Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/717615-d202-48f2-bb93-cc20f4172ced/1/aWIqGq33nnEdHn5DGfcywLLagB4.mft
File: aWIqGq33nnEdHn5DGfcywLLagB4.mft (raw, json)
Hash identifier: +LhzX6z99W38csfsT7fmuQ3CmpJdXexL281ldm1zKUI=
Subject key identifier: 96:9A:45:B8:BF:21:CA:C9:5E:C6:DD:E0:03:A8:8B:F3:50:06:91:79
Authority key identifier: 69:62:2A:1A:AD:F7:9E:71:1D:1E:7E:43:19:F7:32:C0:B2:DA:80:1E
Certificate issuer: /CN=69622a1aadf79e711d1e7e4319f732c0b2da801e
Certificate serial: 019E2B4C576D0E97DCB01BDE83F1F17BD330
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aWIqGq33nnEdHn5DGfcywLLagB4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/717615-d202-48f2-bb93-cc20f4172ced/1/aWIqGq33nnEdHn5DGfcywLLagB4.mft
Manifest number: 1910
Signing time: Fri 15 May 2026 11:01:23 +0000
Manifest this update: Fri 15 May 2026 11:01:23 +0000
Manifest next update: Sat 16 May 2026 11:01:23 +0000
Files and hashes: 1: 0-VSXxZUPNE_NCyRYY4aOknsIgM.roa (hash: p3ie/xFXWDV8klzQ/kVNpHbbrPevYLWLmd0IwEUgv1A=)
2: U3PfejTQb2whMGKKVwhS4XwhEu0.roa (hash: xYX61cbjxOAGtEMGsVih/dcwxYwy4/ZCPIVGCthKU24=)
3: aWIqGq33nnEdHn5DGfcywLLagB4.crl (hash: pzidG9bB0dyRz29z8apleukYURcyhLDFwajdCS9Z9dg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/717615-d202-48f2-bb93-cc20f4172ced/1/aWIqGq33nnEdHn5DGfcywLLagB4.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/717615-d202-48f2-bb93-cc20f4172ced/1/aWIqGq33nnEdHn5DGfcywLLagB4.mft
rsync://rpki.ripe.net/repository/DEFAULT/aWIqGq33nnEdHn5DGfcywLLagB4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 16 May 2026 11:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:2b:4c:57:6d:0e:97:dc:b0:1b:de:83:f1:f1:7b:d3:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69622a1aadf79e711d1e7e4319f732c0b2da801e
Validity
Not Before: May 15 11:01:23 2026 GMT
Not After : May 16 11:01:23 2026 GMT
Subject: CN=969a45b8bf21cac95ec6dde003a88bf350069179
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:f9:65:48:ec:68:a7:64:f8:b0:c2:e4:94:3d:
5c:02:6b:df:4d:c7:94:e7:bf:c4:85:13:52:ee:4e:
fa:a0:a8:31:13:08:75:11:3b:17:c3:44:78:77:4a:
55:5f:20:16:4e:3c:b9:74:3f:c9:57:93:40:ff:d3:
48:30:e5:90:83:ec:ce:5b:36:27:02:17:e2:c9:9e:
04:cc:11:64:17:d2:26:c8:24:8d:11:28:0c:07:f9:
ab:e5:d4:2c:af:20:7a:74:a6:e8:b4:e5:55:a1:ca:
0d:1d:69:87:8f:60:00:d0:3c:df:24:42:76:97:63:
0c:2e:ad:f0:d6:fb:d7:b2:18:1b:fa:2a:d8:b6:b7:
d6:90:f3:ae:da:7d:2e:00:c0:75:ae:4d:af:bd:67:
2f:03:13:04:9d:4a:1b:7b:89:27:bf:90:18:b9:98:
2c:c9:fd:4c:87:67:f1:32:b0:11:48:da:a6:48:4e:
df:0a:90:8c:4e:12:d7:d7:04:bd:b6:ec:25:11:ed:
9c:8e:82:ed:5c:26:23:de:cf:7b:95:a1:22:2d:ca:
d8:d6:fd:ce:fc:55:27:dc:ff:ef:4c:c6:21:40:80:
bb:8b:c9:d1:26:60:5f:88:8e:d6:e6:5a:31:16:cb:
de:3c:30:fa:fd:b8:ed:2c:04:3f:40:05:bc:35:b5:
e6:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:9A:45:B8:BF:21:CA:C9:5E:C6:DD:E0:03:A8:8B:F3:50:06:91:79
X509v3 Authority Key Identifier:
