Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/34c618-4d43-4736-859f-9d2a42affb1b/1/Mw4_2xHYJrwBZjKQvXykBrjXZQc.mft
File: Mw4_2xHYJrwBZjKQvXykBrjXZQc.mft (raw, json)
Hash identifier: ImqUJDZTuhZqV/Ng4ZQa+s5MNktMG0js+2gGZRC/ttI=
Subject key identifier: D2:38:85:E0:14:A8:D8:A6:83:4B:64:6D:81:1D:6E:69:39:B6:05:48
Authority key identifier: 33:0E:3F:DB:11:D8:26:BC:01:66:32:90:BD:7C:A4:06:B8:D7:65:07
Certificate issuer: /CN=330e3fdb11d826bc01663290bd7ca406b8d76507
Certificate serial: 019D9B8792A4D41A0D8526A17D846AD364EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mw4_2xHYJrwBZjKQvXykBrjXZQc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/34c618-4d43-4736-859f-9d2a42affb1b/1/Mw4_2xHYJrwBZjKQvXykBrjXZQc.mft
Manifest number: 0FA7
Signing time: Fri 17 Apr 2026 13:00:46 +0000
Manifest this update: Fri 17 Apr 2026 13:00:46 +0000
Manifest next update: Sat 18 Apr 2026 13:00:46 +0000
Files and hashes: 1: 62TElGWuqEvmUBYUDm2rqBVV3SI.roa (hash: ++jh63cRE49FQOgqKwdj8ZqTaSpiNnUmGEZfxLXUxs8=)
2: Mw4_2xHYJrwBZjKQvXykBrjXZQc.crl (hash: 6P5CKICqyDbiA3cmOKn3KI2WTeIprcpbxIhjb8vNspI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/34c618-4d43-4736-859f-9d2a42affb1b/1/Mw4_2xHYJrwBZjKQvXykBrjXZQc.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/34c618-4d43-4736-859f-9d2a42affb1b/1/Mw4_2xHYJrwBZjKQvXykBrjXZQc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Mw4_2xHYJrwBZjKQvXykBrjXZQc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 13:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:87:92:a4:d4:1a:0d:85:26:a1:7d:84:6a:d3:64:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=330e3fdb11d826bc01663290bd7ca406b8d76507
Validity
Not Before: Apr 17 13:00:46 2026 GMT
Not After : Apr 18 13:00:46 2026 GMT
Subject: CN=d23885e014a8d8a6834b646d811d6e6939b60548
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:5b:da:4e:45:34:fc:c9:71:33:8b:52:f3:0b:
45:04:61:89:ea:f0:f8:a0:15:23:3e:1c:29:03:d6:
43:1d:ad:b8:51:69:a7:09:b3:89:e2:e2:f5:2f:d0:
fe:41:bb:70:34:6b:28:d9:5d:9e:fd:5a:85:61:11:
0f:94:a2:a9:32:d3:b6:d6:8d:27:f2:7e:10:74:07:
fc:bb:3a:c6:31:a5:27:ac:d2:3f:9c:00:02:e0:c9:
a3:e6:59:5c:da:50:30:9d:d7:4d:a7:fa:a1:b9:73:
5d:69:19:ac:f9:4f:fc:dc:cf:6c:25:45:e2:75:34:
43:e1:af:7b:e9:fa:fe:e2:b5:d7:eb:c7:2d:f5:a5:
61:e5:89:ec:41:c6:a7:3a:d2:fc:a3:39:b5:0a:d8:
a3:81:e2:2e:5a:98:b8:6e:35:a3:b1:07:4e:8f:8c:
f2:46:32:dc:2a:02:c5:08:9f:d8:1a:4e:ce:b6:dd:
35:69:bd:37:a6:19:df:d6:a8:b1:6d:16:06:4f:6f:
75:86:58:56:1d:a2:45:c2:c9:25:2f:0d:74:d8:44:
f9:39:46:fb:47:13:49:3e:0d:6c:a2:e1:a1:c3:1c:
50:bf:fa:4f:c0:b8:69:59:27:a7:6e:d0:69:4f:1f:
bd:b2:53:28:f8:eb:87:1d:be:d0:7e:fb:f4:b5:11:
1c:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:38:85:E0:14:A8:D8:A6:83:4B:64:6D:81:1D:6E:69:39:B6:05:48
X509v3 Authority Key Identifier:
keyid:33:0E:3F:DB:11:D8:26:BC:01:66:32:90:BD:7C:A4:06:B8:D7:65:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mw4_2xHYJrwBZjKQvXykBrjXZQc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/34c618-4d43-4736-859f-9d2a42affb1b/1/Mw4_2xHYJrwBZjKQvXykBrjXZQc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/34c618-4d43-4736-859f-9d2a42affb1b/1/Mw4_2xHYJrwBZjKQvXykBrjXZQc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:7c:ab:fe:33:57:29:4a:ce:9d:01:9b:3a:1f:87:d4:63:71:
59:b1:0e:d7:bf:13:63:7e:43:10:84:81:c1:e1:69:61:1c:d3:
09:c9:3a:a4:69:ef:e5:a1:f1:2f:3b:b4:6f:f3:3b:31:ed:cd:
f8:bf:bb:0c:6a:1b:28:36:47:a9:90:f3:8d:79:6e:8b:26:a8:
6d:aa:97:b4:d9:00:8d:19:c7:b3:a8:4a:e3:21:8e:54:99:f5:
58:c7:4c:c9:3f:43:a6:8e:b5:e2:08:70:7a:d0:07:85:b5:15:
d8:e5:de:94:37:a3:8b:b7:e2:a1:ed:d6:d0:8c:33:71:7c:62:
a6:ad:f2:3b:3d:e1:ea:62:c3:85:a7:19:af:49:51:af:f5:08:
6b:6a:ac:a3:ba:61:a9:8c:28:dd:93:74:90:3d:1a:e5:51:c6:
4f:57:b7:8c:65:89:69:f8:e4:b7:18:4d:58:9d:6a:55:5f:c8:
a5:d6:b2:37:50:18:0b:42:47:d6:4e:0c:b1:2d:d2:8c:63:24:
24:52:45:2f:cc:4e:f7:72:6f:ff:36:dc:bd:52:5b:78:84:9b:
2b:dc:ce:54:e9:ae:68:fe:40:7d:90:4c:25:ab:bf:95:b7:b3:
a8:77:ee:de:ec:90:58:cf:6e:78:c4:44:20:eb:ea:be:b6:2a:
e2:de:c5:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:55:06 2026 by rpki-client