Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/af9c78-6ede-40df-89c1-79725fa2e133/1/w3URP9S_vTixBDhDwwkmoRDMD1E.mft
File: w3URP9S_vTixBDhDwwkmoRDMD1E.mft (raw, json)
Hash identifier: yGphoIAEQKT7y4te9AypOwjaDHzb0PxMZ4u28s1YNXQ=
Subject key identifier: 4F:A8:52:00:AD:14:94:1E:8E:6D:DF:FB:2C:B2:63:E0:5E:D7:00:2F
Authority key identifier: C3:75:11:3F:D4:BF:BD:38:B1:04:38:43:C3:09:26:A1:10:CC:0F:51
Certificate issuer: /CN=c375113fd4bfbd38b1043843c30926a110cc0f51
Certificate serial: 019F1C0DF30CAE7B1063B25AFE25364B1B94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w3URP9S_vTixBDhDwwkmoRDMD1E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/af9c78-6ede-40df-89c1-79725fa2e133/1/w3URP9S_vTixBDhDwwkmoRDMD1E.mft
Manifest number: 198C
Signing time: Wed 01 Jul 2026 05:01:43 +0000
Manifest this update: Wed 01 Jul 2026 05:01:43 +0000
Manifest next update: Thu 02 Jul 2026 05:01:43 +0000
Files and hashes: 1: TYwN3t32Z7xKSSbdeezcjvxtZPw.roa (hash: vACqWvZBDZtntkC9z+JDWdjz/Gh+6JNnrhSbEy009gw=)
2: ZJWhX_sHEjs97qyEWeCy7JLXnqw.roa (hash: bAXAo9VS32osXOlNSknnXOi501Vm+Z7vmbwaL73CoDc=)
3: w3URP9S_vTixBDhDwwkmoRDMD1E.crl (hash: 6JW5YrLq4aXIDZLglE6tu3Ojgv4g4DMYY1H16TQv7GQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/af9c78-6ede-40df-89c1-79725fa2e133/1/w3URP9S_vTixBDhDwwkmoRDMD1E.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/af9c78-6ede-40df-89c1-79725fa2e133/1/w3URP9S_vTixBDhDwwkmoRDMD1E.mft
rsync://rpki.ripe.net/repository/DEFAULT/w3URP9S_vTixBDhDwwkmoRDMD1E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 23:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:1c:0d:f3:0c:ae:7b:10:63:b2:5a:fe:25:36:4b:1b:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c375113fd4bfbd38b1043843c30926a110cc0f51
Validity
Not Before: Jul 1 05:01:43 2026 GMT
Not After : Jul 2 05:01:43 2026 GMT
Subject: CN=4fa85200ad14941e8e6ddffb2cb263e05ed7002f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:94:1c:96:f9:20:13:46:e8:7d:54:ef:54:fc:
9c:45:47:da:02:ce:cb:7e:51:0e:eb:b8:1c:40:c7:
41:39:30:c6:4d:9c:36:1f:18:42:2a:d7:ca:93:3b:
42:b7:fe:b5:0f:90:15:85:1b:f0:02:6e:85:9a:93:
75:ae:e5:5e:4c:97:6f:71:e6:74:08:74:43:6e:f8:
dd:3b:d3:a6:b3:63:af:1b:4f:8e:e9:5f:aa:81:60:
43:b2:89:f6:41:d7:0e:cc:cf:49:36:23:6c:35:97:
d6:e2:58:9c:eb:b2:df:3c:ae:55:21:73:2b:61:71:
6b:b7:af:69:eb:21:24:0d:25:90:2f:be:46:5f:18:
27:f6:73:62:5a:37:92:38:f3:b0:15:33:57:6f:a9:
25:98:77:9d:a8:4d:ad:56:bd:31:c7:62:4e:4c:95:
89:bd:46:b3:ce:cd:9a:19:81:26:fa:18:ee:8f:be:
26:67:e6:e4:2d:08:1b:88:ac:d8:9f:1b:3d:c3:74:
91:2b:b5:78:ee:99:4c:ac:0c:de:22:75:66:13:04:
79:d6:98:41:eb:24:ba:4e:f8:b2:14:97:e4:68:8e:
61:2b:e3:ae:c5:b2:4c:09:d0:6d:1a:b1:9b:d8:bd:
4d:80:90:6a:69:00:72:83:c9:6a:3a:24:36:8f:73:
7c:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:A8:52:00:AD:14:94:1E:8E:6D:DF:FB:2C:B2:63:E0:5E:D7:00:2F
X509v3 Authority Key Identifier:
keyid:C3:75:11:3F:D4:BF:BD:38:B1:04:38:43:C3:09:26:A1:10:CC:0F:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w3URP9S_vTixBDhDwwkmoRDMD1E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/af9c78-6ede-40df-89c1-79725fa2e133/1/w3URP9S_vTixBDhDwwkmoRDMD1E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/af9c78-6ede-40df-89c1-79725fa2e133/1/w3URP9S_vTixBDhDwwkmoRDMD1E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:87:23:02:c7:66:d1:c8:e0:a6:de:d4:f6:44:d3:fc:1e:39:
f0:c8:5b:2d:f0:7e:33:e8:5f:2a:70:db:ad:2a:8d:de:e5:74:
38:c5:af:6d:5e:bf:02:cf:88:76:9d:1e:db:9d:7f:68:09:35:
4b:76:a2:a7:3b:f1:0d:80:02:7a:a3:2a:d6:6e:1b:c8:1d:c5:
95:93:13:82:92:11:76:2d:3d:e4:d9:3f:57:d2:52:d0:e3:5d:
d7:f6:c0:e0:9b:59:5f:29:54:17:3d:fd:1a:a7:78:ff:2d:0c:
35:59:fa:92:60:fe:b7:d0:16:2a:d1:91:ea:8c:c9:b7:33:7c:
f2:69:db:1a:56:81:20:72:db:bc:a0:52:ca:71:43:15:f6:c1:
21:80:e5:2f:65:15:44:a4:db:fb:21:05:56:97:08:ba:30:b8:
e5:63:80:60:2a:bf:00:ef:19:99:d5:21:6b:12:5d:a0:9c:d0:
f3:c6:71:92:3e:79:08:16:f4:4f:12:d9:73:ea:d2:36:15:85:
df:6b:d2:06:f7:dd:01:10:b4:98:8d:59:33:f1:3e:0e:9d:53:
89:4c:6f:b4:be:55:af:af:6f:1a:b2:ee:8c:c5:f6:0e:84:cb:
9a:d7:35:5d:9d:d6:83:c4:fc:32:e4:8b:8c:92:1d:89:22:34:
fb:2f:0f:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 1 06:28:26 2026 by rpki-client