Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fe/6ad9b8-9f0e-4ad0-a220-3ac3b6737042/1/rw9am9KtHpaGXwDQhSK5qtPpGk0.mft
File: rw9am9KtHpaGXwDQhSK5qtPpGk0.mft (raw, json)
Hash identifier: qBqscNxANbQOJltTd/RNKSdF0bJ+V2Eq5M8qaF9T/Bg=
Subject key identifier: 85:ED:39:D4:AF:1E:36:BC:19:3B:C4:BA:28:5A:12:9A:5F:70:16:E5
Authority key identifier: AF:0F:5A:9B:D2:AD:1E:96:86:5F:00:D0:85:22:B9:AA:D3:E9:1A:4D
Certificate issuer: /CN=af0f5a9bd2ad1e96865f00d08522b9aad3e91a4d
Certificate serial: 01A1298D2D5FD6359EBFD1852FAF9601D684
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rw9am9KtHpaGXwDQhSK5qtPpGk0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/6ad9b8-9f0e-4ad0-a220-3ac3b6737042/1/rw9am9KtHpaGXwDQhSK5qtPpGk0.mft
Manifest number: 17B1
Signing time: Sun 11 Oct 2026 06:01:20 +0000
Manifest this update: Sun 11 Oct 2026 06:01:20 +0000
Manifest next update: Mon 12 Oct 2026 06:01:20 +0000
Files and hashes: 1: CnBLfp0K-MwzN1OvimzKQhhQRz8.roa (hash: etl29j67/XA8KfqoSc4LuDr3rcwYsJQPUU+kY7GMI8s=)
2: Lk4rKldX9sXOjCgYf6TH67Gu2-M.roa (hash: LdwPVlJ5KEW/4BpxrtP9UJQIli3Ut19hqpjKvaQuhlI=)
3: rw9am9KtHpaGXwDQhSK5qtPpGk0.crl (hash: VP7E1rI7kf+9HSBQKAFBEXEU+oLJrHxvQQ+0JCOtuw0=)
4: zf2OWk_RcBoM6jajwmrPp0mhHEM.roa (hash: 7qEv+OmptmvjMEg/3MLv8VXpUtOOdS45r94EszitJCE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/6ad9b8-9f0e-4ad0-a220-3ac3b6737042/1/rw9am9KtHpaGXwDQhSK5qtPpGk0.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/6ad9b8-9f0e-4ad0-a220-3ac3b6737042/1/rw9am9KtHpaGXwDQhSK5qtPpGk0.mft
rsync://rpki.ripe.net/repository/DEFAULT/rw9am9KtHpaGXwDQhSK5qtPpGk0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 04:45:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:29:8d:2d:5f:d6:35:9e:bf:d1:85:2f:af:96:01:d6:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af0f5a9bd2ad1e96865f00d08522b9aad3e91a4d
Validity
Not Before: Oct 11 06:01:20 2026 GMT
Not After : Oct 12 06:01:20 2026 GMT
Subject: CN=85ed39d4af1e36bc193bc4ba285a129a5f7016e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:86:a4:de:16:3e:18:12:8f:ab:cb:c6:47:35:
8d:ee:f3:ed:08:17:04:b1:a3:fe:21:32:7d:09:03:
cb:63:3f:b7:3b:bb:bf:78:21:c5:fb:d2:55:73:e8:
9b:dd:92:2c:9b:2f:e7:0e:6f:e8:4e:29:9a:40:6f:
b3:4a:a8:1c:c4:8e:04:62:1e:74:73:74:de:ec:87:
23:fc:25:71:83:e6:15:36:ff:43:82:51:f1:23:b1:
87:b5:6d:8d:4a:35:8f:e7:b7:77:48:4c:26:6a:8a:
dd:1b:87:9d:77:df:fe:a6:f9:06:7b:56:8d:d7:28:
eb:7c:df:d5:0a:e3:5a:32:76:fb:4a:84:8e:83:17:
f4:20:74:1f:6c:6c:e2:81:dd:81:be:ca:4a:7d:58:
7f:b5:9b:43:e5:8a:4f:38:65:ba:76:fb:31:7f:fb:
e0:36:e0:d8:f3:27:bd:3f:fb:48:46:db:2a:89:54:
ee:06:2c:91:65:df:87:3f:c9:91:90:ac:60:fb:1c:
0a:4e:46:c6:4f:33:14:10:e7:38:03:f9:fa:c4:16:
89:ed:21:74:cc:6d:6a:b1:8f:87:8d:f0:8f:c5:ee:
ff:ca:a0:29:70:e5:bd:ec:93:83:90:b7:bc:96:b9:
1e:4d:ec:e9:49:2a:c6:d1:ac:d7:9a:8d:45:c3:d5:
4e:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:ED:39:D4:AF:1E:36:BC:19:3B:C4:BA:28:5A:12:9A:5F:70:16:E5
X509v3 Authority Key Identifier:
keyid:AF:0F:5A:9B:D2:AD:1E:96:86:5F:00:D0:85:22:B9:AA:D3:E9:1A:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rw9am9KtHpaGXwDQhSK5qtPpGk0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/6ad9b8-9f0e-4ad0-a220-3ac3b6737042/1/rw9am9KtHpaGXwDQhSK5qtPpGk0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/6ad9b8-9f0e-4ad0-a220-3ac3b6737042/1/rw9am9KtHpaGXwDQhSK5qtPpGk0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:4f:41:39:e3:6c:02:02:24:20:f1:41:61:9c:0b:de:66:64:
d7:9c:c8:9a:b4:52:4f:17:02:6f:e8:ae:3d:15:d8:fe:a0:92:
1b:9d:0e:b9:8c:9f:a4:e7:16:49:99:1a:f9:0b:b0:c4:1f:e4:
a9:8b:26:3f:de:ba:8b:c5:5d:e8:18:01:09:56:cc:d6:53:79:
45:9f:35:48:9e:c2:16:bb:39:11:1e:f7:92:a6:3e:78:cc:b1:
02:f3:1e:ea:11:44:69:a8:5b:40:f7:07:0d:b3:e9:68:06:78:
7a:11:ac:e0:82:c9:aa:2b:0e:36:ec:01:74:4b:d6:40:41:f3:
ed:b2:94:7a:ed:c9:c5:1c:9e:47:34:57:4e:bf:05:ed:ec:05:
9e:99:ff:82:49:98:d6:c2:fa:80:7b:53:ee:00:29:df:aa:a0:
85:5d:87:0c:15:5f:b2:72:c7:9b:13:2e:89:fa:9a:80:ae:29:
2c:e9:f1:87:10:7c:8e:a6:32:d6:d4:8a:ca:25:50:46:d5:93:
04:9f:d4:11:91:2e:fb:1c:3d:64:6c:07:d3:e8:2d:99:54:48:
2c:66:96:bc:06:6e:c8:a6:a8:17:1f:67:60:39:f1:e4:22:99:
a9:19:3c:70:01:c2:3b:3a:30:d2:ba:6a:1f:dc:da:65:6f:ad:
5f:80:e9:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 11:27:48 2026 by rpki-client