Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/6ad9b8-9f0e-4ad0-a220-3ac3b6737042/1/rw9am9KtHpaGXwDQhSK5qtPpGk0.mft
File: rw9am9KtHpaGXwDQhSK5qtPpGk0.mft (raw, json)
Hash identifier: 2MaTcFL8or4aohbDCk11k4EMFT/FKbRfJ79rf0sQT98=
Subject key identifier: D3:AE:ED:2F:42:43:2F:4F:BD:DB:BF:15:6C:10:AA:4E:F6:E0:50:BB
Authority key identifier: AF:0F:5A:9B:D2:AD:1E:96:86:5F:00:D0:85:22:B9:AA:D3:E9:1A:4D
Certificate issuer: /CN=af0f5a9bd2ad1e96865f00d08522b9aad3e91a4d
Certificate serial: 019E1F4806933C0A80743B29101772E2BAC3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rw9am9KtHpaGXwDQhSK5qtPpGk0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/6ad9b8-9f0e-4ad0-a220-3ac3b6737042/1/rw9am9KtHpaGXwDQhSK5qtPpGk0.mft
Manifest number: 161E
Signing time: Wed 13 May 2026 03:01:14 +0000
Manifest this update: Wed 13 May 2026 03:01:14 +0000
Manifest next update: Thu 14 May 2026 03:01:14 +0000
Files and hashes: 1: CnBLfp0K-MwzN1OvimzKQhhQRz8.roa (hash: etl29j67/XA8KfqoSc4LuDr3rcwYsJQPUU+kY7GMI8s=)
2: Lk4rKldX9sXOjCgYf6TH67Gu2-M.roa (hash: LdwPVlJ5KEW/4BpxrtP9UJQIli3Ut19hqpjKvaQuhlI=)
3: rw9am9KtHpaGXwDQhSK5qtPpGk0.crl (hash: Gfmvsc1Ot4L152HECGDme1Sy2kJr2abaJ3aUWPBYtWY=)
4: zf2OWk_RcBoM6jajwmrPp0mhHEM.roa (hash: 7qEv+OmptmvjMEg/3MLv8VXpUtOOdS45r94EszitJCE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/6ad9b8-9f0e-4ad0-a220-3ac3b6737042/1/rw9am9KtHpaGXwDQhSK5qtPpGk0.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/6ad9b8-9f0e-4ad0-a220-3ac3b6737042/1/rw9am9KtHpaGXwDQhSK5qtPpGk0.mft
rsync://rpki.ripe.net/repository/DEFAULT/rw9am9KtHpaGXwDQhSK5qtPpGk0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 03:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:48:06:93:3c:0a:80:74:3b:29:10:17:72:e2:ba:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af0f5a9bd2ad1e96865f00d08522b9aad3e91a4d
Validity
Not Before: May 13 03:01:14 2026 GMT
Not After : May 14 03:01:14 2026 GMT
Subject: CN=d3aeed2f42432f4fbddbbf156c10aa4ef6e050bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:96:5b:09:61:97:eb:f3:37:68:4d:15:c5:13:
a9:dd:61:a6:b5:2a:ee:33:b3:f0:84:bf:78:96:b2:
54:e0:d6:b3:0e:6d:68:9f:4e:5f:ca:a7:51:17:7b:
e7:56:4f:b1:78:88:41:d3:1f:9e:07:c4:d5:99:91:
32:23:b9:3b:d2:88:3f:38:1c:48:da:4a:f4:5d:d7:
c4:c7:1c:c9:0e:d7:c7:92:a9:fe:fd:8b:a9:73:9a:
24:ea:d7:fa:fe:71:28:d9:91:6a:3d:96:75:ef:35:
0c:29:4d:8d:45:99:ea:9e:c0:f2:ce:68:89:85:11:
ac:ab:5b:93:3a:79:12:df:0d:c7:45:70:ea:ee:4c:
f6:84:8e:3c:5c:eb:41:c5:74:27:ef:ff:9b:d2:be:
a8:48:9d:07:ff:4e:ec:79:47:43:f8:a5:ba:1d:5c:
8a:79:32:ae:cd:3a:3c:f7:e9:95:9e:1e:87:ea:0f:
02:78:91:48:23:68:55:63:21:2f:e5:9f:fe:fa:61:
15:92:84:1c:2a:54:08:c8:34:dc:27:76:18:b7:66:
f5:79:1a:63:52:03:03:9c:f3:76:8a:ad:f1:83:ef:
85:26:1d:7e:4d:1b:42:f9:e6:36:e8:2d:70:09:d7:
a0:81:ad:d1:2b:b4:70:57:85:ed:b5:5c:35:55:bf:
b1:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:AE:ED:2F:42:43:2F:4F:BD:DB:BF:15:6C:10:AA:4E:F6:E0:50:BB
