Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/9c5a00-0b5f-4a95-98a8-8bd976910dbf/1/w70m_iKV5GK-JnhTPvpTHiO38QI.mft
File: w70m_iKV5GK-JnhTPvpTHiO38QI.mft (raw, json)
Hash identifier: NQHykI0+OXuKWbh/dATCzOCNrDJlPchoYuVvFoSMmT4=
Subject key identifier: CC:35:33:87:72:5D:A0:38:4F:E4:76:B4:D0:13:39:97:2B:17:CF:11
Authority key identifier: C3:BD:26:FE:22:95:E4:62:BE:26:78:53:3E:FA:53:1E:23:B7:F1:02
Certificate issuer: /CN=c3bd26fe2295e462be2678533efa531e23b7f102
Certificate serial: 019F9F28AE00343B8358EF02A54C8B34FD07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w70m_iKV5GK-JnhTPvpTHiO38QI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/9c5a00-0b5f-4a95-98a8-8bd976910dbf/1/w70m_iKV5GK-JnhTPvpTHiO38QI.mft
Manifest number: 19CF
Signing time: Sun 26 Jul 2026 16:01:11 +0000
Manifest this update: Sun 26 Jul 2026 16:01:11 +0000
Manifest next update: Mon 27 Jul 2026 16:01:11 +0000
Files and hashes: 1: BpitMkNTOG0_ouRmz2bpaYkKoBY.roa (hash: YpWL3AH39Erg/3Vj3WOA5eh5wrqjLGB0H0SvsITlAwA=)
2: qKqi_rXQXOvxeFffB2pfRZ_x1CM.roa (hash: XYn4rn0UvMRvensr1fkhAzYC4HLrGdOg2tErj1J5QmQ=)
3: w70m_iKV5GK-JnhTPvpTHiO38QI.crl (hash: s/mcEkKjvaf1EJaYfiQPtzkhYX0hnpN1y8I0EC45O7Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/9c5a00-0b5f-4a95-98a8-8bd976910dbf/1/w70m_iKV5GK-JnhTPvpTHiO38QI.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/9c5a00-0b5f-4a95-98a8-8bd976910dbf/1/w70m_iKV5GK-JnhTPvpTHiO38QI.mft
rsync://rpki.ripe.net/repository/DEFAULT/w70m_iKV5GK-JnhTPvpTHiO38QI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 14:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:9f:28:ae:00:34:3b:83:58:ef:02:a5:4c:8b:34:fd:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3bd26fe2295e462be2678533efa531e23b7f102
Validity
Not Before: Jul 26 16:01:11 2026 GMT
Not After : Jul 27 16:01:11 2026 GMT
Subject: CN=cc353387725da0384fe476b4d01339972b17cf11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:60:34:5e:79:0b:68:99:28:20:39:3f:80:16:
1c:27:6b:bf:1b:31:32:0f:0a:da:29:8a:3a:96:5b:
70:61:23:b3:eb:28:d0:82:ed:3c:b1:60:41:d9:ae:
32:37:bc:ea:ff:21:cb:64:a8:a9:8d:1e:a7:87:2d:
a4:86:34:65:e5:39:9e:8b:59:ce:c7:ef:e9:0d:72:
a1:ba:c7:08:a0:eb:66:29:05:55:2a:2c:bc:0d:eb:
de:4a:98:8e:9d:e5:98:70:bb:1a:9f:7e:0e:33:fb:
06:7d:12:d5:5b:1c:7a:f8:ca:c1:88:db:21:b7:08:
7b:15:3a:67:6f:99:17:db:4c:4d:cd:7e:1c:8b:d4:
80:e6:93:4d:67:c5:78:d4:46:21:0d:23:2a:fd:5b:
2c:f2:6f:fd:ab:10:4d:fd:8a:f8:3e:da:d4:33:d8:
69:59:91:75:e7:09:c7:c3:0c:34:aa:82:b6:06:3b:
9c:9c:68:2d:36:2d:18:e4:8e:de:b2:3d:47:4b:e2:
8d:29:02:ab:4f:cc:2e:c2:74:76:44:d1:5a:73:8d:
05:1b:e6:3e:ed:87:83:e7:cc:cd:bb:ae:89:da:c4:
70:04:d1:51:64:8a:95:59:b6:b7:79:53:02:f9:d8:
32:5e:2f:e5:26:b4:1d:de:25:41:98:34:fa:cc:91:
8b:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:35:33:87:72:5D:A0:38:4F:E4:76:B4:D0:13:39:97:2B:17:CF:11
X509v3 Authority Key Identifier:
keyid:C3:BD:26:FE:22:95:E4:62:BE:26:78:53:3E:FA:53:1E:23:B7:F1:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w70m_iKV5GK-JnhTPvpTHiO38QI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/9c5a00-0b5f-4a95-98a8-8bd976910dbf/1/w70m_iKV5GK-JnhTPvpTHiO38QI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/9c5a00-0b5f-4a95-98a8-8bd976910dbf/1/w70m_iKV5GK-JnhTPvpTHiO38QI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:c4:01:08:3f:a4:20:0d:39:1c:eb:f5:3e:9d:5a:1f:14:87:
42:ff:9e:e6:e9:90:a8:5e:02:da:e7:af:30:7d:98:87:9d:ac:
4f:a9:12:b1:d4:61:c3:ef:62:88:d6:d9:ba:2a:2a:b3:da:e8:
b6:11:6b:c3:98:14:24:25:f5:df:40:4e:9a:73:9c:60:6d:66:
42:ff:7d:11:b9:57:46:f1:e3:41:28:1d:1c:df:1a:de:6f:5a:
b9:2e:bb:fc:ce:b3:69:95:6e:7d:d4:72:16:a2:af:17:f4:11:
9d:d8:a6:4b:e9:3c:d6:2c:00:31:4d:29:c0:93:c0:9c:d5:d4:
29:94:21:98:c0:0b:35:16:b3:c8:51:5f:a3:9f:25:aa:cb:16:
87:12:f1:33:7c:ae:d6:0d:7b:48:af:9c:42:ca:6c:33:fa:6f:
67:ca:28:7a:54:11:91:c8:b3:9c:f2:e8:b3:e1:48:bb:f7:cc:
3d:47:8b:5e:66:20:8a:33:d0:4c:e7:f7:50:a2:6a:68:4f:bd:
9b:19:77:89:37:4c:e3:35:f2:49:49:2a:29:f6:8a:87:2e:38:
7a:08:d5:b5:4d:ee:12:c7:7e:66:ba:dc:ec:8b:38:36:8a:ae:
62:9d:bd:08:fc:44:63:41:65:ab:5a:4d:b8:c8:4e:0e:4b:b7:
3b:53:7a:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 00:09:17 2026 by rpki-client