Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/0da847-1ae9-496c-89fa-9245a9ab978b/1/rwMNO0xYnpSj72Hd1UAajz_3m20.mft
File: rwMNO0xYnpSj72Hd1UAajz_3m20.mft (raw, json)
Hash identifier: sxhQmFpHCB5MkmyQCRklRX4Eg5/Sft7c+46UlaCqt+Q=
Subject key identifier: 9F:28:BA:7F:5A:94:F1:98:CC:33:6D:C4:15:F9:AB:3E:CE:B3:31:08
Authority key identifier: AF:03:0D:3B:4C:58:9E:94:A3:EF:61:DD:D5:40:1A:8F:3F:F7:9B:6D
Certificate issuer: /CN=af030d3b4c589e94a3ef61ddd5401a8f3ff79b6d
Certificate serial: 019FA0E0D40D9F008A17D62EA869AE9D312B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rwMNO0xYnpSj72Hd1UAajz_3m20.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/0da847-1ae9-496c-89fa-9245a9ab978b/1/rwMNO0xYnpSj72Hd1UAajz_3m20.mft
Manifest number: 0805
Signing time: Mon 27 Jul 2026 00:01:56 +0000
Manifest this update: Mon 27 Jul 2026 00:01:56 +0000
Manifest next update: Tue 28 Jul 2026 00:01:56 +0000
Files and hashes: 1: rwMNO0xYnpSj72Hd1UAajz_3m20.crl (hash: uL2Yn9nA619C6cKZWdcrvXBYmbCvOom9CXDPQrLZCek=)
2: sKXut25F8mstcMlebmCBZ3ash14.roa (hash: WdcSiIGfJAIq+j/hEE113/iMWyToETbAb54DBmpGZ9M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/0da847-1ae9-496c-89fa-9245a9ab978b/1/rwMNO0xYnpSj72Hd1UAajz_3m20.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/0da847-1ae9-496c-89fa-9245a9ab978b/1/rwMNO0xYnpSj72Hd1UAajz_3m20.mft
rsync://rpki.ripe.net/repository/DEFAULT/rwMNO0xYnpSj72Hd1UAajz_3m20.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a0:e0:d4:0d:9f:00:8a:17:d6:2e:a8:69:ae:9d:31:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af030d3b4c589e94a3ef61ddd5401a8f3ff79b6d
Validity
Not Before: Jul 27 00:01:56 2026 GMT
Not After : Jul 28 00:01:56 2026 GMT
Subject: CN=9f28ba7f5a94f198cc336dc415f9ab3eceb33108
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:47:12:00:71:ce:1c:91:10:ed:eb:14:38:54:
bf:87:5a:fb:4c:ad:22:1b:44:a9:2a:cf:14:d9:2c:
44:f0:1d:9e:f8:b5:f8:b6:a0:42:05:db:1e:18:b2:
b4:87:b6:c2:a7:46:d2:ff:e9:c7:30:e5:51:11:8b:
d3:13:a8:dc:a5:b6:cb:c7:90:33:40:f0:d3:d0:e8:
2a:e2:09:c5:7b:81:16:17:12:73:6a:62:10:d3:d7:
bb:19:3a:ec:12:43:23:30:cf:aa:fc:ca:c0:85:a8:
c5:81:d1:02:d9:b0:8b:90:eb:dc:25:f3:7a:f2:9b:
0d:46:88:43:9e:6e:15:1e:d6:cf:26:d3:57:43:ea:
57:ee:52:15:9f:61:da:fd:2f:a5:ec:c8:1b:72:4a:
de:6b:92:e0:bd:05:62:4e:33:33:ef:93:81:89:6b:
04:d5:14:4d:af:72:e0:ff:b3:27:8f:9d:3e:29:f1:
1b:10:f6:14:51:7c:2b:3a:78:8c:30:a0:f7:c2:6f:
82:a1:9f:46:e7:59:ca:00:4e:4c:f6:f2:53:c6:75:
82:6d:ea:9d:e7:f9:bb:b7:8f:2d:a5:c3:c6:e3:f6:
78:fb:e5:a7:8c:bd:bf:25:27:ee:e7:99:82:a3:72:
31:44:6a:70:dd:b4:90:ac:d4:4d:7f:d7:50:0d:0a:
99:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:28:BA:7F:5A:94:F1:98:CC:33:6D:C4:15:F9:AB:3E:CE:B3:31:08
X509v3 Authority Key Identifier:
keyid:AF:03:0D:3B:4C:58:9E:94:A3:EF:61:DD:D5:40:1A:8F:3F:F7:9B:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rwMNO0xYnpSj72Hd1UAajz_3m20.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/0da847-1ae9-496c-89fa-9245a9ab978b/1/rwMNO0xYnpSj72Hd1UAajz_3m20.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/0da847-1ae9-496c-89fa-9245a9ab978b/1/rwMNO0xYnpSj72Hd1UAajz_3m20.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:24:a7:e9:67:8e:ab:c7:c5:8d:04:34:b9:67:09:26:96:07:
e5:04:09:cc:d9:53:4e:60:b4:35:7d:73:34:1b:56:27:5c:98:
68:01:62:67:21:53:9d:df:89:8b:75:05:ce:22:24:73:39:e3:
9c:76:ea:2b:be:29:4e:c0:17:82:18:fd:dd:af:cf:7d:06:dc:
b2:a1:18:df:56:9a:bd:59:35:73:1c:4a:6d:da:80:75:43:2c:
32:e9:0b:d1:66:27:90:c9:ac:d7:f2:39:9d:b5:5a:b1:1e:bb:
7c:79:b7:ec:4b:a8:8d:87:dc:dc:05:57:50:ad:d0:0d:b5:78:
e8:e8:d8:63:40:c0:72:e0:2a:dc:32:47:41:f3:7a:ea:c6:23:
01:8e:a7:14:37:37:1e:6e:8a:b2:e3:6c:cd:3d:94:1b:64:cb:
cf:d1:d1:3d:c4:69:c2:f2:a4:ca:97:a1:a0:26:72:01:b8:69:
8c:b4:f9:5f:94:0f:9d:ee:d4:bd:aa:f8:52:5e:0b:42:f5:03:
ee:b5:e1:0a:91:48:a4:7b:6b:f2:be:fb:3f:a0:30:1b:44:41:
e3:30:5c:01:64:32:f3:c4:5d:be:ec:f6:9e:d4:43:1a:df:a7:
e0:d1:5b:a4:35:69:38:c1:e1:a9:ef:cd:a6:36:56:32:c5:2c:
58:b6:1c:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 02:17:01 2026 by rpki-client