Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/6ad9b8-9f0e-4ad0-a220-3ac3b6737042/1/rw9am9KtHpaGXwDQhSK5qtPpGk0.mft
File: rw9am9KtHpaGXwDQhSK5qtPpGk0.mft (raw, json)
Hash identifier: ZmnA22kQ9QifJh4C9jIde1spTQHpjErMM66OVflvAkI=
Subject key identifier: FB:B1:A9:4B:76:47:21:7C:9E:41:34:73:DA:F6:FE:F3:0D:58:E6:E4
Authority key identifier: AF:0F:5A:9B:D2:AD:1E:96:86:5F:00:D0:85:22:B9:AA:D3:E9:1A:4D
Certificate issuer: /CN=af0f5a9bd2ad1e96865f00d08522b9aad3e91a4d
Certificate serial: 019D9BF58F12222C524623DE37910F8E61C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rw9am9KtHpaGXwDQhSK5qtPpGk0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/6ad9b8-9f0e-4ad0-a220-3ac3b6737042/1/rw9am9KtHpaGXwDQhSK5qtPpGk0.mft
Manifest number: 15DA
Signing time: Fri 17 Apr 2026 15:00:54 +0000
Manifest this update: Fri 17 Apr 2026 15:00:54 +0000
Manifest next update: Sat 18 Apr 2026 15:00:54 +0000
Files and hashes: 1: CnBLfp0K-MwzN1OvimzKQhhQRz8.roa (hash: etl29j67/XA8KfqoSc4LuDr3rcwYsJQPUU+kY7GMI8s=)
2: Lk4rKldX9sXOjCgYf6TH67Gu2-M.roa (hash: LdwPVlJ5KEW/4BpxrtP9UJQIli3Ut19hqpjKvaQuhlI=)
3: rw9am9KtHpaGXwDQhSK5qtPpGk0.crl (hash: W4bYDNNpDWTUBT+ll8hG8k4YezVw/+GfDjef+0nKk38=)
4: zf2OWk_RcBoM6jajwmrPp0mhHEM.roa (hash: 7qEv+OmptmvjMEg/3MLv8VXpUtOOdS45r94EszitJCE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/6ad9b8-9f0e-4ad0-a220-3ac3b6737042/1/rw9am9KtHpaGXwDQhSK5qtPpGk0.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/6ad9b8-9f0e-4ad0-a220-3ac3b6737042/1/rw9am9KtHpaGXwDQhSK5qtPpGk0.mft
rsync://rpki.ripe.net/repository/DEFAULT/rw9am9KtHpaGXwDQhSK5qtPpGk0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 14:47:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:f5:8f:12:22:2c:52:46:23:de:37:91:0f:8e:61:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af0f5a9bd2ad1e96865f00d08522b9aad3e91a4d
Validity
Not Before: Apr 17 15:00:54 2026 GMT
Not After : Apr 18 15:00:54 2026 GMT
Subject: CN=fbb1a94b7647217c9e413473daf6fef30d58e6e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:c3:87:6d:ee:18:74:48:ba:51:bd:2d:c4:36:
01:f4:4b:48:e0:76:3c:57:48:5e:4e:8d:d7:54:81:
58:62:fa:d0:89:7a:0f:f0:46:f6:18:01:7f:63:5f:
12:8d:9d:ae:79:65:ae:9f:86:0d:f3:13:ec:fd:f1:
01:08:4b:36:58:df:a2:ac:d7:8c:3d:1e:66:2f:b5:
f6:99:14:f2:f6:b9:a8:66:75:c0:ef:00:d1:0d:f3:
9c:9b:6b:1c:b0:de:2b:0e:6b:c9:df:bb:8a:f8:97:
e6:fe:fb:24:34:d3:ec:62:b4:2e:cd:d9:f8:50:8c:
c0:d1:37:b9:18:3f:4b:0f:1b:95:82:4f:28:1c:c2:
6a:1e:7b:af:13:4b:9c:24:e1:73:c9:da:12:51:ca:
39:0e:f8:33:f8:c8:44:51:22:44:ef:22:dd:45:8e:
ea:16:89:29:82:0b:63:23:37:7b:c0:92:5e:04:4f:
d9:44:9b:61:fa:d9:d6:09:e9:00:3b:e5:65:33:fc:
0f:5f:34:62:9f:6c:40:14:6d:6e:7b:d1:ea:83:8b:
56:43:15:fc:cf:90:d3:ad:cf:2c:4f:aa:7f:78:63:
b3:1e:9a:ab:0e:04:cf:84:b5:fd:49:d0:69:0c:ae:
02:10:39:ab:6e:13:9f:df:55:1e:91:ab:9a:da:f7:
50:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:B1:A9:4B:76:47:21:7C:9E:41:34:73:DA:F6:FE:F3:0D:58:E6:E4
X509v3 Authority Key Identifier:
keyid:AF:0F:5A:9B:D2:AD:1E:96:86:5F:00:D0:85:22:B9:AA:D3:E9:1A:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rw9am9KtHpaGXwDQhSK5qtPpGk0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/6ad9b8-9f0e-4ad0-a220-3ac3b6737042/1/rw9am9KtHpaGXwDQhSK5qtPpGk0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/6ad9b8-9f0e-4ad0-a220-3ac3b6737042/1/rw9am9KtHpaGXwDQhSK5qtPpGk0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:1c:9b:f7:b6:3e:2a:08:7c:75:ee:7a:31:b7:23:c2:47:03:
18:bc:0e:7b:37:90:5f:c5:54:37:f7:36:d9:08:94:a7:85:ef:
bd:a2:b9:70:6c:13:06:33:da:b9:bc:c5:52:96:16:ed:64:71:
3f:cf:73:d4:0c:1d:98:49:3d:38:f3:92:2b:8d:aa:d6:cc:e4:
00:8c:a5:dc:9c:69:ea:61:5d:56:e6:a8:61:1f:28:5a:cf:3f:
8a:4c:d0:b0:23:f5:6f:78:18:bd:45:8b:40:17:6e:eb:38:49:
f2:cf:de:39:b1:0a:bb:1b:04:61:30:39:1b:39:9c:ff:06:32:
b4:d8:48:b4:23:21:04:f8:87:51:7b:32:e6:23:1e:ad:75:30:
e4:e8:d0:19:e9:8f:17:86:c1:30:57:48:35:84:a5:15:a1:82:
c6:45:d6:30:b5:c3:b4:c3:79:37:82:af:ec:5d:8c:88:a6:58:
2f:a9:2e:88:a8:cb:64:6c:c9:58:e9:69:59:59:7c:af:31:35:
ac:87:a3:b2:a0:77:2a:96:ba:0f:3a:54:29:ca:8f:43:97:f6:
f8:3c:9d:f8:ea:8d:7b:88:d0:85:b5:fb:29:7e:4a:e3:2b:8a:
18:ff:d2:0c:4b:45:75:7a:8e:ec:c2:fe:32:3c:42:18:52:e3:
46:8a:74:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:31:00 2026 by rpki-client