Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5b/0da847-1ae9-496c-89fa-9245a9ab978b/1/rwMNO0xYnpSj72Hd1UAajz_3m20.mft
File: rwMNO0xYnpSj72Hd1UAajz_3m20.mft (raw, json)
Hash identifier: YnY9EDMhG8E8fkKjf6Lg+6zDhuYEilrhGM6wT1Un3nY=
Subject key identifier: 77:0C:EC:49:35:5D:EC:1A:37:D0:5F:09:B1:FA:E0:D1:04:E2:35:7C
Authority key identifier: AF:03:0D:3B:4C:58:9E:94:A3:EF:61:DD:D5:40:1A:8F:3F:F7:9B:6D
Certificate issuer: /CN=af030d3b4c589e94a3ef61ddd5401a8f3ff79b6d
Certificate serial: 01A183ACFB34F62314EB62AAC82184490140
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rwMNO0xYnpSj72Hd1UAajz_3m20.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/0da847-1ae9-496c-89fa-9245a9ab978b/1/rwMNO0xYnpSj72Hd1UAajz_3m20.mft
Manifest number: 08FF
Signing time: Wed 28 Oct 2026 18:01:54 +0000
Manifest this update: Wed 28 Oct 2026 18:01:54 +0000
Manifest next update: Thu 29 Oct 2026 18:01:54 +0000
Files and hashes: 1: rwMNO0xYnpSj72Hd1UAajz_3m20.crl (hash: IGddXxjdDkcwGjCUxckhjvIl7suUZXE6mYOwL0Ragqo=)
2: sKXut25F8mstcMlebmCBZ3ash14.roa (hash: WdcSiIGfJAIq+j/hEE113/iMWyToETbAb54DBmpGZ9M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/0da847-1ae9-496c-89fa-9245a9ab978b/1/rwMNO0xYnpSj72Hd1UAajz_3m20.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/0da847-1ae9-496c-89fa-9245a9ab978b/1/rwMNO0xYnpSj72Hd1UAajz_3m20.mft
rsync://rpki.ripe.net/repository/DEFAULT/rwMNO0xYnpSj72Hd1UAajz_3m20.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 14:14:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:83:ac:fb:34:f6:23:14:eb:62:aa:c8:21:84:49:01:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af030d3b4c589e94a3ef61ddd5401a8f3ff79b6d
Validity
Not Before: Oct 28 18:01:54 2026 GMT
Not After : Oct 29 18:01:54 2026 GMT
Subject: CN=770cec49355dec1a37d05f09b1fae0d104e2357c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:0e:f8:4e:06:7e:a8:ac:83:dd:76:a8:56:39:
87:b4:a1:c1:7d:c5:1b:0d:33:cc:98:7f:eb:01:e2:
47:be:53:e9:40:60:35:39:c5:3e:f1:72:45:51:35:
cd:0c:b8:04:2a:25:40:ff:40:06:06:5b:1e:82:81:
91:cc:d5:83:2d:8d:d6:07:9a:92:7b:cb:20:94:87:
4d:cb:6d:4d:91:0c:77:f7:a1:e6:77:5f:60:bf:9a:
2e:0d:bc:e5:37:cc:0c:41:75:0d:98:56:77:f4:94:
7a:ed:2c:18:20:4d:a4:51:c0:18:9b:20:cb:e2:2e:
57:ab:d2:02:a6:ca:44:64:23:33:ac:b1:66:63:3b:
5e:d9:03:99:91:0a:25:6f:2c:a6:b9:c5:d3:10:34:
59:3a:0d:7f:b9:c0:0e:e2:e5:fd:95:f0:67:15:69:
ad:2c:bf:fa:0c:50:0f:6e:eb:27:c2:85:08:22:b8:
c7:16:52:e7:0d:8e:5d:fe:1b:37:08:78:df:fd:5e:
62:72:69:7c:0d:67:26:13:4b:37:78:22:3c:11:4a:
fc:da:52:fe:a9:8d:bd:c8:92:4e:bf:11:b1:f2:5a:
7c:94:7d:73:36:8f:24:06:07:53:de:d0:ca:11:53:
fe:76:d5:82:c2:65:d0:76:40:9c:2b:c7:98:11:32:
11:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:0C:EC:49:35:5D:EC:1A:37:D0:5F:09:B1:FA:E0:D1:04:E2:35:7C
X509v3 Authority Key Identifier:
keyid:AF:03:0D:3B:4C:58:9E:94:A3:EF:61:DD:D5:40:1A:8F:3F:F7:9B:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rwMNO0xYnpSj72Hd1UAajz_3m20.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/0da847-1ae9-496c-89fa-9245a9ab978b/1/rwMNO0xYnpSj72Hd1UAajz_3m20.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/0da847-1ae9-496c-89fa-9245a9ab978b/1/rwMNO0xYnpSj72Hd1UAajz_3m20.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:00:44:e8:f5:bc:4e:7f:7d:f5:56:e4:4a:d1:8a:6f:3b:10:
ef:c1:2f:14:43:9c:6c:62:9c:c3:a2:12:3e:16:dc:fc:3d:f1:
ca:d0:bd:72:1b:50:cc:3d:9b:c9:15:c4:bd:dc:df:c0:59:d5:
66:30:4d:25:eb:f3:35:d5:97:3f:2e:f2:10:f0:5a:35:bc:9e:
39:8c:c5:76:ec:5d:2e:e8:94:cc:4b:6b:9f:31:ab:54:3d:c4:
e4:eb:30:af:ac:f9:a3:d5:5f:08:3d:f4:63:e7:f7:2e:33:c7:
a1:c9:bd:c9:03:46:06:36:6c:c0:3a:47:6e:d0:88:9a:06:21:
e4:e3:9a:d2:7e:3f:37:e9:ed:1a:49:d7:f5:df:44:96:d5:09:
ba:a1:6e:8f:54:1f:ba:f0:f1:1e:7a:58:d5:fa:7b:4e:6d:01:
7d:e1:5b:32:e4:1d:e7:c7:0f:b6:ac:1f:e2:62:01:27:b4:ff:
b0:fd:08:4f:b5:4f:3d:35:b2:5b:31:0c:4b:05:8b:b6:a5:ae:
3b:92:c3:02:cd:b7:60:b3:08:97:c6:db:62:29:1b:e1:e2:d3:
97:33:4a:8f:16:1c:08:fe:6a:24:11:6c:5a:95:ae:50:00:17:
02:26:17:15:85:c9:c3:e2:77:f7:ca:d3:29:14:1c:0e:b2:3c:
a1:50:2b:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 22:50:00 2026 by rpki-client