Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/33fb90-189b-4e31-b92a-0c18d8597328/1/rwL7VrRZx6IaebaLThGKuHb8lqU.mft
File: rwL7VrRZx6IaebaLThGKuHb8lqU.mft (raw, json)
Hash identifier: 6fFo0RUEBrCMfbyW94VXJemxwTUkW+VHBkinh264KB4=
Subject key identifier: A3:9F:6B:98:70:28:5C:61:AF:17:03:24:25:34:9E:F5:A8:57:16:98
Authority key identifier: AF:02:FB:56:B4:59:C7:A2:1A:79:B6:8B:4E:11:8A:B8:76:FC:96:A5
Certificate issuer: /CN=af02fb56b459c7a21a79b68b4e118ab876fc96a5
Certificate serial: 019DA41CFB5390374AC11E7B030A8A8B3BC5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rwL7VrRZx6IaebaLThGKuHb8lqU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/33fb90-189b-4e31-b92a-0c18d8597328/1/rwL7VrRZx6IaebaLThGKuHb8lqU.mft
Manifest number: 10C2
Signing time: Sun 19 Apr 2026 05:00:55 +0000
Manifest this update: Sun 19 Apr 2026 05:00:55 +0000
Manifest next update: Mon 20 Apr 2026 05:00:55 +0000
Files and hashes: 1: rwL7VrRZx6IaebaLThGKuHb8lqU.crl (hash: wqxErO6v2ArM8fFARXNhT6uMoJ5eTRFTl3/+lkzjb7k=)
2: s9PnUrURA1UCKgGCXpOd5G6p8no.roa (hash: e5fYovHhc28JGLHPGhUlbL9alymDaPqLYlneZlPK+cQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/33fb90-189b-4e31-b92a-0c18d8597328/1/rwL7VrRZx6IaebaLThGKuHb8lqU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/33fb90-189b-4e31-b92a-0c18d8597328/1/rwL7VrRZx6IaebaLThGKuHb8lqU.mft
rsync://rpki.ripe.net/repository/DEFAULT/rwL7VrRZx6IaebaLThGKuHb8lqU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:1c:fb:53:90:37:4a:c1:1e:7b:03:0a:8a:8b:3b:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af02fb56b459c7a21a79b68b4e118ab876fc96a5
Validity
Not Before: Apr 19 05:00:55 2026 GMT
Not After : Apr 20 05:00:55 2026 GMT
Subject: CN=a39f6b9870285c61af17032425349ef5a8571698
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:a0:58:b0:c4:16:d0:16:71:97:71:af:22:02:
90:bc:d7:f2:b0:ad:f4:5a:d4:f6:85:44:35:f9:6a:
a4:2a:b1:44:b2:ee:f7:9c:ae:e0:1c:85:53:59:25:
82:d7:f0:a2:fe:72:45:57:5b:06:c6:63:33:54:64:
fe:13:4a:09:1e:e1:58:cd:19:1b:99:6a:53:f2:48:
70:88:2c:56:71:5e:0c:63:4e:1a:05:f5:f4:65:c9:
47:c6:8b:a8:1a:68:34:29:92:24:26:f6:00:5c:dd:
58:7b:32:58:53:21:10:58:12:b3:97:39:53:48:30:
eb:88:a8:5e:58:3f:2d:ce:47:c4:de:98:0e:b4:45:
fd:bd:8d:fe:71:d2:36:44:fe:f6:e1:06:11:1c:c5:
4f:89:0b:af:ca:36:9b:89:e7:5e:ea:59:6a:8e:2d:
0e:52:c0:25:08:25:c4:d5:f0:f7:0c:9f:d2:54:29:
59:e4:7c:49:43:88:b5:e5:b5:33:10:d0:47:80:de:
bf:57:b0:40:c8:56:f7:d9:56:ef:c0:58:4b:5e:fa:
41:fc:cd:d2:82:0d:8a:7b:ed:a2:fd:35:f1:a2:b7:
a8:51:74:6e:69:d4:b4:40:53:24:55:72:33:a9:85:
3d:8f:9d:d4:b1:9f:c6:5c:04:00:3c:d8:d0:c0:c7:
6f:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:9F:6B:98:70:28:5C:61:AF:17:03:24:25:34:9E:F5:A8:57:16:98
X509v3 Authority Key Identifier:
keyid:AF:02:FB:56:B4:59:C7:A2:1A:79:B6:8B:4E:11:8A:B8:76:FC:96:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rwL7VrRZx6IaebaLThGKuHb8lqU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/33fb90-189b-4e31-b92a-0c18d8597328/1/rwL7VrRZx6IaebaLThGKuHb8lqU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/33fb90-189b-4e31-b92a-0c18d8597328/1/rwL7VrRZx6IaebaLThGKuHb8lqU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:1c:e6:7b:bc:9f:25:61:5b:22:72:f8:8e:44:65:78:d2:72:
73:fd:af:37:af:2a:53:6b:a2:6f:fe:5d:96:eb:ff:ac:8a:6d:
5a:c3:80:de:d4:cc:61:2c:f2:be:0b:29:c0:e2:e8:a8:f6:bb:
66:f3:9d:e2:ba:3f:27:0b:39:77:f2:55:e3:fe:6b:dd:20:b7:
c2:db:43:75:03:d6:a6:93:bb:f6:8e:87:a4:2d:9d:b3:ac:08:
7b:c5:fe:38:d0:4d:bf:ad:11:e6:9a:20:6a:47:05:4b:6a:f4:
e8:54:39:8c:39:21:ba:aa:98:dd:82:01:0a:3b:49:83:9e:cc:
d6:d1:04:09:3f:53:28:2b:8c:08:08:cf:fd:26:30:a6:96:ce:
9f:1d:8b:2e:dc:4b:72:d7:13:9b:c7:0b:ac:82:02:57:a9:d7:
fb:c5:55:5b:8a:c3:88:15:52:3e:21:36:63:39:21:bb:cf:46:
48:71:23:12:b0:6c:a2:fd:73:31:2b:c4:83:6f:af:36:a8:9a:
54:69:08:1e:3d:1e:ad:4e:88:c2:a4:a0:59:e7:aa:9a:91:d9:
61:1f:0d:c1:2a:dc:a7:13:77:f4:97:52:fe:a1:40:dd:b7:d8:
1f:c6:fa:6e:d4:57:6d:8d:26:b6:0a:9d:97:b0:25:b0:77:88:
a8:d0:13:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 09:32:00 2026 by rpki-client