Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5f/c12695-89e1-4482-94e5-c47eab17e93a/1/DW-RpSFkBJQiOeaW5lzy03IU5K8.mft
File: DW-RpSFkBJQiOeaW5lzy03IU5K8.mft (raw, json)
Hash identifier: VLpSA0WE/G2EGS+YL2vByeCWpAzpSi8RtsybFUEqJz4=
Subject key identifier: 17:1C:FA:D2:F7:40:77:F9:5C:FD:5F:FC:E3:3E:5F:B0:A5:04:CB:45
Authority key identifier: 0D:6F:91:A5:21:64:04:94:22:39:E6:96:E6:5C:F2:D3:72:14:E4:AF
Certificate issuer: /CN=0d6f91a5216404942239e696e65cf2d37214e4af
Certificate serial: 01A0C3A006DF13A4B8CAE11FB8CC4394FEF9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DW-RpSFkBJQiOeaW5lzy03IU5K8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/c12695-89e1-4482-94e5-c47eab17e93a/1/DW-RpSFkBJQiOeaW5lzy03IU5K8.mft
Manifest number: 104F
Signing time: Mon 21 Sep 2026 11:00:39 +0000
Manifest this update: Mon 21 Sep 2026 11:00:39 +0000
Manifest next update: Tue 22 Sep 2026 11:00:39 +0000
Files and hashes: 1: 06cgoU7GyJzMyJR7nF3NCVCDDU0.roa (hash: kN3R1rOeDYfzsBK/+cPskIhYJ/5X5cYwuNm8G34vSmk=)
2: DW-RpSFkBJQiOeaW5lzy03IU5K8.crl (hash: W2gecBkXScY9BeU1W1qatRhudBVpZfeRCoZ1+bvuJ98=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/c12695-89e1-4482-94e5-c47eab17e93a/1/DW-RpSFkBJQiOeaW5lzy03IU5K8.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/c12695-89e1-4482-94e5-c47eab17e93a/1/DW-RpSFkBJQiOeaW5lzy03IU5K8.mft
rsync://rpki.ripe.net/repository/DEFAULT/DW-RpSFkBJQiOeaW5lzy03IU5K8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 11:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c3:a0:06:df:13:a4:b8:ca:e1:1f:b8:cc:43:94:fe:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d6f91a5216404942239e696e65cf2d37214e4af
Validity
Not Before: Sep 21 11:00:39 2026 GMT
Not After : Sep 22 11:00:39 2026 GMT
Subject: CN=171cfad2f74077f95cfd5ffce33e5fb0a504cb45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:a2:99:f2:3b:89:a6:cb:74:b3:88:a9:6c:24:
93:73:09:9f:8b:30:03:51:11:85:50:a9:5f:8c:0f:
e2:b2:0c:46:07:c3:22:d9:c3:71:b1:8b:e2:7f:83:
12:e2:eb:b0:81:3a:54:5b:2c:70:9e:3c:ba:f5:9a:
a9:75:3b:13:19:3f:43:64:cb:db:2f:41:a8:63:42:
e3:0f:d2:6d:48:cb:3e:e9:e4:d0:6b:13:ff:6c:57:
3d:77:39:d7:47:d1:28:d6:30:7b:ba:d8:d7:12:ea:
48:6c:dd:c4:83:9a:be:df:7d:72:58:3d:66:52:1c:
b9:e4:fe:3c:80:0a:5b:13:5a:f0:ae:d3:46:83:34:
53:75:fd:ff:59:ee:45:08:82:a7:9d:9d:69:20:22:
1f:da:c4:d4:af:eb:49:1a:20:4a:a4:e5:6a:e0:9c:
39:bc:35:83:36:fb:1c:42:89:15:93:1d:e4:96:06:
6f:84:e2:c9:3c:09:af:d0:7f:f9:ce:9c:64:b6:a2:
f1:c3:94:15:fa:f9:07:dd:af:56:2b:c3:fe:20:1e:
5a:ef:61:14:88:c5:b4:01:87:58:fc:bb:fe:bc:21:
1c:fd:13:29:f1:4d:d3:93:6b:76:89:f5:53:fc:13:
2a:44:13:de:c5:c3:d2:00:1c:d5:ce:f2:cd:30:28:
07:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:1C:FA:D2:F7:40:77:F9:5C:FD:5F:FC:E3:3E:5F:B0:A5:04:CB:45
X509v3 Authority Key Identifier:
