Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/7560e4-fc7d-4a64-b500-e7f05f029a48/1/rwXUKRyugYXGw0LiXe6bfpIPdt0.mft
File: rwXUKRyugYXGw0LiXe6bfpIPdt0.mft (raw, json)
Hash identifier: IjIanwshCKV22HBRa+hV92qHtaEq8xBprEP/mqlnoik=
Subject key identifier: CB:EB:70:92:94:D1:4A:E7:C4:74:23:14:46:C4:69:94:CF:42:61:00
Authority key identifier: AF:05:D4:29:1C:AE:81:85:C6:C3:42:E2:5D:EE:9B:7E:92:0F:76:DD
Certificate issuer: /CN=af05d4291cae8185c6c342e25dee9b7e920f76dd
Certificate serial: 019D281648348C7984E5F91CC42BBA72CAE2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rwXUKRyugYXGw0LiXe6bfpIPdt0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/7560e4-fc7d-4a64-b500-e7f05f029a48/1/rwXUKRyugYXGw0LiXe6bfpIPdt0.mft
Manifest number: 074F
Signing time: Thu 26 Mar 2026 03:00:41 +0000
Manifest this update: Thu 26 Mar 2026 03:00:41 +0000
Manifest next update: Fri 27 Mar 2026 03:00:41 +0000
Files and hashes: 1: G4m4mx_ghT8RFwe2ShhdbyqAMUg.roa (hash: C8aW4E3EPA9z9dvszZWIC2qBgUsFs1qOe+mMPk/k+i4=)
2: rwXUKRyugYXGw0LiXe6bfpIPdt0.crl (hash: zFjndDOXvYp+GiqRGfEsvWlVaUKTPgNVFisD2trmFh8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/7560e4-fc7d-4a64-b500-e7f05f029a48/1/rwXUKRyugYXGw0LiXe6bfpIPdt0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/7560e4-fc7d-4a64-b500-e7f05f029a48/1/rwXUKRyugYXGw0LiXe6bfpIPdt0.mft
rsync://rpki.ripe.net/repository/DEFAULT/rwXUKRyugYXGw0LiXe6bfpIPdt0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 03:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:48:34:8c:79:84:e5:f9:1c:c4:2b:ba:72:ca:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af05d4291cae8185c6c342e25dee9b7e920f76dd
Validity
Not Before: Mar 26 03:00:41 2026 GMT
Not After : Mar 27 03:00:41 2026 GMT
Subject: CN=cbeb709294d14ae7c474231446c46994cf426100
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:a4:fb:ee:46:52:08:15:1f:96:90:32:9d:23:
01:f6:20:32:77:0a:c3:49:3d:2e:e5:d9:66:98:d1:
3e:a0:89:80:ac:e5:8e:e2:03:70:b9:bc:73:00:17:
05:96:cc:f6:b9:7f:c1:1f:47:15:32:d1:06:de:fa:
3c:5b:2b:bc:34:1e:ad:48:8e:43:ec:53:fa:87:a3:
d4:bc:31:5f:7a:f3:15:52:b0:44:63:92:64:37:7e:
c5:7f:3a:ac:b3:25:04:f3:48:e4:52:15:bb:37:36:
ff:69:30:84:7b:aa:db:58:b9:47:e3:64:25:54:8e:
55:d9:6e:51:7d:0f:d7:66:ca:8e:2b:2f:93:14:48:
30:ca:8a:9e:dc:e9:9c:fe:6f:65:a8:6c:1d:57:7b:
fd:9a:ad:b4:cf:96:e9:0c:b0:b6:60:b5:6e:b8:0d:
fe:31:f6:a4:f6:7a:be:08:1b:ea:e2:a2:d7:44:d7:
f5:54:42:cb:10:23:d8:9a:1b:87:43:55:df:97:11:
06:ac:5e:2d:54:18:2b:ba:49:8c:63:91:27:c6:b0:
59:e9:41:35:fe:d7:17:18:f9:e9:c9:94:b3:ee:99:
01:80:be:0e:bc:a3:b8:cc:e5:d8:32:15:d8:1d:26:
2c:be:a7:f3:93:ab:9d:bf:83:0f:a4:2e:7e:ff:30:
ed:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:EB:70:92:94:D1:4A:E7:C4:74:23:14:46:C4:69:94:CF:42:61:00
X509v3 Authority Key Identifier:
