Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/56/6fec3b-0dda-48c4-a233-337b6c49529a/1/aWw2xva-PTKXxcaZLAHK8DmrguY.mft
File: aWw2xva-PTKXxcaZLAHK8DmrguY.mft (raw, json)
Hash identifier: TAafxl+weYSM7cS/ajNxoc+Y63ksfiyR/W09hSjjZfo=
Subject key identifier: 97:2E:42:D4:C6:E1:DF:39:AA:99:B2:8E:D7:81:63:B9:F5:C5:7C:9E
Authority key identifier: 69:6C:36:C6:F6:BE:3D:32:97:C5:C6:99:2C:01:CA:F0:39:AB:82:E6
Certificate issuer: /CN=696c36c6f6be3d3297c5c6992c01caf039ab82e6
Certificate serial: 01A178B9F240DF21448989EC19305AF1A24F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aWw2xva-PTKXxcaZLAHK8DmrguY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/6fec3b-0dda-48c4-a233-337b6c49529a/1/aWw2xva-PTKXxcaZLAHK8DmrguY.mft
Manifest number: 22
Signing time: Mon 26 Oct 2026 15:00:14 +0000
Manifest this update: Mon 26 Oct 2026 15:00:14 +0000
Manifest next update: Tue 27 Oct 2026 15:00:14 +0000
Files and hashes: 1: Ah_CNEvXUdFjTbQf8IpZTGdGMh8.asa (hash: xLMGimBpJxdCGqRqpseiOEhXs4V794HaA/5b7ezX6fA=)
2: aWw2xva-PTKXxcaZLAHK8DmrguY.crl (hash: RIGjvY596hwxOaL2fv2iLxtqnBCNoghazaJa9LB9yXk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/6fec3b-0dda-48c4-a233-337b6c49529a/1/aWw2xva-PTKXxcaZLAHK8DmrguY.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/6fec3b-0dda-48c4-a233-337b6c49529a/1/aWw2xva-PTKXxcaZLAHK8DmrguY.mft
rsync://rpki.ripe.net/repository/DEFAULT/aWw2xva-PTKXxcaZLAHK8DmrguY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 15:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:78:b9:f2:40:df:21:44:89:89:ec:19:30:5a:f1:a2:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=696c36c6f6be3d3297c5c6992c01caf039ab82e6
Validity
Not Before: Oct 26 15:00:14 2026 GMT
Not After : Oct 27 15:00:14 2026 GMT
Subject: CN=972e42d4c6e1df39aa99b28ed78163b9f5c57c9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:b7:29:e7:af:74:57:dd:4b:52:df:9f:c4:2b:
1b:b5:49:d8:cb:9c:fc:1a:c5:53:4b:86:aa:24:8a:
d4:b1:dd:48:34:b7:ee:bf:ae:72:48:26:29:fe:21:
c2:ad:90:5c:54:90:e7:d6:f2:d5:ec:2f:6d:c3:35:
66:47:ae:ce:d5:c4:00:16:e7:2a:10:c9:81:56:17:
d5:24:35:04:24:8a:74:71:49:8f:5c:d0:16:20:4a:
c8:b1:f4:23:be:a9:6c:01:9a:36:50:9f:8d:90:46:
ac:8a:4e:fc:2b:cf:fd:cf:d0:3a:89:15:cc:34:94:
d0:12:8b:24:3d:30:13:d1:68:f1:bf:0c:ff:8e:e4:
78:dd:29:21:1f:8c:92:e3:9a:6d:62:f7:1c:7e:6c:
75:d0:ad:57:85:5c:b4:c5:d9:e6:30:c8:a2:ca:02:
08:1a:9e:64:26:0a:b0:b6:a6:4d:b6:d3:b6:55:8f:
3e:5b:2c:0a:e8:e9:01:3e:ae:d2:0f:e0:fe:32:2b:
a3:09:67:11:2a:10:89:9b:c6:b3:53:c9:a5:4f:1b:
ab:9e:93:15:96:98:f3:4f:bd:c7:a4:47:06:a1:d0:
8e:0d:e3:5d:a6:cc:28:65:47:72:a7:04:3f:c2:e8:
f8:38:b5:d1:80:c3:c5:7b:03:64:5f:ff:48:7e:e6:
8a:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:2E:42:D4:C6:E1:DF:39:AA:99:B2:8E:D7:81:63:B9:F5:C5:7C:9E
X509v3 Authority Key Identifier:
