Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/7560e4-fc7d-4a64-b500-e7f05f029a48/1/rwXUKRyugYXGw0LiXe6bfpIPdt0.mft
File: rwXUKRyugYXGw0LiXe6bfpIPdt0.mft (raw, json)
Hash identifier: 1CkC07m6rw5s2Ji8rXWVdDDqUzhlDGnK+I6HT6JfWzU=
Subject key identifier: AF:31:B2:EE:84:34:2E:D2:C6:82:F3:AC:F1:1A:F5:B0:0E:55:DE:B3
Authority key identifier: AF:05:D4:29:1C:AE:81:85:C6:C3:42:E2:5D:EE:9B:7E:92:0F:76:DD
Certificate issuer: /CN=af05d4291cae8185c6c342e25dee9b7e920f76dd
Certificate serial: 019CAE6C04B14E6F85F54B2753CCEBEF14EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rwXUKRyugYXGw0LiXe6bfpIPdt0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/7560e4-fc7d-4a64-b500-e7f05f029a48/1/rwXUKRyugYXGw0LiXe6bfpIPdt0.mft
Manifest number: 0710
Signing time: Mon 02 Mar 2026 12:00:40 +0000
Manifest this update: Mon 02 Mar 2026 12:00:40 +0000
Manifest next update: Tue 03 Mar 2026 12:00:40 +0000
Files and hashes: 1: G4m4mx_ghT8RFwe2ShhdbyqAMUg.roa (hash: C8aW4E3EPA9z9dvszZWIC2qBgUsFs1qOe+mMPk/k+i4=)
2: rwXUKRyugYXGw0LiXe6bfpIPdt0.crl (hash: KGpP8PC4LfiyzA8hV06Uo920EyyoRPwSD3myptLitHo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/7560e4-fc7d-4a64-b500-e7f05f029a48/1/rwXUKRyugYXGw0LiXe6bfpIPdt0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/7560e4-fc7d-4a64-b500-e7f05f029a48/1/rwXUKRyugYXGw0LiXe6bfpIPdt0.mft
rsync://rpki.ripe.net/repository/DEFAULT/rwXUKRyugYXGw0LiXe6bfpIPdt0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 12:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:6c:04:b1:4e:6f:85:f5:4b:27:53:cc:eb:ef:14:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af05d4291cae8185c6c342e25dee9b7e920f76dd
Validity
Not Before: Mar 2 12:00:40 2026 GMT
Not After : Mar 3 12:00:40 2026 GMT
Subject: CN=af31b2ee84342ed2c682f3acf11af5b00e55deb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:b5:f2:5e:c5:40:84:ba:3d:9d:2e:52:cd:bd:
69:bb:f3:7f:72:18:97:ff:11:1b:4c:9e:57:0c:51:
8e:b2:8d:cb:ee:4c:14:b0:f9:c6:55:73:88:22:49:
a7:ea:28:ce:0e:77:e9:ca:17:49:52:3d:85:46:52:
51:a4:8d:41:db:4f:b6:49:67:c5:25:87:ef:18:8a:
3e:5f:95:9a:db:50:e9:7a:84:4c:61:4f:2c:da:81:
d2:66:6d:4d:97:de:82:4a:49:5a:95:75:5f:19:63:
7f:9d:39:30:62:e8:d8:58:18:9a:f8:30:2e:d1:a3:
ef:5a:41:2a:66:dd:73:d3:b4:70:8f:66:08:81:51:
00:13:13:8b:d9:b5:b7:0e:6a:0f:25:dd:4f:8b:b6:
a9:66:a2:ff:c9:46:64:fc:02:d7:dd:df:3b:1c:32:
0b:43:e3:a2:86:ff:8b:a8:a4:c0:70:b1:af:16:db:
ea:17:72:05:38:01:e4:e5:57:d0:e6:e6:2f:d8:d1:
46:55:cc:0d:10:8a:9a:f0:cf:9a:64:94:06:b0:45:
10:6a:0c:12:7e:1c:60:57:7c:b2:19:6a:15:09:83:
69:23:7d:38:85:38:02:34:62:c6:c5:89:76:0a:bb:
92:52:7c:6d:e3:2c:65:eb:e2:8b:69:94:5a:73:8f:
36:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:31:B2:EE:84:34:2E:D2:C6:82:F3:AC:F1:1A:F5:B0:0E:55:DE:B3
X509v3 Authority Key Identifier:
