Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/6a4e57-fbe3-4bc2-b8a5-dc8fcc6bdaaa/1/pAwa1Ue5Pr9lXFgEON-lrkJ8ZRE.mft
File: pAwa1Ue5Pr9lXFgEON-lrkJ8ZRE.mft (raw, json)
Hash identifier: h5xVUgUf2IvHM/1ji/Ib516VmErNsCPqVcOl5YrtziU=
Subject key identifier: 09:CF:26:72:78:82:31:C0:06:58:DF:FF:C3:09:DD:5B:AD:8D:79:32
Authority key identifier: A4:0C:1A:D5:47:B9:3E:BF:65:5C:58:04:38:DF:A5:AE:42:7C:65:11
Certificate issuer: /CN=a40c1ad547b93ebf655c580438dfa5ae427c6511
Certificate serial: 019FA07206C7CFFC5F7FA9E7ABC28398E95A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pAwa1Ue5Pr9lXFgEON-lrkJ8ZRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/6a4e57-fbe3-4bc2-b8a5-dc8fcc6bdaaa/1/pAwa1Ue5Pr9lXFgEON-lrkJ8ZRE.mft
Manifest number: 101D
Signing time: Sun 26 Jul 2026 22:00:55 +0000
Manifest this update: Sun 26 Jul 2026 22:00:55 +0000
Manifest next update: Mon 27 Jul 2026 22:00:55 +0000
Files and hashes: 1: _lqYoZCtbgCjPqgBQS1sChiV3po.roa (hash: DngSWjpo0gMX1VJjUcfS5UeVdo84wIcXiRvQtRs7PEI=)
2: pAwa1Ue5Pr9lXFgEON-lrkJ8ZRE.crl (hash: qytUeP0WyeHQzSlHxHNJopyA+yD7+fW0RCd4rahPTvw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/6a4e57-fbe3-4bc2-b8a5-dc8fcc6bdaaa/1/pAwa1Ue5Pr9lXFgEON-lrkJ8ZRE.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/6a4e57-fbe3-4bc2-b8a5-dc8fcc6bdaaa/1/pAwa1Ue5Pr9lXFgEON-lrkJ8ZRE.mft
rsync://rpki.ripe.net/repository/DEFAULT/pAwa1Ue5Pr9lXFgEON-lrkJ8ZRE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 22:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a0:72:06:c7:cf:fc:5f:7f:a9:e7:ab:c2:83:98:e9:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a40c1ad547b93ebf655c580438dfa5ae427c6511
Validity
Not Before: Jul 26 22:00:55 2026 GMT
Not After : Jul 27 22:00:55 2026 GMT
Subject: CN=09cf2672788231c00658dfffc309dd5bad8d7932
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:0c:45:e9:88:80:18:19:fa:4e:b9:58:1a:14:
fe:b7:b0:48:ee:80:d1:a7:16:9b:f8:f3:b5:9c:e4:
50:82:cc:f7:b5:47:fd:19:22:5e:aa:27:95:a8:e4:
31:4a:cf:6f:41:a8:3b:4c:82:8e:68:9e:04:0e:ed:
c7:dc:b1:9a:66:f2:7b:18:92:e0:68:3f:fa:46:c0:
17:94:ee:6e:59:d2:71:15:9e:b5:a8:d4:56:e0:3f:
20:db:47:1f:09:33:c6:e5:fc:fb:5f:9e:bc:42:40:
93:9d:a3:bf:8e:50:cf:29:2f:a4:3b:68:dd:30:f7:
52:80:40:9f:c2:5f:8a:d9:a9:44:9f:15:4a:5d:df:
3b:cc:4f:65:22:6a:18:1d:11:a7:4b:e0:90:6b:dc:
94:33:57:a3:5c:e0:2f:ce:86:66:ce:52:e3:4c:c3:
95:65:fc:2d:ca:dd:95:4a:3c:12:89:fc:73:60:e3:
5a:f7:f4:6f:8c:15:57:98:2c:54:e6:d2:f7:1a:fa:
36:b4:2d:0a:68:3b:36:42:b7:75:7e:c9:4f:03:c2:
64:56:dd:87:54:1a:08:d0:70:8c:68:ff:75:fb:0b:
0d:7e:72:6a:ef:16:37:39:13:d8:5d:07:ae:f8:f3:
86:49:0c:8d:41:79:63:fe:6a:31:b9:04:31:e2:2b:
cb:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:CF:26:72:78:82:31:C0:06:58:DF:FF:C3:09:DD:5B:AD:8D:79:32
X509v3 Authority Key Identifier:
keyid:A4:0C:1A:D5:47:B9:3E:BF:65:5C:58:04:38:DF:A5:AE:42:7C:65:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pAwa1Ue5Pr9lXFgEON-lrkJ8ZRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/6a4e57-fbe3-4bc2-b8a5-dc8fcc6bdaaa/1/pAwa1Ue5Pr9lXFgEON-lrkJ8ZRE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/6a4e57-fbe3-4bc2-b8a5-dc8fcc6bdaaa/1/pAwa1Ue5Pr9lXFgEON-lrkJ8ZRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:3b:f8:76:88:c8:fc:dd:b3:b7:67:9e:de:d7:0e:2d:14:78:
50:f1:8e:71:99:6a:50:54:c0:75:b5:be:3e:40:18:7f:3f:4e:
26:58:42:ee:b4:77:29:20:f9:c3:40:43:8b:7d:99:c5:64:9c:
cb:c0:12:33:b4:6a:e4:e9:a0:a7:7c:b3:14:e4:cf:7f:21:03:
2e:bc:42:3b:f5:e4:8d:e8:aa:93:a7:97:27:11:12:f4:49:11:
83:b2:75:a9:4a:e1:df:46:f2:dc:eb:f4:ed:70:92:1b:64:0e:
e4:ea:b0:54:64:bb:a2:67:03:3f:85:76:f4:b1:c4:f7:f6:7a:
03:a5:a1:07:96:d8:51:c8:94:33:01:8f:11:6c:ce:7d:ff:ef:
5d:40:77:09:5f:e2:d1:32:21:3d:5d:d7:36:82:b0:77:77:1f:
4f:df:e1:ce:a1:e1:53:9d:42:80:83:3d:28:b4:fb:96:00:ee:
8a:a3:0e:fc:94:a6:5b:eb:07:69:63:86:17:a8:5c:08:77:4c:
f2:69:88:07:3c:e9:d2:bc:8d:84:60:c4:b3:2a:00:9a:55:01:
cb:57:ae:d8:6c:fd:d6:11:7f:fd:0b:76:ac:bc:f4:35:fd:7c:
01:30:47:01:a6:85:ff:55:70:ed:09:99:df:a1:cb:51:7b:9d:
98:5d:c6:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 03:15:24 2026 by rpki-client