Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/36715a-32fc-4e9f-a577-5ac74dba17b8/1/RW7LO-EGXh5xWJUIvsbXS1p7Htc.mft
File: RW7LO-EGXh5xWJUIvsbXS1p7Htc.mft (raw, json)
Hash identifier: 5YZz6D5GWLbYjF0uBN1IgmUmmg5Ho5m0QAig37mOlqI=
Subject key identifier: A1:A2:D5:A0:FF:31:1C:6B:55:17:BD:2B:E5:56:F0:5D:45:43:CA:A3
Authority key identifier: 45:6E:CB:3B:E1:06:5E:1E:71:58:95:08:BE:C6:D7:4B:5A:7B:1E:D7
Certificate issuer: /CN=456ecb3be1065e1e71589508bec6d74b5a7b1ed7
Certificate serial: 019DB3C73093B7423AB0B6E41886D38E7EF4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RW7LO-EGXh5xWJUIvsbXS1p7Htc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/36715a-32fc-4e9f-a577-5ac74dba17b8/1/RW7LO-EGXh5xWJUIvsbXS1p7Htc.mft
Manifest number: 18D4
Signing time: Wed 22 Apr 2026 06:01:08 +0000
Manifest this update: Wed 22 Apr 2026 06:01:08 +0000
Manifest next update: Thu 23 Apr 2026 06:01:08 +0000
Files and hashes: 1: 1YcgvSymvxOWwOClUpJsxRVgsgw.roa (hash: sV7ICeqsuRRmvPB4Ud9P6m1LHMPN2hapMGG1EN+z2ws=)
2: RW7LO-EGXh5xWJUIvsbXS1p7Htc.crl (hash: BSQg1zvMISOWV3NmSVGDOn9FK7umibzHLVs7toPjhKI=)
3: cWNFEgb5xBu8gcFLrQKsIN_qlUo.roa (hash: 64u+n0vfU41PR2W4WUgYuL5mbl/6P/UD0NVgWR/oiEY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/36715a-32fc-4e9f-a577-5ac74dba17b8/1/RW7LO-EGXh5xWJUIvsbXS1p7Htc.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/36715a-32fc-4e9f-a577-5ac74dba17b8/1/RW7LO-EGXh5xWJUIvsbXS1p7Htc.mft
rsync://rpki.ripe.net/repository/DEFAULT/RW7LO-EGXh5xWJUIvsbXS1p7Htc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 Apr 2026 06:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:b3:c7:30:93:b7:42:3a:b0:b6:e4:18:86:d3:8e:7e:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=456ecb3be1065e1e71589508bec6d74b5a7b1ed7
Validity
Not Before: Apr 22 06:01:08 2026 GMT
Not After : Apr 23 06:01:08 2026 GMT
Subject: CN=a1a2d5a0ff311c6b5517bd2be556f05d4543caa3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:7e:cd:36:3d:52:6f:07:54:b0:95:03:c5:37:
0f:c3:0e:50:16:c2:f6:de:93:82:99:db:53:5a:d3:
cd:c9:fa:5d:ad:11:34:74:00:93:f3:0e:df:e0:26:
4c:75:bc:42:d9:ed:c1:b0:16:19:da:b4:b8:d5:6a:
dc:e7:0e:63:03:84:86:17:ac:8c:62:fe:ed:2b:42:
cc:2e:ca:33:08:34:f5:3e:5b:99:e4:00:c1:65:c8:
c6:32:3e:f1:9d:6d:a2:50:18:60:18:ab:92:11:49:
b4:1b:8c:ef:93:f7:99:7d:68:49:d6:3b:f9:a2:0c:
d3:0d:dc:f1:1a:84:b2:5c:b7:9a:96:60:14:7b:a5:
96:e5:8e:80:a5:85:5c:60:0f:ab:f3:df:86:9d:c3:
37:17:98:ea:79:18:11:fe:aa:a3:ab:fb:dc:84:75:
43:18:60:b9:06:18:29:af:5b:b5:e4:b8:49:db:97:
70:70:08:e2:67:9d:66:a9:5a:c0:7f:0b:70:35:46:
dd:13:d0:50:67:cd:42:87:a1:4b:9f:44:cd:be:e9:
d8:3a:f7:34:3a:e1:54:b6:44:9d:1d:75:8e:4e:2b:
41:75:11:a6:cf:ec:66:f4:61:b7:9a:5d:51:cc:8c:
2f:1c:6b:99:ab:f8:c7:cb:05:ef:7d:ab:46:fd:ef:
af:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:A2:D5:A0:FF:31:1C:6B:55:17:BD:2B:E5:56:F0:5D:45:43:CA:A3
X509v3 Authority Key Identifier:
keyid:45:6E:CB:3B:E1:06:5E:1E:71:58:95:08:BE:C6:D7:4B:5A:7B:1E:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RW7LO-EGXh5xWJUIvsbXS1p7Htc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/36715a-32fc-4e9f-a577-5ac74dba17b8/1/RW7LO-EGXh5xWJUIvsbXS1p7Htc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/36715a-32fc-4e9f-a577-5ac74dba17b8/1/RW7LO-EGXh5xWJUIvsbXS1p7Htc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:e9:3e:8f:6d:36:eb:27:22:bb:7d:c5:6c:08:93:f5:69:77:
73:f8:42:be:69:47:1b:4b:7b:f5:39:5f:09:8b:eb:71:11:57:
f1:aa:4b:20:c3:ba:5c:08:ba:da:74:cd:a2:c6:bf:54:99:10:
1f:5e:f6:7f:5b:6d:e6:e5:62:11:d8:6c:8b:d9:9b:ae:45:f2:
9c:98:de:ab:3a:ac:66:33:9f:31:66:f2:dc:2f:66:c4:42:40:
62:be:46:2a:95:98:cd:4b:4b:3c:0c:6e:6a:a9:17:9e:01:40:
3a:aa:ca:28:8f:18:59:ee:3a:08:88:7e:2c:52:e6:b4:8a:cf:
9a:05:b9:2a:46:f9:f5:83:ac:6d:72:f6:91:a8:a6:f8:ba:db:
c8:6d:3b:a9:9d:34:5c:53:89:90:94:ce:38:12:12:65:86:20:
14:34:4d:1b:67:31:a6:1a:56:d0:60:55:db:78:07:7b:7c:bd:
97:58:dc:00:fc:45:b7:3c:ee:59:8a:29:56:09:84:7c:1e:3d:
2e:7c:90:27:83:35:98:91:60:99:94:a1:3f:62:13:86:92:6b:
ec:90:18:04:90:49:ba:ef:62:d7:7d:02:71:7b:b0:75:c4:a7:
be:75:c8:52:35:cb:0b:1a:39:a0:41:fa:b3:45:44:0a:88:8f:
06:20:ff:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 22 10:23:52 2026 by rpki-client