Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6e/52b199-9e1f-4ec7-b0aa-4a4e0f424f17/1/rwNoFqMX3ZnSU4OjKmgYWcBHtf8.mft
File: rwNoFqMX3ZnSU4OjKmgYWcBHtf8.mft (raw, json)
Hash identifier: PTskfPhNt7LKZX4CIGogiAwRUcjS8Btjfuzi5p+pUhU=
Subject key identifier: 3C:ED:34:8C:99:B3:2A:05:A2:C7:C0:33:C3:E9:53:3B:30:C4:2C:13
Authority key identifier: AF:03:68:16:A3:17:DD:99:D2:53:83:A3:2A:68:18:59:C0:47:B5:FF
Certificate issuer: /CN=af036816a317dd99d25383a32a681859c047b5ff
Certificate serial: 01A0D4265555846AD2A33E4D79121A30FE12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rwNoFqMX3ZnSU4OjKmgYWcBHtf8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/52b199-9e1f-4ec7-b0aa-4a4e0f424f17/1/rwNoFqMX3ZnSU4OjKmgYWcBHtf8.mft
Manifest number: 14CA
Signing time: Thu 24 Sep 2026 16:01:17 +0000
Manifest this update: Thu 24 Sep 2026 16:01:17 +0000
Manifest next update: Fri 25 Sep 2026 16:01:17 +0000
Files and hashes: 1: eZ9UOq9D7h6PkF-tsoPFMwz1Ago.roa (hash: stzfv2f+p3RFGsG9S6OYQeB7VYNNBEus7AwqJ8t7tGM=)
2: rwNoFqMX3ZnSU4OjKmgYWcBHtf8.crl (hash: daQTKm2oJIzf9EKNQ/0eU3Z4c2EZBDtuzGHummQQQ0Y=)
3: z1DkUd2XVt6-3mpdk1d5JBWy8pk.roa (hash: Nd41zSlcpnJ9luejNMRZ4qZmw74tJoui7F4UBsvSDmA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/52b199-9e1f-4ec7-b0aa-4a4e0f424f17/1/rwNoFqMX3ZnSU4OjKmgYWcBHtf8.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/52b199-9e1f-4ec7-b0aa-4a4e0f424f17/1/rwNoFqMX3ZnSU4OjKmgYWcBHtf8.mft
rsync://rpki.ripe.net/repository/DEFAULT/rwNoFqMX3ZnSU4OjKmgYWcBHtf8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d4:26:55:55:84:6a:d2:a3:3e:4d:79:12:1a:30:fe:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af036816a317dd99d25383a32a681859c047b5ff
Validity
Not Before: Sep 24 16:01:17 2026 GMT
Not After : Sep 25 16:01:17 2026 GMT
Subject: CN=3ced348c99b32a05a2c7c033c3e9533b30c42c13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:18:e9:24:40:bd:6b:e5:7b:ef:2a:8c:d0:c3:
44:50:b8:c4:3c:b2:f0:ae:bd:ce:a1:8b:1a:a4:4e:
56:26:60:f7:e3:2d:74:b7:62:46:0c:45:b8:d8:16:
f5:9d:16:2b:4d:0a:e2:91:53:a1:fb:a8:72:92:20:
68:fa:d7:76:c8:ae:ea:e5:b1:d5:48:ad:ea:fc:a8:
1c:a7:06:69:07:3c:1f:ac:6f:81:75:19:52:88:1e:
26:4f:c3:17:26:8a:9c:a1:df:93:3b:c4:2f:27:e0:
ae:72:99:53:9d:29:0c:28:0d:b3:8f:7e:e8:05:d3:
f3:0e:3d:ee:16:b9:d2:b1:a1:a5:5e:73:6a:94:77:
40:f1:bc:c7:ce:71:51:16:e1:a4:da:be:53:c6:e7:
db:91:52:24:8d:0e:ad:7d:21:a1:89:09:2b:08:dd:
c1:43:67:61:70:f5:b7:af:01:e2:41:97:0c:c2:61:
77:eb:90:bc:34:e5:83:85:43:c1:1d:de:56:b0:36:
d5:45:6c:a8:54:d4:03:23:bf:cb:1f:dd:be:af:02:
99:ad:da:b2:6b:cc:7b:51:d1:f4:a5:e6:30:8e:2f:
8f:6b:f8:38:19:d9:3a:85:94:2a:90:dc:41:8c:d5:
1f:de:39:5f:02:bf:2c:41:8d:fb:eb:85:2a:62:ec:
48:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:ED:34:8C:99:B3:2A:05:A2:C7:C0:33:C3:E9:53:3B:30:C4:2C:13
X509v3 Authority Key Identifier:
keyid:AF:03:68:16:A3:17:DD:99:D2:53:83:A3:2A:68:18:59:C0:47:B5:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rwNoFqMX3ZnSU4OjKmgYWcBHtf8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/52b199-9e1f-4ec7-b0aa-4a4e0f424f17/1/rwNoFqMX3ZnSU4OjKmgYWcBHtf8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/52b199-9e1f-4ec7-b0aa-4a4e0f424f17/1/rwNoFqMX3ZnSU4OjKmgYWcBHtf8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:d5:f5:98:18:09:80:a0:43:12:ca:84:01:ba:80:1e:33:02:
d4:32:0d:8d:ba:e2:d7:b7:1c:4b:cc:8b:ec:fa:b5:02:da:01:
16:e8:89:e6:38:d9:6b:99:d1:eb:a4:12:e5:ca:ee:f6:fa:c2:
ab:63:ac:48:cf:76:59:0d:53:5a:48:4b:92:cb:c0:a9:53:fc:
1c:35:ba:5b:2d:08:8e:2c:ac:d5:f4:ac:47:b9:40:6b:5a:ca:
20:91:0a:6e:7a:7c:63:58:39:8f:48:30:4d:59:f6:b2:1e:c2:
03:1d:80:8a:1d:28:45:1c:67:74:6e:02:02:e7:80:49:ee:c3:
6c:1c:9a:a5:55:3b:a8:5d:fb:a2:b8:ea:a8:d6:b8:d2:0d:a4:
49:3f:e4:59:60:82:e4:e1:57:f1:5a:07:cb:07:cf:c5:ca:9f:
a6:3b:3f:d0:38:89:06:84:e5:71:33:ad:6f:e9:29:86:ba:68:
2e:cd:ed:19:76:5c:6b:a4:f2:a1:3b:5e:0f:6c:44:ff:62:55:
50:2a:2d:ab:2c:c3:cb:e3:3f:e9:b6:04:96:fc:40:57:53:dd:
ca:99:8f:c5:90:a2:49:df:df:f4:45:87:41:48:70:f2:ef:97:
0e:55:7a:22:5f:90:70:c4:38:cd:17:0b:99:04:86:ac:bf:e4:
9b:bf:dd:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 22:51:36 2026 by rpki-client