Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/7560e4-fc7d-4a64-b500-e7f05f029a48/1/rwXUKRyugYXGw0LiXe6bfpIPdt0.mft
File: rwXUKRyugYXGw0LiXe6bfpIPdt0.mft (raw, json)
Hash identifier: TEpFemtkTZ9JojNYS4S88Zx+l8Rk/gd8LI5S7R7GTi8=
Subject key identifier: CA:6F:95:0C:C1:67:A6:51:FD:4C:12:02:1A:96:39:A4:3B:82:1E:BF
Authority key identifier: AF:05:D4:29:1C:AE:81:85:C6:C3:42:E2:5D:EE:9B:7E:92:0F:76:DD
Certificate issuer: /CN=af05d4291cae8185c6c342e25dee9b7e920f76dd
Certificate serial: 019D3789AB6B58E7DAE2C3C8D85C6B36D4DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rwXUKRyugYXGw0LiXe6bfpIPdt0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/7560e4-fc7d-4a64-b500-e7f05f029a48/1/rwXUKRyugYXGw0LiXe6bfpIPdt0.mft
Manifest number: 0757
Signing time: Sun 29 Mar 2026 03:01:02 +0000
Manifest this update: Sun 29 Mar 2026 03:01:02 +0000
Manifest next update: Mon 30 Mar 2026 03:01:02 +0000
Files and hashes: 1: G4m4mx_ghT8RFwe2ShhdbyqAMUg.roa (hash: C8aW4E3EPA9z9dvszZWIC2qBgUsFs1qOe+mMPk/k+i4=)
2: rwXUKRyugYXGw0LiXe6bfpIPdt0.crl (hash: cOZe+9vK60/7osHf/O8U5Ggl9Gxpr1BMAbW3Und6VBk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/7560e4-fc7d-4a64-b500-e7f05f029a48/1/rwXUKRyugYXGw0LiXe6bfpIPdt0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/7560e4-fc7d-4a64-b500-e7f05f029a48/1/rwXUKRyugYXGw0LiXe6bfpIPdt0.mft
rsync://rpki.ripe.net/repository/DEFAULT/rwXUKRyugYXGw0LiXe6bfpIPdt0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:ab:6b:58:e7:da:e2:c3:c8:d8:5c:6b:36:d4:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af05d4291cae8185c6c342e25dee9b7e920f76dd
Validity
Not Before: Mar 29 03:01:02 2026 GMT
Not After : Mar 30 03:01:02 2026 GMT
Subject: CN=ca6f950cc167a651fd4c12021a9639a43b821ebf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:91:32:58:de:77:8f:76:e3:10:78:bc:72:fc:
fb:7d:f4:b7:17:54:ec:72:35:7e:21:9f:44:b7:1f:
d7:b1:d3:6b:ad:2a:fe:d0:66:0e:2e:1c:32:be:02:
88:c3:de:cf:ed:c1:33:93:7e:d3:fe:1e:60:26:cf:
22:26:15:3b:77:0a:bc:c9:df:7e:9c:70:4b:68:f1:
ed:69:78:cd:08:f0:d1:e0:c0:d9:f2:59:bd:f4:5a:
c3:66:2c:15:71:b7:e4:98:aa:53:f7:c6:37:d9:a6:
fd:24:46:e9:ec:dd:e5:ff:2f:0f:42:e6:37:11:be:
06:a5:73:6c:b5:fc:e1:5d:a4:41:a2:75:3b:a3:b7:
cf:2a:9b:88:35:99:73:70:0f:ab:df:b8:7e:03:cd:
bf:7f:49:6b:17:fb:45:56:3c:20:fc:40:0a:d5:6e:
a1:f5:c9:5c:21:bb:41:1b:7f:d6:3b:3e:ea:e3:fd:
24:b4:b3:32:37:80:63:63:eb:3d:31:2c:49:4d:6f:
90:43:97:6a:bc:27:fe:6c:51:65:62:3d:48:9e:68:
0f:63:2c:34:c9:c3:f6:3f:74:11:ab:cb:14:a4:db:
92:ad:4c:97:97:30:e8:bb:90:9d:2a:1b:e8:44:e3:
a4:9a:cc:eb:d4:fb:4d:43:78:98:22:9d:d3:39:90:
5e:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:6F:95:0C:C1:67:A6:51:FD:4C:12:02:1A:96:39:A4:3B:82:1E:BF
X509v3 Authority Key Identifier:
keyid:AF:05:D4:29:1C:AE:81:85:C6:C3:42:E2:5D:EE:9B:7E:92:0F:76:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rwXUKRyugYXGw0LiXe6bfpIPdt0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/7560e4-fc7d-4a64-b500-e7f05f029a48/1/rwXUKRyugYXGw0LiXe6bfpIPdt0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/7560e4-fc7d-4a64-b500-e7f05f029a48/1/rwXUKRyugYXGw0LiXe6bfpIPdt0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:58:10:bf:21:bf:f2:18:ba:d5:fb:9c:08:a9:cc:55:bc:16:
8c:25:a5:51:a6:46:07:3a:05:f5:b9:34:43:1d:35:32:71:f1:
84:6d:db:2b:77:1c:8e:15:13:74:6d:9f:4c:58:04:64:09:d4:
c7:0f:f2:cb:4a:a1:e2:1b:e9:31:3c:62:23:05:9e:7e:ee:8a:
4a:66:a9:46:75:6a:ce:82:56:5f:f0:fc:8e:6a:f9:06:34:29:
fa:26:ab:88:c4:93:57:c6:93:9c:49:91:e1:c9:80:99:62:18:
6d:67:4e:05:43:78:ea:e1:67:cf:3f:74:76:08:df:d4:ed:1c:
16:3f:90:73:49:8c:e3:d8:b5:49:fe:61:27:db:28:cf:5a:80:
de:44:3d:64:32:1c:5a:31:02:0a:03:19:05:7b:6c:a5:d2:61:
7d:72:83:80:49:81:8e:0a:42:91:88:3c:8f:b4:b5:24:bc:41:
d6:d0:fe:b8:bd:a8:30:1e:d1:6e:66:73:53:8b:e4:ae:c0:3b:
4d:fe:8c:67:65:7a:bb:46:ba:fe:23:30:ae:28:90:69:cf:b9:
eb:b4:04:03:55:80:41:3c:64:b4:33:3e:2c:aa:f6:b1:a8:da:
16:07:40:6c:02:10:9f:a8:11:65:ca:b5:06:94:c7:0a:af:08:
eb:74:59:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:17:15 2026 by rpki-client