Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fe/6ad9b8-9f0e-4ad0-a220-3ac3b6737042/1/rw9am9KtHpaGXwDQhSK5qtPpGk0.mft
File: rw9am9KtHpaGXwDQhSK5qtPpGk0.mft (raw, json)
Hash identifier: hXDtMlvTerpSmdE+MtU42pf0WeGqT61Sx4kSwZHItc0=
Subject key identifier: C7:4A:12:DD:42:1E:57:DF:93:12:64:17:FD:FB:16:E9:6B:9B:AE:98
Authority key identifier: AF:0F:5A:9B:D2:AD:1E:96:86:5F:00:D0:85:22:B9:AA:D3:E9:1A:4D
Certificate issuer: /CN=af0f5a9bd2ad1e96865f00d08522b9aad3e91a4d
Certificate serial: 01A172EF1929B2E650A41948E4C2460EBDD8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rw9am9KtHpaGXwDQhSK5qtPpGk0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/6ad9b8-9f0e-4ad0-a220-3ac3b6737042/1/rw9am9KtHpaGXwDQhSK5qtPpGk0.mft
Manifest number: 17D7
Signing time: Sun 25 Oct 2026 12:00:34 +0000
Manifest this update: Sun 25 Oct 2026 12:00:34 +0000
Manifest next update: Mon 26 Oct 2026 12:00:34 +0000
Files and hashes: 1: CnBLfp0K-MwzN1OvimzKQhhQRz8.roa (hash: etl29j67/XA8KfqoSc4LuDr3rcwYsJQPUU+kY7GMI8s=)
2: Lk4rKldX9sXOjCgYf6TH67Gu2-M.roa (hash: LdwPVlJ5KEW/4BpxrtP9UJQIli3Ut19hqpjKvaQuhlI=)
3: rw9am9KtHpaGXwDQhSK5qtPpGk0.crl (hash: t0aqbLWtR8BBfZaug2e4SJGao3ZlIvmrtMZf4MHZtS8=)
4: zf2OWk_RcBoM6jajwmrPp0mhHEM.roa (hash: 7qEv+OmptmvjMEg/3MLv8VXpUtOOdS45r94EszitJCE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/6ad9b8-9f0e-4ad0-a220-3ac3b6737042/1/rw9am9KtHpaGXwDQhSK5qtPpGk0.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/6ad9b8-9f0e-4ad0-a220-3ac3b6737042/1/rw9am9KtHpaGXwDQhSK5qtPpGk0.mft
rsync://rpki.ripe.net/repository/DEFAULT/rw9am9KtHpaGXwDQhSK5qtPpGk0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 08:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:72:ef:19:29:b2:e6:50:a4:19:48:e4:c2:46:0e:bd:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af0f5a9bd2ad1e96865f00d08522b9aad3e91a4d
Validity
Not Before: Oct 25 12:00:34 2026 GMT
Not After : Oct 26 12:00:34 2026 GMT
Subject: CN=c74a12dd421e57df93126417fdfb16e96b9bae98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:5c:5b:e8:f1:ea:f6:ef:1a:6f:9e:d9:93:56:
4e:5d:30:94:91:04:14:ee:fe:62:54:dd:ea:08:83:
9a:51:ea:78:17:12:24:30:19:67:6f:63:20:5a:0b:
d0:01:9c:0f:72:60:60:75:eb:f0:87:a3:4e:dd:92:
55:ef:63:e9:a4:f6:1a:4d:4d:3b:84:2b:80:85:34:
b5:44:88:c7:ef:28:ba:79:c3:90:9d:09:cb:1b:cd:
9c:47:2c:5f:d2:14:d6:86:d4:3e:ec:be:d3:ad:32:
06:30:66:a8:ee:0f:d2:78:41:a0:5b:fb:2a:db:61:
14:01:d2:43:1a:d4:76:92:e8:8a:1c:73:2b:c3:c5:
6a:09:58:b1:90:40:60:47:7f:3e:0a:c5:e9:d2:c8:
98:16:46:2c:2c:53:11:12:02:b7:cc:2f:5a:16:39:
47:5d:28:cd:bb:36:1f:63:de:31:b2:20:54:c7:d9:
db:ef:3d:d3:a8:5a:22:2a:6c:63:22:26:2c:ab:dc:
99:3e:1c:86:b4:5b:c5:34:cf:7d:0d:e9:7e:8f:c1:
68:f6:ad:9f:0b:c8:20:0b:2e:12:6f:01:d0:c8:14:
ae:50:5c:16:ca:4e:e1:d7:a3:00:92:a7:49:70:55:
b1:07:53:9f:5c:7f:16:e7:32:a9:42:5c:df:55:72:
7d:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:4A:12:DD:42:1E:57:DF:93:12:64:17:FD:FB:16:E9:6B:9B:AE:98
X509v3 Authority Key Identifier:
keyid:AF:0F:5A:9B:D2:AD:1E:96:86:5F:00:D0:85:22:B9:AA:D3:E9:1A:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rw9am9KtHpaGXwDQhSK5qtPpGk0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/6ad9b8-9f0e-4ad0-a220-3ac3b6737042/1/rw9am9KtHpaGXwDQhSK5qtPpGk0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/6ad9b8-9f0e-4ad0-a220-3ac3b6737042/1/rw9am9KtHpaGXwDQhSK5qtPpGk0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:aa:c0:2e:0b:d3:b2:eb:3b:c9:5e:9a:f4:5e:f1:63:25:a2:
3c:12:ac:f8:e3:a0:dc:c6:d1:e6:9b:d2:5c:80:b8:fc:05:cb:
6f:35:91:b6:13:89:42:28:31:a1:97:83:65:05:79:09:74:09:
d0:ca:9e:61:3c:92:fd:94:17:30:89:31:c5:54:3f:95:8b:ff:
25:19:e2:52:fa:59:fd:d9:f6:57:9d:a6:c6:63:4e:e6:6c:9e:
fc:ec:9f:ab:8b:01:02:dc:91:e4:ed:7b:47:e0:c5:35:91:0d:
8a:42:d1:7f:86:2d:09:d9:f9:db:d3:23:46:09:23:d9:12:c9:
8f:92:c2:c0:22:f7:d5:fe:56:51:18:3d:d4:56:db:15:ca:97:
65:69:50:4a:fd:b6:12:d7:df:3d:c3:9a:01:43:4c:c9:bb:fd:
aa:74:83:12:b3:3c:8a:66:1d:9e:90:85:29:63:88:bf:65:21:
c2:d6:c4:bb:c3:18:e5:f6:70:3f:07:78:b9:82:89:6f:00:a2:
8b:e5:ea:4f:f3:87:99:9f:8e:b3:bc:3c:93:85:84:c4:5a:87:
7a:0b:c1:22:16:be:11:e1:76:f5:58:00:8e:53:fd:b5:1a:30:
1b:76:d3:ed:40:cc:e5:ee:cb:df:84:7f:9c:c1:d5:0f:aa:30:
9b:37:90:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 20:03:31 2026 by rpki-client