Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/33fb90-189b-4e31-b92a-0c18d8597328/1/rwL7VrRZx6IaebaLThGKuHb8lqU.mft
File: rwL7VrRZx6IaebaLThGKuHb8lqU.mft (raw, json)
Hash identifier: XzBcFq/NGo0kUExOca1+UDMzBQ5P1l3bZo0l+YSpgSQ=
Subject key identifier: 30:4C:6D:27:63:12:42:69:91:40:18:E2:58:ED:25:62:AF:B4:65:AE
Authority key identifier: AF:02:FB:56:B4:59:C7:A2:1A:79:B6:8B:4E:11:8A:B8:76:FC:96:A5
Certificate issuer: /CN=af02fb56b459c7a21a79b68b4e118ab876fc96a5
Certificate serial: 019D2884D938A3294AE09F81200258321C0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rwL7VrRZx6IaebaLThGKuHb8lqU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/33fb90-189b-4e31-b92a-0c18d8597328/1/rwL7VrRZx6IaebaLThGKuHb8lqU.mft
Manifest number: 1082
Signing time: Thu 26 Mar 2026 05:01:28 +0000
Manifest this update: Thu 26 Mar 2026 05:01:28 +0000
Manifest next update: Fri 27 Mar 2026 05:01:28 +0000
Files and hashes: 1: rwL7VrRZx6IaebaLThGKuHb8lqU.crl (hash: F6+IdS3N+0RTXFcrBs6x3IshvzyRgbrM5sV3TMpb+3E=)
2: s9PnUrURA1UCKgGCXpOd5G6p8no.roa (hash: e5fYovHhc28JGLHPGhUlbL9alymDaPqLYlneZlPK+cQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/33fb90-189b-4e31-b92a-0c18d8597328/1/rwL7VrRZx6IaebaLThGKuHb8lqU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/33fb90-189b-4e31-b92a-0c18d8597328/1/rwL7VrRZx6IaebaLThGKuHb8lqU.mft
rsync://rpki.ripe.net/repository/DEFAULT/rwL7VrRZx6IaebaLThGKuHb8lqU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 05:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:84:d9:38:a3:29:4a:e0:9f:81:20:02:58:32:1c:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af02fb56b459c7a21a79b68b4e118ab876fc96a5
Validity
Not Before: Mar 26 05:01:28 2026 GMT
Not After : Mar 27 05:01:28 2026 GMT
Subject: CN=304c6d2763124269914018e258ed2562afb465ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:99:c5:2f:01:0a:dc:6a:89:55:c2:80:7c:17:
2a:c3:c2:95:0e:dc:c9:25:e6:98:06:2a:09:e9:1c:
fe:f6:41:06:ad:c3:2a:16:92:1d:93:e6:a3:d7:ac:
9c:88:30:ca:5e:02:ed:7b:83:92:90:4b:9e:32:1d:
a1:38:9c:c3:7d:1f:67:dc:cb:2e:d1:09:84:c8:db:
61:a8:51:78:11:28:89:13:02:fc:77:9e:31:12:ad:
08:70:d3:72:65:8f:99:54:2b:55:f6:17:34:be:bb:
e6:c7:ba:7b:69:b4:6b:bd:6e:14:aa:93:da:75:71:
43:25:c8:51:bc:64:5d:88:e2:92:96:0c:a5:f4:e2:
94:83:23:ae:87:77:65:55:ef:9c:f0:12:82:a0:e6:
6b:72:32:7b:75:a9:3c:3c:cf:ab:82:61:7f:21:55:
02:f6:70:5a:54:32:ac:17:f0:ca:20:74:6c:4b:2a:
47:39:f5:ab:3f:4d:46:55:e9:61:0b:61:44:10:7b:
af:cb:48:d8:18:b7:5f:8d:34:24:82:47:4b:e0:4c:
3f:1d:b2:39:bb:35:f5:41:b0:db:60:89:a7:fc:14:
25:48:49:04:df:31:fe:a4:77:24:82:79:83:cd:60:
23:e5:10:b6:73:49:c2:3b:10:06:d8:6c:28:58:2a:
47:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:4C:6D:27:63:12:42:69:91:40:18:E2:58:ED:25:62:AF:B4:65:AE
X509v3 Authority Key Identifier:
keyid:AF:02:FB:56:B4:59:C7:A2:1A:79:B6:8B:4E:11:8A:B8:76:FC:96:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rwL7VrRZx6IaebaLThGKuHb8lqU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/33fb90-189b-4e31-b92a-0c18d8597328/1/rwL7VrRZx6IaebaLThGKuHb8lqU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/33fb90-189b-4e31-b92a-0c18d8597328/1/rwL7VrRZx6IaebaLThGKuHb8lqU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:79:4f:df:dd:a1:cc:f0:1c:62:60:94:90:bb:bd:b0:4b:a4:
52:1e:0e:70:a9:4f:d6:2e:bc:ff:13:f4:40:ed:3d:c6:ad:52:
1a:2e:54:22:11:57:4d:fc:e3:26:8c:ec:0d:5d:56:39:36:2a:
0e:e6:34:da:ad:76:96:b7:5c:6e:a2:1e:34:e9:8f:8e:c5:ee:
b2:c6:66:25:54:c5:0b:4b:5f:7a:c0:18:40:a0:71:bb:c5:22:
06:21:b1:79:4f:4e:50:6d:0b:47:19:88:23:db:0c:a0:a2:36:
03:dc:23:e7:fe:8b:9c:74:f3:88:76:ec:2c:57:e2:f9:3d:90:
e5:9f:72:86:8a:41:b4:d1:8d:99:d0:b0:ae:08:3e:93:df:b7:
56:38:5a:f4:c4:f6:6d:f9:03:e9:c0:bf:90:eb:b9:ce:4b:ee:
3b:c9:f8:04:b4:d3:04:02:40:5c:26:1e:d5:1f:c7:02:65:79:
f0:1b:c4:f5:d2:0a:1e:bd:a4:2f:c4:ca:82:46:98:41:1e:4f:
30:ad:fa:b1:13:99:f4:23:b1:39:09:70:d2:49:a5:ad:93:c0:
53:a9:33:56:14:41:4c:dd:9c:41:60:6b:48:ed:4f:64:ca:4e:
a1:8f:5d:8b:99:df:f3:b4:b2:7e:8c:8f:02:07:74:14:9a:e4:
9d:3e:3b:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:14:07 2026 by rpki-client