Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/6ad9b8-9f0e-4ad0-a220-3ac3b6737042/1/rw9am9KtHpaGXwDQhSK5qtPpGk0.mft
File: rw9am9KtHpaGXwDQhSK5qtPpGk0.mft (raw, json)
Hash identifier: yH60aSle+jr2Ed6kjBzTHdFoFu6khYwur2qwJ0uCicM=
Subject key identifier: D2:77:17:AA:6E:01:9F:E7:D7:10:20:EB:59:34:9D:1B:9B:2A:5F:4C
Authority key identifier: AF:0F:5A:9B:D2:AD:1E:96:86:5F:00:D0:85:22:B9:AA:D3:E9:1A:4D
Certificate issuer: /CN=af0f5a9bd2ad1e96865f00d08522b9aad3e91a4d
Certificate serial: 019CAE6BF98647700ADFF326CEE00F78483C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rw9am9KtHpaGXwDQhSK5qtPpGk0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/6ad9b8-9f0e-4ad0-a220-3ac3b6737042/1/rw9am9KtHpaGXwDQhSK5qtPpGk0.mft
Manifest number: 155F
Signing time: Mon 02 Mar 2026 12:00:37 +0000
Manifest this update: Mon 02 Mar 2026 12:00:37 +0000
Manifest next update: Tue 03 Mar 2026 12:00:37 +0000
Files and hashes: 1: CnBLfp0K-MwzN1OvimzKQhhQRz8.roa (hash: etl29j67/XA8KfqoSc4LuDr3rcwYsJQPUU+kY7GMI8s=)
2: Lk4rKldX9sXOjCgYf6TH67Gu2-M.roa (hash: LdwPVlJ5KEW/4BpxrtP9UJQIli3Ut19hqpjKvaQuhlI=)
3: rw9am9KtHpaGXwDQhSK5qtPpGk0.crl (hash: 4AnJkyaukiO0Qd2Od2lUXZwmSvi03qOeqOn4WaVsSAQ=)
4: zf2OWk_RcBoM6jajwmrPp0mhHEM.roa (hash: 7qEv+OmptmvjMEg/3MLv8VXpUtOOdS45r94EszitJCE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/6ad9b8-9f0e-4ad0-a220-3ac3b6737042/1/rw9am9KtHpaGXwDQhSK5qtPpGk0.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/6ad9b8-9f0e-4ad0-a220-3ac3b6737042/1/rw9am9KtHpaGXwDQhSK5qtPpGk0.mft
rsync://rpki.ripe.net/repository/DEFAULT/rw9am9KtHpaGXwDQhSK5qtPpGk0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 12:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:6b:f9:86:47:70:0a:df:f3:26:ce:e0:0f:78:48:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af0f5a9bd2ad1e96865f00d08522b9aad3e91a4d
Validity
Not Before: Mar 2 12:00:37 2026 GMT
Not After : Mar 3 12:00:37 2026 GMT
Subject: CN=d27717aa6e019fe7d71020eb59349d1b9b2a5f4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:e2:d5:67:d0:85:ff:a8:1a:61:4f:b6:d1:70:
7b:8d:9b:7c:84:47:16:2d:40:ba:d4:3b:1f:3b:2f:
8b:04:53:95:9d:bf:3e:e9:75:e4:26:63:f5:c1:69:
f7:47:70:2d:79:e1:8a:8f:1d:11:66:c1:f5:c5:ff:
48:71:a7:c9:01:c0:fa:2f:8e:7e:0d:8e:a1:87:de:
bf:55:21:a4:fb:75:c5:e3:d6:da:5f:40:77:ab:ba:
8e:5e:df:29:2e:14:ad:43:5a:e3:cc:5b:cd:57:e4:
3b:6a:98:19:c1:c2:6c:fe:c8:97:8e:4d:8c:5c:ee:
ae:07:05:a3:42:95:5e:52:0c:fb:88:85:52:c5:09:
f1:be:47:85:de:64:1e:21:8a:ab:00:15:a3:bb:53:
73:fd:91:6d:a5:2d:0c:4c:42:1f:06:86:db:9c:75:
24:27:51:6c:8c:91:72:cc:a8:5d:96:c6:b0:8d:96:
c1:7f:47:3d:cc:0f:e0:74:88:cb:00:2d:c9:59:d0:
19:f8:d2:87:7d:50:49:4f:55:c2:27:d7:f6:9f:d3:
3c:29:19:3e:51:ea:e3:61:b7:e8:dd:88:a7:65:4b:
95:97:45:f1:da:a2:03:14:b2:f2:72:3a:17:54:5e:
c9:42:a1:87:2c:6c:a2:80:76:42:c9:63:2c:58:24:
6c:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:77:17:AA:6E:01:9F:E7:D7:10:20:EB:59:34:9D:1B:9B:2A:5F:4C
X509v3 Authority Key Identifier:
keyid:AF:0F:5A:9B:D2:AD:1E:96:86:5F:00:D0:85:22:B9:AA:D3:E9:1A:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rw9am9KtHpaGXwDQhSK5qtPpGk0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/6ad9b8-9f0e-4ad0-a220-3ac3b6737042/1/rw9am9KtHpaGXwDQhSK5qtPpGk0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/6ad9b8-9f0e-4ad0-a220-3ac3b6737042/1/rw9am9KtHpaGXwDQhSK5qtPpGk0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:95:17:e1:c1:67:d7:74:4c:1d:0a:89:71:2d:c4:0a:83:48:
b2:dc:a2:3c:eb:23:66:76:d5:7c:69:11:8e:c2:bd:63:f7:f7:
23:68:da:77:4b:a5:53:87:62:b4:06:83:47:23:a5:99:29:70:
e2:3c:fb:90:7a:ae:90:ff:37:9a:70:16:37:4d:cf:be:b3:6b:
56:6e:4c:f9:f4:03:40:0a:df:75:d0:21:1a:07:07:8b:5c:24:
24:fd:87:42:e9:a8:cd:ff:d7:ee:4a:17:72:63:a7:55:bd:59:
74:41:62:34:e5:91:e7:30:b0:df:43:18:d9:dc:fa:28:c4:b7:
05:10:0e:14:eb:83:60:f2:12:fd:3e:19:60:f3:86:6e:59:4d:
29:13:e0:c6:94:ea:40:9b:f4:a8:5b:9b:b1:5e:38:c7:ea:44:
36:41:5b:89:ab:b5:50:c7:00:24:77:97:ab:48:bf:c3:d3:b1:
6a:86:ba:08:1d:aa:a3:a0:70:5e:c4:dd:6f:13:fd:a0:9b:63:
61:14:9f:ba:1b:51:9e:ca:06:36:b0:d3:79:47:97:5e:48:db:
fc:db:2f:ce:42:1b:eb:f9:57:6f:23:55:c5:a1:fb:33:44:f9:
30:ab:bf:48:10:75:ee:bd:56:39:29:81:73:62:d1:90:a8:9f:
ac:7e:c3:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 20:15:45 2026 by rpki-client