Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/6ad9b8-9f0e-4ad0-a220-3ac3b6737042/1/rw9am9KtHpaGXwDQhSK5qtPpGk0.mft
File: rw9am9KtHpaGXwDQhSK5qtPpGk0.mft (raw, json)
Hash identifier: n+zPDrtEpcdRwYjO11MpCQjnO7cbItesIYGpvJKInZ4=
Subject key identifier: 84:64:3D:2F:4D:9C:72:A7:F8:1A:F0:EA:6E:DD:D8:94:BF:EE:63:18
Authority key identifier: AF:0F:5A:9B:D2:AD:1E:96:86:5F:00:D0:85:22:B9:AA:D3:E9:1A:4D
Certificate issuer: /CN=af0f5a9bd2ad1e96865f00d08522b9aad3e91a4d
Certificate serial: 019EC17FCFC01B34921D065E09AF2B81968F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rw9am9KtHpaGXwDQhSK5qtPpGk0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/6ad9b8-9f0e-4ad0-a220-3ac3b6737042/1/rw9am9KtHpaGXwDQhSK5qtPpGk0.mft
Manifest number: 1672
Signing time: Sat 13 Jun 2026 15:00:39 +0000
Manifest this update: Sat 13 Jun 2026 15:00:39 +0000
Manifest next update: Sun 14 Jun 2026 15:00:39 +0000
Files and hashes: 1: CnBLfp0K-MwzN1OvimzKQhhQRz8.roa (hash: etl29j67/XA8KfqoSc4LuDr3rcwYsJQPUU+kY7GMI8s=)
2: Lk4rKldX9sXOjCgYf6TH67Gu2-M.roa (hash: LdwPVlJ5KEW/4BpxrtP9UJQIli3Ut19hqpjKvaQuhlI=)
3: rw9am9KtHpaGXwDQhSK5qtPpGk0.crl (hash: BvommNQQODpN17xhXnJjDA5JAMqCTQqsPZlhe09jaoU=)
4: zf2OWk_RcBoM6jajwmrPp0mhHEM.roa (hash: 7qEv+OmptmvjMEg/3MLv8VXpUtOOdS45r94EszitJCE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/6ad9b8-9f0e-4ad0-a220-3ac3b6737042/1/rw9am9KtHpaGXwDQhSK5qtPpGk0.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/6ad9b8-9f0e-4ad0-a220-3ac3b6737042/1/rw9am9KtHpaGXwDQhSK5qtPpGk0.mft
rsync://rpki.ripe.net/repository/DEFAULT/rw9am9KtHpaGXwDQhSK5qtPpGk0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 15:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c1:7f:cf:c0:1b:34:92:1d:06:5e:09:af:2b:81:96:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af0f5a9bd2ad1e96865f00d08522b9aad3e91a4d
Validity
Not Before: Jun 13 15:00:39 2026 GMT
Not After : Jun 14 15:00:39 2026 GMT
Subject: CN=84643d2f4d9c72a7f81af0ea6eddd894bfee6318
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:91:90:bf:af:68:ec:06:cf:af:1a:3d:d0:6e:
cc:ff:b9:6b:ef:d9:e9:47:29:8f:0b:7c:e6:0e:a9:
0e:c8:02:45:aa:7e:7a:f4:fe:50:3e:b5:fb:e6:32:
0f:3b:a0:ca:25:d7:88:51:6a:c3:55:19:15:87:07:
8d:2a:16:77:86:6d:a6:ee:68:3a:b9:e2:aa:0a:e2:
28:f9:be:e3:f6:bf:cf:5c:77:bf:fa:2a:cf:99:a1:
7d:e1:ad:48:40:e7:ab:41:ef:9f:9b:6c:7c:ef:83:
15:d4:d1:34:66:c6:78:db:6f:13:30:98:f5:65:44:
b9:58:63:3a:50:dd:ca:a7:23:d2:8f:f2:f5:e6:fb:
0c:01:c4:53:ad:36:92:a4:59:78:a2:35:db:f5:8c:
a0:4d:48:fc:5f:24:2b:51:cb:d6:4c:84:f4:99:4a:
05:b6:08:b8:24:07:31:ff:3e:4c:a1:86:a2:26:91:
03:1b:9a:42:73:38:07:0d:e4:d1:b3:ff:80:87:d0:
55:1a:e8:9e:ae:d4:f8:b7:7e:b6:4c:ad:70:43:0d:
ef:54:68:b7:53:96:75:ad:ca:ee:42:20:90:85:e0:
c6:d8:bf:da:09:16:64:4e:2f:26:68:d4:fb:5f:03:
33:46:a2:34:ab:ea:95:32:7c:d1:24:3e:5d:c0:93:
4d:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:64:3D:2F:4D:9C:72:A7:F8:1A:F0:EA:6E:DD:D8:94:BF:EE:63:18
X509v3 Authority Key Identifier:
keyid:AF:0F:5A:9B:D2:AD:1E:96:86:5F:00:D0:85:22:B9:AA:D3:E9:1A:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rw9am9KtHpaGXwDQhSK5qtPpGk0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/6ad9b8-9f0e-4ad0-a220-3ac3b6737042/1/rw9am9KtHpaGXwDQhSK5qtPpGk0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/6ad9b8-9f0e-4ad0-a220-3ac3b6737042/1/rw9am9KtHpaGXwDQhSK5qtPpGk0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:1e:f0:36:84:f7:bd:c3:73:01:1a:df:30:b3:74:75:d2:cc:
74:07:a8:ca:75:f9:93:f3:3c:07:0f:ac:d9:44:e5:6e:7b:9c:
80:18:1f:88:b2:a0:a2:64:10:47:63:17:61:a8:cb:98:96:21:
f3:82:96:07:74:34:27:37:7b:01:01:e7:ce:40:10:18:04:08:
58:1b:c4:68:c1:77:46:68:ab:b6:41:70:4a:c7:03:bd:be:d3:
06:cb:dc:0c:96:24:c5:b3:bd:38:5f:40:c1:d9:0e:67:d5:0c:
3a:a9:3e:ab:9d:22:10:e6:a5:3d:b0:42:f7:7a:64:39:93:6b:
89:1d:df:51:08:71:0d:20:32:1a:ca:e5:58:dd:f3:f6:0b:64:
33:2f:20:58:d2:42:eb:26:e6:01:16:e1:75:58:8c:f9:c1:45:
59:19:4c:28:07:5e:3f:a3:d3:ff:8f:2d:7a:fa:8d:27:b4:97:
8a:8e:10:d0:f1:27:e3:62:73:73:86:7d:59:b9:9b:f3:b5:85:
f9:3c:65:39:4d:c4:77:ef:cd:23:dd:a9:1e:36:4b:b2:f3:a5:
7f:8c:0e:1e:c0:59:03:7d:5b:c5:be:2c:0c:0a:30:31:0f:4a:
fc:59:a3:4b:f8:d2:53:87:d3:ee:2d:59:4b:40:bc:71:e8:a0:
32:3a:d2:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 23:43:17 2026 by rpki-client