Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/91/b79f52-2df3-4ac1-98a6-26892b7695c8/1/rwLeINRbd4--lHUaMwHJ3-wsCfE.mft
File: rwLeINRbd4--lHUaMwHJ3-wsCfE.mft (raw, json)
Hash identifier: 55WsLkLpbaEtLFe5eenpwsHunsxnWKcWXdX9sebeTf8=
Subject key identifier: D3:3E:4E:62:90:52:48:13:32:E2:95:0D:3F:60:3D:86:0C:32:45:A3
Authority key identifier: AF:02:DE:20:D4:5B:77:8F:BE:94:75:1A:33:01:C9:DF:EC:2C:09:F1
Certificate issuer: /CN=af02de20d45b778fbe94751a3301c9dfec2c09f1
Certificate serial: 01A0C2563ABAC3B28C9709D759D30F6254D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rwLeINRbd4--lHUaMwHJ3-wsCfE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/b79f52-2df3-4ac1-98a6-26892b7695c8/1/rwLeINRbd4--lHUaMwHJ3-wsCfE.mft
Manifest number: C9
Signing time: Mon 21 Sep 2026 05:00:26 +0000
Manifest this update: Mon 21 Sep 2026 05:00:26 +0000
Manifest next update: Tue 22 Sep 2026 05:00:26 +0000
Files and hashes: 1: b8FUJ6vTuYb37tPPpkHWlKnxQaM.roa (hash: JxSaavJzGorBiYOMbo+wwCZSr84d63NSpqcOvfQfhnc=)
2: rwLeINRbd4--lHUaMwHJ3-wsCfE.crl (hash: c3JLQRud3UGstCm6w1/Z7EpgcBhW0sjBjxQNouiEftk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/b79f52-2df3-4ac1-98a6-26892b7695c8/1/rwLeINRbd4--lHUaMwHJ3-wsCfE.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/b79f52-2df3-4ac1-98a6-26892b7695c8/1/rwLeINRbd4--lHUaMwHJ3-wsCfE.mft
rsync://rpki.ripe.net/repository/DEFAULT/rwLeINRbd4--lHUaMwHJ3-wsCfE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 05:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c2:56:3a:ba:c3:b2:8c:97:09:d7:59:d3:0f:62:54:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af02de20d45b778fbe94751a3301c9dfec2c09f1
Validity
Not Before: Sep 21 05:00:26 2026 GMT
Not After : Sep 22 05:00:26 2026 GMT
Subject: CN=d33e4e629052481332e2950d3f603d860c3245a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:c5:15:e0:ca:1f:73:b2:92:9d:c8:1d:40:a0:
c8:d9:fe:76:e6:15:07:26:98:68:54:9b:6e:99:ff:
de:af:91:72:44:3c:87:ee:36:bb:8c:43:87:c2:03:
1b:5f:11:fb:71:b7:36:20:98:18:0f:77:e6:20:29:
95:0f:14:e5:69:a0:e0:ad:80:a6:9f:13:91:91:5c:
1c:62:e9:39:08:26:64:2a:3e:88:78:cc:33:e0:9b:
ad:54:3f:1d:fe:c6:87:2d:d1:81:dd:49:aa:bb:4c:
2a:b7:90:30:cb:56:e8:7b:68:5e:36:76:88:c4:d9:
3d:26:20:df:fb:df:96:34:be:1c:dc:96:86:07:7e:
08:c9:e0:a6:3e:f4:5e:73:e2:c3:ef:3c:57:2c:8d:
39:ef:a9:9e:4e:bb:ba:cb:71:ce:16:f9:07:bd:8d:
c0:60:9a:b4:f5:cf:ac:3b:4f:a1:83:34:36:2f:47:
c1:c9:51:c3:8c:03:db:eb:42:ed:17:ab:c4:c0:e7:
ad:27:80:76:cc:4f:0a:fe:bb:fd:a4:33:fb:c7:2e:
6b:d4:e0:28:3a:d8:c8:a0:ba:dd:c3:62:60:57:4c:
07:85:6b:83:e7:55:26:eb:f7:4a:6e:d6:a2:e2:8c:
cf:6f:26:63:69:35:ad:49:24:8b:d1:48:18:83:82:
46:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:3E:4E:62:90:52:48:13:32:E2:95:0D:3F:60:3D:86:0C:32:45:A3
X509v3 Authority Key Identifier:
