Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/6ad9b8-9f0e-4ad0-a220-3ac3b6737042/1/rw9am9KtHpaGXwDQhSK5qtPpGk0.mft
File: rw9am9KtHpaGXwDQhSK5qtPpGk0.mft (raw, json)
Hash identifier: ZrPnR8PUbJGk2jiVuvSMVYBdHvYNkB8gcKDGjcgRE1w=
Subject key identifier: 4D:86:89:ED:F4:CF:29:FF:24:61:7A:98:6B:64:27:47:E7:16:FE:CA
Authority key identifier: AF:0F:5A:9B:D2:AD:1E:96:86:5F:00:D0:85:22:B9:AA:D3:E9:1A:4D
Certificate issuer: /CN=af0f5a9bd2ad1e96865f00d08522b9aad3e91a4d
Certificate serial: 019F867ABD59509A4F24FBAC78DF0B95B7C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rw9am9KtHpaGXwDQhSK5qtPpGk0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/6ad9b8-9f0e-4ad0-a220-3ac3b6737042/1/rw9am9KtHpaGXwDQhSK5qtPpGk0.mft
Manifest number: 16D8
Signing time: Tue 21 Jul 2026 21:00:18 +0000
Manifest this update: Tue 21 Jul 2026 21:00:18 +0000
Manifest next update: Wed 22 Jul 2026 21:00:18 +0000
Files and hashes: 1: CnBLfp0K-MwzN1OvimzKQhhQRz8.roa (hash: etl29j67/XA8KfqoSc4LuDr3rcwYsJQPUU+kY7GMI8s=)
2: Lk4rKldX9sXOjCgYf6TH67Gu2-M.roa (hash: LdwPVlJ5KEW/4BpxrtP9UJQIli3Ut19hqpjKvaQuhlI=)
3: rw9am9KtHpaGXwDQhSK5qtPpGk0.crl (hash: Dd0NuLcDe0VwyZBAw3vg8wAvKGZmPgPh38av8p2bX9g=)
4: zf2OWk_RcBoM6jajwmrPp0mhHEM.roa (hash: 7qEv+OmptmvjMEg/3MLv8VXpUtOOdS45r94EszitJCE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/6ad9b8-9f0e-4ad0-a220-3ac3b6737042/1/rw9am9KtHpaGXwDQhSK5qtPpGk0.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/6ad9b8-9f0e-4ad0-a220-3ac3b6737042/1/rw9am9KtHpaGXwDQhSK5qtPpGk0.mft
rsync://rpki.ripe.net/repository/DEFAULT/rw9am9KtHpaGXwDQhSK5qtPpGk0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:86:7a:bd:59:50:9a:4f:24:fb:ac:78:df:0b:95:b7:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af0f5a9bd2ad1e96865f00d08522b9aad3e91a4d
Validity
Not Before: Jul 21 21:00:18 2026 GMT
Not After : Jul 22 21:00:18 2026 GMT
Subject: CN=4d8689edf4cf29ff24617a986b642747e716feca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:e0:a7:22:5a:2c:8a:be:bc:d6:1e:13:18:37:
f9:67:4e:a5:86:ee:bb:ef:28:9b:14:56:e9:5d:18:
eb:d6:cb:85:cc:eb:71:e6:e8:07:81:64:5b:55:bc:
c5:8a:7e:fc:ac:0a:9f:66:5f:c3:b3:66:c8:cb:d8:
43:c6:8b:31:32:84:4f:9e:38:ae:7d:09:e5:17:f1:
00:d9:95:42:1d:7e:ea:f4:5c:77:71:9f:a7:32:1f:
0e:60:0a:3f:47:02:d1:bc:19:9c:0a:71:cd:eb:4d:
d4:94:fb:d2:bb:cd:5d:90:f3:db:20:dd:5b:fb:91:
b2:46:4b:5b:f8:30:d4:22:3b:ec:33:4f:db:95:57:
43:31:ad:b5:54:0b:66:b9:13:ad:89:18:f5:6f:02:
50:38:74:f5:1e:8a:23:fa:d3:c1:38:ee:45:bb:7f:
85:3b:52:25:17:8f:25:d1:d9:f5:d1:5c:1a:b9:3c:
3b:89:73:99:8e:b7:bc:48:9e:e2:0d:53:92:a6:55:
a7:8e:a2:89:d7:fb:40:65:98:48:81:d2:5e:90:1b:
59:cb:ad:d1:9f:bb:86:cb:3f:f2:79:37:b7:a8:1d:
99:c2:df:13:67:6d:57:68:a0:39:85:6f:d2:cc:78:
aa:b0:f0:84:42:a5:49:dc:aa:88:63:cb:c5:3b:72:
96:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:86:89:ED:F4:CF:29:FF:24:61:7A:98:6B:64:27:47:E7:16:FE:CA
X509v3 Authority Key Identifier:
keyid:AF:0F:5A:9B:D2:AD:1E:96:86:5F:00:D0:85:22:B9:AA:D3:E9:1A:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rw9am9KtHpaGXwDQhSK5qtPpGk0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/6ad9b8-9f0e-4ad0-a220-3ac3b6737042/1/rw9am9KtHpaGXwDQhSK5qtPpGk0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/6ad9b8-9f0e-4ad0-a220-3ac3b6737042/1/rw9am9KtHpaGXwDQhSK5qtPpGk0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:ef:1c:39:ba:ab:78:19:bc:68:13:d8:c2:b8:4f:33:59:0c:
b5:76:4f:2e:1b:a4:90:ed:21:1f:35:f5:46:e2:06:bb:5a:b9:
de:52:b8:9f:46:af:a5:9b:0a:de:ad:88:93:6f:05:5b:e6:da:
22:87:08:ee:c6:03:c8:4f:77:fc:ba:12:bb:4d:78:fb:ad:91:
d1:02:fb:a2:07:e6:9a:f5:5d:77:fa:0e:f2:23:d4:df:2d:69:
86:4b:bd:d6:82:d9:28:0c:d9:f0:f1:6a:7a:9b:3e:aa:90:70:
0d:19:db:51:53:cc:a0:61:85:70:b1:0c:2c:0c:29:3f:71:79:
b6:17:c9:a6:f0:df:47:66:b0:d9:8d:8b:3e:12:b3:7d:60:d2:
54:9e:62:a2:c0:d1:14:ca:d5:17:41:f4:94:0d:16:2c:c5:fb:
91:a3:3a:b4:5f:e9:92:74:10:f2:b0:1d:b9:b6:05:fa:de:41:
37:d4:1e:75:80:35:b9:78:9b:3a:9e:6e:72:6b:6a:e5:7d:39:
39:d8:93:5c:ea:66:7d:3c:43:67:10:ff:1c:5a:a5:89:4b:70:
9b:6d:50:48:ff:a9:ff:4d:1c:a4:ab:a8:c3:cc:9d:f7:a0:0c:
13:fb:f2:da:eb:3b:40:84:6c:5f:3e:b9:e3:d7:81:57:83:5b:
6b:06:40:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 22:45:22 2026 by rpki-client