Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5b/0da847-1ae9-496c-89fa-9245a9ab978b/1/rwMNO0xYnpSj72Hd1UAajz_3m20.mft
File: rwMNO0xYnpSj72Hd1UAajz_3m20.mft (raw, json)
Hash identifier: zHl7MNN8m9yoZOj/6Ir40Lp8vvKdUM7lrsj6e4xRK+U=
Subject key identifier: C5:5E:15:4D:3F:F7:21:EC:36:34:36:CC:85:B9:48:F9:40:32:4C:9B
Authority key identifier: AF:03:0D:3B:4C:58:9E:94:A3:EF:61:DD:D5:40:1A:8F:3F:F7:9B:6D
Certificate issuer: /CN=af030d3b4c589e94a3ef61ddd5401a8f3ff79b6d
Certificate serial: 01A10BEFC1690D719616C2E0AC1B50B354A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rwMNO0xYnpSj72Hd1UAajz_3m20.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/0da847-1ae9-496c-89fa-9245a9ab978b/1/rwMNO0xYnpSj72Hd1UAajz_3m20.mft
Manifest number: 08C1
Signing time: Mon 05 Oct 2026 12:00:24 +0000
Manifest this update: Mon 05 Oct 2026 12:00:24 +0000
Manifest next update: Tue 06 Oct 2026 12:00:24 +0000
Files and hashes: 1: rwMNO0xYnpSj72Hd1UAajz_3m20.crl (hash: 3YDvkbTXBnYT5FgEFzFHqWkb76aUdNSxmuikvnqECRE=)
2: sKXut25F8mstcMlebmCBZ3ash14.roa (hash: WdcSiIGfJAIq+j/hEE113/iMWyToETbAb54DBmpGZ9M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/0da847-1ae9-496c-89fa-9245a9ab978b/1/rwMNO0xYnpSj72Hd1UAajz_3m20.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/0da847-1ae9-496c-89fa-9245a9ab978b/1/rwMNO0xYnpSj72Hd1UAajz_3m20.mft
rsync://rpki.ripe.net/repository/DEFAULT/rwMNO0xYnpSj72Hd1UAajz_3m20.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 Oct 2026 08:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:0b:ef:c1:69:0d:71:96:16:c2:e0:ac:1b:50:b3:54:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af030d3b4c589e94a3ef61ddd5401a8f3ff79b6d
Validity
Not Before: Oct 5 12:00:24 2026 GMT
Not After : Oct 6 12:00:24 2026 GMT
Subject: CN=c55e154d3ff721ec363436cc85b948f940324c9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:f7:56:a9:0f:06:52:27:5b:ef:c8:48:9f:10:
67:42:90:25:36:87:1a:59:d1:8a:e9:19:18:08:69:
49:9f:69:a2:94:0f:68:e5:9c:35:1c:e6:ab:4c:4d:
34:05:4b:ce:3b:19:46:f6:ca:4b:c8:6a:76:7e:be:
cf:1d:43:4e:09:5b:cf:55:a2:e2:af:e5:d5:d1:d6:
57:f3:69:14:8b:cf:f7:6e:bf:93:8f:53:1f:99:68:
4e:27:61:04:8f:30:11:a0:e1:4a:cd:d1:33:18:47:
ba:b9:8c:e4:ed:af:b7:6b:74:11:9e:20:19:76:ae:
13:68:60:6a:7e:d3:72:65:1e:00:ee:2b:1c:b9:aa:
c2:5c:75:f2:2b:d4:e6:ba:9b:fb:49:04:20:0e:eb:
9c:f3:46:1a:28:63:75:33:d4:6a:e6:08:6b:76:3b:
bf:2b:12:ff:06:e9:25:f9:a2:38:20:3a:35:d8:02:
41:a0:67:95:a9:35:29:4d:ae:fc:9b:64:99:10:c4:
ca:f2:27:fe:13:e1:12:1b:ce:80:9f:48:e6:b1:93:
cd:42:90:77:ac:34:33:41:37:14:43:73:92:99:c3:
7d:de:fb:51:47:c8:58:13:b5:2a:fe:e5:45:7b:53:
16:6e:82:19:bb:2f:ab:67:59:86:20:aa:dd:e9:04:
3f:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:5E:15:4D:3F:F7:21:EC:36:34:36:CC:85:B9:48:F9:40:32:4C:9B
X509v3 Authority Key Identifier:
keyid:AF:03:0D:3B:4C:58:9E:94:A3:EF:61:DD:D5:40:1A:8F:3F:F7:9B:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rwMNO0xYnpSj72Hd1UAajz_3m20.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/0da847-1ae9-496c-89fa-9245a9ab978b/1/rwMNO0xYnpSj72Hd1UAajz_3m20.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/0da847-1ae9-496c-89fa-9245a9ab978b/1/rwMNO0xYnpSj72Hd1UAajz_3m20.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:4e:22:86:f4:36:11:39:37:42:2e:c2:17:32:d9:11:1d:5e:
f2:65:78:ac:3c:58:ab:b8:e8:36:a5:26:6d:9f:08:d8:3c:12:
8e:df:c1:1d:fe:d1:81:3f:91:fc:65:46:46:ad:71:6e:f4:fc:
cf:36:b1:cf:fe:90:e2:5b:ed:13:0c:bb:ca:d0:e3:11:d5:c1:
17:be:7d:7a:2f:37:10:d3:f8:c4:84:90:19:ef:73:4f:02:fd:
81:8f:aa:a2:db:0b:22:3f:61:ad:31:0b:12:66:ee:e4:0c:10:
ca:ad:27:63:05:85:7b:60:d2:51:62:6a:fa:a7:0e:3c:f7:e1:
29:c1:f8:7f:01:23:5b:ae:b7:da:5d:eb:6c:c1:72:4e:93:e5:
fc:51:0e:fe:ff:a7:0f:fb:0d:9b:cf:2c:8d:28:6c:5f:29:1f:
80:83:77:f9:3c:f2:5d:2f:1f:13:2d:64:92:68:87:8e:4b:01:
94:6b:ff:30:fa:23:a6:05:8a:71:17:81:13:bd:bc:54:dd:34:
57:88:ad:05:c3:0b:f2:fa:94:4e:17:ca:8e:a1:7c:ce:b8:65:
32:0c:72:63:17:57:12:9e:9e:01:ed:2d:68:4d:d6:c2:1c:3b:
2a:62:1b:93:c0:c1:99:4e:ec:83:1a:cd:9f:b2:0d:c5:20:e5:
56:b0:c0:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 16:49:32 2026 by rpki-client