Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/6ad9b8-9f0e-4ad0-a220-3ac3b6737042/1/rw9am9KtHpaGXwDQhSK5qtPpGk0.mft
File: rw9am9KtHpaGXwDQhSK5qtPpGk0.mft (raw, json)
Hash identifier: PXzBlIZUdkN4uLxtGR3A5r4jWtKgN2GfEjhsCm0U6Tc=
Subject key identifier: 3F:4A:07:E4:FC:41:03:2C:5C:D4:26:9E:32:2E:81:7B:CD:C8:98:90
Authority key identifier: AF:0F:5A:9B:D2:AD:1E:96:86:5F:00:D0:85:22:B9:AA:D3:E9:1A:4D
Certificate issuer: /CN=af0f5a9bd2ad1e96865f00d08522b9aad3e91a4d
Certificate serial: 019CC9758EA619C1A4EF7C76700DC782E413
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rw9am9KtHpaGXwDQhSK5qtPpGk0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/6ad9b8-9f0e-4ad0-a220-3ac3b6737042/1/rw9am9KtHpaGXwDQhSK5qtPpGk0.mft
Manifest number: 156D
Signing time: Sat 07 Mar 2026 18:00:50 +0000
Manifest this update: Sat 07 Mar 2026 18:00:50 +0000
Manifest next update: Sun 08 Mar 2026 18:00:50 +0000
Files and hashes: 1: CnBLfp0K-MwzN1OvimzKQhhQRz8.roa (hash: etl29j67/XA8KfqoSc4LuDr3rcwYsJQPUU+kY7GMI8s=)
2: Lk4rKldX9sXOjCgYf6TH67Gu2-M.roa (hash: LdwPVlJ5KEW/4BpxrtP9UJQIli3Ut19hqpjKvaQuhlI=)
3: rw9am9KtHpaGXwDQhSK5qtPpGk0.crl (hash: jj1UuWIKK8kEE2V/9Oxq6KH6Gc9gE68uwrlSzLTFMeI=)
4: zf2OWk_RcBoM6jajwmrPp0mhHEM.roa (hash: 7qEv+OmptmvjMEg/3MLv8VXpUtOOdS45r94EszitJCE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/6ad9b8-9f0e-4ad0-a220-3ac3b6737042/1/rw9am9KtHpaGXwDQhSK5qtPpGk0.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/6ad9b8-9f0e-4ad0-a220-3ac3b6737042/1/rw9am9KtHpaGXwDQhSK5qtPpGk0.mft
rsync://rpki.ripe.net/repository/DEFAULT/rw9am9KtHpaGXwDQhSK5qtPpGk0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Mar 2026 18:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:c9:75:8e:a6:19:c1:a4:ef:7c:76:70:0d:c7:82:e4:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af0f5a9bd2ad1e96865f00d08522b9aad3e91a4d
Validity
Not Before: Mar 7 18:00:50 2026 GMT
Not After : Mar 8 18:00:50 2026 GMT
Subject: CN=3f4a07e4fc41032c5cd4269e322e817bcdc89890
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:01:2b:95:a6:b7:67:e5:ee:99:95:50:ad:ee:
74:f4:2b:9f:08:e4:c8:76:51:2a:54:d6:4c:c8:f4:
b3:fe:4d:bc:35:a6:db:1e:50:23:7a:6c:87:a3:f1:
99:c9:0a:e2:72:04:24:02:c7:db:9f:ed:91:7e:4a:
6e:2e:11:aa:f9:42:4b:5b:c5:2a:86:d7:9b:2a:b1:
ab:27:f1:5d:55:9e:62:e2:4c:f2:56:91:96:57:ef:
5b:d8:fc:61:6f:7a:46:fd:5e:34:1f:89:67:be:46:
0b:65:31:3d:c8:40:74:c0:b1:e9:32:a1:32:99:46:
4b:41:62:a0:8d:f4:1f:af:00:3b:0b:53:b9:77:f2:
0c:01:89:15:d2:86:11:af:e1:81:58:f6:b8:f6:a4:
a2:c1:74:09:20:f8:2a:75:de:6b:4a:5a:9e:bb:d7:
13:df:18:7d:d0:67:b0:7c:98:2c:70:30:45:08:4b:
4d:b4:16:5e:f8:c9:09:5b:4d:ab:c4:aa:e7:47:39:
61:c4:90:6e:d5:a0:c9:b9:c8:28:98:c7:ad:f8:f9:
e8:4e:32:3e:f7:b0:72:ce:48:dc:a6:db:a8:51:93:
e2:6d:d4:5d:4b:54:88:b7:31:c1:85:c5:bc:4f:31:
98:35:65:0b:58:a4:69:05:9e:f7:3a:42:a9:c4:a6:
e9:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:4A:07:E4:FC:41:03:2C:5C:D4:26:9E:32:2E:81:7B:CD:C8:98:90