keyid:AF:05:D4:29:1C:AE:81:85:C6:C3:42:E2:5D:EE:9B:7E:92:0F:76:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rwXUKRyugYXGw0LiXe6bfpIPdt0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/7560e4-fc7d-4a64-b500-e7f05f029a48/1/rwXUKRyugYXGw0LiXe6bfpIPdt0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/7560e4-fc7d-4a64-b500-e7f05f029a48/1/rwXUKRyugYXGw0LiXe6bfpIPdt0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:5c:6c:a8:8a:e9:42:de:3b:ea:0f:e8:4c:ad:77:a3:05:b9:
55:61:7a:8a:d5:58:df:6c:fe:51:38:d3:e5:c8:b5:21:63:92:
5f:49:42:e5:a1:cf:36:bd:ff:bb:d1:da:28:84:6f:75:ff:79:
6f:d5:cc:7f:92:84:02:90:91:47:11:8d:9c:3b:19:02:50:7d:
87:84:d4:77:4d:5f:4f:de:6d:c8:63:09:b0:38:3f:79:31:83:
da:40:dd:65:14:00:10:b8:dd:09:18:30:94:c3:8f:47:fb:e4:
f2:32:d1:c0:60:3a:ba:5b:21:6d:ba:04:be:82:50:35:0d:e8:
da:87:f8:d3:20:ec:67:d8:b9:73:fb:29:82:3c:99:f7:0e:f8:
81:91:cc:1e:a1:31:ca:41:39:16:30:06:9c:a5:4e:27:ec:8d:
72:b2:cb:8d:3f:1a:ac:f2:64:16:7e:5d:7e:af:1e:fc:ec:f5:
f4:6b:f6:cc:96:88:e3:47:66:12:ed:d3:a2:96:75:d0:8e:ee:
5d:c1:3b:ed:ab:74:37:3c:06:d2:4e:d5:eb:0a:8a:19:13:8d:
a7:a4:36:d9:43:40:2d:4e:e2:10:70:a9:4f:6d:54:7a:89:3d:
64:4d:1c:53:0d:12:4a:bf:39:a2:1b:46:28:cf:90:f9:79:ec:
54:5a:2f:80
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyubASxTm+F9UsnU8zr7xTsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFmMDVkNDI5MWNhZTgxODVjNmMzNDJlMjVkZWU5YjdlOTIw
Zjc2ZGQwHhcNMjYwMzAyMTIwMDQwWhcNMjYwMzAzMTIwMDQwWjAzMTEwLwYDVQQD
EyhhZjMxYjJlZTg0MzQyZWQyYzY4MmYzYWNmMTFhZjViMDBlNTVkZWIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp7XyXsVAhLo9nS5Szb1pu/N/chiX
/xEbTJ5XDFGOso3L7kwUsPnGVXOIIkmn6ijODnfpyhdJUj2FRlJRpI1B20+2SWfF
JYfvGIo+X5Wa21DpeoRMYU8s2oHSZm1Nl96CSklalXVfGWN/nTkwYujYWBia+DAu
0aPvWkEqZt1z07Rwj2YIgVEAExOL2bW3DmoPJd1Pi7apZqL/yUZk/ALX3d87HDIL
Q+Oihv+LqKTAcLGvFtvqF3IFOAHk5VfQ5uYv2NFGVcwNEIqa8M+aZJQGsEUQagwS
fhxgV3yyGWoVCYNpI304hTgCNGLGxYl2CruSUnxt4yxl6+KLaZRac482IQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK8xsu6ENC7SxoLzrPEa9bAOVd6zMB8GA1UdIwQY
MBaAFK8F1CkcroGFxsNC4l3um36SD3bdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcndYVUtSeXVnWVhHdzBMaVhlNmJmcElQZHQwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy83NTYwZTQtZmM3ZC00YTY0LWI1MDAt
ZTdmMDVmMDI5YTQ4LzEvcndYVUtSeXVnWVhHdzBMaVhlNmJmcElQZHQwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNy83NTYwZTQtZmM3ZC00YTY0LWI1MDAtZTdmMDVmMDI5YTQ4
LzEvcndYVUtSeXVnWVhHdzBMaVhlNmJmcElQZHQwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG1xsqIrp
Qt476g/oTK13owW5VWF6itVY32z+UTjT5ci1IWOSX0lC5aHPNr3/u9HaKIRvdf95
b9XMf5KEApCRRxGNnDsZAlB9h4TUd01fT95tyGMJsDg/eTGD2kDdZRQAELjdCRgw
lMOPR/vk8jLRwGA6ulshbboEvoJQNQ3o2of40yDsZ9i5c/spgjyZ9w74gZHMHqEx
ykE5FjAGnKVOJ+yNcrLLjT8arPJkFn5dfq8e/Oz19Gv2zJaI40dmEu3TopZ10I7u
XcE77at0NzwG0k7V6wqKGRONp6Q22UNALU7iEHCpT21Ueok9ZE0cUw0SSr85ohtG
KM+Q+XnsVFovgA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 21:13:43 2026 by rpki-client