Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f5/af9c78-6ede-40df-89c1-79725fa2e133/1/w3URP9S_vTixBDhDwwkmoRDMD1E.mft
File: w3URP9S_vTixBDhDwwkmoRDMD1E.mft (raw, json)
Hash identifier: es2MxBCxeIk49kxPfIY4CSBFftdjqvv1epNMIfIRNLg=
Subject key identifier: BE:5F:1C:D7:C4:D3:F0:93:61:41:C8:16:D0:4A:AE:14:FC:67:8B:17
Authority key identifier: C3:75:11:3F:D4:BF:BD:38:B1:04:38:43:C3:09:26:A1:10:CC:0F:51
Certificate issuer: /CN=c375113fd4bfbd38b1043843c30926a110cc0f51
Certificate serial: 01A16156E3D9287CF5E5F4E15AD1734D3A22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w3URP9S_vTixBDhDwwkmoRDMD1E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/af9c78-6ede-40df-89c1-79725fa2e133/1/w3URP9S_vTixBDhDwwkmoRDMD1E.mft
Manifest number: 1AB9
Signing time: Thu 22 Oct 2026 02:00:46 +0000
Manifest this update: Thu 22 Oct 2026 02:00:46 +0000
Manifest next update: Fri 23 Oct 2026 02:00:46 +0000
Files and hashes: 1: TYwN3t32Z7xKSSbdeezcjvxtZPw.roa (hash: vACqWvZBDZtntkC9z+JDWdjz/Gh+6JNnrhSbEy009gw=)
2: ZJWhX_sHEjs97qyEWeCy7JLXnqw.roa (hash: bAXAo9VS32osXOlNSknnXOi501Vm+Z7vmbwaL73CoDc=)
3: w3URP9S_vTixBDhDwwkmoRDMD1E.crl (hash: Nn9MYAu38kIbze2y+sZxI2SzBag4FxYCL65GRM4m9e8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/af9c78-6ede-40df-89c1-79725fa2e133/1/w3URP9S_vTixBDhDwwkmoRDMD1E.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/af9c78-6ede-40df-89c1-79725fa2e133/1/w3URP9S_vTixBDhDwwkmoRDMD1E.mft
rsync://rpki.ripe.net/repository/DEFAULT/w3URP9S_vTixBDhDwwkmoRDMD1E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Oct 2026 23:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:61:56:e3:d9:28:7c:f5:e5:f4:e1:5a:d1:73:4d:3a:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c375113fd4bfbd38b1043843c30926a110cc0f51
Validity
Not Before: Oct 22 02:00:46 2026 GMT
Not After : Oct 23 02:00:46 2026 GMT
Subject: CN=be5f1cd7c4d3f0936141c816d04aae14fc678b17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:a6:1d:76:7e:d6:43:f7:ce:c8:d1:f5:13:fc:
7d:73:64:71:e3:33:b7:b7:47:cb:51:44:c4:8a:ab:
80:d3:4a:5d:20:78:d5:7b:d0:df:a8:a9:33:79:b2:
43:a6:0b:f6:37:53:a3:44:a5:71:04:05:b8:e5:11:
ca:fc:8a:1f:d1:de:32:e3:a8:20:e4:8f:47:d0:4f:
e8:1b:bd:5b:76:c7:19:90:23:c0:5a:05:55:a3:8d:
26:92:7b:c2:ba:0c:04:d1:2c:72:63:e0:91:67:76:
85:e1:82:f4:3b:93:cd:a3:da:c7:b5:03:a5:ee:8f:
00:35:79:67:1f:1d:de:3a:8b:a7:ad:cc:95:a3:ef:
f5:6e:71:6e:a0:4d:4c:28:64:44:70:5b:98:e9:21:
73:6e:e0:60:a2:26:9d:8a:d6:ec:b8:d4:14:11:c1:
f0:cc:2f:20:0b:f8:1e:34:79:3f:0d:51:d8:90:d0:
98:6f:c4:85:dc:1a:d7:69:77:65:a7:ec:65:c2:34:
38:90:98:29:df:15:b2:21:f0:32:9f:f7:bd:2c:3b:
3a:2b:f2:00:b9:07:5f:43:be:47:74:f8:03:27:08:
c6:30:bd:df:1a:26:93:8e:7d:71:6e:8a:d0:13:0e:
90:84:30:37:3f:a7:dc:d5:d0:0e:b3:2b:47:9f:21:
2b:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:5F:1C:D7:C4:D3:F0:93:61:41:C8:16:D0:4A:AE:14:FC:67:8B:17
X509v3 Authority Key Identifier:
keyid:C3:75:11:3F:D4:BF:BD:38:B1:04:38:43:C3:09:26:A1:10:CC:0F:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w3URP9S_vTixBDhDwwkmoRDMD1E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/af9c78-6ede-40df-89c1-79725fa2e133/1/w3URP9S_vTixBDhDwwkmoRDMD1E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/af9c78-6ede-40df-89c1-79725fa2e133/1/w3URP9S_vTixBDhDwwkmoRDMD1E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:f4:be:69:a6:2d:e3:48:2e:ce:22:73:75:b3:e6:13:07:cd:
38:54:67:2d:e8:05:a6:c9:35:d4:58:a7:57:7b:5c:78:64:7d:
ec:c3:51:b8:af:9c:cd:9d:a2:85:94:aa:a7:5e:d5:0d:76:df:
d4:76:4b:cd:54:cb:f4:92:f4:db:2d:11:42:9e:1b:ae:20:f1:
b7:40:b7:5c:52:d6:9a:be:1d:9c:34:27:b7:a0:b1:a8:14:1a:
d6:b8:b0:4d:3a:d6:3c:48:62:bf:bc:bd:0a:87:77:6c:24:6d:
5d:b5:e6:af:79:b7:d4:95:27:cf:84:75:4a:2b:54:70:d9:52:
2a:f2:32:75:c1:1c:cb:d3:48:a7:8c:bb:5a:e4:ed:b7:90:70:
8b:06:07:df:34:41:36:33:4c:f9:74:2d:a6:9e:77:6b:3a:e4:
59:ec:74:c8:cd:6a:d9:37:34:d1:2c:d8:5f:0a:98:93:3a:4b:
29:bd:e2:35:15:94:79:d6:4b:e4:de:7c:ac:b8:9c:aa:1d:49:
4c:f7:3a:bd:49:e9:b9:56:f1:80:85:87:38:50:38:b3:0d:d0:
e0:53:51:bf:40:cf:69:f3:bd:ba:eb:70:ff:a2:30:1d:15:b0:
21:d3:45:bf:07:4a:9b:c5:37:81:26:16:ec:1b:c2:e5:9a:15:
e2:d4:70:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 08:29:04 2026 by rpki-client