Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/c3174a-a794-44ee-8d26-bc5b69144587/1/rw3BKw8bUz2NBOxhF9a55RL8qp8.mft
File: rw3BKw8bUz2NBOxhF9a55RL8qp8.mft (raw, json)
Hash identifier: OtQ06dFNUv1Fuudi5ehP4nsxfnzTprPAx3Q8YR9eKDk=
Subject key identifier: 84:E9:8D:FF:AA:EC:4D:58:F6:A0:40:73:54:8E:F7:7B:D4:3E:10:1E
Authority key identifier: AF:0D:C1:2B:0F:1B:53:3D:8D:04:EC:61:17:D6:B9:E5:12:FC:AA:9F
Certificate issuer: /CN=af0dc12b0f1b533d8d04ec6117d6b9e512fcaa9f
Certificate serial: 019DCF074684975A8B2A62B7EBA7C78B0503
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rw3BKw8bUz2NBOxhF9a55RL8qp8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/c3174a-a794-44ee-8d26-bc5b69144587/1/rw3BKw8bUz2NBOxhF9a55RL8qp8.mft
Manifest number: 1689
Signing time: Mon 27 Apr 2026 13:00:53 +0000
Manifest this update: Mon 27 Apr 2026 13:00:53 +0000
Manifest next update: Tue 28 Apr 2026 13:00:53 +0000
Files and hashes: 1: JHlwQGDbvrC4juRVad57B3oI92U.roa (hash: oSK/eP8u/19D2+8PlzxQLpygFc07vdIXajuQXABfEZE=)
2: fomrS4dX5UyQctRbUOlEOReM51s.roa (hash: OwhdfcJ0K62trAYFFVz/ZuzwZmZiy8nl9/D+tMVNouE=)
3: rw3BKw8bUz2NBOxhF9a55RL8qp8.crl (hash: LvHIsuve0jbVqxjxGimQ3vEJsYPPtZ3dsUKbQuUkqKA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/c3174a-a794-44ee-8d26-bc5b69144587/1/rw3BKw8bUz2NBOxhF9a55RL8qp8.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/c3174a-a794-44ee-8d26-bc5b69144587/1/rw3BKw8bUz2NBOxhF9a55RL8qp8.mft
rsync://rpki.ripe.net/repository/DEFAULT/rw3BKw8bUz2NBOxhF9a55RL8qp8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 13:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cf:07:46:84:97:5a:8b:2a:62:b7:eb:a7:c7:8b:05:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af0dc12b0f1b533d8d04ec6117d6b9e512fcaa9f
Validity
Not Before: Apr 27 13:00:53 2026 GMT
Not After : Apr 28 13:00:53 2026 GMT
Subject: CN=84e98dffaaec4d58f6a04073548ef77bd43e101e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:38:ec:01:4a:ad:01:f5:dd:e9:f8:56:0d:ba:
bc:11:24:67:ac:a6:48:7f:9c:f7:08:c7:4b:8a:b1:
82:bf:71:7f:e0:e4:fd:35:42:a3:a8:57:0b:cd:c9:
d3:1f:81:51:4e:05:41:99:53:33:2a:12:34:f9:27:
86:52:1e:23:81:47:8a:8c:a0:2a:08:4e:1f:c8:e9:
46:b9:a2:15:53:a9:c9:70:c5:42:ff:8f:9d:0a:a4:
bd:12:0d:0e:70:20:20:a3:4b:dd:4b:12:3c:f2:6d:
42:29:d2:95:75:e0:ac:0f:a0:1e:db:3a:18:36:f4:
76:ef:3f:12:c0:7a:1d:d8:b4:85:04:e6:ea:c3:63:
db:a4:43:0a:a1:50:7e:0c:49:2e:e4:3d:18:0d:d5:
a4:f0:f8:dd:ed:db:48:cc:42:dd:f2:90:9f:0b:c2:
8d:f0:7b:5e:4f:36:ea:42:46:1a:6d:0f:a7:78:1b:
b8:cb:cd:cd:65:90:0c:79:13:57:b4:92:c1:07:00:
7f:aa:65:72:a1:ac:cb:51:d4:66:45:fc:2d:d0:5f:
4a:45:ac:ca:86:e1:94:c7:24:27:3a:9c:15:10:8e:
1e:65:73:8b:17:13:af:eb:a4:ca:3d:92:c9:84:59:
89:24:a3:09:9f:e3:13:fb:f2:54:2c:57:d4:80:94:
15:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:E9:8D:FF:AA:EC:4D:58:F6:A0:40:73:54:8E:F7:7B:D4:3E:10:1E
X509v3 Authority Key Identifier:
keyid:AF:0D:C1:2B:0F:1B:53:3D:8D:04:EC:61:17:D6:B9:E5:12:FC:AA:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rw3BKw8bUz2NBOxhF9a55RL8qp8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/c3174a-a794-44ee-8d26-bc5b69144587/1/rw3BKw8bUz2NBOxhF9a55RL8qp8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/c3174a-a794-44ee-8d26-bc5b69144587/1/rw3BKw8bUz2NBOxhF9a55RL8qp8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:ef:80:c6:21:ca:48:db:4d:13:36:83:f2:81:40:4d:f7:17:
ed:fd:e8:cf:8a:c6:70:0b:51:62:89:28:78:40:43:e1:cd:47:
32:0a:69:6f:55:a6:ec:67:22:0b:7b:0f:31:56:ed:da:b1:b9:
c2:7c:59:fb:37:07:71:ce:3f:df:e3:f9:66:24:f8:e6:33:ac:
59:62:ac:97:59:05:d3:eb:48:14:b0:09:a4:4b:1e:5b:54:55:
f4:46:93:54:4d:21:3a:7a:83:40:10:b3:da:6f:f9:90:e4:a5:
0f:41:47:a8:96:f4:59:c4:21:cd:ef:d7:92:6a:47:94:72:20:
01:9a:c0:98:b6:f7:63:ba:81:1f:c6:a6:d6:68:28:81:ee:09:
67:2e:02:8d:57:1a:fd:d0:7e:98:73:21:49:c2:18:0b:87:1e:
16:ed:54:ef:12:50:4d:d9:16:3c:af:9f:02:c2:a6:25:e3:f1:
11:5c:4f:b8:11:ad:a6:3f:76:c2:7e:a1:2b:a0:56:19:49:bd:
6c:16:26:bc:45:af:0f:30:49:42:cc:ee:78:90:76:12:b5:38:
a6:1e:1f:08:ac:db:e9:bb:da:77:0d:f6:17:5f:d3:10:d8:dd:
ae:25:de:06:7e:16:17:77:2e:0e:3b:94:17:12:24:bd:1e:16:
8f:3a:66:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 23:45:59 2026 by rpki-client