Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/40/9c5a00-0b5f-4a95-98a8-8bd976910dbf/1/w70m_iKV5GK-JnhTPvpTHiO38QI.mft
File: w70m_iKV5GK-JnhTPvpTHiO38QI.mft (raw, json)
Hash identifier: jcl6sTmvZzzVuf89yF6KmSV/HjtXZ+RU63yMtulYfe4=
Subject key identifier: C8:54:3A:E3:37:87:D8:68:5B:DD:B0:F0:92:E2:66:4D:1D:97:50:53
Authority key identifier: C3:BD:26:FE:22:95:E4:62:BE:26:78:53:3E:FA:53:1E:23:B7:F1:02
Certificate issuer: /CN=c3bd26fe2295e462be2678533efa531e23b7f102
Certificate serial: 01A08CB1FA905BBA2E95591F552C03E02C17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w70m_iKV5GK-JnhTPvpTHiO38QI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/9c5a00-0b5f-4a95-98a8-8bd976910dbf/1/w70m_iKV5GK-JnhTPvpTHiO38QI.mft
Manifest number: 1A4A
Signing time: Thu 10 Sep 2026 19:01:09 +0000
Manifest this update: Thu 10 Sep 2026 19:01:09 +0000
Manifest next update: Fri 11 Sep 2026 19:01:09 +0000
Files and hashes: 1: BpitMkNTOG0_ouRmz2bpaYkKoBY.roa (hash: YpWL3AH39Erg/3Vj3WOA5eh5wrqjLGB0H0SvsITlAwA=)
2: qKqi_rXQXOvxeFffB2pfRZ_x1CM.roa (hash: XYn4rn0UvMRvensr1fkhAzYC4HLrGdOg2tErj1J5QmQ=)
3: w70m_iKV5GK-JnhTPvpTHiO38QI.crl (hash: 7bbubpH1JA+yJS4gmPdHoVistG7baAYcr3lTlKjW+gQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/9c5a00-0b5f-4a95-98a8-8bd976910dbf/1/w70m_iKV5GK-JnhTPvpTHiO38QI.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/9c5a00-0b5f-4a95-98a8-8bd976910dbf/1/w70m_iKV5GK-JnhTPvpTHiO38QI.mft
rsync://rpki.ripe.net/repository/DEFAULT/w70m_iKV5GK-JnhTPvpTHiO38QI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 19:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8c:b1:fa:90:5b:ba:2e:95:59:1f:55:2c:03:e0:2c:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3bd26fe2295e462be2678533efa531e23b7f102
Validity
Not Before: Sep 10 19:01:09 2026 GMT
Not After : Sep 11 19:01:09 2026 GMT
Subject: CN=c8543ae33787d8685bddb0f092e2664d1d975053
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:0e:22:b8:c9:78:18:e9:9d:85:55:d7:16:70:
ce:a9:65:25:75:8b:94:f9:a1:03:f0:a9:43:7d:0e:
1a:b6:4c:01:4a:57:64:32:49:d3:d5:d0:96:51:dc:
26:04:db:1c:2b:66:19:61:4f:85:bd:25:c7:c3:c3:
f8:00:7e:ed:7c:bb:a1:a4:b8:fe:4b:d7:ba:4a:46:
6c:4a:28:3c:78:88:18:f2:f9:0c:80:78:be:0f:a0:
bf:33:56:34:dc:20:fc:90:10:68:58:e4:e9:65:a2:
cf:5b:bb:46:03:cf:d2:3f:e8:fe:85:93:f9:eb:50:
45:97:04:bb:1f:71:2d:5a:39:be:07:ce:07:1d:5d:
c8:90:53:3a:c3:4f:44:5a:c6:cf:9d:af:2c:92:04:
0f:35:f2:7f:ea:ca:21:66:4a:69:89:cb:c5:c6:94:
f1:77:d5:2b:8c:62:ab:92:6b:0b:a0:9f:97:a6:19:
23:ce:0b:51:a8:0c:09:13:e4:15:44:14:ff:2e:54:
30:67:0f:e3:82:fd:9f:08:6f:56:99:62:bd:a4:4e:
c7:cd:39:30:d0:b6:16:41:b1:34:ab:0f:86:44:0c:
bc:5d:4b:39:ac:87:02:21:a0:c9:4a:d3:c6:2a:60:
86:77:33:a2:8d:ac:63:e0:31:41:90:2d:16:b4:85:
e0:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:54:3A:E3:37:87:D8:68:5B:DD:B0:F0:92:E2:66:4D:1D:97:50:53
X509v3 Authority Key Identifier:
keyid:C3:BD:26:FE:22:95:E4:62:BE:26:78:53:3E:FA:53:1E:23:B7:F1:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w70m_iKV5GK-JnhTPvpTHiO38QI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/9c5a00-0b5f-4a95-98a8-8bd976910dbf/1/w70m_iKV5GK-JnhTPvpTHiO38QI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/9c5a00-0b5f-4a95-98a8-8bd976910dbf/1/w70m_iKV5GK-JnhTPvpTHiO38QI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:50:b1:b7:2e:2a:95:ca:95:6c:95:9b:e4:e7:79:39:53:1b:
e7:ba:91:de:0b:24:95:7d:c2:d1:f2:a4:a5:90:93:dd:44:fa:
a1:46:15:8f:bb:16:71:4e:b7:33:7f:c0:95:41:d1:ab:3b:99:
cd:87:9e:e0:a7:0a:c2:db:93:41:1a:f7:5e:d6:83:18:3d:d2:
9f:97:41:bd:97:4d:4f:c5:c2:d0:5a:cd:73:d6:13:cd:eb:29:
c7:9e:af:97:64:4a:ab:6e:ce:d2:f4:b3:9c:3b:ad:e9:de:8c:
49:53:b1:f7:99:b1:ac:a9:fb:64:02:37:14:e0:8b:e4:ff:23:
8c:ba:d9:f8:5e:39:b6:64:1e:ec:1f:d5:2a:4d:4b:e9:f7:8f:
04:c9:fa:61:4b:02:63:28:8f:c7:4c:56:ae:6a:84:6e:08:d4:
08:27:fc:15:54:e1:a9:bb:6f:36:43:ea:01:a0:c1:3a:61:7a:
98:72:5e:5c:36:ea:62:b6:72:6c:a0:01:57:7e:06:d3:31:d9:
ba:62:85:e9:ef:77:b4:30:da:22:b1:77:d6:a6:0b:b2:2b:0d:
d5:a5:8f:c3:5e:57:19:c2:0e:62:fd:b2:69:3c:24:ba:d3:ac:
d4:19:85:83:4e:ec:1a:8e:10:7b:96:ab:ef:0d:cb:a4:9c:bb:
78:b4:06:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 02:51:56 2026 by rpki-client