Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/7560e4-fc7d-4a64-b500-e7f05f029a48/1/rwXUKRyugYXGw0LiXe6bfpIPdt0.mft
File: rwXUKRyugYXGw0LiXe6bfpIPdt0.mft (raw, json)
Hash identifier: yfnXVaG6Y8uSascuGX1ToE5W36h6epkWS5fqWmKfp+g=
Subject key identifier: 81:25:F4:C5:F6:57:0E:64:A1:E7:0E:C3:B6:E2:8E:48:52:F4:8D:31
Authority key identifier: AF:05:D4:29:1C:AE:81:85:C6:C3:42:E2:5D:EE:9B:7E:92:0F:76:DD
Certificate issuer: /CN=af05d4291cae8185c6c342e25dee9b7e920f76dd
Certificate serial: 019F92B628F57BBF25EA5D65A7455F5C6139
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rwXUKRyugYXGw0LiXe6bfpIPdt0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/7560e4-fc7d-4a64-b500-e7f05f029a48/1/rwXUKRyugYXGw0LiXe6bfpIPdt0.mft
Manifest number: 0890
Signing time: Fri 24 Jul 2026 06:00:39 +0000
Manifest this update: Fri 24 Jul 2026 06:00:39 +0000
Manifest next update: Sat 25 Jul 2026 06:00:39 +0000
Files and hashes: 1: G4m4mx_ghT8RFwe2ShhdbyqAMUg.roa (hash: C8aW4E3EPA9z9dvszZWIC2qBgUsFs1qOe+mMPk/k+i4=)
2: PfsR9OcnQ4S_HWSHexwSv7eZV3U.roa (hash: L9T3aJ5Whx4/WHc/mYYWTiVL3q32wwganw2KXtvSvcc=)
3: rwXUKRyugYXGw0LiXe6bfpIPdt0.crl (hash: f7xKIO522TAZfIVME+Oy5oHRCmhawVWqyYMb1oBhsHc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/7560e4-fc7d-4a64-b500-e7f05f029a48/1/rwXUKRyugYXGw0LiXe6bfpIPdt0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/7560e4-fc7d-4a64-b500-e7f05f029a48/1/rwXUKRyugYXGw0LiXe6bfpIPdt0.mft
rsync://rpki.ripe.net/repository/DEFAULT/rwXUKRyugYXGw0LiXe6bfpIPdt0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 06:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:b6:28:f5:7b:bf:25:ea:5d:65:a7:45:5f:5c:61:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af05d4291cae8185c6c342e25dee9b7e920f76dd
Validity
Not Before: Jul 24 06:00:39 2026 GMT
Not After : Jul 25 06:00:39 2026 GMT
Subject: CN=8125f4c5f6570e64a1e70ec3b6e28e4852f48d31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:9f:a5:e0:93:ff:93:98:f9:f8:e7:a2:96:c4:
4e:34:53:39:07:5c:3e:c5:fa:7a:6d:fb:c1:da:fc:
cb:bb:93:3a:2d:b1:df:10:d2:bd:5a:23:de:70:6e:
a5:61:48:c3:64:ab:44:8f:52:1b:32:9d:f3:ec:91:
27:31:34:fd:cb:ef:be:e0:f9:cd:77:c2:75:6a:c7:
97:87:90:41:1c:cf:a3:b1:7d:89:4f:69:3b:36:ac:
75:97:1f:c6:d5:5e:83:2f:56:86:ea:1d:0d:48:cd:
7e:8e:f5:c8:fa:81:21:4f:8b:af:cb:83:91:be:99:
ab:32:c6:d7:91:6f:76:f2:f0:1a:ee:b9:5c:bf:fd:
ba:90:a1:78:7f:d8:ce:51:6a:93:18:4a:4b:93:57:
b7:32:ac:89:fe:cf:43:ac:07:ad:2b:19:86:fb:fd:
e8:0b:bb:d1:a9:57:07:e3:5d:b5:75:9d:aa:1c:04:
b6:3e:b3:9f:ad:9e:39:3c:6e:4e:68:0f:d5:2c:7d:
29:79:40:d8:28:a0:7a:0f:5c:5e:52:13:54:23:eb:
f6:64:f7:64:d8:ef:4b:3b:cc:59:66:f1:6d:4b:fa:
b0:92:c4:3b:cf:67:dd:bf:53:c8:94:f0:3f:8b:b6:
f9:93:69:57:52:85:ec:f0:91:cc:42:ae:0d:80:cb:
46:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:25:F4:C5:F6:57:0E:64:A1:E7:0E:C3:B6:E2:8E:48:52:F4:8D:31
X509v3 Authority Key Identifier:
keyid:AF:05:D4:29:1C:AE:81:85:C6:C3:42:E2:5D:EE:9B:7E:92:0F:76:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rwXUKRyugYXGw0LiXe6bfpIPdt0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/7560e4-fc7d-4a64-b500-e7f05f029a48/1/rwXUKRyugYXGw0LiXe6bfpIPdt0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/7560e4-fc7d-4a64-b500-e7f05f029a48/1/rwXUKRyugYXGw0LiXe6bfpIPdt0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:49:44:53:f6:71:d3:b6:4b:eb:45:19:8b:29:17:93:3b:07:
3c:9a:44:d6:d2:fe:6d:c2:d7:c7:c0:f3:5e:61:74:47:fa:91:
c7:91:08:d2:83:1c:13:b3:3c:84:86:c1:dc:61:65:9f:96:e4:
83:b2:aa:b9:f8:32:14:22:df:d8:11:3d:75:b2:eb:7c:da:da:
3d:c3:a5:8f:50:b6:7e:d9:73:1b:e5:32:9d:ad:69:3c:ef:65:
b2:8b:b2:c1:2f:15:44:b7:69:ee:70:cd:08:f2:4c:b2:23:59:
00:fa:fa:38:a2:cc:94:16:ed:3e:fc:9d:b5:74:c8:1f:df:7a:
21:d9:22:35:9d:d3:a1:fb:28:f2:2e:ea:09:4b:9e:f9:cb:24:
67:d7:f0:81:47:b0:a2:da:be:dd:8d:bd:8d:bd:34:26:f7:d2:
05:0b:b1:d6:da:57:69:42:7f:e3:55:e9:7a:0a:b7:73:62:d3:
9d:d0:22:0c:90:25:bb:89:dc:06:2e:9f:23:e4:0a:f2:dd:ec:
69:e6:64:2e:76:ba:64:8e:6e:79:a5:13:a3:6c:75:39:24:bd:
42:89:1d:96:42:40:07:43:16:03:17:f2:32:24:b1:90:98:2c:
b1:d2:87:c7:9b:22:da:5b:a2:ee:39:a5:d2:3f:f7:ee:27:84:
f4:62:6b:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:27:08 2026 by rpki-client