Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/c90d5d-ca61-4464-899a-d1205e0c0cce/1/r1MW_EqDs9A-KXX4vsJwyw9O-x0.mft
File: r1MW_EqDs9A-KXX4vsJwyw9O-x0.mft (raw, json)
Hash identifier: 1X8ZLY/OGCVwJFvWw64pWrpaHxxIMhzQpneciN0ySEM=
Subject key identifier: 64:17:2D:82:4D:84:60:EE:51:EA:67:DC:FE:99:48:BE:63:EA:EB:2B
Authority key identifier: AF:53:16:FC:4A:83:B3:D0:3E:29:75:F8:BE:C2:70:CB:0F:4E:FB:1D
Certificate issuer: /CN=af5316fc4a83b3d03e2975f8bec270cb0f4efb1d
Certificate serial: 019CB814639AD4E49023FE46607218780DC0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r1MW_EqDs9A-KXX4vsJwyw9O-x0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/c90d5d-ca61-4464-899a-d1205e0c0cce/1/r1MW_EqDs9A-KXX4vsJwyw9O-x0.mft
Manifest number: 095B
Signing time: Wed 04 Mar 2026 09:01:09 +0000
Manifest this update: Wed 04 Mar 2026 09:01:09 +0000
Manifest next update: Thu 05 Mar 2026 09:01:09 +0000
Files and hashes: 1: r1MW_EqDs9A-KXX4vsJwyw9O-x0.crl (hash: eKnrKRTcAXHdSbcwfHLEdV8jH7M8WPexk6DYNRVzeAY=)
2: vOap3lF_tFCZW-DOrcwPq0UBrm0.roa (hash: sDecGEkGDmv0nje/6thzunoswSWfLrwvt0Nww3M0Lpw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/c90d5d-ca61-4464-899a-d1205e0c0cce/1/r1MW_EqDs9A-KXX4vsJwyw9O-x0.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/c90d5d-ca61-4464-899a-d1205e0c0cce/1/r1MW_EqDs9A-KXX4vsJwyw9O-x0.mft
rsync://rpki.ripe.net/repository/DEFAULT/r1MW_EqDs9A-KXX4vsJwyw9O-x0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Mar 2026 09:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:b8:14:63:9a:d4:e4:90:23:fe:46:60:72:18:78:0d:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af5316fc4a83b3d03e2975f8bec270cb0f4efb1d
Validity
Not Before: Mar 4 09:01:09 2026 GMT
Not After : Mar 5 09:01:09 2026 GMT
Subject: CN=64172d824d8460ee51ea67dcfe9948be63eaeb2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:e4:44:3f:27:b5:75:0c:79:9b:a1:e8:81:e8:
ea:31:f5:de:67:4e:e5:b4:54:fb:df:50:1b:e0:35:
e5:5a:38:30:f8:90:29:ca:4c:29:3a:17:06:21:4b:
01:4f:94:c9:5a:73:6f:32:09:c2:86:cc:d4:bb:5f:
a2:92:5c:ab:a8:62:0c:35:d8:72:68:f5:9e:26:05:
1a:0c:c2:1e:72:d9:b1:14:50:5f:a6:22:5d:e9:e2:
e3:f7:56:07:40:bb:38:12:5c:69:89:5c:1d:8f:94:
a5:b6:4c:95:a6:8b:3a:f0:94:e8:44:fe:01:15:22:
8b:69:75:ff:3b:eb:45:cb:c5:2d:b3:27:c5:f9:c7:
af:b4:b8:ec:bd:d0:53:fc:0b:b0:75:fa:fa:40:60:
56:9b:e1:f4:1b:f9:4c:a6:1c:3f:71:c8:33:27:25:
95:1c:57:bb:51:5a:ba:4c:4b:06:d6:91:fb:83:a5:
f5:80:46:7f:06:cb:62:ec:75:5e:4f:ae:ce:da:e6:
89:7c:49:b3:15:4f:c9:ee:39:f3:7c:d2:d0:b9:21:
58:03:ef:ea:4c:36:48:8c:7e:10:a2:23:89:a7:87:
32:56:12:4a:6e:61:af:30:3f:77:d2:cb:ff:5a:31:
cd:41:70:8d:bd:6d:9a:88:7d:71:91:05:3b:a6:88:
32:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:17:2D:82:4D:84:60:EE:51:EA:67:DC:FE:99:48:BE:63:EA:EB:2B
X509v3 Authority Key Identifier:
keyid:AF:53:16:FC:4A:83:B3:D0:3E:29:75:F8:BE:C2:70:CB:0F:4E:FB:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r1MW_EqDs9A-KXX4vsJwyw9O-x0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/c90d5d-ca61-4464-899a-d1205e0c0cce/1/r1MW_EqDs9A-KXX4vsJwyw9O-x0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/c90d5d-ca61-4464-899a-d1205e0c0cce/1/r1MW_EqDs9A-KXX4vsJwyw9O-x0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:78:26:ef:1c:0f:85:be:f5:22:36:ab:93:be:45:d4:d6:4a:
a4:73:31:c0:60:f5:2e:8c:06:ef:9b:f8:a8:96:05:ee:04:70:
66:7e:bd:46:f0:90:e9:5a:d0:32:c9:24:a1:d5:32:95:8a:68:
23:7b:80:de:b2:d0:5e:fe:34:3c:33:f1:6a:13:2f:2d:ad:e5:
ee:6a:72:41:6c:5b:e3:b4:7a:d9:b0:1b:e3:c2:0e:64:aa:f9:
83:c6:7c:88:dd:88:3e:e7:57:10:9c:4a:54:24:2b:c9:8e:4d:
79:7a:9f:9a:5f:d3:18:d5:ca:de:e3:7c:20:0f:1c:ab:7a:cd:
48:a8:0e:18:98:2a:b6:c1:b7:b0:69:49:e1:d4:71:fa:d2:94:
4e:9f:e3:bd:48:71:f7:36:33:86:a5:fb:81:10:70:a9:9b:d5:
67:4c:cb:32:0f:60:7d:10:03:4d:8f:7a:48:34:16:d4:57:e7:
c5:dc:1a:e2:d1:04:b8:d7:fd:b3:05:19:45:dc:aa:3b:32:ed:
5a:7f:4f:b2:45:48:43:b9:00:a9:1b:99:50:16:9c:4f:60:e1:
96:ed:0f:00:6b:d9:7d:69:53:12:8a:4b:06:b4:4d:7b:bd:3e:
02:30:2e:d5:a4:7e:b4:66:c8:78:39:3e:98:e4:ea:ee:37:7a:
90:ff:ac:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 18:48:30 2026 by rpki-client