Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/6ad9b8-9f0e-4ad0-a220-3ac3b6737042/1/rw9am9KtHpaGXwDQhSK5qtPpGk0.mft
File: rw9am9KtHpaGXwDQhSK5qtPpGk0.mft (raw, json)
Hash identifier: 1zTeoF7rVgs09zROOQgh7Baq8MgIFldiUbDlTWFZCOA=
Subject key identifier: FC:58:15:0A:F8:17:10:FD:C8:8B:88:B8:4B:82:F6:39:27:CF:B7:3B
Authority key identifier: AF:0F:5A:9B:D2:AD:1E:96:86:5F:00:D0:85:22:B9:AA:D3:E9:1A:4D
Certificate issuer: /CN=af0f5a9bd2ad1e96865f00d08522b9aad3e91a4d
Certificate serial: 019DB321D637B10158BB2D726C62FA68A4F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rw9am9KtHpaGXwDQhSK5qtPpGk0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/6ad9b8-9f0e-4ad0-a220-3ac3b6737042/1/rw9am9KtHpaGXwDQhSK5qtPpGk0.mft
Manifest number: 15E6
Signing time: Wed 22 Apr 2026 03:00:32 +0000
Manifest this update: Wed 22 Apr 2026 03:00:32 +0000
Manifest next update: Thu 23 Apr 2026 03:00:32 +0000
Files and hashes: 1: CnBLfp0K-MwzN1OvimzKQhhQRz8.roa (hash: etl29j67/XA8KfqoSc4LuDr3rcwYsJQPUU+kY7GMI8s=)
2: Lk4rKldX9sXOjCgYf6TH67Gu2-M.roa (hash: LdwPVlJ5KEW/4BpxrtP9UJQIli3Ut19hqpjKvaQuhlI=)
3: rw9am9KtHpaGXwDQhSK5qtPpGk0.crl (hash: s+VUI9ie2JZOSHAgSPb9816DwqVgcRFJ4Le4I2ewgCQ=)
4: zf2OWk_RcBoM6jajwmrPp0mhHEM.roa (hash: 7qEv+OmptmvjMEg/3MLv8VXpUtOOdS45r94EszitJCE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/6ad9b8-9f0e-4ad0-a220-3ac3b6737042/1/rw9am9KtHpaGXwDQhSK5qtPpGk0.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/6ad9b8-9f0e-4ad0-a220-3ac3b6737042/1/rw9am9KtHpaGXwDQhSK5qtPpGk0.mft
rsync://rpki.ripe.net/repository/DEFAULT/rw9am9KtHpaGXwDQhSK5qtPpGk0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Apr 2026 21:56:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:b3:21:d6:37:b1:01:58:bb:2d:72:6c:62:fa:68:a4:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af0f5a9bd2ad1e96865f00d08522b9aad3e91a4d
Validity
Not Before: Apr 22 03:00:32 2026 GMT
Not After : Apr 23 03:00:32 2026 GMT
Subject: CN=fc58150af81710fdc88b88b84b82f63927cfb73b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:9f:5d:13:e9:c6:80:10:ea:23:ac:21:4b:08:
bb:79:0b:67:66:8a:a9:89:d2:a8:99:96:a2:56:a2:
b7:dc:0c:36:a3:82:a4:03:9d:be:0a:38:a5:37:c2:
51:16:0f:13:a2:b6:d0:a0:cc:e6:11:72:a4:cc:0b:
8c:af:29:a1:9e:b1:aa:94:72:13:8d:b6:38:5d:3f:
50:8d:e1:59:eb:73:c9:91:9f:0d:0c:8d:dc:23:d7:
c2:26:42:94:5d:7b:8a:75:a4:5d:e8:25:3d:64:48:
f7:6d:89:1c:90:2f:e8:1a:9a:5d:14:95:1a:24:15:
17:fe:5c:e6:00:29:30:21:e5:28:ca:c5:57:d8:9f:
4e:f1:72:e3:11:72:7c:7e:c3:fe:b3:74:d0:86:55:
35:a7:7f:d4:1f:c5:b1:f5:1d:46:77:4d:e5:ba:a9:
a8:56:6c:32:bf:7b:b2:19:f2:b0:df:de:2a:47:f4:
af:7e:f3:1f:5b:29:6d:3d:8a:d1:a7:88:f4:f7:3d:
a9:2a:cc:27:ee:55:4c:a9:52:da:32:f0:3f:f0:f6:
22:5c:b0:d5:ca:ee:ff:35:11:70:82:c0:58:84:10:
85:16:44:6a:fb:22:d6:73:bc:b5:92:17:a7:b6:f8:
0d:53:27:db:4d:d1:46:62:60:8a:b8:aa:8f:ae:e4:
0b:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:58:15:0A:F8:17:10:FD:C8:8B:88:B8:4B:82:F6:39:27:CF:B7:3B
X509v3 Authority Key Identifier:
keyid:AF:0F:5A:9B:D2:AD:1E:96:86:5F:00:D0:85:22:B9:AA:D3:E9:1A:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rw9am9KtHpaGXwDQhSK5qtPpGk0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/6ad9b8-9f0e-4ad0-a220-3ac3b6737042/1/rw9am9KtHpaGXwDQhSK5qtPpGk0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/6ad9b8-9f0e-4ad0-a220-3ac3b6737042/1/rw9am9KtHpaGXwDQhSK5qtPpGk0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:0d:39:ce:5d:d3:fc:28:a4:6b:2a:9a:91:44:5b:08:bb:13:
51:fd:3a:16:78:e5:35:d9:07:94:d9:03:bc:90:96:1a:03:a7:
e3:23:32:4d:de:6d:8b:9b:3b:44:00:be:40:db:db:a5:a9:d5:
50:b8:6b:5e:22:d8:9c:53:7a:ae:04:fb:de:87:a2:82:de:0f:
5e:bc:15:de:f6:87:f3:1e:95:d1:ce:b2:63:26:4b:f9:e0:fa:
e2:8b:f9:a1:fb:6c:77:ad:7e:b8:49:58:27:e9:3a:ee:b0:81:
5f:ef:65:10:1e:ef:a7:c4:dc:f8:5c:64:2c:f3:39:36:c7:e9:
b2:d9:68:98:14:52:14:97:3f:e6:90:3a:fc:79:04:67:c9:8f:
83:db:c0:7e:3e:17:35:b4:e6:cf:69:0d:18:05:62:74:7d:14:
6e:8d:ed:21:8f:0e:24:da:1f:9f:f4:f8:6b:62:40:f5:cf:e8:
a8:b2:7a:3a:ce:ae:22:f8:47:f8:3c:63:5c:05:0f:88:c1:32:
e9:d3:01:bc:97:d3:a2:4d:b1:2c:d0:03:1f:4f:a4:20:03:87:
89:9e:a5:c8:02:f3:e1:da:ad:23:93:98:e7:3f:6a:27:06:fb:
a6:22:c0:ca:42:84:db:9e:c1:6b:e5:1d:d5:76:d5:78:2b:ee:
e2:34:69:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 22 07:57:51 2026 by rpki-client