Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/52b199-9e1f-4ec7-b0aa-4a4e0f424f17/1/rwNoFqMX3ZnSU4OjKmgYWcBHtf8.mft
File: rwNoFqMX3ZnSU4OjKmgYWcBHtf8.mft (raw, json)
Hash identifier: b21g90BbHnpKiCogMahnnK/GpJLxQ8SKoWc6V/BxbbA=
Subject key identifier: D3:2D:1B:C1:9A:43:3B:AA:E7:0D:F9:FE:27:EB:AD:AE:ED:0A:EF:46
Authority key identifier: AF:03:68:16:A3:17:DD:99:D2:53:83:A3:2A:68:18:59:C0:47:B5:FF
Certificate issuer: /CN=af036816a317dd99d25383a32a681859c047b5ff
Certificate serial: 019D3909C05CF5CC3810B58444E28AF53A02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rwNoFqMX3ZnSU4OjKmgYWcBHtf8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/52b199-9e1f-4ec7-b0aa-4a4e0f424f17/1/rwNoFqMX3ZnSU4OjKmgYWcBHtf8.mft
Manifest number: 12EC
Signing time: Sun 29 Mar 2026 10:00:33 +0000
Manifest this update: Sun 29 Mar 2026 10:00:33 +0000
Manifest next update: Mon 30 Mar 2026 10:00:33 +0000
Files and hashes: 1: eZ9UOq9D7h6PkF-tsoPFMwz1Ago.roa (hash: stzfv2f+p3RFGsG9S6OYQeB7VYNNBEus7AwqJ8t7tGM=)
2: rwNoFqMX3ZnSU4OjKmgYWcBHtf8.crl (hash: Sj1KfkzCtiBYey2XWPNonigXo8Y9cy+9chdbmejpdgs=)
3: z1DkUd2XVt6-3mpdk1d5JBWy8pk.roa (hash: Nd41zSlcpnJ9luejNMRZ4qZmw74tJoui7F4UBsvSDmA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/52b199-9e1f-4ec7-b0aa-4a4e0f424f17/1/rwNoFqMX3ZnSU4OjKmgYWcBHtf8.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/52b199-9e1f-4ec7-b0aa-4a4e0f424f17/1/rwNoFqMX3ZnSU4OjKmgYWcBHtf8.mft
rsync://rpki.ripe.net/repository/DEFAULT/rwNoFqMX3ZnSU4OjKmgYWcBHtf8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:09:c0:5c:f5:cc:38:10:b5:84:44:e2:8a:f5:3a:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af036816a317dd99d25383a32a681859c047b5ff
Validity
Not Before: Mar 29 10:00:33 2026 GMT
Not After : Mar 30 10:00:33 2026 GMT
Subject: CN=d32d1bc19a433baae70df9fe27ebadaeed0aef46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:2a:6c:7b:1f:20:71:0a:f5:1f:f6:cd:07:f1:
86:a7:42:b0:6a:2f:68:67:db:70:36:bd:ad:8e:c7:
c5:ad:04:6a:65:62:01:cf:e6:d5:d1:fe:f0:8d:3c:
1f:66:3d:9b:72:32:c2:e8:3e:90:35:a4:61:c2:11:
c8:34:53:b1:78:28:67:4f:46:93:ec:ba:44:04:7e:
10:28:bb:e0:e0:34:6a:63:8d:a1:91:aa:3e:0e:7c:
90:54:02:f6:77:0f:e3:98:d8:a3:9b:19:ce:04:1c:
ef:3c:77:92:33:a5:2a:e2:0e:7e:ff:95:3b:fe:d1:
50:cd:01:0e:b3:20:e7:72:83:b7:41:f8:4e:ec:95:
98:04:94:e3:00:9b:6d:81:9b:e4:87:04:5d:80:f5:
ea:0f:58:13:aa:ad:3c:a1:33:18:02:6c:d5:29:50:
57:a3:d7:6a:e5:4b:48:ab:9a:20:f3:6d:8a:70:4d:
01:48:98:45:dd:20:15:54:ff:83:1d:a5:6d:8d:3d:
e6:88:61:bc:36:c9:84:a7:fc:6e:de:b1:1f:03:1c:
11:fe:be:7b:98:c0:0d:25:6d:91:3b:64:b2:8f:d7:
81:00:23:2d:f1:cd:ca:81:35:68:9b:ed:77:98:7c:
30:45:ed:c5:4b:e7:70:f2:36:f6:55:31:6b:12:71:
64:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:2D:1B:C1:9A:43:3B:AA:E7:0D:F9:FE:27:EB:AD:AE:ED:0A:EF:46
X509v3 Authority Key Identifier:
