Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/52b199-9e1f-4ec7-b0aa-4a4e0f424f17/1/rwNoFqMX3ZnSU4OjKmgYWcBHtf8.mft
File: rwNoFqMX3ZnSU4OjKmgYWcBHtf8.mft (raw, json)
Hash identifier: HB5dEXwyCNVfjImZ5/SVnD+HJ1vx1tckV1C93/ByUeI=
Subject key identifier: 46:8A:74:3C:82:BE:04:2C:80:24:F1:CD:D2:1B:C7:89:5A:70:43:15
Authority key identifier: AF:03:68:16:A3:17:DD:99:D2:53:83:A3:2A:68:18:59:C0:47:B5:FF
Certificate issuer: /CN=af036816a317dd99d25383a32a681859c047b5ff
Certificate serial: 019F9391FD3A526809129BED4E4E322882D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rwNoFqMX3ZnSU4OjKmgYWcBHtf8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/52b199-9e1f-4ec7-b0aa-4a4e0f424f17/1/rwNoFqMX3ZnSU4OjKmgYWcBHtf8.mft
Manifest number: 1424
Signing time: Fri 24 Jul 2026 10:00:45 +0000
Manifest this update: Fri 24 Jul 2026 10:00:45 +0000
Manifest next update: Sat 25 Jul 2026 10:00:45 +0000
Files and hashes: 1: eZ9UOq9D7h6PkF-tsoPFMwz1Ago.roa (hash: stzfv2f+p3RFGsG9S6OYQeB7VYNNBEus7AwqJ8t7tGM=)
2: rwNoFqMX3ZnSU4OjKmgYWcBHtf8.crl (hash: JKsP7pjgpTdXOGP9yjRC33TXCfJ5haftcNesriJGnRU=)
3: z1DkUd2XVt6-3mpdk1d5JBWy8pk.roa (hash: Nd41zSlcpnJ9luejNMRZ4qZmw74tJoui7F4UBsvSDmA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/52b199-9e1f-4ec7-b0aa-4a4e0f424f17/1/rwNoFqMX3ZnSU4OjKmgYWcBHtf8.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/52b199-9e1f-4ec7-b0aa-4a4e0f424f17/1/rwNoFqMX3ZnSU4OjKmgYWcBHtf8.mft
rsync://rpki.ripe.net/repository/DEFAULT/rwNoFqMX3ZnSU4OjKmgYWcBHtf8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:91:fd:3a:52:68:09:12:9b:ed:4e:4e:32:28:82:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af036816a317dd99d25383a32a681859c047b5ff
Validity
Not Before: Jul 24 10:00:45 2026 GMT
Not After : Jul 25 10:00:45 2026 GMT
Subject: CN=468a743c82be042c8024f1cdd21bc7895a704315
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:1b:12:ac:51:94:e5:e7:15:6f:e9:b8:e1:cd:
2a:10:5f:b7:2a:0f:a9:be:2d:16:50:ae:b6:f4:83:
64:8a:37:e6:79:9f:91:0c:77:07:76:c0:dc:6f:f4:
82:63:03:30:f1:55:f0:ab:46:33:06:d4:89:c9:3b:
af:ba:0a:96:e9:0b:3a:9c:69:a5:d5:48:d8:d3:0e:
34:d6:1f:c4:0b:52:92:6d:a1:36:2d:64:cc:4c:25:
8b:ff:26:f2:f5:2a:91:35:68:d7:60:cf:0b:1c:40:
56:41:70:d4:a9:12:da:57:2f:d6:a3:92:bb:e7:7c:
8e:da:87:fd:34:1d:c2:56:2b:08:ce:46:1e:da:91:
32:07:09:ed:ce:67:c3:9f:81:92:c4:f1:4d:18:80:
3e:4c:3c:a8:44:4f:e1:3d:9c:a7:ae:e8:aa:3b:d4:
d5:d2:42:0e:95:d4:1d:ae:1e:94:83:c1:50:e2:ff:
c1:03:21:a5:77:29:54:25:44:f7:e4:c9:ff:30:31:
ca:98:db:34:99:34:e5:9f:6c:10:75:42:d9:3d:35:
c3:c3:ea:04:09:96:33:bd:e5:28:59:03:37:49:55:
70:05:c6:4d:1b:a3:9b:e7:ac:ee:08:7e:9a:45:34:
86:6d:60:dc:07:7c:fc:77:d0:e9:f3:c1:e0:78:fb:
90:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:8A:74:3C:82:BE:04:2C:80:24:F1:CD:D2:1B:C7:89:5A:70:43:15
X509v3 Authority Key Identifier:
keyid:AF:03:68:16:A3:17:DD:99:D2:53:83:A3:2A:68:18:59:C0:47:B5:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rwNoFqMX3ZnSU4OjKmgYWcBHtf8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/52b199-9e1f-4ec7-b0aa-4a4e0f424f17/1/rwNoFqMX3ZnSU4OjKmgYWcBHtf8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/52b199-9e1f-4ec7-b0aa-4a4e0f424f17/1/rwNoFqMX3ZnSU4OjKmgYWcBHtf8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:84:e7:4c:26:36:6a:ef:54:9b:79:7c:5f:54:c4:44:f7:dd:
63:b3:ff:d6:bd:71:de:c4:d5:b3:fe:6b:36:93:23:b9:e4:c5:
02:ab:43:43:23:9f:74:66:6d:fc:3d:4d:eb:92:e5:ff:cd:b7:
14:d3:7e:4b:55:4d:0c:45:06:d8:fc:d5:5b:5e:a7:14:02:42:
0c:22:b8:fe:97:23:6f:d6:b4:31:a3:20:02:a5:ab:16:08:30:
06:ab:68:20:b2:26:2d:74:88:cd:d8:5e:d5:8a:a8:c1:28:b9:
74:75:32:f9:1a:48:b2:a8:fa:c4:69:ec:ea:51:7c:42:8f:00:
b4:1f:d8:0f:2c:9e:9c:8b:ac:13:8e:cf:ce:e1:ce:12:e8:cb:
29:5d:de:92:0a:b0:cf:13:d2:1a:2b:10:44:8a:60:65:90:73:
d3:5e:23:ce:61:a7:ec:94:fd:ac:d4:78:1f:a9:db:39:60:56:
28:94:64:02:f4:7c:87:ca:9c:e8:99:de:64:54:db:32:06:02:
2c:37:e9:4c:e5:96:d6:33:93:2c:52:f4:6f:a5:d4:52:fc:81:
83:97:15:e7:8a:6f:90:36:c3:64:7b:3f:c6:ee:d9:d7:b2:84:
eb:60:cf:26:7b:d8:42:c4:9a:11:f4:95:60:e1:ef:a6:5f:d4:
9f:42:c5:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:17:00 2026 by rpki-client