Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/04/c90d5d-ca61-4464-899a-d1205e0c0cce/1/r1MW_EqDs9A-KXX4vsJwyw9O-x0.mft
File: r1MW_EqDs9A-KXX4vsJwyw9O-x0.mft (raw, json)
Hash identifier: quSvyezLw/uErTKqPCQnm43qxxpxgTCpf/IgySdMBXY=
Subject key identifier: 15:7A:8D:00:AA:F4:5F:7D:29:DE:4F:10:92:68:84:92:70:C9:FC:11
Authority key identifier: AF:53:16:FC:4A:83:B3:D0:3E:29:75:F8:BE:C2:70:CB:0F:4E:FB:1D
Certificate issuer: /CN=af5316fc4a83b3d03e2975f8bec270cb0f4efb1d
Certificate serial: 01A05AE912E1F553F0D2019D357166752D4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r1MW_EqDs9A-KXX4vsJwyw9O-x0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/c90d5d-ca61-4464-899a-d1205e0c0cce/1/r1MW_EqDs9A-KXX4vsJwyw9O-x0.mft
Manifest number: 0B3D
Signing time: Tue 01 Sep 2026 03:00:19 +0000
Manifest this update: Tue 01 Sep 2026 03:00:19 +0000
Manifest next update: Wed 02 Sep 2026 03:00:19 +0000
Files and hashes: 1: r1MW_EqDs9A-KXX4vsJwyw9O-x0.crl (hash: LR/AM/CK1Wlm1tRQDBOdRduv040kPhHViB5j7ENCaHU=)
2: vOap3lF_tFCZW-DOrcwPq0UBrm0.roa (hash: sDecGEkGDmv0nje/6thzunoswSWfLrwvt0Nww3M0Lpw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/c90d5d-ca61-4464-899a-d1205e0c0cce/1/r1MW_EqDs9A-KXX4vsJwyw9O-x0.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/c90d5d-ca61-4464-899a-d1205e0c0cce/1/r1MW_EqDs9A-KXX4vsJwyw9O-x0.mft
rsync://rpki.ripe.net/repository/DEFAULT/r1MW_EqDs9A-KXX4vsJwyw9O-x0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Sep 2026 21:38:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:5a:e9:12:e1:f5:53:f0:d2:01:9d:35:71:66:75:2d:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af5316fc4a83b3d03e2975f8bec270cb0f4efb1d
Validity
Not Before: Sep 1 03:00:19 2026 GMT
Not After : Sep 2 03:00:19 2026 GMT
Subject: CN=157a8d00aaf45f7d29de4f109268849270c9fc11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:7d:69:4f:a8:f5:89:61:96:78:36:07:24:cd:
3a:64:89:75:fb:54:88:f4:1b:75:03:08:7a:72:63:
7f:9c:c6:82:49:6b:3c:cc:8f:cc:a1:21:ff:9a:8a:
b3:58:79:9a:96:bc:47:7f:a7:4c:2b:88:9d:4b:05:
8c:19:e5:e7:4d:73:9b:b5:9e:83:bf:48:98:66:79:
ba:90:32:6b:8e:f2:a8:96:00:f4:d4:d5:88:3d:a4:
65:49:1c:be:b0:11:70:d0:07:74:04:b8:81:9a:9f:
90:48:e6:5e:de:97:9e:1e:f1:43:ea:ec:cc:3c:5a:
70:1a:c3:a9:f9:37:d5:57:92:f9:a0:8d:9f:e3:8d:
eb:6a:de:92:0d:7f:20:80:51:94:54:54:1f:44:11:
a9:4c:04:00:5b:70:2d:1f:f1:b7:95:7c:ad:e9:c9:
a3:26:a7:f1:d8:ad:ed:a4:42:fa:77:1c:e1:60:6f:
43:17:05:62:e0:dc:e1:04:4a:9a:23:e8:6b:87:10:
e5:0a:2c:9d:5c:56:d2:b0:71:28:fc:89:60:28:fd:
ed:1a:37:4d:2e:6d:85:28:db:70:96:08:f9:92:79:
03:a5:ec:38:44:e3:62:4e:61:da:db:27:6e:2d:9d:
b6:f1:b4:72:b8:b0:8a:09:94:3a:42:2f:a9:cd:5a:
64:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:7A:8D:00:AA:F4:5F:7D:29:DE:4F:10:92:68:84:92:70:C9:FC:11
X509v3 Authority Key Identifier:
keyid:AF:53:16:FC:4A:83:B3:D0:3E:29:75:F8:BE:C2:70:CB:0F:4E:FB:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r1MW_EqDs9A-KXX4vsJwyw9O-x0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/c90d5d-ca61-4464-899a-d1205e0c0cce/1/r1MW_EqDs9A-KXX4vsJwyw9O-x0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/c90d5d-ca61-4464-899a-d1205e0c0cce/1/r1MW_EqDs9A-KXX4vsJwyw9O-x0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:8b:f4:68:10:4d:98:4c:96:f3:c4:0a:4c:d9:38:f1:86:cf:
2c:e4:b4:d5:c1:61:45:fd:e7:c8:f6:fc:51:9a:0a:cf:99:27:
e6:e6:0f:36:6c:b3:fa:4e:64:a3:9c:3b:ef:27:8a:1b:14:88:
0e:79:1d:af:a5:7f:d8:05:e6:8f:89:7e:07:d5:cf:2f:4b:90:
99:02:69:3a:23:ae:d5:b2:05:a0:4b:67:71:09:bd:10:48:ef:
85:66:69:48:7a:9b:9b:11:48:1d:e3:6b:3d:e7:44:68:44:35:
39:05:af:40:e8:32:61:bc:51:91:fb:dd:fc:d3:ac:ae:c7:53:
ad:f2:27:97:56:d7:2a:02:0b:b7:c5:e5:68:84:87:fb:a3:71:
4d:85:7b:0e:c2:0b:52:a4:db:71:78:1e:8a:04:7e:70:24:ef:
14:e2:5d:dc:04:ea:52:42:c1:e8:8b:ae:25:98:92:7c:60:40:
8c:7b:76:5c:6b:0e:b5:49:5c:8f:df:c2:b6:34:25:e6:36:87:
e6:8c:8e:fe:53:46:be:6f:d2:9c:a2:63:c1:72:0b:c4:af:d2:
45:77:3a:00:9e:27:18:2b:09:0b:6b:39:d2:15:70:2e:3c:8b:
eb:3a:3b:0a:4c:22:5f:57:ba:79:e0:3d:72:3e:db:d5:37:ec:
34:13:a0:c5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaBa6RLh9VPw0gGdNXFmdS1LMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFmNTMxNmZjNGE4M2IzZDAzZTI5NzVmOGJlYzI3MGNiMGY0
ZWZiMWQwHhcNMjYwOTAxMDMwMDE5WhcNMjYwOTAyMDMwMDE5WjAzMTEwLwYDVQQD
EygxNTdhOGQwMGFhZjQ1ZjdkMjlkZTRmMTA5MjY4ODQ5MjcwYzlmYzExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu31pT6j1iWGWeDYHJM06ZIl1+1SI
9Bt1Awh6cmN/nMaCSWs8zI/MoSH/moqzWHmalrxHf6dMK4idSwWMGeXnTXObtZ6D
v0iYZnm6kDJrjvKolgD01NWIPaRlSRy+sBFw0Ad0BLiBmp+QSOZe3peeHvFD6uzM
PFpwGsOp+TfVV5L5oI2f443rat6SDX8ggFGUVFQfRBGpTAQAW3AtH/G3lXyt6cmj
Jqfx2K3tpEL6dxzhYG9DFwVi4NzhBEqaI+hrhxDlCiydXFbSsHEo/IlgKP3tGjdN
Lm2FKNtwlgj5knkDpew4RONiTmHa2yduLZ228bRyuLCKCZQ6Qi+pzVpktwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBV6jQCq9F99Kd5PEJJohJJwyfwRMB8GA1UdIwQY
MBaAFK9TFvxKg7PQPil1+L7CcMsPTvsdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcjFNV19FcURzOUEtS1hYNHZzSnd5dzlPLXgwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC9jOTBkNWQtY2E2MS00NDY0LTg5OWEt
ZDEyMDVlMGMwY2NlLzEvcjFNV19FcURzOUEtS1hYNHZzSnd5dzlPLXgwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNC9jOTBkNWQtY2E2MS00NDY0LTg5OWEtZDEyMDVlMGMwY2Nl
LzEvcjFNV19FcURzOUEtS1hYNHZzSnd5dzlPLXgwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO4v0aBBN
mEyW88QKTNk48YbPLOS01cFhRf3nyPb8UZoKz5kn5uYPNmyz+k5ko5w77yeKGxSI
Dnkdr6V/2AXmj4l+B9XPL0uQmQJpOiOu1bIFoEtncQm9EEjvhWZpSHqbmxFIHeNr
PedEaEQ1OQWvQOgyYbxRkfvd/NOsrsdTrfInl1bXKgILt8XlaISH+6NxTYV7DsIL
UqTbcXgeigR+cCTvFOJd3ATqUkLB6IuuJZiSfGBAjHt2XGsOtUlcj9/CtjQl5jaH
5oyO/lNGvm/SnKJjwXILxK/SRXc6AJ4nGCsJC2s50hVwLjyL6zo7CkwiX1e6eeA9
cj7b1TfsNBOgxQ==
-----END CERTIFICATE-----
Generated at Tue Sep 1 05:32:01 2026 by rpki-client