Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/717615-d202-48f2-bb93-cc20f4172ced/1/aWIqGq33nnEdHn5DGfcywLLagB4.mft
File: aWIqGq33nnEdHn5DGfcywLLagB4.mft (raw, json)
Hash identifier: qZrm2u+7Y5PYpvdbq+fc2+PgSbO/eZczEvSPOYrK5a0=
Subject key identifier: 4B:26:26:09:DA:A1:86:60:5B:38:38:78:5D:A9:F9:1B:E3:53:4C:A3
Authority key identifier: 69:62:2A:1A:AD:F7:9E:71:1D:1E:7E:43:19:F7:32:C0:B2:DA:80:1E
Certificate issuer: /CN=69622a1aadf79e711d1e7e4319f732c0b2da801e
Certificate serial: 019F284899FC399E01F6957394A92CF52C32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aWIqGq33nnEdHn5DGfcywLLagB4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/717615-d202-48f2-bb93-cc20f4172ced/1/aWIqGq33nnEdHn5DGfcywLLagB4.mft
Manifest number: 1993
Signing time: Fri 03 Jul 2026 14:01:14 +0000
Manifest this update: Fri 03 Jul 2026 14:01:14 +0000
Manifest next update: Sat 04 Jul 2026 14:01:14 +0000
Files and hashes: 1: 0-VSXxZUPNE_NCyRYY4aOknsIgM.roa (hash: p3ie/xFXWDV8klzQ/kVNpHbbrPevYLWLmd0IwEUgv1A=)
2: U3PfejTQb2whMGKKVwhS4XwhEu0.roa (hash: xYX61cbjxOAGtEMGsVih/dcwxYwy4/ZCPIVGCthKU24=)
3: aWIqGq33nnEdHn5DGfcywLLagB4.crl (hash: STxIerkelG4d7FH+gMqFPgqqUrbbqK2n1K5auJL7Ek8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/717615-d202-48f2-bb93-cc20f4172ced/1/aWIqGq33nnEdHn5DGfcywLLagB4.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/717615-d202-48f2-bb93-cc20f4172ced/1/aWIqGq33nnEdHn5DGfcywLLagB4.mft
rsync://rpki.ripe.net/repository/DEFAULT/aWIqGq33nnEdHn5DGfcywLLagB4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 Jul 2026 14:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:28:48:99:fc:39:9e:01:f6:95:73:94:a9:2c:f5:2c:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69622a1aadf79e711d1e7e4319f732c0b2da801e
Validity
Not Before: Jul 3 14:01:14 2026 GMT
Not After : Jul 4 14:01:14 2026 GMT
Subject: CN=4b262609daa186605b3838785da9f91be3534ca3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:f1:e0:d5:7f:cb:e8:98:5b:1d:d4:be:1a:b5:
1d:3e:3c:55:3d:71:53:1d:b9:45:b7:cc:c2:80:18:
fe:66:35:18:11:e4:d6:11:a9:93:db:98:1c:c8:8a:
ba:68:78:0e:92:b4:92:79:a0:54:e2:a3:fd:56:03:
fe:1d:5d:1a:8b:7f:72:3a:7c:1f:57:81:91:02:1a:
fe:da:37:48:85:2c:b2:49:91:c6:42:51:44:0a:39:
59:97:3d:d0:0b:f1:e4:e9:ee:d1:8c:ad:5f:79:77:
d9:d7:74:c4:f5:22:f6:aa:7a:a2:e7:6b:06:0a:07:
7f:2d:00:f3:55:5e:c1:03:ad:25:8c:76:eb:cb:63:
e9:3b:d8:8a:6c:b4:d2:5e:93:c7:88:67:85:ab:96:
69:4a:f0:58:44:04:c2:4a:f7:19:c6:d2:40:b8:79:
ce:ee:5d:e7:8f:bb:da:f1:d3:95:84:31:13:33:e4:
b2:b1:d4:43:ad:43:46:c7:1a:5d:2b:2a:e4:f3:fc:
df:a8:da:34:49:c3:ed:50:56:a7:77:00:3f:5b:e8:
37:83:c3:36:57:94:88:6b:73:98:95:06:19:0e:a1:
22:f4:32:b8:e6:e0:ba:77:07:ed:f6:06:e5:92:d8:
30:65:4f:46:60:b3:9a:05:e6:09:f8:8c:39:e0:b2:
76:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:26:26:09:DA:A1:86:60:5B:38:38:78:5D:A9:F9:1B:E3:53:4C:A3
X509v3 Authority Key Identifier:
keyid:69:62:2A:1A:AD:F7:9E:71:1D:1E:7E:43:19:F7:32:C0:B2:DA:80:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aWIqGq33nnEdHn5DGfcywLLagB4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/717615-d202-48f2-bb93-cc20f4172ced/1/aWIqGq33nnEdHn5DGfcywLLagB4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/717615-d202-48f2-bb93-cc20f4172ced/1/aWIqGq33nnEdHn5DGfcywLLagB4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:68:c9:fa:76:24:5a:d9:db:fc:0a:dd:6e:ce:81:4c:6c:d0:
63:7e:ee:1d:ed:91:03:92:d4:2c:17:80:cc:6e:19:fc:9e:9d:
d1:30:6d:48:ac:a4:de:1e:21:c6:99:46:74:cc:96:45:4b:a4:
2c:0e:4c:a0:83:c9:5d:d0:ea:d0:50:75:5d:30:de:f6:a4:d9:
b6:92:37:7f:09:ce:25:d6:b1:1f:5b:84:96:b0:0e:85:35:66:
9a:7b:e4:12:21:61:1d:8c:49:98:39:f6:d8:e5:df:c3:11:54:
16:ff:b0:c7:ec:88:ec:05:31:cf:15:f2:95:b8:af:e5:a6:48:
84:5a:e4:90:38:31:39:62:b5:36:12:d8:1c:2e:14:60:1a:c1:
85:f9:da:e6:9d:19:0c:e4:8b:4b:7b:96:e1:5b:84:61:4d:51:
7a:95:0d:7e:5b:0b:02:3c:93:31:c0:fb:05:10:5f:bc:ba:4d:
0c:e1:9c:25:bd:8c:3c:dd:8d:30:0b:dd:89:d7:16:06:9f:2c:
ff:db:67:0a:01:89:4f:9d:c0:c1:fb:8e:18:bf:cf:7d:92:b9:
f5:eb:25:d0:fd:8c:94:e5:33:0f:65:68:f3:4f:d3:d8:c6:86:
e9:4a:dc:ac:d0:8a:5f:24:a8:54:0d:a8:0c:12:62:35:fb:cf:
a8:03:0c:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 3 22:33:45 2026 by rpki-client