keyid:0D:6F:91:A5:21:64:04:94:22:39:E6:96:E6:5C:F2:D3:72:14:E4:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DW-RpSFkBJQiOeaW5lzy03IU5K8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/c12695-89e1-4482-94e5-c47eab17e93a/1/DW-RpSFkBJQiOeaW5lzy03IU5K8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/c12695-89e1-4482-94e5-c47eab17e93a/1/DW-RpSFkBJQiOeaW5lzy03IU5K8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:ca:f2:c9:c1:58:91:7e:2d:e2:7f:ae:5c:88:08:ee:32:c7:
76:4a:a5:82:c3:22:31:9a:9d:9f:35:49:77:69:06:de:02:0e:
0e:b4:06:9c:c0:73:6a:51:f2:a8:fb:94:5c:cb:99:a6:7b:1a:
29:3d:12:73:c1:d6:07:0d:64:c1:2f:a1:75:1c:13:8b:e1:8d:
34:c9:e1:3a:c3:1f:c8:3c:4d:63:10:27:55:3c:ee:76:c2:cd:
51:0f:10:c3:12:23:68:7b:98:03:1a:c1:dd:3a:4f:6a:96:ad:
e7:ce:a4:e1:f2:97:6f:10:12:d5:9d:44:4c:11:f0:b4:24:b3:
60:97:e2:0a:d4:cf:2e:02:cf:14:d1:c8:33:84:fa:3e:81:1d:
71:c9:52:cf:b9:2d:3b:a4:6b:50:76:68:5f:5d:bd:9b:c0:01:
5a:cd:0f:a7:ec:ae:39:c9:c5:4f:22:b1:8a:74:19:18:a9:3f:
2b:e0:90:75:75:02:ea:0f:f9:fe:38:04:f1:68:2a:59:d1:ea:
d1:bb:e2:ad:7d:4e:d4:8f:8b:14:25:ed:39:5a:ae:46:4c:3a:
c6:72:46:3d:25:f2:7c:9a:43:12:3a:24:32:fd:dd:81:49:4c:
ec:ae:4e:70:fa:e2:80:f4:4f:0e:bf:11:2f:12:7f:35:17:c3:
15:0b:b9:3b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDDoAbfE6S4yuEfuMxDlP75MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkNmY5MWE1MjE2NDA0OTQyMjM5ZTY5NmU2NWNmMmQzNzIx
NGU0YWYwHhcNMjYwOTIxMTEwMDM5WhcNMjYwOTIyMTEwMDM5WjAzMTEwLwYDVQQD
EygxNzFjZmFkMmY3NDA3N2Y5NWNmZDVmZmNlMzNlNWZiMGE1MDRjYjQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtqKZ8juJpst0s4ipbCSTcwmfizAD
URGFUKlfjA/isgxGB8Mi2cNxsYvif4MS4uuwgTpUWyxwnjy69ZqpdTsTGT9DZMvb
L0GoY0LjD9JtSMs+6eTQaxP/bFc9dznXR9Eo1jB7utjXEupIbN3Eg5q+331yWD1m
Uhy55P48gApbE1rwrtNGgzRTdf3/We5FCIKnnZ1pICIf2sTUr+tJGiBKpOVq4Jw5
vDWDNvscQokVkx3klgZvhOLJPAmv0H/5zpxktqLxw5QV+vkH3a9WK8P+IB5a72EU
iMW0AYdY/Lv+vCEc/RMp8U3Tk2t2ifVT/BMqRBPexcPSABzVzvLNMCgHgwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBcc+tL3QHf5XP1f/OM+X7ClBMtFMB8GA1UdIwQY
MBaAFA1vkaUhZASUIjnmluZc8tNyFOSvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRFctUnBTRmtCSlFpT2VhVzVsenkwM0lVNUs4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi9jMTI2OTUtODllMS00NDgyLTk0ZTUt
YzQ3ZWFiMTdlOTNhLzEvRFctUnBTRmtCSlFpT2VhVzVsenkwM0lVNUs4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Zi9jMTI2OTUtODllMS00NDgyLTk0ZTUtYzQ3ZWFiMTdlOTNh
LzEvRFctUnBTRmtCSlFpT2VhVzVsenkwM0lVNUs4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFMryycFY
kX4t4n+uXIgI7jLHdkqlgsMiMZqdnzVJd2kG3gIODrQGnMBzalHyqPuUXMuZpnsa
KT0Sc8HWBw1kwS+hdRwTi+GNNMnhOsMfyDxNYxAnVTzudsLNUQ8QwxIjaHuYAxrB
3TpPapat586k4fKXbxAS1Z1ETBHwtCSzYJfiCtTPLgLPFNHIM4T6PoEdcclSz7kt
O6RrUHZoX129m8ABWs0Pp+yuOcnFTyKxinQZGKk/K+CQdXUC6g/5/jgE8WgqWdHq
0bvirX1O1I+LFCXtOVquRkw6xnJGPSXyfJpDEjokMv3dgUlM7K5OcPrigPRPDr8R
LxJ/NRfDFQu5Ow==
-----END CERTIFICATE-----
Generated at Mon Sep 21 17:32:20 2026 by rpki-client