Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1d/717615-d202-48f2-bb93-cc20f4172ced/1/aWIqGq33nnEdHn5DGfcywLLagB4.mft
File: aWIqGq33nnEdHn5DGfcywLLagB4.mft (raw, json)
Hash identifier: IYUd415Dif9yCB/L7Gchq4iVbSA1edXb5Mji7ytq8EM=
Subject key identifier: 9E:5C:0C:05:D3:91:AA:42:94:5F:A0:48:0F:F5:BA:6F:39:87:0F:11
Authority key identifier: 69:62:2A:1A:AD:F7:9E:71:1D:1E:7E:43:19:F7:32:C0:B2:DA:80:1E
Certificate issuer: /CN=69622a1aadf79e711d1e7e4319f732c0b2da801e
Certificate serial: 01A027334E329521936FF827AD733C2D3908
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aWIqGq33nnEdHn5DGfcywLLagB4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/717615-d202-48f2-bb93-cc20f4172ced/1/aWIqGq33nnEdHn5DGfcywLLagB4.mft
Manifest number: 1A17
Signing time: Sat 22 Aug 2026 02:01:08 +0000
Manifest this update: Sat 22 Aug 2026 02:01:08 +0000
Manifest next update: Sun 23 Aug 2026 02:01:08 +0000
Files and hashes: 1: 0-VSXxZUPNE_NCyRYY4aOknsIgM.roa (hash: p3ie/xFXWDV8klzQ/kVNpHbbrPevYLWLmd0IwEUgv1A=)
2: U3PfejTQb2whMGKKVwhS4XwhEu0.roa (hash: xYX61cbjxOAGtEMGsVih/dcwxYwy4/ZCPIVGCthKU24=)
3: aWIqGq33nnEdHn5DGfcywLLagB4.crl (hash: tvepPTw2e4GUzIiGaVnf7zBMG8U+pb+xjsML5Qs0xbw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/717615-d202-48f2-bb93-cc20f4172ced/1/aWIqGq33nnEdHn5DGfcywLLagB4.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/717615-d202-48f2-bb93-cc20f4172ced/1/aWIqGq33nnEdHn5DGfcywLLagB4.mft
rsync://rpki.ripe.net/repository/DEFAULT/aWIqGq33nnEdHn5DGfcywLLagB4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 23 Aug 2026 01:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:27:33:4e:32:95:21:93:6f:f8:27:ad:73:3c:2d:39:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69622a1aadf79e711d1e7e4319f732c0b2da801e
Validity
Not Before: Aug 22 02:01:08 2026 GMT
Not After : Aug 23 02:01:08 2026 GMT
Subject: CN=9e5c0c05d391aa42945fa0480ff5ba6f39870f11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:c2:36:c6:b1:fc:04:14:9a:0e:26:1f:a8:86:
28:2a:8c:2c:66:e5:3f:4f:76:1d:4e:60:40:34:92:
a5:6e:7f:cc:c6:e9:80:f8:9f:7d:d1:b9:ad:f2:a1:
27:04:c5:da:74:69:2b:a8:d5:78:d8:d2:78:3c:b0:
5c:64:73:b7:94:f4:16:e1:bc:f7:0e:a0:96:bf:e8:
35:bd:da:bb:56:ac:ba:93:6d:42:d4:13:29:41:5f:
37:84:6f:ce:f5:2a:24:84:3b:91:31:87:ea:aa:0c:
9b:94:6f:2f:37:2d:ee:cd:bb:9e:09:e7:7a:a6:c8:
e8:be:83:47:94:17:a8:c2:37:0c:be:02:ab:cf:91:
04:42:01:d3:03:bd:40:9d:7d:1a:06:ff:30:17:de:
ec:6a:c4:21:a5:4d:a0:5f:12:e2:5f:56:fe:e7:c2:
8e:08:51:3b:cd:67:4d:91:e2:de:a9:ba:d1:28:39:
a7:e9:4d:a6:82:e1:07:42:56:29:65:9c:8c:9e:5b:
53:2b:98:9e:2c:ff:62:af:2f:6f:7a:e1:82:42:c7:
7a:b4:c8:2a:1f:11:a3:30:30:3b:a0:2d:f7:c3:42:
7d:28:dc:54:38:25:30:76:8c:2c:2b:df:a1:9d:b2:
eb:88:b6:b9:00:ca:79:54:a4:1c:11:35:1f:39:88:
89:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:5C:0C:05:D3:91:AA:42:94:5F:A0:48:0F:F5:BA:6F:39:87:0F:11
X509v3 Authority Key Identifier:
