Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2a/36715a-32fc-4e9f-a577-5ac74dba17b8/1/RW7LO-EGXh5xWJUIvsbXS1p7Htc.mft
File: RW7LO-EGXh5xWJUIvsbXS1p7Htc.mft (raw, json)
Hash identifier: wKssAcJMKokSH5+Pdf5IzYvmU6tlmk2n+R3Q/U3xFRI=
Subject key identifier: A4:39:DD:2F:25:95:3B:BF:7C:6D:70:2F:A5:66:32:B0:14:07:1E:72
Authority key identifier: 45:6E:CB:3B:E1:06:5E:1E:71:58:95:08:BE:C6:D7:4B:5A:7B:1E:D7
Certificate issuer: /CN=456ecb3be1065e1e71589508bec6d74b5a7b1ed7
Certificate serial: 01A1DDCC4B6E61151D5EF801F1F235F2D29B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RW7LO-EGXh5xWJUIvsbXS1p7Htc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/36715a-32fc-4e9f-a577-5ac74dba17b8/1/RW7LO-EGXh5xWJUIvsbXS1p7Htc.mft
Manifest number: 1AFC
Signing time: Sun 15 Nov 2026 06:01:55 +0000
Manifest this update: Sun 15 Nov 2026 06:01:55 +0000
Manifest next update: Mon 16 Nov 2026 06:01:55 +0000
Files and hashes: 1: 1YcgvSymvxOWwOClUpJsxRVgsgw.roa (hash: sV7ICeqsuRRmvPB4Ud9P6m1LHMPN2hapMGG1EN+z2ws=)
2: RW7LO-EGXh5xWJUIvsbXS1p7Htc.crl (hash: NBsn8dhmDAf9hKKE4jIC74f6u72iyQgfA46qhV6L6+Q=)
3: cWNFEgb5xBu8gcFLrQKsIN_qlUo.roa (hash: 64u+n0vfU41PR2W4WUgYuL5mbl/6P/UD0NVgWR/oiEY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/36715a-32fc-4e9f-a577-5ac74dba17b8/1/RW7LO-EGXh5xWJUIvsbXS1p7Htc.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/36715a-32fc-4e9f-a577-5ac74dba17b8/1/RW7LO-EGXh5xWJUIvsbXS1p7Htc.mft
rsync://rpki.ripe.net/repository/DEFAULT/RW7LO-EGXh5xWJUIvsbXS1p7Htc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:dd:cc:4b:6e:61:15:1d:5e:f8:01:f1:f2:35:f2:d2:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=456ecb3be1065e1e71589508bec6d74b5a7b1ed7
Validity
Not Before: Nov 15 06:01:55 2026 GMT
Not After : Nov 16 06:01:55 2026 GMT
Subject: CN=a439dd2f25953bbf7c6d702fa56632b014071e72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:3f:79:96:21:dc:db:4e:44:a7:dc:fa:fc:d0:
67:b0:ac:7a:15:c4:ba:33:b2:8f:2b:55:c0:98:2b:
80:fe:c1:70:bb:9f:34:ab:94:ad:1a:30:dc:23:34:
84:6f:6c:30:84:95:09:6e:7b:40:81:f5:bf:b8:7a:
3d:22:5d:8c:f8:dc:11:00:a0:bb:65:52:2f:30:6e:
80:ce:26:75:3f:85:9f:33:3c:b4:4c:9f:b6:49:e6:
e4:0d:42:f8:4c:43:c9:7a:9e:b7:1d:d9:32:70:fe:
75:b8:60:5e:8b:90:33:af:b9:03:cb:cd:bb:e8:f6:
e3:2c:84:45:d5:92:8e:52:39:6a:0f:39:c3:41:75:
27:3b:0d:5a:45:ec:25:81:e9:bf:6b:56:7d:b4:76:
74:ba:3e:22:e6:4f:14:4b:63:3d:83:7a:22:51:bc:
9f:0a:c9:0e:67:ff:f9:f4:00:7a:a2:eb:8f:a5:6c:
bf:d7:ef:7f:42:22:14:e5:c5:93:a5:59:6c:79:09:
3b:28:8b:1e:16:af:53:b1:e8:9f:fc:31:cb:d3:d4:
06:fd:61:57:76:8d:74:de:da:3b:76:6d:91:7d:e2:
48:eb:f3:51:f4:9f:bf:6e:e2:4c:ae:1c:a5:c7:8b:
a5:0e:54:c6:54:68:a8:81:c2:4c:02:80:82:e1:96:
d7:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:39:DD:2F:25:95:3B:BF:7C:6D:70:2F:A5:66:32:B0:14:07:1E:72
X509v3 Authority Key Identifier:
keyid:45:6E:CB:3B:E1:06:5E:1E:71:58:95:08:BE:C6:D7:4B:5A:7B:1E:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RW7LO-EGXh5xWJUIvsbXS1p7Htc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/36715a-32fc-4e9f-a577-5ac74dba17b8/1/RW7LO-EGXh5xWJUIvsbXS1p7Htc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/36715a-32fc-4e9f-a577-5ac74dba17b8/1/RW7LO-EGXh5xWJUIvsbXS1p7Htc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:88:62:90:af:0e:a4:2e:b0:3e:b0:b1:ef:1f:29:cd:1f:90:
d4:7a:75:6c:ce:ab:50:d9:2c:00:19:d0:83:b2:17:14:1e:ca:
d5:87:53:4d:45:94:57:06:d8:41:bb:1e:49:22:2a:5f:37:41:
e9:26:ea:bd:04:3f:d2:b5:37:54:ba:3f:09:c6:fa:63:f7:02:
01:eb:02:23:44:d6:ae:2a:4c:63:63:a6:90:61:49:30:07:7f:
f1:42:96:46:0e:a0:2f:04:50:de:81:83:6b:28:58:71:68:fd:
f6:7c:e6:d3:bf:09:39:0a:b2:84:aa:3f:12:82:ec:63:c8:64:
9d:19:45:66:18:0b:68:6c:ac:d6:28:7d:9e:d5:fc:fa:c2:03:
bf:6c:d7:20:82:59:5f:f9:c7:9d:d4:43:ae:12:7b:61:34:60:
11:08:43:48:60:6f:8e:f4:4f:09:2f:b3:83:34:a9:76:30:ed:
25:1d:cc:d9:ea:76:90:4c:93:b3:17:54:1a:3a:35:d2:99:b8:
63:bc:cd:e0:59:ea:8c:f6:58:83:96:0d:4e:b5:2c:ca:49:2a:
a0:21:ff:12:19:88:5f:7f:df:33:4a:65:5e:89:07:f0:57:26:
d6:eb:21:98:c6:f6:f0:25:d6:c3:8b:32:a5:f2:97:80:cd:ef:
cf:ef:41:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 13:33:06 2026 by rpki-client