Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6e/52b199-9e1f-4ec7-b0aa-4a4e0f424f17/1/rwNoFqMX3ZnSU4OjKmgYWcBHtf8.mft
File: rwNoFqMX3ZnSU4OjKmgYWcBHtf8.mft (raw, json)
Hash identifier: 74Xk2P74Jewe9EL171vr/urAdpB1iL8VzZXmpeIphq0=
Subject key identifier: 31:74:2F:D1:02:7F:8E:0B:04:DE:96:00:14:9C:13:04:A2:2E:81:58
Authority key identifier: AF:03:68:16:A3:17:DD:99:D2:53:83:A3:2A:68:18:59:C0:47:B5:FF
Certificate issuer: /CN=af036816a317dd99d25383a32a681859c047b5ff
Certificate serial: 01A18006A02D68CF5842E780C1D1021B792E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rwNoFqMX3ZnSU4OjKmgYWcBHtf8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/52b199-9e1f-4ec7-b0aa-4a4e0f424f17/1/rwNoFqMX3ZnSU4OjKmgYWcBHtf8.mft
Manifest number: 1523
Signing time: Wed 28 Oct 2026 01:01:20 +0000
Manifest this update: Wed 28 Oct 2026 01:01:20 +0000
Manifest next update: Thu 29 Oct 2026 01:01:20 +0000
Files and hashes: 1: eZ9UOq9D7h6PkF-tsoPFMwz1Ago.roa (hash: stzfv2f+p3RFGsG9S6OYQeB7VYNNBEus7AwqJ8t7tGM=)
2: rwNoFqMX3ZnSU4OjKmgYWcBHtf8.crl (hash: vOM9vk8vcXvNkGVEhnCV6eaGD4eCSm5tWz9Yj1zytjw=)
3: z1DkUd2XVt6-3mpdk1d5JBWy8pk.roa (hash: Nd41zSlcpnJ9luejNMRZ4qZmw74tJoui7F4UBsvSDmA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/52b199-9e1f-4ec7-b0aa-4a4e0f424f17/1/rwNoFqMX3ZnSU4OjKmgYWcBHtf8.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/52b199-9e1f-4ec7-b0aa-4a4e0f424f17/1/rwNoFqMX3ZnSU4OjKmgYWcBHtf8.mft
rsync://rpki.ripe.net/repository/DEFAULT/rwNoFqMX3ZnSU4OjKmgYWcBHtf8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 22:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:80:06:a0:2d:68:cf:58:42:e7:80:c1:d1:02:1b:79:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af036816a317dd99d25383a32a681859c047b5ff
Validity
Not Before: Oct 28 01:01:20 2026 GMT
Not After : Oct 29 01:01:20 2026 GMT
Subject: CN=31742fd1027f8e0b04de9600149c1304a22e8158
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:e3:06:ab:62:ac:8b:83:33:9a:e4:0c:e0:9b:
13:bf:20:ce:a7:56:88:9a:49:6e:25:b0:ff:b6:48:
e5:cf:c8:ac:86:fb:84:57:43:ea:83:99:9f:c0:72:
91:63:93:7c:71:e1:2a:73:a5:98:55:b4:73:65:37:
97:ef:8a:80:c8:e3:c1:57:f1:69:a1:46:df:02:03:
99:ea:38:80:be:f9:52:db:2c:89:e0:e5:df:c5:b3:
58:98:4c:23:5f:61:07:77:58:8b:d8:d5:87:c6:32:
5e:92:30:0a:48:6c:58:85:e6:2a:1a:27:6d:7f:93:
a7:ff:52:2c:8e:9b:03:43:cd:c8:21:14:92:d2:f0:
14:33:f5:bb:7d:af:58:8c:72:c8:4a:1b:93:64:47:
24:84:d1:30:e9:0d:99:e4:ed:c9:e7:44:19:f6:29:
a1:0d:9e:59:d3:45:39:72:7c:43:ad:91:4d:6d:1a:
79:62:9c:c3:57:04:4a:68:03:29:8b:4e:c9:ed:50:
c7:75:b4:ca:b2:52:48:ae:7c:1e:03:3b:d1:f8:16:
c7:70:48:04:18:c2:73:4b:d7:7f:a7:15:f2:32:cd:
60:64:2f:54:fb:71:25:60:5c:53:bc:66:ba:c9:5c:
ce:87:56:e2:7c:8a:33:a6:f0:34:3b:ef:76:83:07:
77:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:74:2F:D1:02:7F:8E:0B:04:DE:96:00:14:9C:13:04:A2:2E:81:58
X509v3 Authority Key Identifier:
keyid:AF:03:68:16:A3:17:DD:99:D2:53:83:A3:2A:68:18:59:C0:47:B5:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rwNoFqMX3ZnSU4OjKmgYWcBHtf8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/52b199-9e1f-4ec7-b0aa-4a4e0f424f17/1/rwNoFqMX3ZnSU4OjKmgYWcBHtf8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/52b199-9e1f-4ec7-b0aa-4a4e0f424f17/1/rwNoFqMX3ZnSU4OjKmgYWcBHtf8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:aa:ed:7b:e2:9a:8f:e0:bd:44:ad:20:3d:ad:6e:0b:ba:62:
85:2d:d5:51:1e:7c:96:01:42:ee:33:e5:3e:84:91:97:f4:f9:
9d:b5:2b:ed:0c:78:3b:6e:06:f7:6d:9b:fd:b4:1d:a4:be:bd:
3d:35:7c:9e:93:c0:0c:a3:56:e6:62:b5:61:75:2d:4f:a4:eb:
e4:ac:e9:01:6e:e2:57:c3:0b:e4:a1:3a:09:07:70:e0:07:b0:
de:5a:a2:13:fa:32:bc:55:d1:28:b7:b6:ca:e7:14:60:b2:cf:
52:40:c6:73:2e:44:ef:0a:5c:eb:f9:03:b2:e5:a7:98:e6:8b:
c4:19:7b:89:bc:27:81:4b:7c:e5:cf:1e:c8:7a:98:32:a7:c8:
99:ec:ec:4a:46:e2:3b:fc:60:92:27:05:c6:a1:d8:1b:2f:d6:
76:8a:1a:20:a9:95:0e:a4:ce:77:ac:e7:5b:3b:96:95:64:6d:
0f:4d:33:d2:3a:02:a4:82:b3:5c:81:06:9a:d3:ae:ef:2b:00:
04:e6:31:27:33:66:0d:12:93:8c:01:13:68:f9:69:8e:e2:0d:
21:78:e2:16:44:84:9b:06:0f:f2:d0:45:7c:5a:29:54:0a:7a:
f2:36:a4:19:1b:04:1b:7c:64:2c:4d:a7:e4:2f:42:43:07:5f:
e0:88:00:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 07:19:28 2026 by rpki-client