Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ab/087f99-cb9d-40a8-9830-1e695ef49c10/1/Rwvhhl9QeeJLGnrf3KJ-4v5dH4k.mft
File: Rwvhhl9QeeJLGnrf3KJ-4v5dH4k.mft (raw, json)
Hash identifier: Zsi42ZeJLxkGHks+i49bqpk28+OU7A+OM+3CkaKKLNs=
Subject key identifier: A3:F9:22:D7:87:5B:13:8C:0C:B7:61:B5:FE:90:C5:7C:56:EA:2F:EE
Authority key identifier: 47:0B:E1:86:5F:50:79:E2:4B:1A:7A:DF:DC:A2:7E:E2:FE:5D:1F:89
Certificate issuer: /CN=470be1865f5079e24b1a7adfdca27ee2fe5d1f89
Certificate serial: 01A0E81CF5B0E63698DBF5663EB495752871
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rwvhhl9QeeJLGnrf3KJ-4v5dH4k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/087f99-cb9d-40a8-9830-1e695ef49c10/1/Rwvhhl9QeeJLGnrf3KJ-4v5dH4k.mft
Manifest number: 1A7A
Signing time: Mon 28 Sep 2026 13:03:26 +0000
Manifest this update: Mon 28 Sep 2026 13:03:26 +0000
Manifest next update: Tue 29 Sep 2026 13:03:26 +0000
Files and hashes: 1: 2XedQ5Z42dY_hRwTsKx81Lezyfc.roa (hash: X9ztJb3Rfx+FojOZ+RViUwDKlFgWmcbx151sFFMV0Eg=)
2: Rwvhhl9QeeJLGnrf3KJ-4v5dH4k.crl (hash: ybji19PzbZ/F/5iXCIvl166GhuqmdgDSDlsEyqJ9AFU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/087f99-cb9d-40a8-9830-1e695ef49c10/1/Rwvhhl9QeeJLGnrf3KJ-4v5dH4k.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/087f99-cb9d-40a8-9830-1e695ef49c10/1/Rwvhhl9QeeJLGnrf3KJ-4v5dH4k.mft
rsync://rpki.ripe.net/repository/DEFAULT/Rwvhhl9QeeJLGnrf3KJ-4v5dH4k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 13:03:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e8:1c:f5:b0:e6:36:98:db:f5:66:3e:b4:95:75:28:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=470be1865f5079e24b1a7adfdca27ee2fe5d1f89
Validity
Not Before: Sep 28 13:03:26 2026 GMT
Not After : Sep 29 13:03:26 2026 GMT
Subject: CN=a3f922d7875b138c0cb761b5fe90c57c56ea2fee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:92:3b:00:96:fb:15:aa:1a:c2:e1:41:91:ef:
fe:97:3a:45:ec:14:82:34:4a:fe:83:1b:37:db:70:
b3:b5:c4:e9:aa:7c:0a:1a:11:55:89:d4:14:11:20:
f1:7f:f7:1e:c4:c0:4e:e6:8f:cf:4d:27:0a:05:f3:
45:a2:f6:42:91:6f:2b:01:bb:fa:fe:57:cb:78:b4:
db:e4:48:90:c6:ff:b4:96:dc:31:e5:d7:38:95:bd:
1b:a4:3a:c4:20:b3:21:4e:97:cb:5f:c9:59:e8:b3:
f0:b7:46:dc:48:f6:be:d3:99:aa:e5:ce:44:ae:89:
d1:df:4a:d5:0b:81:b9:48:b0:bd:7e:a5:7f:7e:b6:
7d:a9:92:78:c1:42:f1:fa:b0:72:94:5e:cf:be:85:
09:ef:d2:aa:2f:87:98:46:fb:8b:49:59:0e:8d:95:
b2:22:a6:d0:14:41:0b:5c:ec:88:de:6e:28:a3:4d:
a6:2f:a5:01:5d:fb:51:41:57:e9:3c:94:5d:2b:e1:
53:91:c8:f8:7f:66:84:13:c3:68:24:a0:8c:f1:30:
26:d4:d3:e5:87:2b:5a:71:62:37:a8:ea:31:21:75:
52:49:3b:63:78:91:3a:02:e5:ec:78:8a:7a:fc:34:
26:c5:54:c6:cb:3b:36:58:e2:ab:9c:2f:b5:98:61:
b7:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:F9:22:D7:87:5B:13:8C:0C:B7:61:B5:FE:90:C5:7C:56:EA:2F:EE
X509v3 Authority Key Identifier:
keyid:47:0B:E1:86:5F:50:79:E2:4B:1A:7A:DF:DC:A2:7E:E2:FE:5D:1F:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rwvhhl9QeeJLGnrf3KJ-4v5dH4k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/087f99-cb9d-40a8-9830-1e695ef49c10/1/Rwvhhl9QeeJLGnrf3KJ-4v5dH4k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/087f99-cb9d-40a8-9830-1e695ef49c10/1/Rwvhhl9QeeJLGnrf3KJ-4v5dH4k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:00:08:01:0e:b8:39:bc:56:b7:26:c8:1c:d1:13:c8:89:94:
a4:bf:fd:a5:6e:2c:96:02:ca:0c:cd:24:8d:45:49:a1:ac:86:
78:bf:3f:32:f3:00:94:71:0c:85:c2:b2:00:c3:3a:ba:59:c4:
8c:c5:a8:a5:c7:96:0f:a4:ef:df:a4:be:d0:82:7c:56:bf:0b:
16:79:c8:af:30:0a:a1:ef:4c:f8:d8:29:40:ef:10:3e:fa:c6:
f7:75:0e:d9:d3:e2:66:9b:7d:af:11:74:8a:23:6d:88:53:95:
17:1d:40:b0:0a:c2:fe:f5:eb:6c:9f:ec:72:e8:45:8b:3a:da:
27:f9:d9:8e:b0:1b:e7:00:33:58:f6:3a:fb:9e:d6:4d:af:a8:
98:5e:3c:7a:c7:dd:bb:30:62:76:66:b2:5a:94:fa:ce:28:f2:
e8:68:db:d3:52:b8:69:c4:4b:52:79:56:e4:76:95:c2:91:4a:
32:13:c6:d8:e0:67:d8:93:45:41:26:02:9f:98:9d:4e:a9:26:
43:c5:08:12:d8:3d:8c:95:32:5e:df:a5:5c:6e:e3:16:68:27:
95:88:3f:12:0e:37:93:ad:e0:35:ff:b6:15:68:fb:86:1e:76:
3b:5c:97:1e:81:21:91:67:69:09:2f:0a:d7:57:03:4f:29:d0:
a6:0e:b8:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 18:07:29 2026 by rpki-client