keyid:AF:02:DE:20:D4:5B:77:8F:BE:94:75:1A:33:01:C9:DF:EC:2C:09:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rwLeINRbd4--lHUaMwHJ3-wsCfE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b79f52-2df3-4ac1-98a6-26892b7695c8/1/rwLeINRbd4--lHUaMwHJ3-wsCfE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b79f52-2df3-4ac1-98a6-26892b7695c8/1/rwLeINRbd4--lHUaMwHJ3-wsCfE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:f5:f5:8e:b2:c7:f0:8e:80:e0:c2:11:f2:70:23:8e:d8:96:
78:37:2c:33:02:9e:c1:a5:7a:ea:db:9f:a7:69:d7:05:7b:5a:
8a:12:35:92:e4:38:e2:73:63:98:d4:45:df:c4:d1:02:8d:c8:
83:4d:bb:d7:e3:32:35:39:89:22:1d:26:cb:fb:c4:05:1f:8f:
5e:15:de:63:d7:39:c2:19:68:42:d3:8a:de:07:74:d8:ad:40:
fd:71:07:9b:05:41:f6:d5:d8:04:d4:81:fe:b7:ce:2c:4e:d2:
12:2c:24:e5:21:70:7a:be:11:91:73:bd:8b:5d:21:97:bb:21:
84:dd:7f:0d:53:99:cd:2a:b5:30:55:0a:b9:9d:1a:6c:78:79:
c4:c7:ca:6b:74:e2:1e:5d:ad:69:41:84:eb:f0:45:c8:24:8d:
6f:e0:67:68:32:4b:5c:0b:71:e1:0a:fe:c4:b9:45:e0:b8:81:
80:91:66:3c:60:5c:91:b1:30:af:d7:f7:dd:7f:f4:cf:a3:e9:
88:14:53:96:28:f9:16:37:1b:27:4d:e1:5f:1e:77:d2:f5:ad:
8d:1b:7f:9e:56:8a:1d:7d:c5:71:fd:3f:79:4e:0c:d5:2d:07:
e5:51:74:5b:8c:2b:db:dc:61:eb:7a:39:15:9f:b8:ab:db:87:
0c:48:32:7b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDCVjq6w7KMlwnXWdMPYlTZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFmMDJkZTIwZDQ1Yjc3OGZiZTk0NzUxYTMzMDFjOWRmZWMy
YzA5ZjEwHhcNMjYwOTIxMDUwMDI2WhcNMjYwOTIyMDUwMDI2WjAzMTEwLwYDVQQD
EyhkMzNlNGU2MjkwNTI0ODEzMzJlMjk1MGQzZjYwM2Q4NjBjMzI0NWEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyMUV4Mofc7KSncgdQKDI2f525hUH
JphoVJtumf/er5FyRDyH7ja7jEOHwgMbXxH7cbc2IJgYD3fmICmVDxTlaaDgrYCm
nxORkVwcYuk5CCZkKj6IeMwz4JutVD8d/saHLdGB3Umqu0wqt5Awy1boe2heNnaI
xNk9JiDf+9+WNL4c3JaGB34IyeCmPvRec+LD7zxXLI0576meTru6y3HOFvkHvY3A
YJq09c+sO0+hgzQ2L0fByVHDjAPb60LtF6vEwOetJ4B2zE8K/rv9pDP7xy5r1OAo
OtjIoLrdw2JgV0wHhWuD51Um6/dKbtai4ozPbyZjaTWtSSSL0UgYg4JGfwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNM+TmKQUkgTMuKVDT9gPYYMMkWjMB8GA1UdIwQY
MBaAFK8C3iDUW3ePvpR1GjMByd/sLAnxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcndMZUlOUmJkNC0tbEhVYU13SEozLXdzQ2ZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS9iNzlmNTItMmRmMy00YWMxLTk4YTYt
MjY4OTJiNzY5NWM4LzEvcndMZUlOUmJkNC0tbEhVYU13SEozLXdzQ2ZFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MS9iNzlmNTItMmRmMy00YWMxLTk4YTYtMjY4OTJiNzY5NWM4
LzEvcndMZUlOUmJkNC0tbEhVYU13SEozLXdzQ2ZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl/X1jrLH
8I6A4MIR8nAjjtiWeDcsMwKewaV66tufp2nXBXtaihI1kuQ44nNjmNRF38TRAo3I
g0271+MyNTmJIh0my/vEBR+PXhXeY9c5whloQtOK3gd02K1A/XEHmwVB9tXYBNSB
/rfOLE7SEiwk5SFwer4RkXO9i10hl7shhN1/DVOZzSq1MFUKuZ0abHh5xMfKa3Ti
Hl2taUGE6/BFyCSNb+BnaDJLXAtx4Qr+xLlF4LiBgJFmPGBckbEwr9f33X/0z6Pp
iBRTlij5FjcbJ03hXx530vWtjRt/nlaKHX3Fcf0/eU4M1S0H5VF0W4wr29xh63o5
FZ+4q9uHDEgyew==
-----END CERTIFICATE-----
Generated at Mon Sep 21 13:32:22 2026 by rpki-client