X509v3 Authority Key Identifier:
keyid:AF:0F:5A:9B:D2:AD:1E:96:86:5F:00:D0:85:22:B9:AA:D3:E9:1A:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rw9am9KtHpaGXwDQhSK5qtPpGk0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/6ad9b8-9f0e-4ad0-a220-3ac3b6737042/1/rw9am9KtHpaGXwDQhSK5qtPpGk0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/6ad9b8-9f0e-4ad0-a220-3ac3b6737042/1/rw9am9KtHpaGXwDQhSK5qtPpGk0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:1d:cb:fa:f3:f7:fd:9e:c6:1d:c9:dc:c8:60:15:23:35:71:
bc:d6:a3:78:b4:9e:ef:b0:e3:e6:4f:7b:50:00:93:1b:4c:01:
a5:08:e3:0c:ed:8e:6c:fc:02:d2:51:45:19:97:08:6b:9c:bb:
91:72:05:c0:37:60:aa:c3:6d:7d:0a:38:3e:1a:3a:e7:9e:b8:
74:36:6d:4f:1f:a2:00:d7:0d:66:75:bd:49:56:97:60:c1:8c:
10:fc:da:83:12:62:fc:d0:5a:6c:51:21:f4:9e:75:0f:26:03:
89:3f:0c:fa:b4:d0:7c:31:f8:f2:de:a5:4d:6a:8b:04:f6:d3:
d9:9f:3b:b6:97:6f:ac:9d:cc:78:ec:bf:d8:5e:f0:43:f3:4d:
26:c8:d0:ee:87:75:f6:f6:bd:47:c1:b4:f6:b5:ff:08:b9:4a:
e4:20:f6:60:61:46:96:4a:e2:34:ff:c5:20:98:a7:41:04:aa:
24:ea:ae:82:05:46:d5:d2:20:12:aa:fa:13:26:33:e0:73:0f:
a3:6f:3f:39:25:95:c5:92:6c:21:8f:eb:a3:e4:fc:a8:b9:b2:
19:61:18:59:6a:f8:b6:b9:63:e3:13:42:b2:d1:07:2c:bb:07:
42:51:b4:2c:04:22:12:e0:9a:a9:d3:be:a0:b5:cf:3b:1d:ac:
e3:55:a3:ad
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4fSAaTPAqAdDspEBdy4rrDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFmMGY1YTliZDJhZDFlOTY4NjVmMDBkMDg1MjJiOWFhZDNl
OTFhNGQwHhcNMjYwNTEzMDMwMTE0WhcNMjYwNTE0MDMwMTE0WjAzMTEwLwYDVQQD
EyhkM2FlZWQyZjQyNDMyZjRmYmRkYmJmMTU2YzEwYWE0ZWY2ZTA1MGJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA15ZbCWGX6/M3aE0VxROp3WGmtSru
M7PwhL94lrJU4NazDm1on05fyqdRF3vnVk+xeIhB0x+eB8TVmZEyI7k70og/OBxI
2kr0XdfExxzJDtfHkqn+/Yupc5ok6tf6/nEo2ZFqPZZ17zUMKU2NRZnqnsDyzmiJ
hRGsq1uTOnkS3w3HRXDq7kz2hI48XOtBxXQn7/+b0r6oSJ0H/07seUdD+KW6HVyK
eTKuzTo89+mVnh6H6g8CeJFII2hVYyEv5Z/++mEVkoQcKlQIyDTcJ3YYt2b1eRpj
UgMDnPN2iq3xg++FJh1+TRtC+eY26C1wCdegga3RK7RwV4XttVw1Vb+xNQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNOu7S9CQy9Pvdu/FWwQqk724FC7MB8GA1UdIwQY
MBaAFK8PWpvSrR6Whl8A0IUiuarT6RpNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcnc5YW05S3RIcGFHWHdEUWhTSzVxdFBwR2swLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS82YWQ5YjgtOWYwZS00YWQwLWEyMjAt
M2FjM2I2NzM3MDQyLzEvcnc5YW05S3RIcGFHWHdEUWhTSzVxdFBwR2swLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS82YWQ5YjgtOWYwZS00YWQwLWEyMjAtM2FjM2I2NzM3MDQy
LzEvcnc5YW05S3RIcGFHWHdEUWhTSzVxdFBwR2swLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeR3L+vP3
/Z7GHcncyGAVIzVxvNajeLSe77Dj5k97UACTG0wBpQjjDO2ObPwC0lFFGZcIa5y7
kXIFwDdgqsNtfQo4Pho65564dDZtTx+iANcNZnW9SVaXYMGMEPzagxJi/NBabFEh
9J51DyYDiT8M+rTQfDH48t6lTWqLBPbT2Z87tpdvrJ3MeOy/2F7wQ/NNJsjQ7od1
9va9R8G09rX/CLlK5CD2YGFGlkriNP/FIJinQQSqJOquggVG1dIgEqr6EyYz4HMP
o28/OSWVxZJsIY/ro+T8qLmyGWEYWWr4trlj4xNCstEHLLsHQlG0LAQiEuCaqdO+
oLXPOx2s41WjrQ==
-----END CERTIFICATE-----
Generated at Wed May 13 13:18:19 2026 by rpki-client