Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5b/0da847-1ae9-496c-89fa-9245a9ab978b/1/rwMNO0xYnpSj72Hd1UAajz_3m20.mft
File: rwMNO0xYnpSj72Hd1UAajz_3m20.mft (raw, json)
Hash identifier: VVFue5RvBYj5kNEC/vFClNJu41Pr1SBt+yL1ck+t+Bo=
Subject key identifier: CB:0C:0D:E7:42:F3:A0:C3:6C:88:A3:59:30:C7:F0:4B:F1:72:31:8C
Authority key identifier: AF:03:0D:3B:4C:58:9E:94:A3:EF:61:DD:D5:40:1A:8F:3F:F7:9B:6D
Certificate issuer: /CN=af030d3b4c589e94a3ef61ddd5401a8f3ff79b6d
Certificate serial: 01A1347F050EE572E333FE31F3CD856B15CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rwMNO0xYnpSj72Hd1UAajz_3m20.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/0da847-1ae9-496c-89fa-9245a9ab978b/1/rwMNO0xYnpSj72Hd1UAajz_3m20.mft
Manifest number: 08D6
Signing time: Tue 13 Oct 2026 09:01:41 +0000
Manifest this update: Tue 13 Oct 2026 09:01:41 +0000
Manifest next update: Wed 14 Oct 2026 09:01:41 +0000
Files and hashes: 1: rwMNO0xYnpSj72Hd1UAajz_3m20.crl (hash: T+tAomGTCvITm3V/eeqL4UGM6Spm8MqM/ObO7zAp8Yo=)
2: sKXut25F8mstcMlebmCBZ3ash14.roa (hash: WdcSiIGfJAIq+j/hEE113/iMWyToETbAb54DBmpGZ9M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/0da847-1ae9-496c-89fa-9245a9ab978b/1/rwMNO0xYnpSj72Hd1UAajz_3m20.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/0da847-1ae9-496c-89fa-9245a9ab978b/1/rwMNO0xYnpSj72Hd1UAajz_3m20.mft
rsync://rpki.ripe.net/repository/DEFAULT/rwMNO0xYnpSj72Hd1UAajz_3m20.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Oct 2026 07:34:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:34:7f:05:0e:e5:72:e3:33:fe:31:f3:cd:85:6b:15:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af030d3b4c589e94a3ef61ddd5401a8f3ff79b6d
Validity
Not Before: Oct 13 09:01:41 2026 GMT
Not After : Oct 14 09:01:41 2026 GMT
Subject: CN=cb0c0de742f3a0c36c88a35930c7f04bf172318c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:01:c7:17:cc:a1:79:db:75:b4:b5:8b:40:fa:
cd:d2:17:02:46:b9:75:50:fa:b8:b3:44:39:8f:17:
f1:37:f2:33:43:b7:26:e9:aa:f0:90:cf:93:ff:3f:
3b:9a:62:aa:6a:43:08:52:5c:a0:3e:1f:31:0e:c1:
61:ed:d7:98:6d:b0:eb:2a:5f:46:36:85:47:26:ae:
3a:28:5c:d8:8c:35:6e:49:43:28:1b:1e:e8:08:62:
e8:3f:f9:3b:6c:09:3e:62:c1:00:00:00:a4:c3:18:
99:ce:98:b3:17:68:a0:fa:7a:22:7f:10:88:78:05:
99:73:ca:d5:56:6a:0f:e9:53:de:51:43:82:f3:51:
9f:29:5a:52:89:b8:d8:a0:17:cb:99:ca:ac:95:37:
88:62:61:e9:96:b3:c0:6e:27:ad:d2:25:bb:b9:65:
6e:ab:b8:68:da:92:e6:f9:ec:f8:8e:17:8b:07:01:
59:57:ce:43:0d:22:77:90:8a:de:b8:b4:31:9f:a0:
11:e4:3f:59:4a:58:a4:a6:29:20:c0:a9:f5:8a:5f:
2d:11:2b:7c:e6:8d:38:39:26:29:a3:25:66:9c:fc:
ef:47:57:79:b6:82:c9:3e:1a:ba:5b:e3:89:cd:85:
10:54:a6:d9:36:f5:01:36:e6:2d:4d:96:31:4c:50:
ad:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:0C:0D:E7:42:F3:A0:C3:6C:88:A3:59:30:C7:F0:4B:F1:72:31:8C
X509v3 Authority Key Identifier:
keyid:AF:03:0D:3B:4C:58:9E:94:A3:EF:61:DD:D5:40:1A:8F:3F:F7:9B:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rwMNO0xYnpSj72Hd1UAajz_3m20.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/0da847-1ae9-496c-89fa-9245a9ab978b/1/rwMNO0xYnpSj72Hd1UAajz_3m20.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/0da847-1ae9-496c-89fa-9245a9ab978b/1/rwMNO0xYnpSj72Hd1UAajz_3m20.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:d7:99:80:10:c2:22:ea:72:6d:e8:e3:03:d0:28:8b:ba:fe:
f2:e1:89:31:28:2b:62:f3:46:b5:49:b5:10:70:b4:17:e1:34:
7c:c6:bc:51:ae:53:e5:b2:5c:76:39:4f:03:fa:39:ac:e3:91:
74:78:1b:41:84:df:db:d1:41:6c:b5:6c:cf:fe:a1:f6:b7:8f:
cf:56:68:58:f4:27:ee:b3:ff:ad:b0:99:90:78:fe:90:0b:95:
10:a4:35:1c:2b:31:08:b4:b4:f5:c1:8e:b4:41:98:78:6e:03:
d3:bb:bb:a8:15:5c:32:60:47:0b:6f:30:6b:d8:2b:9e:42:da:
3d:d1:ad:52:98:14:9a:09:80:41:78:ea:eb:9b:d4:a6:ce:d3:
8c:cc:cf:1d:21:a9:19:81:30:8e:d2:3e:d1:a6:9f:48:04:51:
e8:4d:6f:b2:36:d5:59:62:84:46:fc:ed:14:13:52:75:61:9e:
b6:8f:af:99:6d:bd:77:ee:b6:3d:00:6a:52:cf:d8:2f:07:97:
2b:eb:2a:88:ca:63:53:ab:29:5d:f1:3c:e2:ca:ba:a8:7d:e1:
bc:1d:0b:50:22:99:f4:8c:bc:11:bf:f8:74:9d:8a:8b:ea:b9:
d7:aa:7d:e1:0c:6a:9f:41:93:bb:93:82:b2:d1:eb:f2:21:1a:
22:0a:fe:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 14:13:56 2026 by rpki-client