Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/98/09f13c-cbf1-484f-b4b7-6bb7c31420c7/1/AWl3kK0EKAif_JZjcZlBiJD_6Ik.mft
File: AWl3kK0EKAif_JZjcZlBiJD_6Ik.mft (raw, json)
Hash identifier: gywl1/5diFYL4P4QXS87KJt9jcG8qqa3i8vQ0eTsRlI=
Subject key identifier: 22:F8:BD:05:75:0E:05:D2:4D:38:CE:3A:38:64:67:BE:B5:0A:69:2D
Authority key identifier: 01:69:77:90:AD:04:28:08:9F:FC:96:63:71:99:41:88:90:FF:E8:89
Certificate issuer: /CN=01697790ad0428089ffc96637199418890ffe889
Certificate serial: 01A03FE08BF653CA6244AC3E5907486DD077
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AWl3kK0EKAif_JZjcZlBiJD_6Ik.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/09f13c-cbf1-484f-b4b7-6bb7c31420c7/1/AWl3kK0EKAif_JZjcZlBiJD_6Ik.mft
Manifest number: 011B
Signing time: Wed 26 Aug 2026 21:01:15 +0000
Manifest this update: Wed 26 Aug 2026 21:01:15 +0000
Manifest next update: Thu 27 Aug 2026 21:01:15 +0000
Files and hashes: 1: 4BaFgiySl9ZuiLKt3cqa-GBtHZ0.roa (hash: N8kdOninId/klp3EyFdJsImC3+vMapb24sb5Y1paYvQ=)
2: AWl3kK0EKAif_JZjcZlBiJD_6Ik.crl (hash: CxGmWHuCmBMJyG6jBkjlBNO95cYjVH2UvUZGMcvLL8o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/09f13c-cbf1-484f-b4b7-6bb7c31420c7/1/AWl3kK0EKAif_JZjcZlBiJD_6Ik.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/09f13c-cbf1-484f-b4b7-6bb7c31420c7/1/AWl3kK0EKAif_JZjcZlBiJD_6Ik.mft
rsync://rpki.ripe.net/repository/DEFAULT/AWl3kK0EKAif_JZjcZlBiJD_6Ik.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 20:12:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3f:e0:8b:f6:53:ca:62:44:ac:3e:59:07:48:6d:d0:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01697790ad0428089ffc96637199418890ffe889
Validity
Not Before: Aug 26 21:01:15 2026 GMT
Not After : Aug 27 21:01:15 2026 GMT
Subject: CN=22f8bd05750e05d24d38ce3a386467beb50a692d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:46:3f:e0:74:15:73:70:37:3f:82:0b:4c:cb:
d1:56:f1:d4:f4:b9:08:65:be:76:a5:e6:d3:d2:60:
11:75:94:75:63:38:ff:98:d9:57:bc:0b:d5:fc:23:
cd:d6:c6:60:05:1a:61:75:91:02:85:8d:d1:8d:68:
4e:19:14:c2:a1:f8:e8:99:23:de:80:5b:0f:08:6a:
dd:bf:6c:3b:19:6a:75:8e:8f:37:08:dd:3a:17:f5:
6f:3f:a5:94:b8:a3:81:8f:0c:e9:37:0c:60:f7:9a:
44:e1:ac:78:c2:34:87:6e:69:d1:20:7e:5f:0a:53:
18:dd:97:1a:7d:22:25:dd:55:a8:b3:c7:4c:44:2d:
f9:1a:08:93:80:b9:d2:aa:cb:f8:91:a3:09:ae:a7:
b6:2e:50:96:a4:d3:ad:42:87:da:54:07:69:62:00:
47:9c:75:77:c8:15:65:b4:80:c8:93:dc:67:9d:ca:
8f:30:c7:99:4f:34:36:34:2d:5d:ed:1b:e7:23:5c:
cb:7c:b6:c3:5a:bf:8f:57:8b:a7:60:ca:d2:d9:c1:
e5:35:bd:5c:3d:b8:f8:79:f2:2f:0a:07:0f:e1:aa:
74:7d:f7:09:72:75:9e:15:48:83:57:df:5d:49:f5:
4a:4e:2f:79:ea:d3:39:3e:d0:1c:b7:12:e0:c6:f8:
2e:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:F8:BD:05:75:0E:05:D2:4D:38:CE:3A:38:64:67:BE:B5:0A:69:2D
X509v3 Authority Key Identifier:
keyid:01:69:77:90:AD:04:28:08:9F:FC:96:63:71:99:41:88:90:FF:E8:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AWl3kK0EKAif_JZjcZlBiJD_6Ik.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/09f13c-cbf1-484f-b4b7-6bb7c31420c7/1/AWl3kK0EKAif_JZjcZlBiJD_6Ik.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/09f13c-cbf1-484f-b4b7-6bb7c31420c7/1/AWl3kK0EKAif_JZjcZlBiJD_6Ik.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:ea:37:4e:f2:51:23:05:67:aa:b4:01:d0:7e:ad:86:a7:5d:
7a:03:fc:14:ef:bc:52:00:c0:ff:61:49:b1:07:52:17:8b:bc:
87:5f:1f:67:53:17:f3:30:8d:c0:51:18:7b:11:16:cb:1a:c1:
96:7c:06:2b:b7:09:24:41:60:f5:ce:89:26:b6:76:e1:8e:74:
eb:c3:23:d8:58:e8:77:13:28:14:58:c7:d3:d3:87:68:f3:d4:
01:21:24:d9:72:0b:21:64:bd:17:30:84:d9:80:ff:fc:b7:75:
f6:9b:85:1e:44:71:48:88:33:b7:58:7f:84:0f:78:15:69:45:
24:84:a3:9c:20:d1:77:cb:eb:d9:87:5a:a3:a5:76:67:e7:bf:
3e:9c:a4:5a:6a:1f:c2:45:44:fd:89:9f:b8:32:8a:08:b6:94:
8e:ac:9a:c5:30:0c:4d:dd:8a:1a:5d:7f:2e:50:37:24:97:6d:
58:7e:4e:f2:ba:3f:30:07:a4:75:51:0b:9c:9b:ef:3c:7c:b5:
66:3d:7c:43:a6:b1:43:10:70:f0:93:be:c1:a9:04:b7:51:1c:
8d:66:37:04:67:6f:99:3d:18:dc:b4:55:fd:e8:dd:34:5b:5e:
2c:31:02:61:d8:71:3d:1f:a8:bd:a0:b1:e9:35:bc:8a:e5:2b:
cb:de:55:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 05:25:15 2026 by rpki-client