keyid:AF:03:68:16:A3:17:DD:99:D2:53:83:A3:2A:68:18:59:C0:47:B5:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rwNoFqMX3ZnSU4OjKmgYWcBHtf8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/52b199-9e1f-4ec7-b0aa-4a4e0f424f17/1/rwNoFqMX3ZnSU4OjKmgYWcBHtf8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/52b199-9e1f-4ec7-b0aa-4a4e0f424f17/1/rwNoFqMX3ZnSU4OjKmgYWcBHtf8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:5f:5a:d7:73:83:a2:7d:bf:31:9f:01:94:8e:34:6d:d0:2f:
e6:45:dc:1c:6c:da:eb:62:e2:48:33:09:d7:00:fa:8b:54:fb:
98:22:27:d7:d8:e7:32:58:5d:71:15:c4:4c:74:a8:a0:63:68:
73:e7:95:0a:7f:db:b7:7d:1e:46:7a:c8:71:9e:06:02:48:5b:
f2:4d:ca:b7:50:f6:da:b0:31:e6:4f:5e:97:19:e2:3e:c1:02:
8e:67:89:8e:f0:18:3d:6b:01:06:fc:25:bb:79:87:2e:80:01:
0f:64:07:d0:18:9b:8c:0c:3b:c1:ad:ad:4a:12:b2:1b:17:3d:
ed:f2:e4:f8:a5:e9:32:2f:60:52:a9:95:46:6c:4b:b4:86:56:
0e:4a:d1:04:ad:0a:bc:c4:b1:b1:a8:b5:58:24:9e:97:0e:9a:
8d:02:17:7b:18:62:37:cf:3a:e0:5e:fb:a0:3e:d6:7a:bc:75:
32:41:c5:d1:03:6e:b7:ed:cc:81:51:df:43:c2:fb:2e:b5:69:
6c:60:7e:a6:5e:3d:0e:9e:97:7c:26:b1:85:18:7d:e1:b1:9c:
84:7f:be:6b:5d:0f:6b:06:06:a2:0e:77:b0:99:7a:80:75:bb:
b9:88:ab:a7:07:f6:02:bf:87:fc:5c:bd:cd:e3:43:7f:76:b9:
ea:07:be:50
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05CcBc9cw4ELWEROKK9ToCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFmMDM2ODE2YTMxN2RkOTlkMjUzODNhMzJhNjgxODU5YzA0
N2I1ZmYwHhcNMjYwMzI5MTAwMDMzWhcNMjYwMzMwMTAwMDMzWjAzMTEwLwYDVQQD
EyhkMzJkMWJjMTlhNDMzYmFhZTcwZGY5ZmUyN2ViYWRhZWVkMGFlZjQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4Cpsex8gcQr1H/bNB/GGp0Kwai9o
Z9twNr2tjsfFrQRqZWIBz+bV0f7wjTwfZj2bcjLC6D6QNaRhwhHINFOxeChnT0aT
7LpEBH4QKLvg4DRqY42hkao+DnyQVAL2dw/jmNijmxnOBBzvPHeSM6Uq4g5+/5U7
/tFQzQEOsyDncoO3QfhO7JWYBJTjAJttgZvkhwRdgPXqD1gTqq08oTMYAmzVKVBX
o9dq5UtIq5og822KcE0BSJhF3SAVVP+DHaVtjT3miGG8NsmEp/xu3rEfAxwR/r57
mMANJW2RO2Syj9eBACMt8c3KgTVom+13mHwwRe3FS+dw8jb2VTFrEnFkkwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNMtG8GaQzuq5w35/ifrra7tCu9GMB8GA1UdIwQY
MBaAFK8DaBajF92Z0lODoypoGFnAR7X/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcndOb0ZxTVgzWm5TVTRPakttZ1lXY0JIdGY4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS81MmIxOTktOWUxZi00ZWM3LWIwYWEt
NGE0ZTBmNDI0ZjE3LzEvcndOb0ZxTVgzWm5TVTRPakttZ1lXY0JIdGY4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZS81MmIxOTktOWUxZi00ZWM3LWIwYWEtNGE0ZTBmNDI0ZjE3
LzEvcndOb0ZxTVgzWm5TVTRPakttZ1lXY0JIdGY4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlV9a13OD
on2/MZ8BlI40bdAv5kXcHGza62LiSDMJ1wD6i1T7mCIn19jnMlhdcRXETHSooGNo
c+eVCn/bt30eRnrIcZ4GAkhb8k3Kt1D22rAx5k9elxniPsECjmeJjvAYPWsBBvwl
u3mHLoABD2QH0BibjAw7wa2tShKyGxc97fLk+KXpMi9gUqmVRmxLtIZWDkrRBK0K
vMSxsai1WCSelw6ajQIXexhiN8864F77oD7Werx1MkHF0QNut+3MgVHfQ8L7LrVp
bGB+pl49Dp6XfCaxhRh94bGchH++a10PawYGog53sJl6gHW7uYirpwf2Ar+H/Fy9
zeNDf3a56ge+UA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 18:39:11 2026 by rpki-client