Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/6ad9b8-9f0e-4ad0-a220-3ac3b6737042/1/rw9am9KtHpaGXwDQhSK5qtPpGk0.mft
File: rw9am9KtHpaGXwDQhSK5qtPpGk0.mft (raw, json)
Hash identifier: RhdEHWe9mFRArewpu+DXt3IOxFn1cYsCytNnqECkVVw=
Subject key identifier: 25:61:94:76:98:6E:B8:1F:29:DC:9F:EB:70:36:C9:59:2C:5A:52:9F
Authority key identifier: AF:0F:5A:9B:D2:AD:1E:96:86:5F:00:D0:85:22:B9:AA:D3:E9:1A:4D
Certificate issuer: /CN=af0f5a9bd2ad1e96865f00d08522b9aad3e91a4d
Certificate serial: 019D2628695B0792ED067A5987BF94CEF83A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rw9am9KtHpaGXwDQhSK5qtPpGk0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/6ad9b8-9f0e-4ad0-a220-3ac3b6737042/1/rw9am9KtHpaGXwDQhSK5qtPpGk0.mft
Manifest number: 159D
Signing time: Wed 25 Mar 2026 18:01:15 +0000
Manifest this update: Wed 25 Mar 2026 18:01:15 +0000
Manifest next update: Thu 26 Mar 2026 18:01:15 +0000
Files and hashes: 1: CnBLfp0K-MwzN1OvimzKQhhQRz8.roa (hash: etl29j67/XA8KfqoSc4LuDr3rcwYsJQPUU+kY7GMI8s=)
2: Lk4rKldX9sXOjCgYf6TH67Gu2-M.roa (hash: LdwPVlJ5KEW/4BpxrtP9UJQIli3Ut19hqpjKvaQuhlI=)
3: rw9am9KtHpaGXwDQhSK5qtPpGk0.crl (hash: zoEg14r7cIvGwiCczniHQssT6MXzd2wtRmd1tkW/7qM=)
4: zf2OWk_RcBoM6jajwmrPp0mhHEM.roa (hash: 7qEv+OmptmvjMEg/3MLv8VXpUtOOdS45r94EszitJCE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/6ad9b8-9f0e-4ad0-a220-3ac3b6737042/1/rw9am9KtHpaGXwDQhSK5qtPpGk0.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/6ad9b8-9f0e-4ad0-a220-3ac3b6737042/1/rw9am9KtHpaGXwDQhSK5qtPpGk0.mft
rsync://rpki.ripe.net/repository/DEFAULT/rw9am9KtHpaGXwDQhSK5qtPpGk0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:28:69:5b:07:92:ed:06:7a:59:87:bf:94:ce:f8:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af0f5a9bd2ad1e96865f00d08522b9aad3e91a4d
Validity
Not Before: Mar 25 18:01:15 2026 GMT
Not After : Mar 26 18:01:15 2026 GMT
Subject: CN=25619476986eb81f29dc9feb7036c9592c5a529f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:b9:5d:1e:30:81:1f:ae:7f:da:86:15:bd:38:
e3:af:4b:51:35:48:1c:f3:62:de:2b:57:b8:b8:cd:
76:8b:39:02:cc:1c:10:86:81:eb:8c:4c:7f:b4:b5:
93:0a:cc:02:a1:ab:a3:40:e6:4c:0b:2f:ff:01:80:
3b:72:38:1e:ec:b9:18:ee:8b:20:26:da:d6:1f:12:
34:b6:63:b3:a3:ae:11:64:62:a7:be:b1:8a:21:43:
5d:63:86:c5:e8:e3:9f:0b:e3:c0:af:b9:f7:cd:12:
a5:06:10:ce:6d:d2:a8:83:00:cd:5e:bd:05:44:e9:
b6:26:ad:7e:f0:84:68:e6:69:6c:1c:74:c7:84:c9:
ec:02:19:1a:ea:6d:45:7d:95:56:30:ca:67:d5:c7:
6c:29:d3:fc:bb:03:a4:08:be:e9:ad:4f:62:20:a7:
15:c1:12:00:0d:d4:25:8b:27:a9:42:a4:dd:fc:94:
96:51:59:63:51:09:09:c5:f7:b0:fe:b0:54:1b:2b:
eb:be:1a:d8:ec:13:c2:d4:51:a7:04:a8:12:c1:31:
81:64:84:2a:ed:24:14:6d:68:11:4b:e1:42:f1:c2:
db:94:7d:45:9e:ed:a0:87:34:8a:79:11:0b:d4:d4:
0f:11:fe:b0:58:75:1b:4a:94:f1:f2:2d:ef:6e:f4:
26:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:61:94:76:98:6E:B8:1F:29:DC:9F:EB:70:36:C9:59:2C:5A:52:9F
X509v3 Authority Key Identifier:
keyid:AF:0F:5A:9B:D2:AD:1E:96:86:5F:00:D0:85:22:B9:AA:D3:E9:1A:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rw9am9KtHpaGXwDQhSK5qtPpGk0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/6ad9b8-9f0e-4ad0-a220-3ac3b6737042/1/rw9am9KtHpaGXwDQhSK5qtPpGk0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/6ad9b8-9f0e-4ad0-a220-3ac3b6737042/1/rw9am9KtHpaGXwDQhSK5qtPpGk0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:59:d4:a1:ea:3a:0d:5b:e7:b8:b6:38:2e:37:b1:df:ed:1b:
04:61:bc:43:07:cd:d7:b0:a1:f4:c1:73:5f:fe:1a:6c:f8:f3:
90:77:ab:57:57:a6:dd:62:52:79:1d:c2:e1:64:a2:eb:4b:9e:
b2:2d:11:57:60:45:bc:85:f0:5b:e2:a3:bd:41:e1:6b:18:08:
70:dc:b6:eb:d3:d4:c8:b6:8c:1b:65:71:06:3a:e9:e2:f6:a7:
c2:13:67:0e:24:d7:08:db:38:36:24:1a:e1:9e:b6:ae:34:07:
7c:42:96:0a:30:d2:fb:a4:09:4d:58:6c:15:92:80:d9:be:81:
d4:2f:a1:32:78:ac:80:a7:c5:c0:b2:70:5f:09:b2:91:f3:5b:
3c:15:63:7f:e3:44:d6:8e:bd:04:c2:1f:90:98:79:95:5f:5d:
da:78:49:2c:d6:b6:af:6c:c7:1b:d4:0c:95:40:b7:1b:83:7e:
f5:f9:6e:a2:7a:22:34:3b:c7:26:4a:46:a1:e3:be:9e:e5:2c:
54:da:ea:77:a8:9f:23:82:32:06:85:df:a1:07:be:e3:50:88:
82:3b:b8:50:9f:fa:67:19:51:f8:4b:70:76:34:d4:7d:1f:6a:
d0:39:b5:db:fe:2b:60:2f:78:d9:fc:3a:30:42:c1:3d:50:68:
53:5c:67:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 01:01:50 2026 by rpki-client