keyid:69:62:2A:1A:AD:F7:9E:71:1D:1E:7E:43:19:F7:32:C0:B2:DA:80:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aWIqGq33nnEdHn5DGfcywLLagB4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/717615-d202-48f2-bb93-cc20f4172ced/1/aWIqGq33nnEdHn5DGfcywLLagB4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/717615-d202-48f2-bb93-cc20f4172ced/1/aWIqGq33nnEdHn5DGfcywLLagB4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:c5:17:54:dd:d9:1e:d2:b0:e3:22:a3:5b:6e:03:13:d7:95:
49:61:9c:9b:57:68:65:d4:c9:cd:9b:67:73:57:50:c7:4a:15:
1a:9b:cf:d5:fb:dc:51:42:24:19:88:6f:96:ef:aa:39:54:c8:
3c:8d:df:46:3d:a6:72:d5:12:e6:6f:0e:db:9b:cd:b4:38:f1:
20:26:c4:83:89:72:47:47:dc:af:f7:4b:9d:0c:5b:7e:38:36:
d0:27:de:22:0f:1a:dd:4a:13:73:4d:79:a7:c7:bb:19:09:3c:
b9:55:cb:18:bd:f9:df:af:ca:3e:16:34:9a:ae:07:0c:47:9f:
8f:b9:2d:23:05:be:d9:db:aa:e7:72:ed:b6:a5:c0:d2:be:ff:
de:bb:76:0f:4c:03:88:84:64:bd:05:99:2e:86:e1:b7:1e:61:
ee:31:eb:02:20:91:1e:ae:86:9b:9d:18:e6:38:3f:4b:cb:73:
96:5d:64:ac:4e:4c:28:a6:eb:6c:02:4b:d2:80:f2:94:32:df:
a9:29:fb:52:bd:20:16:2d:a1:3f:f2:77:13:54:89:db:f4:b6:
c4:90:98:30:e7:11:d4:c6:fe:8c:00:f9:36:cf:d7:2a:72:09:
c7:24:5e:5b:bb:92:32:f8:19:de:93:b9:40:03:7d:5f:ac:1d:
b9:f6:44:3e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4rTFdtDpfcsBveg/Hxe9MwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY5NjIyYTFhYWRmNzllNzExZDFlN2U0MzE5ZjczMmMwYjJk
YTgwMWUwHhcNMjYwNTE1MTEwMTIzWhcNMjYwNTE2MTEwMTIzWjAzMTEwLwYDVQQD
Eyg5NjlhNDViOGJmMjFjYWM5NWVjNmRkZTAwM2E4OGJmMzUwMDY5MTc5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvPllSOxop2T4sMLklD1cAmvfTceU
57/EhRNS7k76oKgxEwh1ETsXw0R4d0pVXyAWTjy5dD/JV5NA/9NIMOWQg+zOWzYn
AhfiyZ4EzBFkF9ImyCSNESgMB/mr5dQsryB6dKbotOVVocoNHWmHj2AA0DzfJEJ2
l2MMLq3w1vvXshgb+irYtrfWkPOu2n0uAMB1rk2vvWcvAxMEnUobe4knv5AYuZgs
yf1Mh2fxMrARSNqmSE7fCpCMThLX1wS9tuwlEe2cjoLtXCYj3s97laEiLcrY1v3O
/FUn3P/vTMYhQIC7i8nRJmBfiI7W5loxFsvePDD6/bjtLAQ/QAW8NbXmsQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJaaRbi/IcrJXsbd4AOoi/NQBpF5MB8GA1UdIwQY
MBaAFGliKhqt955xHR5+Qxn3MsCy2oAeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYVdJcUdxMzNubkVkSG41REdmY3l3TExhZ0I0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC83MTc2MTUtZDIwMi00OGYyLWJiOTMt
Y2MyMGY0MTcyY2VkLzEvYVdJcUdxMzNubkVkSG41REdmY3l3TExhZ0I0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZC83MTc2MTUtZDIwMi00OGYyLWJiOTMtY2MyMGY0MTcyY2Vk
LzEvYVdJcUdxMzNubkVkSG41REdmY3l3TExhZ0I0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAScUXVN3Z
HtKw4yKjW24DE9eVSWGcm1doZdTJzZtnc1dQx0oVGpvP1fvcUUIkGYhvlu+qOVTI
PI3fRj2mctUS5m8O25vNtDjxICbEg4lyR0fcr/dLnQxbfjg20CfeIg8a3UoTc015
p8e7GQk8uVXLGL3536/KPhY0mq4HDEefj7ktIwW+2duq53LttqXA0r7/3rt2D0wD
iIRkvQWZLobhtx5h7jHrAiCRHq6Gm50Y5jg/S8tzll1krE5MKKbrbAJL0oDylDLf
qSn7Ur0gFi2hP/J3E1SJ2/S2xJCYMOcR1Mb+jAD5Ns/XKnIJxyReW7uSMvgZ3pO5
QAN9X6wdufZEPg==
-----END CERTIFICATE-----
Generated at Fri May 15 18:39:32 2026 by rpki-client