Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/717615-d202-48f2-bb93-cc20f4172ced/1/aWIqGq33nnEdHn5DGfcywLLagB4.mft
File: aWIqGq33nnEdHn5DGfcywLLagB4.mft (raw, json)
Hash identifier: is9486XjpbxUcDvIqr+ZMP6QxeAsgDtSh4nkgKXowzo=
Subject key identifier: 40:7D:ED:75:96:8C:B9:38:C3:36:89:97:1F:7C:46:2A:B2:C4:34:60
Authority key identifier: 69:62:2A:1A:AD:F7:9E:71:1D:1E:7E:43:19:F7:32:C0:B2:DA:80:1E
Certificate issuer: /CN=69622a1aadf79e711d1e7e4319f732c0b2da801e
Certificate serial: 019D37F760BF0A0B37D04F69D15ABA7683E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aWIqGq33nnEdHn5DGfcywLLagB4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/717615-d202-48f2-bb93-cc20f4172ced/1/aWIqGq33nnEdHn5DGfcywLLagB4.mft
Manifest number: 1892
Signing time: Sun 29 Mar 2026 05:00:52 +0000
Manifest this update: Sun 29 Mar 2026 05:00:52 +0000
Manifest next update: Mon 30 Mar 2026 05:00:52 +0000
Files and hashes: 1: 0-VSXxZUPNE_NCyRYY4aOknsIgM.roa (hash: p3ie/xFXWDV8klzQ/kVNpHbbrPevYLWLmd0IwEUgv1A=)
2: U3PfejTQb2whMGKKVwhS4XwhEu0.roa (hash: xYX61cbjxOAGtEMGsVih/dcwxYwy4/ZCPIVGCthKU24=)
3: aWIqGq33nnEdHn5DGfcywLLagB4.crl (hash: 26+AFysYL/wOuuEgeyZKLvvRLdnyW0gUyVGYgIe8LE8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/717615-d202-48f2-bb93-cc20f4172ced/1/aWIqGq33nnEdHn5DGfcywLLagB4.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/717615-d202-48f2-bb93-cc20f4172ced/1/aWIqGq33nnEdHn5DGfcywLLagB4.mft
rsync://rpki.ripe.net/repository/DEFAULT/aWIqGq33nnEdHn5DGfcywLLagB4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:60:bf:0a:0b:37:d0:4f:69:d1:5a:ba:76:83:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69622a1aadf79e711d1e7e4319f732c0b2da801e
Validity
Not Before: Mar 29 05:00:52 2026 GMT
Not After : Mar 30 05:00:52 2026 GMT
Subject: CN=407ded75968cb938c33689971f7c462ab2c43460
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:44:5c:48:b0:9c:e8:d6:d5:5f:95:75:96:ed:
9d:ce:e6:a9:af:04:55:fe:50:ae:ad:1e:b8:35:66:
2e:3a:33:84:b4:a9:6d:9f:ea:ed:d2:05:19:1b:f4:
88:5c:6b:88:8d:66:fa:ce:53:0c:f5:46:d8:5c:f3:
7b:13:65:03:2c:60:ca:6e:4a:9f:74:de:d9:c2:93:
0e:28:5a:6f:63:d3:76:72:12:88:c7:37:9a:1e:98:
08:fb:99:d9:59:33:8f:8a:c0:ae:d1:50:58:15:8d:
c0:d9:c2:64:fe:85:fd:07:c3:16:d5:46:5f:d7:59:
02:ee:c8:63:92:fd:2a:cf:97:6b:b0:8c:8c:78:fb:
3f:31:53:c3:d9:0e:d7:9e:dc:51:7f:84:52:92:7e:
a2:bb:4d:6b:29:cf:d2:ab:63:e5:05:a6:ef:37:c1:
86:dc:70:ce:ad:85:da:cb:96:1b:92:8c:ee:57:6d:
28:45:bf:02:2a:c3:35:48:34:88:af:6d:da:15:ec:
b0:77:73:f8:62:8c:ff:d2:63:85:cd:98:2b:b7:7e:
0c:b5:9d:e8:44:f4:26:3d:41:38:4d:dc:a1:73:b2:
ef:0a:aa:6e:1d:97:7a:e6:be:05:a3:e0:be:a8:2d:
80:6c:02:0c:00:a9:77:58:fc:b5:f9:39:25:24:37:
91:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:7D:ED:75:96:8C:B9:38:C3:36:89:97:1F:7C:46:2A:B2:C4:34:60
X509v3 Authority Key Identifier:
