Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/7560e4-fc7d-4a64-b500-e7f05f029a48/1/rwXUKRyugYXGw0LiXe6bfpIPdt0.mft
File: rwXUKRyugYXGw0LiXe6bfpIPdt0.mft (raw, json)
Hash identifier: pr7J0Symm316tPjxndJ1P4aMNHb3HT46vaXslQwO2qs=
Subject key identifier: D0:27:29:28:08:BD:FD:D4:30:81:C0:47:D4:6C:F2:C8:57:C9:DE:F5
Authority key identifier: AF:05:D4:29:1C:AE:81:85:C6:C3:42:E2:5D:EE:9B:7E:92:0F:76:DD
Certificate issuer: /CN=af05d4291cae8185c6c342e25dee9b7e920f76dd
Certificate serial: 019F83439C24B6DF3EF4AB2FD094FDFAF53C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rwXUKRyugYXGw0LiXe6bfpIPdt0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/7560e4-fc7d-4a64-b500-e7f05f029a48/1/rwXUKRyugYXGw0LiXe6bfpIPdt0.mft
Manifest number: 0888
Signing time: Tue 21 Jul 2026 06:01:13 +0000
Manifest this update: Tue 21 Jul 2026 06:01:13 +0000
Manifest next update: Wed 22 Jul 2026 06:01:13 +0000
Files and hashes: 1: G4m4mx_ghT8RFwe2ShhdbyqAMUg.roa (hash: C8aW4E3EPA9z9dvszZWIC2qBgUsFs1qOe+mMPk/k+i4=)
2: PfsR9OcnQ4S_HWSHexwSv7eZV3U.roa (hash: L9T3aJ5Whx4/WHc/mYYWTiVL3q32wwganw2KXtvSvcc=)
3: rwXUKRyugYXGw0LiXe6bfpIPdt0.crl (hash: mFMtMdq1JD9SzPPuRcpeAH94XYEq+s+tNJ5zEWQ3pvM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/7560e4-fc7d-4a64-b500-e7f05f029a48/1/rwXUKRyugYXGw0LiXe6bfpIPdt0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/7560e4-fc7d-4a64-b500-e7f05f029a48/1/rwXUKRyugYXGw0LiXe6bfpIPdt0.mft
rsync://rpki.ripe.net/repository/DEFAULT/rwXUKRyugYXGw0LiXe6bfpIPdt0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 06:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:83:43:9c:24:b6:df:3e:f4:ab:2f:d0:94:fd:fa:f5:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af05d4291cae8185c6c342e25dee9b7e920f76dd
Validity
Not Before: Jul 21 06:01:13 2026 GMT
Not After : Jul 22 06:01:13 2026 GMT
Subject: CN=d027292808bdfdd43081c047d46cf2c857c9def5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:3d:6b:93:64:1f:f4:3b:e4:ad:bd:9e:96:80:
d9:84:fe:62:07:2b:48:66:20:a1:ba:33:9f:1d:2c:
0a:34:d8:b8:4a:10:8e:48:1a:3b:f8:42:0b:7e:18:
1d:13:b1:5f:2f:e9:6d:ee:19:ca:fc:de:e9:55:2f:
c3:74:fc:f7:98:2d:9f:6e:15:02:f0:6a:fe:4a:22:
52:67:e7:8d:75:d8:ad:94:bd:b4:64:35:a7:4d:1f:
50:89:75:15:af:4b:a4:75:5f:0a:4c:00:cf:be:5a:
d3:23:ba:a8:25:9e:7e:32:73:93:8d:5b:99:60:c1:
bc:1a:51:05:a6:ed:9a:f2:d1:45:eb:7d:cf:e5:0d:
3c:06:75:d4:d1:7e:d4:ed:a0:ef:3e:1a:1b:16:1c:
b8:df:7d:68:37:99:73:e9:61:c7:3c:44:6d:1d:a8:
90:42:cc:9c:aa:ea:a9:21:2c:ff:89:6f:8b:12:00:
de:47:08:dd:ef:46:ce:40:c7:94:28:68:fd:92:a6:
3d:4c:d9:fa:06:1e:5e:8d:51:76:e0:ea:d5:3c:11:
5f:9e:b2:1b:49:1e:df:3b:dc:15:d7:b8:db:f3:2e:
9e:6e:59:96:3a:23:23:2c:6a:ee:4a:49:fd:81:d5:
ee:7f:6e:1f:b5:e4:87:d3:38:6a:6d:74:3b:b2:60:
24:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:27:29:28:08:BD:FD:D4:30:81:C0:47:D4:6C:F2:C8:57:C9:DE:F5
X509v3 Authority Key Identifier:
keyid:AF:05:D4:29:1C:AE:81:85:C6:C3:42:E2:5D:EE:9B:7E:92:0F:76:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rwXUKRyugYXGw0LiXe6bfpIPdt0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/7560e4-fc7d-4a64-b500-e7f05f029a48/1/rwXUKRyugYXGw0LiXe6bfpIPdt0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/7560e4-fc7d-4a64-b500-e7f05f029a48/1/rwXUKRyugYXGw0LiXe6bfpIPdt0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:05:d5:0e:a1:ba:6e:e4:76:96:ed:ab:03:54:56:6a:57:cf:
55:09:5e:21:73:af:0e:a9:fa:50:f2:36:a7:9c:57:1b:82:39:
73:ba:f1:4d:ea:ea:17:bb:07:16:07:ac:34:73:f2:58:4b:29:
20:93:91:5a:d6:4f:e9:4e:55:e1:18:70:43:7b:4e:13:a8:d9:
0d:ec:c9:ca:95:f8:32:0b:35:e6:51:a0:a5:ba:d7:5f:0a:55:
c1:5d:69:de:5f:7e:b8:e5:e9:73:19:16:26:38:2c:db:cb:c3:
fe:18:84:e8:cc:f6:6d:2c:24:fe:47:de:ea:d5:2d:bb:8d:d2:
27:e4:b6:fc:f5:ea:3c:e3:0b:cc:2a:f9:c7:7a:56:ac:c4:09:
04:81:55:08:53:e0:38:09:ed:fe:0d:1d:72:34:78:aa:b2:09:
c1:ad:9a:70:16:b3:86:d3:30:65:79:ce:48:1b:94:9f:93:b2:
ed:77:ff:e6:31:92:e2:a7:d3:60:05:05:ee:6e:b1:59:db:27:
cf:c7:a1:2a:88:61:69:34:42:25:01:67:2e:ce:1e:fd:a1:b6:
b5:3e:f6:40:50:8d:59:ab:60:29:df:6c:1f:86:e5:7f:44:5e:
40:32:c4:aa:eb:28:62:f4:4e:33:f8:a4:97:1e:73:4d:f4:6b:
cb:8c:72:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 11:24:04 2026 by rpki-client