Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/0da847-1ae9-496c-89fa-9245a9ab978b/1/rwMNO0xYnpSj72Hd1UAajz_3m20.mft
File: rwMNO0xYnpSj72Hd1UAajz_3m20.mft (raw, json)
Hash identifier: Rw1gqet7rzJPba68PHhGFdBLTLtFXfbhD4wvCzyl/Js=
Subject key identifier: 7B:25:2F:45:3C:A0:18:A4:27:14:60:15:C2:15:14:BE:92:7E:42:32
Authority key identifier: AF:03:0D:3B:4C:58:9E:94:A3:EF:61:DD:D5:40:1A:8F:3F:F7:9B:6D
Certificate issuer: /CN=af030d3b4c589e94a3ef61ddd5401a8f3ff79b6d
Certificate serial: 019E20913AF795DDB1F9000CB20FEEDB5622
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rwMNO0xYnpSj72Hd1UAajz_3m20.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/0da847-1ae9-496c-89fa-9245a9ab978b/1/rwMNO0xYnpSj72Hd1UAajz_3m20.mft
Manifest number: 073E
Signing time: Wed 13 May 2026 09:00:49 +0000
Manifest this update: Wed 13 May 2026 09:00:49 +0000
Manifest next update: Thu 14 May 2026 09:00:49 +0000
Files and hashes: 1: rwMNO0xYnpSj72Hd1UAajz_3m20.crl (hash: 1nAkNAgMO3L35vykr+RJ9zFX4Fv2JN2AtTVdHr8r64o=)
2: sKXut25F8mstcMlebmCBZ3ash14.roa (hash: WdcSiIGfJAIq+j/hEE113/iMWyToETbAb54DBmpGZ9M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/0da847-1ae9-496c-89fa-9245a9ab978b/1/rwMNO0xYnpSj72Hd1UAajz_3m20.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/0da847-1ae9-496c-89fa-9245a9ab978b/1/rwMNO0xYnpSj72Hd1UAajz_3m20.mft
rsync://rpki.ripe.net/repository/DEFAULT/rwMNO0xYnpSj72Hd1UAajz_3m20.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 09:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:91:3a:f7:95:dd:b1:f9:00:0c:b2:0f:ee:db:56:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af030d3b4c589e94a3ef61ddd5401a8f3ff79b6d
Validity
Not Before: May 13 09:00:49 2026 GMT
Not After : May 14 09:00:49 2026 GMT
Subject: CN=7b252f453ca018a427146015c21514be927e4232
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:4a:e6:33:dc:5c:8c:c7:2f:23:f2:34:b0:23:
da:01:14:f0:ee:54:fa:7f:b1:5d:e0:ce:46:62:3b:
e1:a8:99:3a:d1:9b:c2:85:60:d7:bf:62:fe:86:ef:
bd:e8:f1:aa:98:7a:83:96:9a:4c:75:8d:06:86:18:
ae:16:78:58:af:40:04:eb:f3:24:f9:f0:ba:69:e1:
c7:92:d7:f3:92:14:3d:29:75:f6:a5:e0:18:b9:84:
2a:37:39:5b:3a:e9:ba:72:ab:39:19:a3:cd:59:53:
12:d4:67:03:2e:22:80:98:c1:4a:07:2d:47:4c:a1:
f1:0d:0d:ee:07:72:84:77:90:7e:98:c7:ff:de:38:
50:01:db:fd:61:83:7a:1f:db:d0:b5:2a:c3:dd:7b:
b2:68:23:dd:2d:74:03:5d:e2:c3:fc:cd:95:55:b3:
97:4c:a6:89:e5:fc:4d:5e:3a:fc:a6:d6:1b:59:d3:
7b:d3:d6:56:d1:96:8a:0f:8d:13:6f:20:d5:86:ae:
6f:7e:89:08:5e:0b:2d:98:ed:83:0f:d9:83:07:85:
9a:6b:4f:aa:20:dc:67:58:e9:16:5c:85:0f:43:b0:
f1:08:e2:e0:ce:f8:38:2f:62:84:56:b6:c8:aa:6a:
9a:97:53:1e:be:29:c8:bf:17:9d:ce:3d:22:e1:da:
21:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:25:2F:45:3C:A0:18:A4:27:14:60:15:C2:15:14:BE:92:7E:42:32
X509v3 Authority Key Identifier:
keyid:AF:03:0D:3B:4C:58:9E:94:A3:EF:61:DD:D5:40:1A:8F:3F:F7:9B:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rwMNO0xYnpSj72Hd1UAajz_3m20.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/0da847-1ae9-496c-89fa-9245a9ab978b/1/rwMNO0xYnpSj72Hd1UAajz_3m20.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/0da847-1ae9-496c-89fa-9245a9ab978b/1/rwMNO0xYnpSj72Hd1UAajz_3m20.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:4b:cb:c8:21:23:ad:a4:7a:82:88:e9:3f:47:38:32:e3:57:
85:e2:7e:ba:61:8f:71:af:27:c3:d2:13:26:65:94:26:be:d4:
92:02:8e:d7:b2:85:09:f7:2f:0f:62:fb:3a:e3:bd:66:09:cc:
05:51:63:ed:58:0c:d5:b1:2b:3f:f5:be:28:82:a9:da:a7:a3:
c2:6b:a5:48:1e:02:f4:ff:4e:84:cb:66:68:3f:c9:d3:7e:c2:
32:d1:28:28:49:f7:ab:71:f0:f1:36:e8:e7:35:40:33:a5:c5:
c5:24:71:3b:73:8e:39:22:e6:c0:1f:9b:fb:63:8f:50:dd:1e:
84:2f:01:56:d2:37:ff:1c:91:3c:7f:f2:39:3c:14:bb:ca:06:
62:1f:7c:14:c1:e5:30:82:13:16:b2:66:53:40:13:46:ca:8d:
2d:36:77:e4:8c:cc:85:8b:cd:e3:bb:a4:e2:32:be:98:08:a8:
5b:e4:85:0b:63:7a:fc:05:f0:b6:5d:e5:00:41:f4:f5:ff:cf:
35:93:cf:f4:d0:81:76:f5:8b:72:f1:96:35:9f:ee:68:23:4c:
b4:80:66:64:b7:34:41:4c:d9:3a:d0:7e:35:90:8d:fd:3c:6e:
9f:df:47:3f:02:6b:44:50:46:81:7a:f0:60:54:8a:5b:96:1d:
97:d4:55:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 17:25:52 2026 by rpki-client