keyid:69:62:2A:1A:AD:F7:9E:71:1D:1E:7E:43:19:F7:32:C0:B2:DA:80:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aWIqGq33nnEdHn5DGfcywLLagB4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/717615-d202-48f2-bb93-cc20f4172ced/1/aWIqGq33nnEdHn5DGfcywLLagB4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/717615-d202-48f2-bb93-cc20f4172ced/1/aWIqGq33nnEdHn5DGfcywLLagB4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:e8:68:a2:a5:fa:76:8b:f6:ce:12:26:67:cf:54:de:7a:3c:
98:5c:2d:ca:3c:de:f0:2e:fe:08:ab:96:87:f7:18:c7:83:fc:
ec:83:9a:f0:a6:f3:5a:f4:94:a2:6d:ec:34:ea:21:19:d9:12:
aa:15:7b:b7:14:3c:63:3d:4e:05:e7:f2:88:25:3e:dd:bb:f6:
b7:3c:9a:44:6e:96:23:98:d6:7b:fc:83:fa:bb:44:ba:b5:43:
14:66:ab:5e:2d:05:a7:44:b7:b9:a3:44:bf:fe:0d:8e:c6:40:
ce:23:51:be:90:99:d9:f3:7e:9e:f2:c5:ac:7a:b1:cc:93:7f:
0f:d2:c2:78:bb:c9:ce:f5:0f:1b:08:9c:0b:63:b7:e3:75:09:
30:24:a6:cb:52:8d:b4:f0:15:44:f8:da:8b:88:23:91:f8:b3:
08:b6:40:58:17:98:60:89:fe:a3:0d:3b:2c:3f:2b:07:75:9a:
63:96:51:30:a5:ba:ff:f6:cf:ed:2b:83:18:50:92:0e:2e:f7:
d4:2a:c9:54:62:e0:08:7c:57:44:02:d4:2b:82:2d:d3:ee:44:
eb:b0:2a:da:77:99:34:45:3b:a3:9c:fb:d3:89:b2:e7:dc:48:
52:11:fd:69:d2:67:2c:ea:06:25:c1:69:db:97:2b:da:80:50:
db:3b:b8:d4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0392C/Cgs30E9p0Vq6doPpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY5NjIyYTFhYWRmNzllNzExZDFlN2U0MzE5ZjczMmMwYjJk
YTgwMWUwHhcNMjYwMzI5MDUwMDUyWhcNMjYwMzMwMDUwMDUyWjAzMTEwLwYDVQQD
Eyg0MDdkZWQ3NTk2OGNiOTM4YzMzNjg5OTcxZjdjNDYyYWIyYzQzNDYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn0RcSLCc6NbVX5V1lu2dzuaprwRV
/lCurR64NWYuOjOEtKltn+rt0gUZG/SIXGuIjWb6zlMM9UbYXPN7E2UDLGDKbkqf
dN7ZwpMOKFpvY9N2chKIxzeaHpgI+5nZWTOPisCu0VBYFY3A2cJk/oX9B8MW1UZf
11kC7shjkv0qz5drsIyMePs/MVPD2Q7XntxRf4RSkn6iu01rKc/Sq2PlBabvN8GG
3HDOrYXay5YbkozuV20oRb8CKsM1SDSIr23aFeywd3P4Yoz/0mOFzZgrt34MtZ3o
RPQmPUE4Tdyhc7LvCqpuHZd65r4Fo+C+qC2AbAIMAKl3WPy1+TklJDeRQQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEB97XWWjLk4wzaJlx98RiqyxDRgMB8GA1UdIwQY
MBaAFGliKhqt955xHR5+Qxn3MsCy2oAeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYVdJcUdxMzNubkVkSG41REdmY3l3TExhZ0I0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC83MTc2MTUtZDIwMi00OGYyLWJiOTMt
Y2MyMGY0MTcyY2VkLzEvYVdJcUdxMzNubkVkSG41REdmY3l3TExhZ0I0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZC83MTc2MTUtZDIwMi00OGYyLWJiOTMtY2MyMGY0MTcyY2Vk
LzEvYVdJcUdxMzNubkVkSG41REdmY3l3TExhZ0I0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiehooqX6
dov2zhImZ89U3no8mFwtyjze8C7+CKuWh/cYx4P87IOa8KbzWvSUom3sNOohGdkS
qhV7txQ8Yz1OBefyiCU+3bv2tzyaRG6WI5jWe/yD+rtEurVDFGarXi0Fp0S3uaNE
v/4NjsZAziNRvpCZ2fN+nvLFrHqxzJN/D9LCeLvJzvUPGwicC2O343UJMCSmy1KN
tPAVRPjai4gjkfizCLZAWBeYYIn+ow07LD8rB3WaY5ZRMKW6//bP7SuDGFCSDi73
1CrJVGLgCHxXRALUK4It0+5E67Aq2neZNEU7o5z704my59xIUhH9adJnLOoGJcFp
25cr2oBQ2zu41A==
-----END CERTIFICATE-----
Generated at Sun Mar 29 14:55:43 2026 by rpki-client