Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/0da847-1ae9-496c-89fa-9245a9ab978b/1/rwMNO0xYnpSj72Hd1UAajz_3m20.mft
File: rwMNO0xYnpSj72Hd1UAajz_3m20.mft (raw, json)
Hash identifier: Eto8BKmhkF6jhdbrKiyay/rlbf6UuYSUYP1L/JOf1/I=
Subject key identifier: 31:85:08:92:52:DA:11:0D:56:90:1F:EB:8A:0D:AC:DE:EA:3C:1B:11
Authority key identifier: AF:03:0D:3B:4C:58:9E:94:A3:EF:61:DD:D5:40:1A:8F:3F:F7:9B:6D
Certificate issuer: /CN=af030d3b4c589e94a3ef61ddd5401a8f3ff79b6d
Certificate serial: 019F954997EDD20F613A67898C02851B57C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rwMNO0xYnpSj72Hd1UAajz_3m20.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/0da847-1ae9-496c-89fa-9245a9ab978b/1/rwMNO0xYnpSj72Hd1UAajz_3m20.mft
Manifest number: 07FF
Signing time: Fri 24 Jul 2026 18:00:55 +0000
Manifest this update: Fri 24 Jul 2026 18:00:55 +0000
Manifest next update: Sat 25 Jul 2026 18:00:55 +0000
Files and hashes: 1: rwMNO0xYnpSj72Hd1UAajz_3m20.crl (hash: p4A1M+2VmhyaK9hH1/Yj7o6bhqtPIOsdx/fW9jAUopE=)
2: sKXut25F8mstcMlebmCBZ3ash14.roa (hash: WdcSiIGfJAIq+j/hEE113/iMWyToETbAb54DBmpGZ9M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/0da847-1ae9-496c-89fa-9245a9ab978b/1/rwMNO0xYnpSj72Hd1UAajz_3m20.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/0da847-1ae9-496c-89fa-9245a9ab978b/1/rwMNO0xYnpSj72Hd1UAajz_3m20.mft
rsync://rpki.ripe.net/repository/DEFAULT/rwMNO0xYnpSj72Hd1UAajz_3m20.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 16:41:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:95:49:97:ed:d2:0f:61:3a:67:89:8c:02:85:1b:57:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af030d3b4c589e94a3ef61ddd5401a8f3ff79b6d
Validity
Not Before: Jul 24 18:00:55 2026 GMT
Not After : Jul 25 18:00:55 2026 GMT
Subject: CN=3185089252da110d56901feb8a0dacdeea3c1b11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:9a:65:2e:d0:33:36:b8:1e:84:ca:4c:f4:e9:
04:6a:8b:ab:a8:5a:4a:35:39:93:11:be:e1:d1:eb:
ed:dd:ba:6c:92:8f:c8:ab:14:48:5c:30:e1:d2:b7:
8c:3f:a6:e5:89:90:be:08:06:26:84:27:fa:ab:a4:
8b:2f:cd:61:a4:68:66:ea:fe:d3:7a:fc:53:df:36:
44:9a:ac:9f:2d:1a:4c:a3:c0:e2:94:a3:2b:50:f8:
b5:ec:04:41:3e:58:63:59:59:d4:40:d2:93:8e:fa:
17:28:f9:b3:10:9d:2f:b7:fa:84:f1:7c:1b:9c:64:
02:be:99:ab:02:7c:02:fc:f6:55:f1:f4:7a:f3:9d:
cc:1b:94:c3:dc:d4:d1:0a:32:07:75:d3:1b:ee:39:
95:e5:45:21:32:e0:4e:8f:78:64:b0:57:5e:87:4c:
14:71:05:fd:49:2e:c0:71:c7:55:f6:35:9d:6b:6f:
02:0b:0c:ee:ca:42:cf:71:b8:7d:c0:81:12:59:83:
61:ee:96:15:02:22:e5:7d:71:45:9d:45:9b:ad:7a:
7e:1c:ed:a6:76:9b:56:cd:dc:db:fb:87:98:1e:a2:
c5:c7:61:bf:ec:97:e4:0b:98:d2:98:ce:eb:9b:7b:
b4:78:03:98:e5:02:90:81:5a:12:f7:e7:ea:aa:32:
7f:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:85:08:92:52:DA:11:0D:56:90:1F:EB:8A:0D:AC:DE:EA:3C:1B:11
X509v3 Authority Key Identifier:
keyid:AF:03:0D:3B:4C:58:9E:94:A3:EF:61:DD:D5:40:1A:8F:3F:F7:9B:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rwMNO0xYnpSj72Hd1UAajz_3m20.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/0da847-1ae9-496c-89fa-9245a9ab978b/1/rwMNO0xYnpSj72Hd1UAajz_3m20.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/0da847-1ae9-496c-89fa-9245a9ab978b/1/rwMNO0xYnpSj72Hd1UAajz_3m20.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:37:88:57:fb:fb:2e:b8:40:d4:a8:35:b6:35:8d:f6:3f:68:
48:49:01:ac:bc:f9:12:e6:aa:a1:3f:be:46:df:67:88:9f:9d:
b0:0f:7a:ba:c2:4e:79:80:89:1c:62:1d:60:d8:af:32:9d:60:
98:b7:7f:de:df:4b:36:04:5b:4c:33:86:71:59:17:28:c5:64:
2c:63:be:cd:e3:95:8b:00:21:ac:f2:1c:61:1f:53:0f:a0:ca:
86:2a:40:d8:ab:a9:fd:b1:f9:f2:f1:0a:04:cd:52:8b:57:c7:
b1:8d:e4:ef:4e:66:d2:b6:fb:7d:47:d7:c8:bc:fd:04:fe:b2:
cf:be:24:8b:9a:b7:2f:a5:84:bf:b7:04:f5:37:7a:95:13:d8:
b8:af:98:d7:26:74:70:7b:89:19:c2:4e:c3:9a:71:f1:ce:60:
e2:a1:f8:38:95:e3:09:64:1b:f8:5a:7f:f2:4c:cf:30:92:81:
57:ed:40:a8:19:7e:16:66:7c:96:13:c9:fe:d9:f2:42:16:ef:
e7:81:63:a6:ad:f6:a8:14:36:9e:74:92:17:8d:cf:e6:6e:fe:
82:ad:d8:f9:96:79:e1:e4:6f:dd:d1:ee:3a:89:24:f4:2f:95:
42:ad:50:46:d4:5a:98:98:68:e3:11:7b:87:b0:38:94:f9:f6:
2f:45:a0:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 21:06:02 2026 by rpki-client