Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/1ef061-e581-49e4-b8e4-2bccc275e696/1/aWGGkJkUXjHXtLXFXsX5pyT_yn4.mft
File: aWGGkJkUXjHXtLXFXsX5pyT_yn4.mft (raw, json)
Hash identifier: c8YPRSmNsn1fxxbX1L8DR6hKv0g1PdhyeCFeCPK7Uc4=
Subject key identifier: 1A:DE:83:D1:5B:0D:0D:20:88:FD:01:75:10:B3:96:A8:08:42:68:B9
Authority key identifier: 69:61:86:90:99:14:5E:31:D7:B4:B5:C5:5E:C5:F9:A7:24:FF:CA:7E
Certificate issuer: /CN=6961869099145e31d7b4b5c55ec5f9a724ffca7e
Certificate serial: 019D3909D40637390558131DB9D3C289710B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aWGGkJkUXjHXtLXFXsX5pyT_yn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/1ef061-e581-49e4-b8e4-2bccc275e696/1/aWGGkJkUXjHXtLXFXsX5pyT_yn4.mft
Manifest number: 0654
Signing time: Sun 29 Mar 2026 10:00:38 +0000
Manifest this update: Sun 29 Mar 2026 10:00:38 +0000
Manifest next update: Mon 30 Mar 2026 10:00:38 +0000
Files and hashes: 1: 2V6tdUxiqVKneaVdrbJ3uovbgVA.roa (hash: Yw91g0FZ9Kp1Cv1kNatYsOFvczojORt+cxvTk8TIlmo=)
2: aWGGkJkUXjHXtLXFXsX5pyT_yn4.crl (hash: Dwcg/bW87X31WsQ9xAAR1s3rkvpOGesBFf1TMa55k8M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/1ef061-e581-49e4-b8e4-2bccc275e696/1/aWGGkJkUXjHXtLXFXsX5pyT_yn4.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/1ef061-e581-49e4-b8e4-2bccc275e696/1/aWGGkJkUXjHXtLXFXsX5pyT_yn4.mft
rsync://rpki.ripe.net/repository/DEFAULT/aWGGkJkUXjHXtLXFXsX5pyT_yn4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 10:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:09:d4:06:37:39:05:58:13:1d:b9:d3:c2:89:71:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6961869099145e31d7b4b5c55ec5f9a724ffca7e
Validity
Not Before: Mar 29 10:00:38 2026 GMT
Not After : Mar 30 10:00:38 2026 GMT
Subject: CN=1ade83d15b0d0d2088fd017510b396a8084268b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:b3:9b:b9:b4:8c:4e:d9:e3:9d:84:b6:7f:db:
e3:4b:cd:47:63:60:05:63:d0:30:19:91:a3:99:04:
3b:20:1f:c2:ac:df:e4:d3:d1:ae:7a:ea:ad:cd:10:
d0:2a:9a:a0:d0:80:ab:f4:9d:c9:c2:07:06:ca:f6:
f5:32:11:0f:ab:04:24:b0:93:66:d8:81:d3:25:c0:
94:6c:03:64:a0:56:b7:0a:be:cc:0f:6a:06:1c:38:
22:9b:32:ef:ad:eb:4d:6d:db:87:82:f1:68:3b:15:
7d:67:54:e0:c5:9f:c8:29:f7:44:37:88:7a:cc:d6:
53:42:60:6c:b8:8c:4d:ad:35:32:94:81:d8:ef:8a:
e5:5d:f8:00:51:50:ad:67:8c:3a:b5:9b:61:a7:4f:
bb:a3:b5:7f:73:93:3c:06:46:82:7d:23:7d:62:4d:
23:e3:32:b9:59:2a:d1:58:0d:78:94:68:75:5c:a9:
e5:41:4e:dc:45:b6:7d:b6:8c:41:a4:e1:d8:62:46:
84:1c:94:14:be:9e:63:de:45:78:cb:d1:8f:db:95:
57:5e:85:76:f2:38:0b:76:98:3b:b0:87:25:6f:7e:
11:c4:db:64:48:8d:24:fe:a2:41:13:e3:0d:c7:2f:
8a:98:e4:52:e3:81:47:f9:c3:55:b9:b9:10:ee:9c:
ef:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:DE:83:D1:5B:0D:0D:20:88:FD:01:75:10:B3:96:A8:08:42:68:B9
X509v3 Authority Key Identifier:
keyid:69:61:86:90:99:14:5E:31:D7:B4:B5:C5:5E:C5:F9:A7:24:FF:CA:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aWGGkJkUXjHXtLXFXsX5pyT_yn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/1ef061-e581-49e4-b8e4-2bccc275e696/1/aWGGkJkUXjHXtLXFXsX5pyT_yn4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/1ef061-e581-49e4-b8e4-2bccc275e696/1/aWGGkJkUXjHXtLXFXsX5pyT_yn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:da:42:6b:03:5a:87:dc:3c:ca:a9:c2:f2:1f:fb:e2:82:14:
72:05:da:b0:77:52:75:54:f0:7a:58:65:0d:5f:19:73:d9:45:
9f:32:7d:65:90:09:74:09:03:6a:89:b5:55:70:ae:9d:af:b2:
a4:0e:9c:02:ec:00:b2:d6:3d:1b:58:91:a7:42:9b:93:ce:ae:
1c:98:aa:b0:e2:9d:7b:eb:88:6a:fd:99:b8:ef:31:57:19:da:
31:d0:ff:b3:4d:88:b3:c8:61:64:12:15:a9:4b:6c:73:1d:9b:
62:e1:f6:41:03:e6:e1:66:5d:8e:ed:c9:2c:16:0c:5f:73:00:
a6:66:17:14:91:11:f1:16:c1:10:5d:cf:b9:b3:f9:2a:fc:a1:
96:00:f7:11:c0:fd:d9:cc:cd:e7:7f:ce:75:1c:06:4a:fb:d7:
87:16:98:72:87:b6:42:c5:09:32:19:9c:37:f1:ca:e4:40:c3:
79:fd:42:68:76:e9:d0:d1:1b:aa:b5:a2:c8:9c:41:ee:d8:35:
91:be:75:3a:f0:e2:c8:36:ed:38:63:a0:9a:07:c5:b9:be:87:
9b:8d:5b:84:1f:d1:67:ce:8b:25:1e:e6:32:6c:e9:32:2b:68:
09:79:8f:63:bb:6a:cf:af:11:6a:36:89:e6:9d:37:26:f9:61:
d9:a2:60:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 20:48:15 2026 by rpki-client