Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/33fb90-189b-4e31-b92a-0c18d8597328/1/rwL7VrRZx6IaebaLThGKuHb8lqU.mft
File: rwL7VrRZx6IaebaLThGKuHb8lqU.mft (raw, json)
Hash identifier: wBx3KU64AuoVuyuQsthWoGyOKotIVlklfL+9UFQ4iqI=
Subject key identifier: A5:75:C3:EB:30:06:01:70:64:A6:81:BA:7D:8C:39:C8:02:63:84:93
Authority key identifier: AF:02:FB:56:B4:59:C7:A2:1A:79:B6:8B:4E:11:8A:B8:76:FC:96:A5
Certificate issuer: /CN=af02fb56b459c7a21a79b68b4e118ab876fc96a5
Certificate serial: 019CAAFD416CC9E1AC29C8D27EFD3CB22428
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rwL7VrRZx6IaebaLThGKuHb8lqU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/33fb90-189b-4e31-b92a-0c18d8597328/1/rwL7VrRZx6IaebaLThGKuHb8lqU.mft
Manifest number: 1041
Signing time: Sun 01 Mar 2026 20:00:49 +0000
Manifest this update: Sun 01 Mar 2026 20:00:49 +0000
Manifest next update: Mon 02 Mar 2026 20:00:49 +0000
Files and hashes: 1: rwL7VrRZx6IaebaLThGKuHb8lqU.crl (hash: /VDIL7RkwdIE+rYsw7gwTv+NWWI6IjsGvz6WSAokX30=)
2: s9PnUrURA1UCKgGCXpOd5G6p8no.roa (hash: e5fYovHhc28JGLHPGhUlbL9alymDaPqLYlneZlPK+cQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/33fb90-189b-4e31-b92a-0c18d8597328/1/rwL7VrRZx6IaebaLThGKuHb8lqU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/33fb90-189b-4e31-b92a-0c18d8597328/1/rwL7VrRZx6IaebaLThGKuHb8lqU.mft
rsync://rpki.ripe.net/repository/DEFAULT/rwL7VrRZx6IaebaLThGKuHb8lqU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fd:41:6c:c9:e1:ac:29:c8:d2:7e:fd:3c:b2:24:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af02fb56b459c7a21a79b68b4e118ab876fc96a5
Validity
Not Before: Mar 1 20:00:49 2026 GMT
Not After : Mar 2 20:00:49 2026 GMT
Subject: CN=a575c3eb3006017064a681ba7d8c39c802638493
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:3e:b9:41:05:50:aa:e5:17:55:8a:85:95:4e:
02:3c:8b:14:da:ad:15:41:93:4d:bc:38:7d:0c:60:
51:c6:89:0a:0a:c2:ad:22:85:45:cb:f0:79:68:9f:
41:4b:13:45:a0:14:28:39:6c:5f:0d:ae:2b:14:98:
9c:97:c3:34:ba:26:46:27:fa:78:58:40:d8:77:26:
1d:b9:52:cb:22:86:ad:ad:47:6d:8b:94:5a:97:6f:
e0:80:60:b2:2b:31:22:2d:bb:90:73:bd:cb:31:ce:
41:7d:0e:4d:b8:9e:df:69:17:34:47:9b:3c:a2:25:
1d:bf:97:9a:e7:9d:66:8a:0f:c7:da:e7:01:d0:50:
43:41:6b:ba:cc:e3:95:bd:1e:98:93:a1:98:24:cd:
8d:1a:0c:7a:b0:78:3a:2e:f3:e8:15:09:84:b3:9b:
ce:b7:99:18:b9:a6:1e:a7:51:a6:cf:9b:2e:b7:b9:
70:56:5a:bd:20:f9:f5:54:3b:f4:77:d1:eb:77:d6:
e6:73:e1:6c:83:9e:d6:ab:f5:79:cb:fe:5d:bc:56:
ed:09:7a:05:85:d7:e0:cf:92:cb:75:b5:71:11:1d:
3d:c6:b1:2f:be:4f:d9:1b:b6:67:17:d0:df:45:95:
f8:e3:e9:57:fe:ae:6a:21:1c:cb:b8:79:37:5e:ca:
19:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:75:C3:EB:30:06:01:70:64:A6:81:BA:7D:8C:39:C8:02:63:84:93
X509v3 Authority Key Identifier:
keyid:AF:02:FB:56:B4:59:C7:A2:1A:79:B6:8B:4E:11:8A:B8:76:FC:96:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rwL7VrRZx6IaebaLThGKuHb8lqU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/33fb90-189b-4e31-b92a-0c18d8597328/1/rwL7VrRZx6IaebaLThGKuHb8lqU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/33fb90-189b-4e31-b92a-0c18d8597328/1/rwL7VrRZx6IaebaLThGKuHb8lqU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:f4:a8:7f:93:ec:b7:40:72:02:5c:3e:c0:28:a0:78:9f:03:
16:f3:bd:a5:67:b9:06:57:a8:0f:1b:9b:21:06:dc:ca:bd:24:
58:40:79:67:73:0a:a9:eb:6c:d0:7d:2f:9f:fe:a2:ea:a3:b0:
81:fe:59:3c:bd:aa:5a:4e:02:c1:70:29:fb:ee:48:5c:81:f8:
dd:2e:1e:16:1f:b0:df:70:a7:cf:aa:a5:a4:46:4d:47:06:c1:
9d:26:3f:76:4a:76:48:9c:6b:2c:3b:95:1e:74:bf:8c:42:34:
5c:b1:7d:7c:bc:7d:75:70:6c:cf:df:7a:02:3b:ad:29:ad:52:
98:79:f0:23:f3:ea:0d:e6:d5:af:3f:95:96:04:ee:66:b9:bc:
23:4f:12:4c:fd:e4:d0:6c:b8:55:e2:30:18:29:70:58:c0:04:
81:60:90:6c:ac:ae:30:be:48:69:85:63:f5:12:65:3e:d6:ff:
9f:c6:32:96:38:a2:18:e5:d0:de:ad:79:18:1a:5f:9b:32:63:
fb:e1:a2:ce:3a:77:5e:b3:c9:5f:07:ce:fd:4d:2a:2e:f7:91:
a8:fe:c0:cb:3b:3a:d5:f7:65:15:da:df:b2:91:55:a3:74:bb:
09:1f:89:e3:34:31:6e:23:c3:52:83:df:b6:89:f1:e3:d2:a5:
65:c5:e6:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:03:24 2026 by rpki-client