Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2a/36715a-32fc-4e9f-a577-5ac74dba17b8/1/RW7LO-EGXh5xWJUIvsbXS1p7Htc.mft
File: RW7LO-EGXh5xWJUIvsbXS1p7Htc.mft (raw, json)
Hash identifier: bcMhPyT4ggq/xom1LCmGCguRHlLGHrSS1FJ/pMHl2DA=
Subject key identifier: 65:39:2C:66:20:B8:C9:96:30:F1:51:1B:72:DE:1E:5A:43:76:D6:2D
Authority key identifier: 45:6E:CB:3B:E1:06:5E:1E:71:58:95:08:BE:C6:D7:4B:5A:7B:1E:D7
Certificate issuer: /CN=456ecb3be1065e1e71589508bec6d74b5a7b1ed7
Certificate serial: 01A0C3D6CE67D56C12AC0341C5524A7EE516
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RW7LO-EGXh5xWJUIvsbXS1p7Htc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/36715a-32fc-4e9f-a577-5ac74dba17b8/1/RW7LO-EGXh5xWJUIvsbXS1p7Htc.mft
Manifest number: 1A6A
Signing time: Mon 21 Sep 2026 12:00:29 +0000
Manifest this update: Mon 21 Sep 2026 12:00:29 +0000
Manifest next update: Tue 22 Sep 2026 12:00:29 +0000
Files and hashes: 1: 1YcgvSymvxOWwOClUpJsxRVgsgw.roa (hash: sV7ICeqsuRRmvPB4Ud9P6m1LHMPN2hapMGG1EN+z2ws=)
2: RW7LO-EGXh5xWJUIvsbXS1p7Htc.crl (hash: oRIPMPwLtM+oySPZAYkhTEQqJr06ZHkzy5VwN5B4JMg=)
3: cWNFEgb5xBu8gcFLrQKsIN_qlUo.roa (hash: 64u+n0vfU41PR2W4WUgYuL5mbl/6P/UD0NVgWR/oiEY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/36715a-32fc-4e9f-a577-5ac74dba17b8/1/RW7LO-EGXh5xWJUIvsbXS1p7Htc.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/36715a-32fc-4e9f-a577-5ac74dba17b8/1/RW7LO-EGXh5xWJUIvsbXS1p7Htc.mft
rsync://rpki.ripe.net/repository/DEFAULT/RW7LO-EGXh5xWJUIvsbXS1p7Htc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 12:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c3:d6:ce:67:d5:6c:12:ac:03:41:c5:52:4a:7e:e5:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=456ecb3be1065e1e71589508bec6d74b5a7b1ed7
Validity
Not Before: Sep 21 12:00:29 2026 GMT
Not After : Sep 22 12:00:29 2026 GMT
Subject: CN=65392c6620b8c99630f1511b72de1e5a4376d62d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:1e:f3:39:43:f4:6e:5a:90:df:41:a4:80:c2:
02:ff:bc:3c:bb:c5:50:ea:27:3c:a1:bf:d2:d7:c7:
87:2d:6f:de:c8:26:31:22:24:05:d4:e6:fa:38:1c:
bd:81:51:a2:9e:22:2d:91:0d:ad:66:13:7f:c8:c7:
7b:e8:59:71:5c:4d:33:1d:c4:fe:35:87:2d:0b:4e:
c6:bf:58:88:5a:58:9f:52:b6:87:31:06:b3:26:cc:
76:74:e8:c3:aa:98:c7:90:a8:8f:e9:05:a7:59:20:
7e:a1:8d:85:9c:e6:76:c8:ba:ee:74:79:63:94:68:
da:e4:96:9d:9b:e9:59:22:ae:a0:30:21:8e:7a:7a:
44:61:a5:4d:7e:74:be:e1:49:ef:67:c5:07:a3:c7:
5b:c5:ca:b4:b3:0d:85:bb:c2:45:c8:56:49:c4:0b:
70:20:a4:fd:3a:65:dc:c3:08:44:f8:61:ad:00:0d:
3f:c7:dd:c7:32:99:62:96:62:f8:5f:45:d9:70:b8:
52:b9:c6:b4:ce:a9:e2:77:23:3e:90:43:f3:7c:b1:
96:42:80:38:34:c5:f0:89:4a:e4:a5:cc:3e:ca:80:
49:06:8b:0d:d3:05:91:4d:4d:9a:da:87:30:3e:be:
b7:fb:ca:99:4e:e1:6c:f6:4f:bd:56:cb:b9:03:3b:
14:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:39:2C:66:20:B8:C9:96:30:F1:51:1B:72:DE:1E:5A:43:76:D6:2D
X509v3 Authority Key Identifier:
keyid:45:6E:CB:3B:E1:06:5E:1E:71:58:95:08:BE:C6:D7:4B:5A:7B:1E:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RW7LO-EGXh5xWJUIvsbXS1p7Htc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/36715a-32fc-4e9f-a577-5ac74dba17b8/1/RW7LO-EGXh5xWJUIvsbXS1p7Htc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/36715a-32fc-4e9f-a577-5ac74dba17b8/1/RW7LO-EGXh5xWJUIvsbXS1p7Htc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:99:97:a3:05:bf:68:ad:47:31:1e:2f:9e:60:7f:dc:7d:b3:
03:90:66:39:fc:73:d2:45:dc:b7:02:7a:3f:04:fe:e0:a7:dd:
a8:39:a7:43:b3:f3:c0:a4:7f:3d:81:62:fc:3b:5e:91:e9:e8:
13:ab:fd:65:6d:59:9c:b9:09:ef:cd:65:97:f8:ae:bb:62:b2:
9b:a1:5d:ef:2c:55:af:46:01:b3:57:6f:32:11:ac:54:8c:51:
e4:0f:b9:a0:a4:9d:a9:b4:74:68:1c:e8:81:a0:d7:9c:56:75:
47:2e:90:3e:a8:18:95:34:c9:69:9a:f4:30:f9:cf:35:2a:b8:
8d:72:c7:74:0a:44:ff:05:76:86:03:c3:21:76:3f:a6:f5:71:
31:54:4c:2e:f3:d1:a1:c7:ef:c7:23:1a:c2:ff:ef:d9:25:b6:
7b:e9:e9:be:4b:93:c5:7e:43:b5:ff:e5:0a:42:08:7e:83:35:
30:bc:8e:1d:fe:50:9d:1b:c5:0e:08:bc:ff:9a:ad:f8:97:98:
26:75:05:7d:4e:cb:5b:43:eb:3f:41:6a:9d:48:21:46:f7:a0:
b3:bc:6a:56:e3:0b:f8:76:97:d0:03:c6:0b:31:a3:14:7b:83:
ac:9e:92:f0:e1:e1:82:ce:46:60:3c:73:8c:5e:a9:6d:f7:a5:
a2:f9:85:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 15:57:08 2026 by rpki-client