Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/b79f52-2df3-4ac1-98a6-26892b7695c8/1/rwLeINRbd4--lHUaMwHJ3-wsCfE.mft
File: rwLeINRbd4--lHUaMwHJ3-wsCfE.mft (raw, json)
Hash identifier: CxdlHFV6gurhmvfCDyjz40Ce2W72GmhHNnJCjdFlEr8=
Subject key identifier: 99:EF:A9:FC:44:B0:F4:08:F6:E0:43:C4:B9:06:26:3C:80:A3:DF:6E
Authority key identifier: AF:02:DE:20:D4:5B:77:8F:BE:94:75:1A:33:01:C9:DF:EC:2C:09:F1
Certificate issuer: /CN=af02de20d45b778fbe94751a3301c9dfec2c09f1
Certificate serial: 019FA0A8CAC5EDAD0107FD3F955468FE8C44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rwLeINRbd4--lHUaMwHJ3-wsCfE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/b79f52-2df3-4ac1-98a6-26892b7695c8/1/rwLeINRbd4--lHUaMwHJ3-wsCfE.mft
Manifest number: 33
Signing time: Sun 26 Jul 2026 23:00:44 +0000
Manifest this update: Sun 26 Jul 2026 23:00:44 +0000
Manifest next update: Mon 27 Jul 2026 23:00:44 +0000
Files and hashes: 1: b8FUJ6vTuYb37tPPpkHWlKnxQaM.roa (hash: JxSaavJzGorBiYOMbo+wwCZSr84d63NSpqcOvfQfhnc=)
2: rwLeINRbd4--lHUaMwHJ3-wsCfE.crl (hash: GCgpCpkt++hs+Hp/mXC0ejsPkUjCYIAvq+296tSsH8s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/b79f52-2df3-4ac1-98a6-26892b7695c8/1/rwLeINRbd4--lHUaMwHJ3-wsCfE.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/b79f52-2df3-4ac1-98a6-26892b7695c8/1/rwLeINRbd4--lHUaMwHJ3-wsCfE.mft
rsync://rpki.ripe.net/repository/DEFAULT/rwLeINRbd4--lHUaMwHJ3-wsCfE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a0:a8:ca:c5:ed:ad:01:07:fd:3f:95:54:68:fe:8c:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af02de20d45b778fbe94751a3301c9dfec2c09f1
Validity
Not Before: Jul 26 23:00:44 2026 GMT
Not After : Jul 27 23:00:44 2026 GMT
Subject: CN=99efa9fc44b0f408f6e043c4b906263c80a3df6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:eb:6e:7d:81:41:a7:76:ef:22:d1:7f:88:4d:
2b:ae:a4:86:b7:54:4e:ae:b1:da:4b:20:47:21:6d:
e8:a4:0d:80:46:4e:ec:e4:23:9f:0f:4a:ea:98:8b:
75:87:cf:27:41:d9:08:86:5d:a8:68:6a:f7:46:21:
7a:54:66:2c:1e:8b:4d:26:95:02:c7:50:e5:c4:c3:
b8:b4:6a:26:e1:69:73:b5:e7:28:67:51:eb:a0:4b:
94:59:47:b7:40:ef:2a:d1:01:71:20:dc:a0:29:cc:
27:9f:a9:0b:57:58:b1:8e:57:fb:32:d0:d3:3c:8b:
2c:26:93:2b:38:34:a0:52:5e:84:d4:97:84:2f:44:
67:a8:e0:13:47:5d:1e:f1:b6:fd:a8:9b:ca:2c:cf:
f2:1b:41:89:31:e6:de:eb:da:05:92:4a:5b:60:a1:
75:a1:a8:6e:40:ee:8b:0e:ff:d8:93:2d:75:9e:29:
44:73:0a:cd:b2:6d:63:83:6f:33:1e:55:02:27:53:
32:21:aa:09:4a:eb:ee:b5:e6:c7:e4:1a:92:95:1e:
e0:45:ba:ab:8f:09:83:4e:f0:65:25:ca:21:3f:b9:
03:08:1a:ec:15:f8:4b:57:d2:65:49:3d:63:8d:4b:
41:f4:56:36:28:bf:59:53:7a:9a:69:4d:85:31:4e:
15:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:EF:A9:FC:44:B0:F4:08:F6:E0:43:C4:B9:06:26:3C:80:A3:DF:6E
X509v3 Authority Key Identifier:
keyid:AF:02:DE:20:D4:5B:77:8F:BE:94:75:1A:33:01:C9:DF:EC:2C:09:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rwLeINRbd4--lHUaMwHJ3-wsCfE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b79f52-2df3-4ac1-98a6-26892b7695c8/1/rwLeINRbd4--lHUaMwHJ3-wsCfE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b79f52-2df3-4ac1-98a6-26892b7695c8/1/rwLeINRbd4--lHUaMwHJ3-wsCfE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:2d:93:8d:c5:5f:7d:ab:6f:81:5a:1f:90:c4:a7:ce:81:4b:
1f:6b:cf:63:41:de:6e:fb:ae:4c:af:8a:4f:6f:96:b3:55:27:
5c:00:58:72:ef:83:a8:f3:4e:b5:28:7f:56:b4:f8:28:2f:73:
fc:41:9c:ff:d0:41:8c:52:78:76:72:fe:85:a5:08:a2:32:e6:
4f:d7:9f:dc:fe:4d:b7:3c:f1:40:0f:9f:d2:65:b7:1a:a3:25:
7c:0e:8d:93:6b:01:d8:7b:9e:86:8e:8d:49:47:3a:a8:fd:4f:
cc:11:5f:46:fc:f6:8d:57:5b:0b:01:f9:e9:5d:76:eb:45:f3:
ce:1a:49:37:8e:f3:1f:79:f7:51:de:33:77:31:60:40:18:00:
1a:af:04:2c:6e:4f:24:0d:df:b2:1a:0e:06:63:19:41:da:3f:
31:6c:d0:1a:73:eb:70:42:64:73:ad:aa:dc:c0:ea:5d:6b:f6:
15:19:6a:84:2a:8f:df:52:ee:19:75:62:a6:8a:35:2d:d3:28:
b7:36:9f:cf:5f:01:ab:6e:0e:8f:ce:2e:f4:52:f4:d8:0a:c7:
ad:7a:fc:b5:0c:b0:28:2b:5b:a8:c2:47:59:b7:50:be:35:ee:
2f:05:e3:82:75:44:27:a4:2c:47:88:d2:72:37:ba:f2:68:b6:
22:ea:d7:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 08:22:12 2026 by rpki-client