Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1d/717615-d202-48f2-bb93-cc20f4172ced/1/aWIqGq33nnEdHn5DGfcywLLagB4.mft
File: aWIqGq33nnEdHn5DGfcywLLagB4.mft (raw, json)
Hash identifier: xjb5JL9+YrT+ynDNNTlu8CxJTlU37b+iph2cpco1Fts=
Subject key identifier: E7:A4:3A:BC:D6:3E:D6:D5:FE:EF:8A:D1:FB:C4:8F:67:11:FA:3B:AE
Authority key identifier: 69:62:2A:1A:AD:F7:9E:71:1D:1E:7E:43:19:F7:32:C0:B2:DA:80:1E
Certificate issuer: /CN=69622a1aadf79e711d1e7e4319f732c0b2da801e
Certificate serial: 01A1377F1888D40D840B1C14CC21C77CB1C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aWIqGq33nnEdHn5DGfcywLLagB4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/717615-d202-48f2-bb93-cc20f4172ced/1/aWIqGq33nnEdHn5DGfcywLLagB4.mft
Manifest number: 1AA4
Signing time: Tue 13 Oct 2026 23:00:38 +0000
Manifest this update: Tue 13 Oct 2026 23:00:38 +0000
Manifest next update: Wed 14 Oct 2026 23:00:38 +0000
Files and hashes: 1: 0-VSXxZUPNE_NCyRYY4aOknsIgM.roa (hash: p3ie/xFXWDV8klzQ/kVNpHbbrPevYLWLmd0IwEUgv1A=)
2: U3PfejTQb2whMGKKVwhS4XwhEu0.roa (hash: xYX61cbjxOAGtEMGsVih/dcwxYwy4/ZCPIVGCthKU24=)
3: aWIqGq33nnEdHn5DGfcywLLagB4.crl (hash: 4drBP7bEZbySEtwKz7f91gATiMBFJdi36ng3PVnORm0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/717615-d202-48f2-bb93-cc20f4172ced/1/aWIqGq33nnEdHn5DGfcywLLagB4.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/717615-d202-48f2-bb93-cc20f4172ced/1/aWIqGq33nnEdHn5DGfcywLLagB4.mft
rsync://rpki.ripe.net/repository/DEFAULT/aWIqGq33nnEdHn5DGfcywLLagB4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Oct 2026 20:43:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:37:7f:18:88:d4:0d:84:0b:1c:14:cc:21:c7:7c:b1:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69622a1aadf79e711d1e7e4319f732c0b2da801e
Validity
Not Before: Oct 13 23:00:38 2026 GMT
Not After : Oct 14 23:00:38 2026 GMT
Subject: CN=e7a43abcd63ed6d5feef8ad1fbc48f6711fa3bae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:24:8d:73:59:d3:d2:48:af:3e:04:6c:3a:b1:
44:5a:a3:cf:05:5a:e9:1f:6b:ad:7a:a1:3b:a2:f0:
c7:35:78:02:ce:6c:f4:a5:ed:92:e7:44:a9:d5:bd:
09:0b:c6:d3:f5:d0:cd:49:da:be:c2:70:17:b2:74:
43:36:28:85:59:93:22:41:56:a1:68:31:55:7d:82:
79:2f:9e:2f:dc:8c:85:4b:ca:ea:7c:32:02:34:59:
6f:73:7b:7d:79:58:f4:5a:c0:3e:68:2e:9f:21:ac:
62:8d:aa:51:9f:bc:e7:a0:16:70:2d:f1:0d:e1:92:
66:06:5d:b6:ca:b4:94:6b:68:2b:54:f4:f5:d0:6b:
a4:3b:35:e8:dd:b1:20:59:fb:8b:a2:6b:4d:04:a3:
c5:ad:35:03:7a:0c:9a:1b:89:86:17:23:1f:1f:36:
3f:72:ed:d2:e9:23:02:47:27:90:9b:cd:d1:a1:6a:
d2:54:73:dd:74:ec:f4:78:21:ba:98:a3:e1:51:b6:
82:01:25:79:10:86:c3:bf:4c:cd:67:c2:94:93:da:
77:db:33:cf:16:fa:69:69:90:36:76:5a:dd:97:37:
71:e6:60:67:79:8e:20:f6:75:91:3c:ab:6b:41:b7:
ab:44:0f:92:0e:08:e9:50:3e:fe:0d:0e:a9:6a:2a:
45:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:A4:3A:BC:D6:3E:D6:D5:FE:EF:8A:D1:FB:C4:8F:67:11:FA:3B:AE
X509v3 Authority Key Identifier:
keyid:69:62:2A:1A:AD:F7:9E:71:1D:1E:7E:43:19:F7:32:C0:B2:DA:80:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aWIqGq33nnEdHn5DGfcywLLagB4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/717615-d202-48f2-bb93-cc20f4172ced/1/aWIqGq33nnEdHn5DGfcywLLagB4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/717615-d202-48f2-bb93-cc20f4172ced/1/aWIqGq33nnEdHn5DGfcywLLagB4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:ef:08:1d:c3:1b:cc:4e:5f:51:6d:61:62:98:c2:89:04:a7:
5c:7a:2f:60:63:de:ef:02:70:44:1b:86:2a:8f:2e:dc:a4:f5:
14:8e:66:9f:82:37:af:49:08:15:ca:d9:8f:43:d3:98:fd:ea:
61:e9:ef:af:03:bb:e7:3c:d0:c6:8c:7a:68:1b:4d:d3:89:90:
c5:0a:b4:55:24:9e:54:28:67:81:7e:23:ca:72:47:2b:43:89:
f4:2b:fd:3c:03:28:5d:c4:19:e1:4f:57:d2:d3:57:c6:74:83:
37:64:25:37:cc:be:5e:d7:ff:15:e1:bb:cd:29:8a:00:fd:4a:
9e:d3:f9:29:1b:60:4d:8b:11:9f:c1:fd:ae:a4:27:48:3e:78:
6f:e1:e0:70:0e:72:de:58:b4:c3:15:8a:5b:e2:24:0a:4f:9e:
53:77:88:d7:6b:ec:c8:67:6e:a5:f6:17:57:30:74:aa:15:8d:
18:73:b8:42:d5:1b:90:36:99:c6:51:5f:f8:06:99:24:0e:fb:
c6:1f:da:f0:e1:75:a3:1e:7c:6f:1c:04:31:05:f1:bb:7c:cf:
c9:06:9d:fb:e9:0d:6d:b2:6e:0f:11:db:21:dc:46:6f:af:12:
57:e8:f2:6f:6c:9e:97:23:c3:1e:6f:8c:38:bf:91:28:f5:b0:
ec:66:1d:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 07:46:05 2026 by rpki-client