Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/b63337-35e3-4c5e-a3e2-181597c3107e/1/AW2uI9Li62TJaFNIDgd4y9P9ViQ.mft
File: AW2uI9Li62TJaFNIDgd4y9P9ViQ.mft (raw, json)
Hash identifier: RLVNLb9u0WI2/Cb3VAkRbMCfzeBMWDu7VNbfzHF4twg=
Subject key identifier: 97:B7:98:98:DB:22:F1:7F:84:85:44:5D:89:87:0D:9E:94:0D:42:29
Authority key identifier: 01:6D:AE:23:D2:E2:EB:64:C9:68:53:48:0E:07:78:CB:D3:FD:56:24
Certificate issuer: /CN=016dae23d2e2eb64c96853480e0778cbd3fd5624
Certificate serial: 019DCFAC3FB8FDE288D0F5A1BB0FB5A9CB55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AW2uI9Li62TJaFNIDgd4y9P9ViQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/b63337-35e3-4c5e-a3e2-181597c3107e/1/AW2uI9Li62TJaFNIDgd4y9P9ViQ.mft
Manifest number: 1871
Signing time: Mon 27 Apr 2026 16:01:05 +0000
Manifest this update: Mon 27 Apr 2026 16:01:05 +0000
Manifest next update: Tue 28 Apr 2026 16:01:05 +0000
Files and hashes: 1: AW2uI9Li62TJaFNIDgd4y9P9ViQ.crl (hash: Wl7uCaqPe0xT3CjggWA9tmZKR44Wj+YQHb1wCnJbatM=)
2: fBIbvQJADoTSsS7Jr2fItA3urdI.roa (hash: nJwJY4zTXkwANtW2/l5/P1l6Tsdntj7S0CCj9dxcAGE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/b63337-35e3-4c5e-a3e2-181597c3107e/1/AW2uI9Li62TJaFNIDgd4y9P9ViQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/b63337-35e3-4c5e-a3e2-181597c3107e/1/AW2uI9Li62TJaFNIDgd4y9P9ViQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/AW2uI9Li62TJaFNIDgd4y9P9ViQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 16:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cf:ac:3f:b8:fd:e2:88:d0:f5:a1:bb:0f:b5:a9:cb:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=016dae23d2e2eb64c96853480e0778cbd3fd5624
Validity
Not Before: Apr 27 16:01:05 2026 GMT
Not After : Apr 28 16:01:05 2026 GMT
Subject: CN=97b79898db22f17f8485445d89870d9e940d4229
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:07:4f:29:d2:ab:dd:74:31:e7:18:13:3e:16:
c5:9a:92:e4:46:71:30:3c:06:a6:cb:c5:2d:51:38:
2d:bf:bb:bf:ac:05:cd:7e:4d:e6:5c:8d:1e:a8:9b:
33:da:0c:79:97:62:d0:99:25:bc:82:8b:8d:f7:31:
2c:bb:9c:c9:dc:92:8d:0d:5a:0c:be:18:86:a7:fd:
00:cc:07:bb:93:a7:26:e7:dd:47:44:89:70:03:71:
e7:65:41:c3:b1:ac:eb:7c:d3:9e:88:cc:d3:b3:c9:
dc:73:a9:26:ab:fd:d9:29:9d:29:61:6b:cf:02:84:
74:bd:8e:ec:a2:79:24:a0:e6:96:97:66:7d:ef:e2:
bc:46:0a:31:90:c2:86:81:52:d1:46:2a:89:62:16:
7f:1d:ba:ce:1a:eb:40:09:9b:d2:b2:23:da:59:0b:
12:af:2a:e2:db:b9:aa:63:5d:2b:a6:cc:18:c0:ea:
e2:cb:7a:37:75:4c:ea:bc:0b:1b:7f:c4:36:e8:ba:
65:f2:f3:66:63:51:e1:79:15:71:d4:44:80:08:dd:
2f:c3:51:78:ea:44:5d:23:16:d8:ba:b1:96:3d:ae:
8f:ea:e4:2a:e6:e5:c6:20:02:00:d1:75:cd:57:54:
bd:97:b6:34:71:2e:28:0c:96:e5:7c:46:71:2e:d0:
26:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:B7:98:98:DB:22:F1:7F:84:85:44:5D:89:87:0D:9E:94:0D:42:29
X509v3 Authority Key Identifier:
keyid:01:6D:AE:23:D2:E2:EB:64:C9:68:53:48:0E:07:78:CB:D3:FD:56:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AW2uI9Li62TJaFNIDgd4y9P9ViQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/b63337-35e3-4c5e-a3e2-181597c3107e/1/AW2uI9Li62TJaFNIDgd4y9P9ViQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/b63337-35e3-4c5e-a3e2-181597c3107e/1/AW2uI9Li62TJaFNIDgd4y9P9ViQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:5d:ec:01:9a:8d:68:f3:87:c2:d1:77:40:ce:8e:48:9f:06:
f6:f3:2e:99:bb:19:b3:91:72:76:67:3a:a2:80:41:5a:79:e4:
28:eb:73:25:76:94:3f:12:85:38:9b:0f:85:e8:ce:de:8c:85:
28:87:62:ff:a6:02:68:64:30:5c:e6:a1:ff:e3:7d:b8:ae:38:
3f:34:b0:be:ca:f9:24:aa:be:4b:3c:08:4a:d7:91:af:c7:25:
b2:e0:87:4d:fe:08:23:08:0a:f2:19:54:b6:11:39:53:ee:68:
94:0c:6c:41:f1:cb:05:57:fa:30:ec:85:29:83:af:77:7e:99:
db:94:77:ca:ed:08:b7:d6:63:85:1e:47:e8:b2:8c:52:0f:00:
95:5c:04:17:20:f7:66:46:91:65:15:4d:0a:9d:fe:7d:e3:b9:
43:fe:fa:2f:58:7b:d2:8c:59:61:42:45:81:15:f4:5a:b6:8b:
88:d6:4c:43:9f:15:6e:6c:ad:26:b7:5f:e7:07:6b:51:32:31:
9d:88:09:58:ba:a9:a4:22:28:cf:68:31:c1:7c:b4:6f:b3:a8:
b1:39:ca:4f:f7:76:e3:1b:b0:f3:66:ae:eb:9c:26:5b:4c:65:
46:d9:fd:06:0e:3b:3c:01:2b:1d:d8:15:65:c3:5f:27:88:0a:
e2:6d:9e:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 19:47:24 2026 by rpki-client