Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/36715a-32fc-4e9f-a577-5ac74dba17b8/1/RW7LO-EGXh5xWJUIvsbXS1p7Htc.mft
File: RW7LO-EGXh5xWJUIvsbXS1p7Htc.mft (raw, json)
Hash identifier: fPqZaAl82XPJ+2IbN9vUkKllEEZVbYMhjUlIp1MzSlk=
Subject key identifier: 93:A0:B5:D4:60:4D:02:E9:E1:55:0A:94:7E:C1:36:A8:C2:71:65:7F
Authority key identifier: 45:6E:CB:3B:E1:06:5E:1E:71:58:95:08:BE:C6:D7:4B:5A:7B:1E:D7
Certificate issuer: /CN=456ecb3be1065e1e71589508bec6d74b5a7b1ed7
Certificate serial: 019DA4538AAD1CFA0523FAC7344FD1D6523B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RW7LO-EGXh5xWJUIvsbXS1p7Htc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/36715a-32fc-4e9f-a577-5ac74dba17b8/1/RW7LO-EGXh5xWJUIvsbXS1p7Htc.mft
Manifest number: 18CC
Signing time: Sun 19 Apr 2026 06:00:31 +0000
Manifest this update: Sun 19 Apr 2026 06:00:31 +0000
Manifest next update: Mon 20 Apr 2026 06:00:31 +0000
Files and hashes: 1: 1YcgvSymvxOWwOClUpJsxRVgsgw.roa (hash: sV7ICeqsuRRmvPB4Ud9P6m1LHMPN2hapMGG1EN+z2ws=)
2: RW7LO-EGXh5xWJUIvsbXS1p7Htc.crl (hash: +tCKCnrC4ymy/ftY2D/JsijlJBn9202xrEbsq7MBOGw=)
3: cWNFEgb5xBu8gcFLrQKsIN_qlUo.roa (hash: 64u+n0vfU41PR2W4WUgYuL5mbl/6P/UD0NVgWR/oiEY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/36715a-32fc-4e9f-a577-5ac74dba17b8/1/RW7LO-EGXh5xWJUIvsbXS1p7Htc.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/36715a-32fc-4e9f-a577-5ac74dba17b8/1/RW7LO-EGXh5xWJUIvsbXS1p7Htc.mft
rsync://rpki.ripe.net/repository/DEFAULT/RW7LO-EGXh5xWJUIvsbXS1p7Htc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:53:8a:ad:1c:fa:05:23:fa:c7:34:4f:d1:d6:52:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=456ecb3be1065e1e71589508bec6d74b5a7b1ed7
Validity
Not Before: Apr 19 06:00:31 2026 GMT
Not After : Apr 20 06:00:31 2026 GMT
Subject: CN=93a0b5d4604d02e9e1550a947ec136a8c271657f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:b8:eb:65:5e:60:25:cc:bb:b3:ff:30:98:e1:
e2:fd:c9:ea:3d:e4:d2:64:70:f5:64:e5:51:2d:4e:
5b:58:6f:2c:15:a6:21:ea:e9:23:e1:5e:dd:7f:d8:
41:db:2f:d7:49:bf:67:fc:fe:ed:41:dc:a8:a5:e1:
0c:2f:1b:e8:1a:58:67:25:ce:1f:80:16:d9:89:9a:
87:77:5f:d3:a6:e6:fe:d4:5c:14:b1:d9:a3:e2:2f:
31:67:58:02:87:6c:ed:97:37:e2:29:a0:a7:f6:46:
da:2b:2c:db:98:e4:7c:11:19:ef:f9:9d:ce:ab:fa:
cc:e9:fd:a9:fe:b2:38:6f:74:cf:60:57:ef:09:d4:
b1:1e:29:69:55:32:7d:fd:cb:44:87:46:5a:69:7c:
fe:79:76:8e:37:ed:97:ef:22:0e:21:86:a3:87:a0:
26:8c:36:8d:d5:cf:ea:e3:f9:f8:d9:aa:35:61:79:
07:7d:d9:b9:b3:a9:72:b0:99:16:d8:15:d8:16:2d:
11:e0:78:e8:fe:f8:85:ba:25:28:ee:ad:41:66:d3:
c5:c7:76:81:43:1a:4c:53:7b:bd:fc:2e:b9:ad:2e:
b0:04:0b:7a:19:1a:b1:26:5f:07:b2:48:74:08:bf:
a6:6c:7c:81:d9:41:86:5d:23:e7:b2:7d:f3:6c:d1:
c2:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:A0:B5:D4:60:4D:02:E9:E1:55:0A:94:7E:C1:36:A8:C2:71:65:7F
X509v3 Authority Key Identifier:
keyid:45:6E:CB:3B:E1:06:5E:1E:71:58:95:08:BE:C6:D7:4B:5A:7B:1E:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RW7LO-EGXh5xWJUIvsbXS1p7Htc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/36715a-32fc-4e9f-a577-5ac74dba17b8/1/RW7LO-EGXh5xWJUIvsbXS1p7Htc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/36715a-32fc-4e9f-a577-5ac74dba17b8/1/RW7LO-EGXh5xWJUIvsbXS1p7Htc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:07:d2:04:5b:02:5a:ad:63:91:2d:69:19:df:14:b6:4f:47:
a5:be:df:f9:6a:41:4e:d2:60:af:e3:b7:ec:4b:b7:72:c6:3b:
9f:e6:3a:46:76:4b:5c:95:9e:ef:8f:4c:b3:d2:53:cf:b1:68:
0c:eb:7c:4d:17:91:2e:e1:09:4a:04:e1:67:b7:b3:48:2e:b7:
4d:30:8a:fd:b8:90:b0:ac:d4:68:f2:9f:19:a2:36:d2:12:80:
ed:50:c7:e2:b2:10:21:bb:36:3e:2b:75:83:d4:15:0f:49:95:
4b:7b:7a:46:e3:14:0a:cd:f7:d6:40:85:71:75:26:01:60:0c:
37:ef:cc:ee:eb:c2:68:8a:1e:ce:c7:94:90:7a:c7:27:73:d5:
5f:19:b4:37:6a:06:b5:1e:e9:48:9c:7b:49:a9:a9:72:29:f2:
a6:5b:93:50:2f:53:e4:ba:02:ce:50:ac:b5:db:bd:93:1b:29:
9d:35:e2:b9:23:19:f8:5e:b3:30:87:cf:52:fc:5c:c3:2d:1e:
49:da:76:00:28:38:95:04:ac:03:62:15:6f:8a:46:d6:d4:bb:
f5:ff:3a:dd:98:b7:46:48:c2:3f:37:d7:06:39:24:2a:94:41:
8b:80:6e:24:e8:39:ad:a5:7d:81:66:90:1b:f8:fa:40:98:05:
22:1b:85:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 09:40:07 2026 by rpki-client