Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a1/dbc0e6-2555-4bf3-9ab1-9915990bcb59/1/r00WwzVAe_DQpRzvm5wcUxAoD0g.mft
File: r00WwzVAe_DQpRzvm5wcUxAoD0g.mft (raw, json)
Hash identifier: R+5ZmRyqvqRP8zvW5KmHgAcPaKlzUqo32Q3PSv9VMok=
Subject key identifier: AF:4E:92:7C:4D:24:DB:A8:27:FD:1D:7E:C3:57:C7:13:83:A1:2D:63
Authority key identifier: AF:4D:16:C3:35:40:7B:F0:D0:A5:1C:EF:9B:9C:1C:53:10:28:0F:48
Certificate issuer: /CN=af4d16c335407bf0d0a51cef9b9c1c5310280f48
Certificate serial: 01A0E70983226B68250F8D159E4E5B3DE3B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r00WwzVAe_DQpRzvm5wcUxAoD0g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/dbc0e6-2555-4bf3-9ab1-9915990bcb59/1/r00WwzVAe_DQpRzvm5wcUxAoD0g.mft
Manifest number: 1A78
Signing time: Mon 28 Sep 2026 08:02:35 +0000
Manifest this update: Mon 28 Sep 2026 08:02:35 +0000
Manifest next update: Tue 29 Sep 2026 08:02:35 +0000
Files and hashes: 1: hF2_QqmtMbNQA49MqqzjPhAPsWE.roa (hash: O8eRPs1R9dWQ4OQwYYfRSjIWQnAt7XcVrD6vIyy9r0c=)
2: r00WwzVAe_DQpRzvm5wcUxAoD0g.crl (hash: ELp/suaaFEP6kf7yb5fugyNjFSFNaLJc4mR2LAmGZ/s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/dbc0e6-2555-4bf3-9ab1-9915990bcb59/1/r00WwzVAe_DQpRzvm5wcUxAoD0g.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/dbc0e6-2555-4bf3-9ab1-9915990bcb59/1/r00WwzVAe_DQpRzvm5wcUxAoD0g.mft
rsync://rpki.ripe.net/repository/DEFAULT/r00WwzVAe_DQpRzvm5wcUxAoD0g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 08:02:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e7:09:83:22:6b:68:25:0f:8d:15:9e:4e:5b:3d:e3:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af4d16c335407bf0d0a51cef9b9c1c5310280f48
Validity
Not Before: Sep 28 08:02:35 2026 GMT
Not After : Sep 29 08:02:35 2026 GMT
Subject: CN=af4e927c4d24dba827fd1d7ec357c71383a12d63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:b3:f7:dc:ab:8c:86:04:ea:a2:75:5d:5f:7d:
e4:44:f7:fa:d7:87:51:f3:1a:4b:56:fe:5b:95:61:
7e:66:f7:c2:1f:da:90:81:ca:b2:5d:0a:ab:ad:40:
08:3b:31:11:b3:57:3c:15:c1:45:85:04:78:b5:b5:
02:3b:89:f5:c8:29:ac:a1:d9:a6:ce:68:e1:cf:3d:
45:9c:0e:84:61:f0:c2:2d:1c:ba:b1:24:9c:1e:33:
ed:26:1e:4e:90:8e:d3:86:da:54:5f:ac:db:60:e1:
d9:4c:f0:5a:da:da:82:1e:fa:a6:1b:80:3b:4f:a6:
ca:da:9a:b4:32:2e:d6:71:b5:ef:84:cc:d3:ba:1c:
e4:e2:1f:9f:4b:dd:fe:ca:02:67:4d:40:66:15:71:
fb:0d:d0:ac:5e:24:f2:9a:d3:fe:12:2d:fb:05:42:
53:8e:55:e9:3d:53:d3:82:87:8a:d6:9c:ac:37:8c:
f2:a9:86:72:a3:f9:a1:39:c4:f4:1f:45:b1:10:3c:
75:eb:ae:8b:51:f6:22:b3:f2:76:f7:d6:61:23:2b:
93:30:ea:86:2a:1b:ec:3b:89:22:ce:49:02:bb:af:
9d:53:89:e5:ce:d2:d9:e2:b6:97:55:0b:41:25:64:
01:34:9e:61:bf:d6:25:5d:a2:8b:b2:cb:76:3d:72:
3c:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:4E:92:7C:4D:24:DB:A8:27:FD:1D:7E:C3:57:C7:13:83:A1:2D:63
X509v3 Authority Key Identifier:
keyid:AF:4D:16:C3:35:40:7B:F0:D0:A5:1C:EF:9B:9C:1C:53:10:28:0F:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r00WwzVAe_DQpRzvm5wcUxAoD0g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/dbc0e6-2555-4bf3-9ab1-9915990bcb59/1/r00WwzVAe_DQpRzvm5wcUxAoD0g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/dbc0e6-2555-4bf3-9ab1-9915990bcb59/1/r00WwzVAe_DQpRzvm5wcUxAoD0g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:9e:e0:85:da:28:3f:f2:e4:25:65:92:b6:f9:21:83:20:d5:
a4:82:94:06:dc:25:a7:fe:4f:7e:ad:1d:e0:2b:80:c9:00:39:
09:37:9c:58:61:5e:89:71:4f:72:c1:4a:b7:31:98:61:0e:17:
d2:f2:65:1e:19:c1:7c:33:24:a5:13:69:87:3d:89:eb:81:7c:
db:15:9a:3f:6b:f8:24:31:e6:06:1c:69:67:14:c3:e7:61:ed:
ef:13:ee:09:8a:ab:4a:25:87:dd:db:ef:d7:68:0b:0b:4e:19:
70:2c:9e:4f:0d:bc:57:10:39:30:e9:a9:81:00:6c:2b:11:5a:
a1:4e:a3:05:f9:4d:89:12:82:98:45:40:c9:3f:27:a4:7c:2b:
56:b9:31:d1:e7:9d:00:d6:46:38:39:e8:d6:0a:f6:b2:a8:fe:
d4:eb:4d:94:19:2b:11:ca:a4:a7:d9:90:b2:4f:1c:23:10:5f:
90:ad:90:69:82:64:e1:73:0a:c2:0a:e7:52:4a:5c:79:0f:41:
08:05:30:7d:1f:d0:64:92:86:7e:0a:d3:b4:21:be:e0:f1:32:
1b:da:5a:88:8c:26:35:4e:4f:cb:47:2a:7c:cf:55:f4:2e:7b:
56:8f:9d:8d:41:83:6f:90:ad:e3:d8:a3:cc:a2:2e:50:e1:25:
85:f6:07:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 16:30:19 2026 by rpki-client