X509v3 Authority Key Identifier:
keyid:AF:0F:5A:9B:D2:AD:1E:96:86:5F:00:D0:85:22:B9:AA:D3:E9:1A:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rw9am9KtHpaGXwDQhSK5qtPpGk0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/6ad9b8-9f0e-4ad0-a220-3ac3b6737042/1/rw9am9KtHpaGXwDQhSK5qtPpGk0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/6ad9b8-9f0e-4ad0-a220-3ac3b6737042/1/rw9am9KtHpaGXwDQhSK5qtPpGk0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:2a:75:51:6f:e1:75:a1:e0:34:4c:6e:b5:95:ca:ea:cc:c2:
99:73:50:55:0a:40:26:ed:e9:5b:bd:72:af:11:af:46:30:50:
e5:5a:c4:ac:15:b0:ff:8b:34:58:cc:2a:a8:26:20:b2:4e:2f:
f2:2f:c3:26:bb:9e:d5:59:39:f4:71:ad:91:9d:02:4b:c4:19:
da:82:45:88:e3:74:00:bc:9e:b3:4b:fd:ed:f6:6b:fc:80:20:
98:e8:cd:6c:dd:f1:82:3f:59:6a:53:80:3a:94:da:15:0b:50:
6e:b3:31:38:d3:62:a8:80:38:d7:00:69:e8:0f:10:90:46:98:
9a:fa:c9:1e:aa:48:ad:a3:6d:5e:57:dc:cc:2e:0a:45:8b:40:
59:bb:78:38:04:71:40:8c:19:ff:96:c9:5d:b6:c5:f6:5f:b6:
98:84:f0:d8:ae:28:e7:94:35:c8:75:53:82:7a:16:aa:bd:08:
51:fe:21:1f:00:6a:05:fc:ad:e3:0b:1d:2b:04:60:7e:9b:80:
a1:99:dd:84:b3:1a:43:c5:40:dd:d3:e9:b9:ad:2b:9d:86:3c:
a2:b2:5e:27:28:65:42:43:b0:56:58:72:45:cc:53:ab:9e:69:
07:cb:85:fe:9d:12:c0:8c:06:7f:84:50:e8:24:c8:72:c8:fa:
0a:20:8b:a5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZzJdY6mGcGk73x2cA3HguQTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFmMGY1YTliZDJhZDFlOTY4NjVmMDBkMDg1MjJiOWFhZDNl
OTFhNGQwHhcNMjYwMzA3MTgwMDUwWhcNMjYwMzA4MTgwMDUwWjAzMTEwLwYDVQQD
EygzZjRhMDdlNGZjNDEwMzJjNWNkNDI2OWUzMjJlODE3YmNkYzg5ODkwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoQErlaa3Z+XumZVQre509CufCOTI
dlEqVNZMyPSz/k28NabbHlAjemyHo/GZyQricgQkAsfbn+2RfkpuLhGq+UJLW8Uq
htebKrGrJ/FdVZ5i4kzyVpGWV+9b2Pxhb3pG/V40H4lnvkYLZTE9yEB0wLHpMqEy
mUZLQWKgjfQfrwA7C1O5d/IMAYkV0oYRr+GBWPa49qSiwXQJIPgqdd5rSlqeu9cT
3xh90GewfJgscDBFCEtNtBZe+MkJW02rxKrnRzlhxJBu1aDJucgomMet+PnoTjI+
97ByzkjcptuoUZPibdRdS1SItzHBhcW8TzGYNWULWKRpBZ73OkKpxKbpxwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD9KB+T8QQMsXNQmnjIugXvNyJiQMB8GA1UdIwQY
MBaAFK8PWpvSrR6Whl8A0IUiuarT6RpNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcnc5YW05S3RIcGFHWHdEUWhTSzVxdFBwR2swLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS82YWQ5YjgtOWYwZS00YWQwLWEyMjAt
M2FjM2I2NzM3MDQyLzEvcnc5YW05S3RIcGFHWHdEUWhTSzVxdFBwR2swLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS82YWQ5YjgtOWYwZS00YWQwLWEyMjAtM2FjM2I2NzM3MDQy
LzEvcnc5YW05S3RIcGFHWHdEUWhTSzVxdFBwR2swLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMip1UW/h
daHgNExutZXK6szCmXNQVQpAJu3pW71yrxGvRjBQ5VrErBWw/4s0WMwqqCYgsk4v
8i/DJrue1Vk59HGtkZ0CS8QZ2oJFiON0ALyes0v97fZr/IAgmOjNbN3xgj9ZalOA
OpTaFQtQbrMxONNiqIA41wBp6A8QkEaYmvrJHqpIraNtXlfczC4KRYtAWbt4OARx
QIwZ/5bJXbbF9l+2mITw2K4o55Q1yHVTgnoWqr0IUf4hHwBqBfyt4wsdKwRgfpuA
oZndhLMaQ8VA3dPpua0rnYY8orJeJyhlQkOwVlhyRcxTq55pB8uF/p0SwIwGf4RQ
6CTIcsj6CiCLpQ==
-----END CERTIFICATE-----
Generated at Sun Mar 8 03:32:54 2026 by rpki-client