Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/d81b59-c05a-48fe-b5b1-158927337689/1/RWF9LghjWN2nvbDcRmyhyG7U_so.mft
File: RWF9LghjWN2nvbDcRmyhyG7U_so.mft (raw, json)
Hash identifier: R2GssSh9qVJu1jOor45wLs9PBhQ/Kd7RVV5cTTuTD70=
Subject key identifier: 0F:82:D3:42:67:8D:85:1F:8E:36:E6:5D:5F:15:D4:7F:4B:99:D6:E5
Authority key identifier: 45:61:7D:2E:08:63:58:DD:A7:BD:B0:DC:46:6C:A1:C8:6E:D4:FE:CA
Certificate issuer: /CN=45617d2e086358dda7bdb0dc466ca1c86ed4feca
Certificate serial: 019DCCAAE6DEF538858729380835CE332C11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RWF9LghjWN2nvbDcRmyhyG7U_so.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/d81b59-c05a-48fe-b5b1-158927337689/1/RWF9LghjWN2nvbDcRmyhyG7U_so.mft
Manifest number: 1870
Signing time: Mon 27 Apr 2026 02:00:45 +0000
Manifest this update: Mon 27 Apr 2026 02:00:45 +0000
Manifest next update: Tue 28 Apr 2026 02:00:45 +0000
Files and hashes: 1: 7WMHMRqYOCVJJOdVZn2toCGJ2Gg.roa (hash: u4kYKOpJoWTw0MlXSHwcNaxRXss2R6FxZn1Z49E09Go=)
2: RWF9LghjWN2nvbDcRmyhyG7U_so.crl (hash: wcVXfEudQXVzspRx4zAMf1DOSvw6dmPY8HCUUAFzOes=)
3: Y9TiWW63huz2Y3RHyUrV0t01KvA.roa (hash: rNdERlf12PuGe5Ze8mFCZtIt+e3TVhdioA/m3kjwSCA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/d81b59-c05a-48fe-b5b1-158927337689/1/RWF9LghjWN2nvbDcRmyhyG7U_so.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/d81b59-c05a-48fe-b5b1-158927337689/1/RWF9LghjWN2nvbDcRmyhyG7U_so.mft
rsync://rpki.ripe.net/repository/DEFAULT/RWF9LghjWN2nvbDcRmyhyG7U_so.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 02:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cc:aa:e6:de:f5:38:85:87:29:38:08:35:ce:33:2c:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45617d2e086358dda7bdb0dc466ca1c86ed4feca
Validity
Not Before: Apr 27 02:00:45 2026 GMT
Not After : Apr 28 02:00:45 2026 GMT
Subject: CN=0f82d342678d851f8e36e65d5f15d47f4b99d6e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:70:50:28:da:8a:29:11:de:11:2f:0f:80:8d:
eb:28:30:d0:ec:70:82:ba:f0:87:f5:f2:6d:8a:d1:
1a:b8:5f:e2:5a:97:3e:1e:72:79:be:1c:df:f2:79:
67:87:c4:3f:c2:bc:01:07:ad:d0:17:bc:ae:f2:23:
c0:ec:62:07:b8:5c:19:61:94:4d:56:73:8a:e1:b1:
e9:79:74:13:45:dc:78:64:21:f4:59:57:40:17:3c:
58:3f:31:5b:53:42:1d:36:f7:a5:03:d1:65:62:5e:
30:26:47:98:1f:c6:84:52:b2:94:66:e0:4e:78:4c:
7c:41:5d:ad:2e:ac:db:9e:74:ea:5f:5a:27:5d:53:
bd:5b:c5:04:ef:45:1e:3e:7c:7d:74:ce:d5:58:56:
12:42:0e:87:4d:de:55:b0:af:5c:0f:99:a4:34:e5:
0d:49:d5:6d:00:83:c4:ee:e3:2a:70:6d:00:bd:c7:
2a:49:d6:75:1c:f8:25:ff:cb:f4:e4:76:da:82:72:
4c:aa:61:ab:0e:5d:0b:11:7f:cd:b1:fb:b4:88:1a:
e9:5d:69:72:20:0a:0d:32:fc:85:29:b8:5a:b4:44:
d7:9d:25:46:e8:ff:b5:bb:6c:0e:7b:7d:ad:fa:e5:
d6:1e:7f:26:06:e0:af:3b:20:eb:7c:8e:22:e9:6f:
e8:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:82:D3:42:67:8D:85:1F:8E:36:E6:5D:5F:15:D4:7F:4B:99:D6:E5
X509v3 Authority Key Identifier:
keyid:45:61:7D:2E:08:63:58:DD:A7:BD:B0:DC:46:6C:A1:C8:6E:D4:FE:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RWF9LghjWN2nvbDcRmyhyG7U_so.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/d81b59-c05a-48fe-b5b1-158927337689/1/RWF9LghjWN2nvbDcRmyhyG7U_so.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/d81b59-c05a-48fe-b5b1-158927337689/1/RWF9LghjWN2nvbDcRmyhyG7U_so.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:03:5d:a7:db:53:c1:00:b8:a7:be:ba:ef:10:f7:f3:61:04:
90:69:3d:72:53:c2:cc:7f:30:8b:92:11:2b:e0:04:b9:55:b1:
83:d2:2b:7a:66:11:3c:2c:fb:9e:b4:85:58:24:fd:f0:a3:fb:
2c:93:72:e7:37:5d:39:28:25:4c:e2:26:bd:64:24:ee:f0:51:
f8:37:f7:40:5b:e7:d9:05:e4:ff:02:ff:22:b6:ec:34:56:33:
06:27:78:8f:38:96:f9:91:75:50:ab:02:e7:26:bd:c6:9c:7c:
1b:92:12:de:9b:35:d6:40:8c:df:57:e6:77:9c:7e:ca:82:e6:
98:f9:98:12:8c:1d:79:d2:11:d2:5d:96:a6:af:f3:f5:47:2f:
28:c0:99:ae:21:fb:76:70:5c:f7:24:34:e0:82:5e:56:a0:7d:
4e:af:aa:24:9c:f5:83:78:4f:69:6a:48:28:dd:3d:88:15:0f:
df:1b:d0:39:ff:ff:c2:04:3a:1c:ad:28:4c:b9:e8:88:96:a3:
33:53:ed:cb:15:19:28:ca:fd:5c:1c:2c:1b:65:3e:5a:e4:37:
f3:a4:8c:51:e6:27:f8:c2:72:91:3c:70:0e:59:d9:68:a1:30:
0e:7f:3e:41:37:93:21:2a:e5:7a:62:a6:92:a3:db:0e:e4:a0:
6e:de:12:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 10:44:39 2026 by rpki-client