Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/b79f52-2df3-4ac1-98a6-26892b7695c8/1/rwLeINRbd4--lHUaMwHJ3-wsCfE.mft
File: rwLeINRbd4--lHUaMwHJ3-wsCfE.mft (raw, json)
Hash identifier: bNeEZd2FwWRIEGY3ttt+XH9XxGgQXoaJ/gJ3h6MvUGM=
Subject key identifier: 45:A8:68:DF:1C:24:F7:BD:37:97:54:E0:51:D4:20:75:F1:7C:3B:EF
Authority key identifier: AF:02:DE:20:D4:5B:77:8F:BE:94:75:1A:33:01:C9:DF:EC:2C:09:F1
Certificate issuer: /CN=af02de20d45b778fbe94751a3301c9dfec2c09f1
Certificate serial: 019FA862862793F2A279FB6D03A20FA3A2F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rwLeINRbd4--lHUaMwHJ3-wsCfE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/b79f52-2df3-4ac1-98a6-26892b7695c8/1/rwLeINRbd4--lHUaMwHJ3-wsCfE.mft
Manifest number: 37
Signing time: Tue 28 Jul 2026 11:00:56 +0000
Manifest this update: Tue 28 Jul 2026 11:00:56 +0000
Manifest next update: Wed 29 Jul 2026 11:00:56 +0000
Files and hashes: 1: b8FUJ6vTuYb37tPPpkHWlKnxQaM.roa (hash: JxSaavJzGorBiYOMbo+wwCZSr84d63NSpqcOvfQfhnc=)
2: rwLeINRbd4--lHUaMwHJ3-wsCfE.crl (hash: qzcz9DnLOCdufRu1COsHJSo7Mjr/maTluUWah3NScQU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/b79f52-2df3-4ac1-98a6-26892b7695c8/1/rwLeINRbd4--lHUaMwHJ3-wsCfE.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/b79f52-2df3-4ac1-98a6-26892b7695c8/1/rwLeINRbd4--lHUaMwHJ3-wsCfE.mft
rsync://rpki.ripe.net/repository/DEFAULT/rwLeINRbd4--lHUaMwHJ3-wsCfE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:62:86:27:93:f2:a2:79:fb:6d:03:a2:0f:a3:a2:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af02de20d45b778fbe94751a3301c9dfec2c09f1
Validity
Not Before: Jul 28 11:00:56 2026 GMT
Not After : Jul 29 11:00:56 2026 GMT
Subject: CN=45a868df1c24f7bd379754e051d42075f17c3bef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:04:83:d1:38:f1:20:8d:88:92:ca:20:78:dd:
95:9b:d0:12:68:6a:b0:b8:79:fa:9f:6f:28:9e:3b:
35:3f:c6:32:6a:84:73:61:6c:7a:77:aa:35:db:76:
05:fa:af:30:19:6d:f2:84:21:e5:c8:50:c0:09:d5:
7d:5c:92:d0:da:07:70:fc:a1:b3:66:92:c0:72:85:
69:d1:ac:6b:b6:8d:19:54:31:5d:bf:22:89:b7:46:
61:c7:f3:5b:a2:15:38:c3:8c:6e:34:1c:9d:8b:1f:
39:72:83:fe:89:02:a8:2e:a1:5c:3d:89:d2:86:2d:
d5:e9:cd:08:e1:59:30:9b:9c:b3:0e:fe:2c:3a:4b:
3d:2b:90:c2:ee:b1:4c:94:1b:0e:79:8b:54:ad:7b:
48:10:ee:7a:d3:34:18:d0:e4:0c:9b:e4:02:23:3b:
66:da:d5:ff:1a:ac:10:7e:05:97:b3:1d:5c:9d:8f:
26:0d:c8:72:4e:d9:fc:67:a9:28:74:a7:ef:23:cd:
0d:7a:ab:45:ca:97:93:21:ee:72:4c:58:a4:c9:b2:
04:7c:fd:dc:a1:92:24:d9:fd:99:01:e7:cb:8c:ff:
d9:c7:1a:2a:5b:aa:08:05:10:af:69:cd:c1:e9:86:
8f:bf:64:d1:13:58:7f:69:7d:1b:0c:50:f8:64:45:
6c:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:A8:68:DF:1C:24:F7:BD:37:97:54:E0:51:D4:20:75:F1:7C:3B:EF
X509v3 Authority Key Identifier:
keyid:AF:02:DE:20:D4:5B:77:8F:BE:94:75:1A:33:01:C9:DF:EC:2C:09:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rwLeINRbd4--lHUaMwHJ3-wsCfE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b79f52-2df3-4ac1-98a6-26892b7695c8/1/rwLeINRbd4--lHUaMwHJ3-wsCfE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b79f52-2df3-4ac1-98a6-26892b7695c8/1/rwLeINRbd4--lHUaMwHJ3-wsCfE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:c8:5c:2a:f2:03:58:48:23:1d:80:d8:0d:b2:68:e9:e6:86:
bf:80:bd:19:c6:1c:be:f8:f0:1a:1d:c5:66:32:e3:bc:f4:a4:
e0:8b:f5:71:f8:6f:1d:11:14:89:76:2e:3f:83:47:03:93:e8:
43:a4:1d:67:50:97:ec:cf:8e:13:2c:a5:f4:04:5c:f6:50:86:
ee:79:bd:b0:15:a5:bf:2e:e4:2d:77:8c:81:cb:20:f2:c2:4a:
53:a5:68:01:1a:91:96:6e:4c:14:4e:8d:a0:31:fb:7c:51:ce:
f6:92:24:b0:50:f0:fd:97:5f:60:63:80:b6:51:9f:a6:89:de:
95:64:ef:6c:3f:d9:ff:63:56:6d:78:b8:8c:c7:d0:16:60:b5:
c7:28:12:13:55:f7:5d:cc:12:0a:4a:49:5d:e1:fb:f7:f1:d9:
1d:f7:16:de:ec:b0:06:6c:a9:53:11:09:d2:b1:b8:78:31:ed:
e4:68:5b:a0:23:3a:a1:bf:d1:b9:27:ae:47:50:78:3e:54:63:
65:7d:9f:a7:95:a0:59:06:60:b8:22:dc:ed:d5:ea:31:3b:70:
ce:41:cb:da:1c:da:6a:d3:2c:47:ae:57:59:ab:ce:2b:bb:7b:
4c:7f:40:17:70:68:bb:b4:69:5a:ef:3d:7e:ca:c8:73:22:bd:
1a:fa:16:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:08:02 2026 by rpki-client