Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2a/36715a-32fc-4e9f-a577-5ac74dba17b8/1/RW7LO-EGXh5xWJUIvsbXS1p7Htc.mft
File: RW7LO-EGXh5xWJUIvsbXS1p7Htc.mft (raw, json)
Hash identifier: 1ZJWJae2IBWTnSLS9irZ6KElM5EbBeRds3CFjrGsgTE=
Subject key identifier: FA:34:8E:C1:0E:17:8F:C5:4D:63:71:DF:BA:CE:97:71:B6:3B:C0:CA
Authority key identifier: 45:6E:CB:3B:E1:06:5E:1E:71:58:95:08:BE:C6:D7:4B:5A:7B:1E:D7
Certificate issuer: /CN=456ecb3be1065e1e71589508bec6d74b5a7b1ed7
Certificate serial: 01A0D15B7AC47E38DDFE2CBE10A18701F428
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RW7LO-EGXh5xWJUIvsbXS1p7Htc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/36715a-32fc-4e9f-a577-5ac74dba17b8/1/RW7LO-EGXh5xWJUIvsbXS1p7Htc.mft
Manifest number: 1A71
Signing time: Thu 24 Sep 2026 03:00:28 +0000
Manifest this update: Thu 24 Sep 2026 03:00:28 +0000
Manifest next update: Fri 25 Sep 2026 03:00:28 +0000
Files and hashes: 1: 1YcgvSymvxOWwOClUpJsxRVgsgw.roa (hash: sV7ICeqsuRRmvPB4Ud9P6m1LHMPN2hapMGG1EN+z2ws=)
2: RW7LO-EGXh5xWJUIvsbXS1p7Htc.crl (hash: LLUhAHxaEif6+iSH8IFuhMiZZkNu82jE9eufvwrN46Q=)
3: cWNFEgb5xBu8gcFLrQKsIN_qlUo.roa (hash: 64u+n0vfU41PR2W4WUgYuL5mbl/6P/UD0NVgWR/oiEY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/36715a-32fc-4e9f-a577-5ac74dba17b8/1/RW7LO-EGXh5xWJUIvsbXS1p7Htc.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/36715a-32fc-4e9f-a577-5ac74dba17b8/1/RW7LO-EGXh5xWJUIvsbXS1p7Htc.mft
rsync://rpki.ripe.net/repository/DEFAULT/RW7LO-EGXh5xWJUIvsbXS1p7Htc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d1:5b:7a:c4:7e:38:dd:fe:2c:be:10:a1:87:01:f4:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=456ecb3be1065e1e71589508bec6d74b5a7b1ed7
Validity
Not Before: Sep 24 03:00:28 2026 GMT
Not After : Sep 25 03:00:28 2026 GMT
Subject: CN=fa348ec10e178fc54d6371dfbace9771b63bc0ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:e5:68:6e:01:4a:d9:18:18:d2:fa:4f:23:1a:
d1:c8:11:95:27:61:bf:33:5d:91:20:91:19:7e:03:
c8:df:8b:04:20:e0:06:9f:b8:fc:95:78:46:c0:8d:
27:19:de:78:63:c7:fa:f1:92:9f:ee:f1:d4:b5:01:
e1:1b:4a:84:41:62:eb:f4:ec:0b:d7:a8:e9:b9:51:
dc:10:c0:5e:b5:a4:6a:06:83:5d:a6:6d:ee:d9:3a:
a4:c2:96:82:18:1e:f6:ca:76:3d:49:fa:ea:f5:91:
25:ca:9e:41:dc:f2:de:52:07:82:a6:5e:4a:ca:09:
ab:51:9e:ac:56:89:54:d3:6c:f3:92:f1:a4:c6:6d:
32:bb:8b:76:20:7f:2e:da:12:51:a8:70:6a:01:32:
a5:aa:b5:af:68:4d:af:9d:f2:52:6b:9d:f8:39:6d:
c1:1a:9a:2d:fa:56:ca:64:23:12:17:34:e1:ac:7b:
5b:05:6a:42:18:5a:05:62:8a:a6:6c:1b:d5:64:34:
8e:57:41:80:fc:9a:7b:1d:d6:62:ed:c9:93:eb:c6:
17:50:c2:27:53:f4:f6:76:ff:2a:02:a0:e2:7a:f2:
87:f8:c9:db:bc:cc:37:88:13:ee:06:c5:eb:93:86:
0b:8a:3f:37:93:72:69:78:f0:ef:4f:6d:86:30:bc:
47:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:34:8E:C1:0E:17:8F:C5:4D:63:71:DF:BA:CE:97:71:B6:3B:C0:CA
X509v3 Authority Key Identifier:
keyid:45:6E:CB:3B:E1:06:5E:1E:71:58:95:08:BE:C6:D7:4B:5A:7B:1E:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RW7LO-EGXh5xWJUIvsbXS1p7Htc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/36715a-32fc-4e9f-a577-5ac74dba17b8/1/RW7LO-EGXh5xWJUIvsbXS1p7Htc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/36715a-32fc-4e9f-a577-5ac74dba17b8/1/RW7LO-EGXh5xWJUIvsbXS1p7Htc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:28:a7:5e:d9:52:dc:f9:76:b8:45:85:02:94:bf:b9:fa:2c:
42:c1:29:06:a8:46:c6:54:07:11:e1:d2:1c:e8:79:35:cc:db:
3e:c5:d6:81:cf:ff:7a:08:91:47:a3:00:3f:1d:fb:d1:6b:c3:
17:23:47:c9:fd:e3:69:1b:91:a6:99:19:64:3a:79:40:b4:3f:
50:a2:dc:53:5b:3a:9b:f3:a6:5d:ed:7b:aa:83:13:1b:48:d1:
cd:13:77:d0:20:1f:a4:83:e3:d9:62:cc:2c:33:73:47:8a:cd:
4c:34:ef:d0:ea:a8:de:0b:14:b6:ce:9e:64:cd:e0:a1:54:b5:
ef:29:dc:7c:6c:f8:8f:fc:80:0e:a1:a8:c1:4d:92:a4:23:c1:
37:d4:a8:a7:cd:d2:a9:76:cd:86:54:f7:6d:38:7e:89:1f:32:
01:22:cd:7e:71:a7:0d:1a:68:a8:4b:4d:d2:ce:3e:8a:05:17:
d7:0f:50:84:26:3e:b3:c6:04:f6:60:c0:11:49:f3:10:0c:cf:
e0:41:82:79:e5:46:e0:fe:c9:54:3f:d3:0c:a3:86:4f:5d:ed:
bb:88:cb:8e:37:a4:25:76:45:f8:37:45:62:8a:fe:e9:5b:49:
82:85:46:fb:de:a5:ff:cd:7f:f1:70:19:e4:ec:84:fc:51:da:
48:be:d4:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 08:37:42 2026 by rpki-client