keyid:69:6C:36:C6:F6:BE:3D:32:97:C5:C6:99:2C:01:CA:F0:39:AB:82:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aWw2xva-PTKXxcaZLAHK8DmrguY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/6fec3b-0dda-48c4-a233-337b6c49529a/1/aWw2xva-PTKXxcaZLAHK8DmrguY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/6fec3b-0dda-48c4-a233-337b6c49529a/1/aWw2xva-PTKXxcaZLAHK8DmrguY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:ab:de:ab:ce:29:d8:f5:25:7d:48:90:a0:a1:43:9c:91:57:
86:fb:f2:d1:af:cd:f1:40:af:b5:2c:12:25:08:b6:79:ef:84:
be:b4:50:4d:c4:6d:54:f0:f1:03:c4:b4:ce:3f:dc:55:86:2d:
1b:71:a9:70:56:fc:73:7f:0d:70:67:36:af:d0:e7:fa:ba:fb:
6b:a0:82:47:9e:df:1a:0e:04:ec:1b:9b:b1:88:a2:f8:34:9a:
b2:ae:41:38:ad:03:ae:ee:99:42:36:36:12:8e:84:da:58:59:
7d:b3:cd:19:3a:3f:d0:61:10:e5:be:83:8b:b8:02:a7:98:0f:
d0:d6:fb:3e:6c:ba:d5:b1:1e:c8:c9:bd:d8:13:56:ae:91:e3:
aa:27:e8:ef:42:40:17:c9:6d:38:2b:81:74:57:bc:16:07:5f:
21:0c:67:e8:55:a8:f4:4f:f2:3b:68:ae:ca:f0:2c:29:31:9d:
2d:b4:b6:3e:68:e0:02:c3:09:d3:21:d5:50:85:ce:a6:1a:1e:
74:b9:d8:0d:13:81:98:54:e1:b1:86:3f:e4:d8:29:21:17:60:
bd:10:cc:0f:db:2d:cb:c0:ae:96:81:e7:bc:b8:93:2a:1d:43:
96:94:fa:99:bb:7b:8a:09:57:99:1f:55:a3:b4:f4:60:f5:bd:
7c:b3:fb:24
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaF4ufJA3yFEiYnsGTBa8aJPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY5NmMzNmM2ZjZiZTNkMzI5N2M1YzY5OTJjMDFjYWYwMzlh
YjgyZTYwHhcNMjYxMDI2MTUwMDE0WhcNMjYxMDI3MTUwMDE0WjAzMTEwLwYDVQQD
Eyg5NzJlNDJkNGM2ZTFkZjM5YWE5OWIyOGVkNzgxNjNiOWY1YzU3YzllMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo7cp5690V91LUt+fxCsbtUnYy5z8
GsVTS4aqJIrUsd1INLfuv65ySCYp/iHCrZBcVJDn1vLV7C9twzVmR67O1cQAFucq
EMmBVhfVJDUEJIp0cUmPXNAWIErIsfQjvqlsAZo2UJ+NkEasik78K8/9z9A6iRXM
NJTQEoskPTAT0Wjxvwz/juR43SkhH4yS45ptYvccfmx10K1XhVy0xdnmMMiiygII
Gp5kJgqwtqZNttO2VY8+WywK6OkBPq7SD+D+MiujCWcRKhCJm8azU8mlTxurnpMV
lpjzT73HpEcGodCODeNdpswoZUdypwQ/wuj4OLXRgMPFewNkX/9IfuaKzwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJcuQtTG4d85qpmyjteBY7n1xXyeMB8GA1UdIwQY
MBaAFGlsNsb2vj0yl8XGmSwByvA5q4LmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYVd3Mnh2YS1QVEtYeGNhWkxBSEs4RG1yZ3VZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni82ZmVjM2ItMGRkYS00OGM0LWEyMzMt
MzM3YjZjNDk1MjlhLzEvYVd3Mnh2YS1QVEtYeGNhWkxBSEs4RG1yZ3VZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ni82ZmVjM2ItMGRkYS00OGM0LWEyMzMtMzM3YjZjNDk1Mjlh
LzEvYVd3Mnh2YS1QVEtYeGNhWkxBSEs4RG1yZ3VZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARKveq84p
2PUlfUiQoKFDnJFXhvvy0a/N8UCvtSwSJQi2ee+EvrRQTcRtVPDxA8S0zj/cVYYt
G3GpcFb8c38NcGc2r9Dn+rr7a6CCR57fGg4E7BubsYii+DSasq5BOK0Dru6ZQjY2
Eo6E2lhZfbPNGTo/0GEQ5b6Di7gCp5gP0Nb7Pmy61bEeyMm92BNWrpHjqifo70JA
F8ltOCuBdFe8FgdfIQxn6FWo9E/yO2iuyvAsKTGdLbS2PmjgAsMJ0yHVUIXOphoe
dLnYDROBmFThsYY/5NgpIRdgvRDMD9sty8CuloHnvLiTKh1DlpT6mbt7iglXmR9V
o7T0YPW9fLP7JA==
-----END CERTIFICATE-----
Generated at Tue Oct 27 00:16:50 2026 by rpki-client