Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/d81b59-c05a-48fe-b5b1-158927337689/1/RWF9LghjWN2nvbDcRmyhyG7U_so.mft
File: RWF9LghjWN2nvbDcRmyhyG7U_so.mft (raw, json)
Hash identifier: MmtxhwVoCAeN2rb/rvJj/84uLaO/70LxcZxqtjzAHPE=
Subject key identifier: 1D:39:E3:95:FC:E0:15:D7:61:9D:18:32:27:E1:2E:DD:84:17:2A:C0
Authority key identifier: 45:61:7D:2E:08:63:58:DD:A7:BD:B0:DC:46:6C:A1:C8:6E:D4:FE:CA
Certificate issuer: /CN=45617d2e086358dda7bdb0dc466ca1c86ed4feca
Certificate serial: 019CE2FE112C6063231526B9EDB38BC30775
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RWF9LghjWN2nvbDcRmyhyG7U_so.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/d81b59-c05a-48fe-b5b1-158927337689/1/RWF9LghjWN2nvbDcRmyhyG7U_so.mft
Manifest number: 17F7
Signing time: Thu 12 Mar 2026 17:00:27 +0000
Manifest this update: Thu 12 Mar 2026 17:00:27 +0000
Manifest next update: Fri 13 Mar 2026 17:00:27 +0000
Files and hashes: 1: 7WMHMRqYOCVJJOdVZn2toCGJ2Gg.roa (hash: u4kYKOpJoWTw0MlXSHwcNaxRXss2R6FxZn1Z49E09Go=)
2: RWF9LghjWN2nvbDcRmyhyG7U_so.crl (hash: hgP/ULMGe0tJgJjfj1TdBfLCmt3sFnxC0N587xKTiOA=)
3: Y9TiWW63huz2Y3RHyUrV0t01KvA.roa (hash: rNdERlf12PuGe5Ze8mFCZtIt+e3TVhdioA/m3kjwSCA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/d81b59-c05a-48fe-b5b1-158927337689/1/RWF9LghjWN2nvbDcRmyhyG7U_so.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/d81b59-c05a-48fe-b5b1-158927337689/1/RWF9LghjWN2nvbDcRmyhyG7U_so.mft
rsync://rpki.ripe.net/repository/DEFAULT/RWF9LghjWN2nvbDcRmyhyG7U_so.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Mar 2026 15:04:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e2:fe:11:2c:60:63:23:15:26:b9:ed:b3:8b:c3:07:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45617d2e086358dda7bdb0dc466ca1c86ed4feca
Validity
Not Before: Mar 12 17:00:27 2026 GMT
Not After : Mar 13 17:00:27 2026 GMT
Subject: CN=1d39e395fce015d7619d183227e12edd84172ac0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:b1:ed:1b:5f:a5:f8:3e:f8:24:f9:8a:09:9c:
d2:46:ad:df:3f:44:a2:57:7b:57:e9:e0:d0:d6:b7:
5b:e0:e4:41:ec:45:a7:61:17:da:b2:92:ab:44:c6:
22:a3:2b:cc:2d:9a:0c:5a:fa:3c:98:d0:f3:20:89:
04:6a:28:df:fd:60:cf:de:31:b6:ec:a5:91:da:a2:
25:30:d9:b3:3d:92:6f:eb:b6:06:38:2a:42:6c:ed:
1f:02:dd:1d:7d:1c:29:aa:06:c8:ff:66:d9:66:55:
a6:9b:b9:74:df:fc:f5:0d:07:de:ac:8a:8b:81:3d:
dc:29:e5:d2:71:c4:39:97:23:36:08:81:2a:e1:8f:
6b:ea:88:6f:9a:a2:05:17:00:ea:aa:92:39:14:c8:
d7:ae:31:fa:dd:3b:ca:8d:2f:bf:06:70:ba:31:7d:
b1:de:96:44:04:1f:34:7b:c6:29:6f:d5:86:22:f9:
4c:8f:5d:6c:c4:a4:f5:e8:6c:00:db:bd:a6:0b:d9:
72:42:cc:50:99:34:0a:d7:4f:94:64:a8:12:60:11:
57:92:a9:35:24:10:2e:2e:88:9f:6a:64:87:9d:6f:
30:a4:0f:e7:46:9a:68:a2:b4:ea:c7:62:ad:b1:73:
e2:25:76:62:87:47:0f:a0:ec:e8:27:74:e5:9f:97:
ac:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:39:E3:95:FC:E0:15:D7:61:9D:18:32:27:E1:2E:DD:84:17:2A:C0
X509v3 Authority Key Identifier:
keyid:45:61:7D:2E:08:63:58:DD:A7:BD:B0:DC:46:6C:A1:C8:6E:D4:FE:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RWF9LghjWN2nvbDcRmyhyG7U_so.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/d81b59-c05a-48fe-b5b1-158927337689/1/RWF9LghjWN2nvbDcRmyhyG7U_so.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/d81b59-c05a-48fe-b5b1-158927337689/1/RWF9LghjWN2nvbDcRmyhyG7U_so.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:70:e0:25:e9:a3:8d:ee:62:be:7e:3d:82:e3:de:d9:71:79:
e7:15:2b:17:23:cc:88:c6:46:5d:06:32:7f:42:d2:18:77:8f:
46:99:11:ef:83:2b:a7:39:32:ff:dd:ea:fc:6e:e5:d9:31:c0:
66:26:79:cf:87:4e:59:a7:d9:e6:26:e7:3e:70:8c:49:94:21:
f0:7a:d0:10:20:6f:c2:69:9a:a8:27:26:89:06:6a:82:00:c9:
23:3c:3d:48:53:d8:33:23:6b:5b:dd:5d:ce:87:17:b6:cf:7c:
06:48:f0:7d:8d:b2:52:e0:69:32:0a:b9:c8:67:c7:45:76:e4:
56:86:6b:0c:74:ef:c3:d6:9b:84:dc:45:09:ab:99:9d:66:ef:
1f:78:86:8d:e6:08:5d:ea:3a:a4:85:88:4f:64:86:c8:c5:84:
4a:b8:66:7e:e2:0d:2c:cb:d5:c7:49:eb:f8:36:ee:1b:00:f8:
5f:57:7d:6d:ad:96:9f:c3:b1:b1:ca:25:34:ba:c2:f4:7d:1e:
c5:16:f2:54:f4:86:a4:71:ed:21:35:af:ae:a0:5f:6e:c0:86:
ea:9c:27:d7:7e:32:ae:74:9f:69:bd:48:91:2d:46:db:58:81:
b6:07:48:e7:6d:36:01:ba:62:a6:cf:d2:52:a5:28:42:c9:bd:
7e:ab:9b:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 12 22:56:25 2026 by rpki-client