Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/7560e4-fc7d-4a64-b500-e7f05f029a48/1/rwXUKRyugYXGw0LiXe6bfpIPdt0.mft
File: rwXUKRyugYXGw0LiXe6bfpIPdt0.mft (raw, json)
Hash identifier: vyluXk/Pm9U8KGaFuUKFilskveRClHwIvZCpyMbLLM8=
Subject key identifier: 8D:94:37:A7:63:52:95:E4:D5:C4:EE:6D:07:9D:96:29:F7:9F:79:87
Authority key identifier: AF:05:D4:29:1C:AE:81:85:C6:C3:42:E2:5D:EE:9B:7E:92:0F:76:DD
Certificate issuer: /CN=af05d4291cae8185c6c342e25dee9b7e920f76dd
Certificate serial: 019D9A06BF51C3F9AB4904A86BA1B8B02173
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rwXUKRyugYXGw0LiXe6bfpIPdt0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/7560e4-fc7d-4a64-b500-e7f05f029a48/1/rwXUKRyugYXGw0LiXe6bfpIPdt0.mft
Manifest number: 078A
Signing time: Fri 17 Apr 2026 06:00:26 +0000
Manifest this update: Fri 17 Apr 2026 06:00:26 +0000
Manifest next update: Sat 18 Apr 2026 06:00:26 +0000
Files and hashes: 1: G4m4mx_ghT8RFwe2ShhdbyqAMUg.roa (hash: C8aW4E3EPA9z9dvszZWIC2qBgUsFs1qOe+mMPk/k+i4=)
2: rwXUKRyugYXGw0LiXe6bfpIPdt0.crl (hash: fVwjpSSgdGB6OYwD5oyEQk4S5zadMLvSZgHGc26QrfE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/7560e4-fc7d-4a64-b500-e7f05f029a48/1/rwXUKRyugYXGw0LiXe6bfpIPdt0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/7560e4-fc7d-4a64-b500-e7f05f029a48/1/rwXUKRyugYXGw0LiXe6bfpIPdt0.mft
rsync://rpki.ripe.net/repository/DEFAULT/rwXUKRyugYXGw0LiXe6bfpIPdt0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 06:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:06:bf:51:c3:f9:ab:49:04:a8:6b:a1:b8:b0:21:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af05d4291cae8185c6c342e25dee9b7e920f76dd
Validity
Not Before: Apr 17 06:00:26 2026 GMT
Not After : Apr 18 06:00:26 2026 GMT
Subject: CN=8d9437a7635295e4d5c4ee6d079d9629f79f7987
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:1e:6a:6d:bc:40:df:de:7a:49:6b:e6:db:52:
66:88:d4:2f:a9:de:04:30:0c:5f:0f:b6:14:8a:f6:
a2:48:1e:47:09:5d:d4:bf:94:41:f5:39:ea:11:a9:
39:de:95:f5:4f:c6:4f:38:fc:e4:1b:70:d6:72:2a:
83:a8:1b:bc:ac:2f:fb:2a:bb:97:c2:eb:88:7f:3d:
eb:cc:f1:f6:a3:46:33:63:22:01:e3:6c:3c:bf:50:
03:04:de:37:95:da:19:c4:4d:24:c3:a2:bc:9d:a0:
ba:c6:43:d1:b3:77:46:f9:3b:d8:ce:09:36:23:69:
6d:be:71:5b:5e:9f:44:3d:1f:82:36:c7:16:a2:37:
22:cc:af:32:a1:94:0a:85:37:c0:97:0d:03:7d:a9:
55:8b:34:85:ce:15:28:f6:be:ff:93:41:0d:19:78:
f5:3e:01:8f:7a:90:77:77:27:30:6f:81:68:53:2d:
16:3c:19:45:59:5a:32:48:f9:91:b2:27:01:b9:3a:
06:10:20:6e:0b:c3:89:82:60:3f:8d:2d:4e:0f:65:
3b:73:01:e2:fd:f8:ab:89:33:12:c8:17:97:b1:0c:
48:70:42:e5:dc:25:ee:55:47:d3:40:e6:89:cf:a9:
8f:d2:5d:fe:35:4e:45:a6:ee:a4:b7:61:bb:bb:ca:
8a:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:94:37:A7:63:52:95:E4:D5:C4:EE:6D:07:9D:96:29:F7:9F:79:87
X509v3 Authority Key Identifier:
keyid:AF:05:D4:29:1C:AE:81:85:C6:C3:42:E2:5D:EE:9B:7E:92:0F:76:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rwXUKRyugYXGw0LiXe6bfpIPdt0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/7560e4-fc7d-4a64-b500-e7f05f029a48/1/rwXUKRyugYXGw0LiXe6bfpIPdt0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/7560e4-fc7d-4a64-b500-e7f05f029a48/1/rwXUKRyugYXGw0LiXe6bfpIPdt0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:1d:b3:ba:fb:af:7f:64:5c:ac:84:a5:d2:95:b1:1a:ee:a6:
44:7e:bf:64:e4:d5:0a:c1:9d:4c:58:d5:d6:66:0b:1a:55:65:
22:52:d4:ba:c4:45:de:08:62:cb:b9:9f:28:64:dd:97:5b:e5:
6e:23:ac:97:e3:41:8f:d2:65:c2:24:d0:e0:6f:88:70:91:25:
26:63:80:0b:a4:30:d7:5d:ec:59:22:ad:d0:92:d5:13:bf:f9:
37:6e:70:e9:5e:a6:d6:53:aa:20:f5:72:88:e5:d4:46:07:8c:
33:84:3c:0f:2d:ec:fd:5c:b4:fd:bf:0f:b7:21:14:de:c4:5e:
6e:b2:96:bd:c4:82:59:ec:67:7c:2d:4d:68:4b:c4:e0:27:5f:
24:22:69:76:ee:bf:f2:fd:59:f1:b9:4b:59:e3:c7:d0:49:6b:
75:8c:ae:ac:59:34:af:4d:11:cb:7c:db:79:77:46:50:fa:95:
49:f3:d1:af:59:f8:ee:74:ee:56:94:8e:d1:29:53:75:5a:71:
7c:25:df:82:a6:3f:25:5c:54:6f:ce:be:4b:4f:cc:7b:1f:19:
10:72:e1:16:3a:0b:e3:50:01:f6:11:36:12:6d:cf:5b:51:54:
e0:a8:37:c2:0d:e8:10:29:9f:9c:b5:44:cd:43:e6:94:4c:c0:
73:75:22:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:25:07 2026 by rpki-client