQD
EygwM2QwYTIwMjU1OWU1MThmM2M5NjM2Yzg5MjZkMjZjNWNjYTQwM2ViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl255I8XAMCOr6OakFX+nv/rDDPH+
NhRd8tZ4l62U3Wv0ApMO9thTylY32Dassu9+zPB4D3TE6ATiBU5YVlnXaLW4tV6p
UDQUzP494DO94mWwNZ6rveKHOhSccrxAW1l3MzvgA7jeVo6hK86VSMvzWfUFyWy9
K7+MLn+0BPy53Yqbg3H2UrHy+bENI+71f1agdZ7DDXEknUov21pLKU1NC8zaVwQ4
aA0Ykk31a8y7MEE5EgjDtBNMKAtWNAev0XbeQhKX3rFXPHP1W984XfxRNCrRzasx
huTsSVPsxbE0BnFEO7+w1tyj+KdB0A7fO+GLHxcQPgmhkzeu0kdt/XoUiQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAPQogJVnlGPPJY2yJJtJsXMpAPrMB8GA1UdIwQY
MBaAFMO9Jv4ileRiviZ4Uz76Ux4jt/ECMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdzcwbV9pS1Y1R0stSm5oVFB2cFRIaU8zOFFJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC85YzVhMDAtMGI1Zi00YTk1LTk4YTgt
OGJkOTc2OTEwZGJmLzEvdzcwbV9pS1Y1R0stSm5oVFB2cFRIaU8zOFFJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MC85YzVhMDAtMGI1Zi00YTk1LTk4YTgtOGJkOTc2OTEwZGJm
LzEvdzcwbV9pS1Y1R0stSm5oVFB2cFRIaU8zOFFJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfIQrv5BE
oratX8CoNd8/e87NOXgE264b9WPsbMrpbhJgcCSS8lgPBaoDUT7A029TMrjGXCSE
zgIOnz17zUCMhCA0sfl75EiextkKOVamsKINpUotZ3BM5Zvm8FhQ93RvDwdmpwA1
ljlAdDgLdQ+xWx2NcTZxfQK0Xvnv1vcBSSpqM6H87H9f+PQxdX5jEeSaR+v/wQC2
ipK5k6Zn7IfgYi01L7KID86Iwpluc1pGVIWDGiWO67QWc6Ye0qXfq0sjarTh9NvE
/Ow3rTzXzb9ZEulw/Qoe0q0ILZ4KnAWO0XdrumiBloH5X1i9xOBhMTlD1dy5oV5s
kkfBByufgw8AVw==
-----END CERTIFICATE-----
Generated at Tue Oct 27 01:52:19 2026 by rpki-client