keyid:AF:05:D4:29:1C:AE:81:85:C6:C3:42:E2:5D:EE:9B:7E:92:0F:76:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rwXUKRyugYXGw0LiXe6bfpIPdt0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/7560e4-fc7d-4a64-b500-e7f05f029a48/1/rwXUKRyugYXGw0LiXe6bfpIPdt0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/7560e4-fc7d-4a64-b500-e7f05f029a48/1/rwXUKRyugYXGw0LiXe6bfpIPdt0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:8f:f5:bd:78:f5:cb:bf:8b:01:07:b1:6a:6c:94:f0:ed:2b:
59:7e:2b:e5:fa:c4:19:a3:7c:77:38:09:c5:f9:d5:d5:6e:8d:
04:6e:a1:da:29:1b:fc:97:22:65:59:e8:68:26:4d:ba:43:7d:
f0:ce:1c:84:f7:b9:39:34:21:28:b1:97:aa:c0:4e:bd:cb:58:
6f:83:b5:ca:be:c9:8e:89:a9:ee:65:f8:07:90:8a:29:63:e2:
f9:ae:fe:83:14:57:cb:37:93:55:e1:23:bf:9f:08:33:c2:8d:
03:17:52:b8:b9:03:3b:9e:41:93:db:54:89:fd:64:f6:01:f7:
ad:fc:99:85:1c:20:dc:73:2d:7e:77:f9:2c:d0:40:f4:31:62:
56:31:7a:42:67:e3:20:84:8c:f7:b2:dd:44:39:c6:f1:40:b7:
d3:5c:37:34:e1:54:c7:ac:90:54:c8:ba:0e:02:09:de:14:a7:
42:2e:a9:ac:3f:5e:c9:e8:83:5a:00:29:af:0a:8f:e8:69:da:
56:98:1d:7e:09:fc:fb:aa:a1:84:a1:0d:ae:48:1f:15:a0:c3:
3d:65:47:82:06:d1:16:94:6f:ec:04:8f:27:51:6e:43:7d:0b:
f4:8b:66:a2:28:e7:a8:c8:d2:04:b9:0e:03:47:f2:e7:9a:53:
6f:50:f3:57
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0oFkg0jHmE5fkcxCu6csriMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFmMDVkNDI5MWNhZTgxODVjNmMzNDJlMjVkZWU5YjdlOTIw
Zjc2ZGQwHhcNMjYwMzI2MDMwMDQxWhcNMjYwMzI3MDMwMDQxWjAzMTEwLwYDVQQD
EyhjYmViNzA5Mjk0ZDE0YWU3YzQ3NDIzMTQ0NmM0Njk5NGNmNDI2MTAwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx6T77kZSCBUflpAynSMB9iAydwrD
ST0u5dlmmNE+oImArOWO4gNwubxzABcFlsz2uX/BH0cVMtEG3vo8Wyu8NB6tSI5D
7FP6h6PUvDFfevMVUrBEY5JkN37FfzqssyUE80jkUhW7Nzb/aTCEe6rbWLlH42Ql
VI5V2W5RfQ/XZsqOKy+TFEgwyoqe3Omc/m9lqGwdV3v9mq20z5bpDLC2YLVuuA3+
Mfak9nq+CBvq4qLXRNf1VELLECPYmhuHQ1XflxEGrF4tVBgrukmMY5EnxrBZ6UE1
/tcXGPnpyZSz7pkBgL4OvKO4zOXYMhXYHSYsvqfzk6udv4MPpC5+/zDtswIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMvrcJKU0UrnxHQjFEbEaZTPQmEAMB8GA1UdIwQY
MBaAFK8F1CkcroGFxsNC4l3um36SD3bdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcndYVUtSeXVnWVhHdzBMaVhlNmJmcElQZHQwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy83NTYwZTQtZmM3ZC00YTY0LWI1MDAt
ZTdmMDVmMDI5YTQ4LzEvcndYVUtSeXVnWVhHdzBMaVhlNmJmcElQZHQwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNy83NTYwZTQtZmM3ZC00YTY0LWI1MDAtZTdmMDVmMDI5YTQ4
LzEvcndYVUtSeXVnWVhHdzBMaVhlNmJmcElQZHQwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAo/1vXj1
y7+LAQexamyU8O0rWX4r5frEGaN8dzgJxfnV1W6NBG6h2ikb/JciZVnoaCZNukN9
8M4chPe5OTQhKLGXqsBOvctYb4O1yr7Jjomp7mX4B5CKKWPi+a7+gxRXyzeTVeEj
v58IM8KNAxdSuLkDO55Bk9tUif1k9gH3rfyZhRwg3HMtfnf5LNBA9DFiVjF6Qmfj
IISM97LdRDnG8UC301w3NOFUx6yQVMi6DgIJ3hSnQi6prD9eyeiDWgAprwqP6Gna
Vpgdfgn8+6qhhKENrkgfFaDDPWVHggbRFpRv7ASPJ1FuQ30L9ItmoijnqMjSBLkO
A0fy55pTb1DzVw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 12:42:37 2026 by rpki-client