keyid:69:62:2A:1A:AD:F7:9E:71:1D:1E:7E:43:19:F7:32:C0:B2:DA:80:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aWIqGq33nnEdHn5DGfcywLLagB4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/717615-d202-48f2-bb93-cc20f4172ced/1/aWIqGq33nnEdHn5DGfcywLLagB4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/717615-d202-48f2-bb93-cc20f4172ced/1/aWIqGq33nnEdHn5DGfcywLLagB4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:b2:0f:3a:f0:fe:7c:5a:b3:2c:78:be:8b:9f:ab:c4:3f:1d:
48:09:c9:7f:3d:82:58:96:01:6b:b5:23:11:ba:32:cb:7e:1f:
86:bd:b3:95:7d:d4:de:bd:87:cb:d9:6b:d0:28:8f:60:b3:ef:
10:17:77:c9:d7:74:f8:bc:44:ae:33:86:46:56:ef:48:ca:47:
db:f0:e3:47:fa:a0:b8:6c:9a:4b:14:9a:df:e1:43:1b:03:7c:
e3:0a:ad:18:2f:bd:76:31:7a:80:cb:46:9c:58:e4:18:91:e5:
4d:2c:aa:08:a8:b9:76:ef:c5:fc:93:3c:a5:5e:a8:ad:ad:b7:
c2:b9:4b:58:d6:49:5f:f6:a5:0a:ff:76:51:a5:2c:79:ad:f1:
f1:f5:f7:72:46:1a:3a:c7:b2:d3:7f:2b:b4:fc:2c:c7:dc:e3:
54:4f:80:db:76:36:d8:dc:4c:61:c2:a7:59:98:5c:31:c7:f6:
7a:4f:2c:95:fb:0e:6d:c3:fd:a8:ee:d8:14:96:42:6a:51:f5:
79:83:b9:86:04:1f:88:71:5b:29:85:77:31:bb:1d:cd:cf:0f:
44:03:25:b8:e0:83:e0:0e:00:a0:84:cd:b0:72:9a:d1:39:8d:
33:f1:0e:cb:02:26:46:77:f9:e1:41:33:7d:cd:5a:50:18:6a:
79:12:1b:cc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaAnM04ylSGTb/gnrXM8LTkIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY5NjIyYTFhYWRmNzllNzExZDFlN2U0MzE5ZjczMmMwYjJk
YTgwMWUwHhcNMjYwODIyMDIwMTA4WhcNMjYwODIzMDIwMTA4WjAzMTEwLwYDVQQD
Eyg5ZTVjMGMwNWQzOTFhYTQyOTQ1ZmEwNDgwZmY1YmE2ZjM5ODcwZjExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA18I2xrH8BBSaDiYfqIYoKowsZuU/
T3YdTmBANJKlbn/MxumA+J990bmt8qEnBMXadGkrqNV42NJ4PLBcZHO3lPQW4bz3
DqCWv+g1vdq7Vqy6k21C1BMpQV83hG/O9SokhDuRMYfqqgyblG8vNy3uzbueCed6
psjovoNHlBeowjcMvgKrz5EEQgHTA71AnX0aBv8wF97sasQhpU2gXxLiX1b+58KO
CFE7zWdNkeLeqbrRKDmn6U2mguEHQlYpZZyMnltTK5ieLP9iry9veuGCQsd6tMgq
HxGjMDA7oC33w0J9KNxUOCUwdowsK9+hnbLriLa5AMp5VKQcETUfOYiJUQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ5cDAXTkapClF+gSA/1um85hw8RMB8GA1UdIwQY
MBaAFGliKhqt955xHR5+Qxn3MsCy2oAeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYVdJcUdxMzNubkVkSG41REdmY3l3TExhZ0I0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC83MTc2MTUtZDIwMi00OGYyLWJiOTMt
Y2MyMGY0MTcyY2VkLzEvYVdJcUdxMzNubkVkSG41REdmY3l3TExhZ0I0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZC83MTc2MTUtZDIwMi00OGYyLWJiOTMtY2MyMGY0MTcyY2Vk
LzEvYVdJcUdxMzNubkVkSG41REdmY3l3TExhZ0I0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQrIPOvD+
fFqzLHi+i5+rxD8dSAnJfz2CWJYBa7UjEboyy34fhr2zlX3U3r2Hy9lr0CiPYLPv
EBd3ydd0+LxErjOGRlbvSMpH2/DjR/qguGyaSxSa3+FDGwN84wqtGC+9djF6gMtG
nFjkGJHlTSyqCKi5du/F/JM8pV6ora23wrlLWNZJX/alCv92UaUsea3x8fX3ckYa
Osey038rtPwsx9zjVE+A23Y22NxMYcKnWZhcMcf2ek8slfsObcP9qO7YFJZCalH1
eYO5hgQfiHFbKYV3Mbsdzc8PRAMluOCD4A4AoITNsHKa0TmNM/EOywImRnf54UEz
fc1aUBhqeRIbzA==
-----END CERTIFICATE-----
Generated at Sat Aug 22 07:04:05 2026 by rpki-client