Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a1/a2eda2-e885-4640-9c84-d6ef8e914307/1/rwAta7hamGvIjbzZMyCUVOW14II.mft
File: rwAta7hamGvIjbzZMyCUVOW14II.mft (raw, json)
Hash identifier: Ma17tdYQ6xE4sfJY4HSZmDCyWK4E20qULzYRowJVDN4=
Subject key identifier: D7:9C:F9:E7:F7:78:79:1C:FB:B9:12:11:7C:8C:8B:8C:B9:02:B2:E9
Authority key identifier: AF:00:2D:6B:B8:5A:98:6B:C8:8D:BC:D9:33:20:94:54:E5:B5:E0:82
Certificate issuer: /CN=af002d6bb85a986bc88dbcd933209454e5b5e082
Certificate serial: 01A19656F9FF90B7E48A372472FE951DB00B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rwAta7hamGvIjbzZMyCUVOW14II.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/a2eda2-e885-4640-9c84-d6ef8e914307/1/rwAta7hamGvIjbzZMyCUVOW14II.mft
Manifest number: 15D2
Signing time: Sun 01 Nov 2026 09:00:44 +0000
Manifest this update: Sun 01 Nov 2026 09:00:44 +0000
Manifest next update: Mon 02 Nov 2026 09:00:44 +0000
Files and hashes: 1: p1Z5ag1eRovSGpghiltah3wrLp8.roa (hash: fdCiGCU5t+2pHmKwq78C8J8Bdqj2StfkhlW4J0RllGM=)
2: rwAta7hamGvIjbzZMyCUVOW14II.crl (hash: otarUSb9hm0tyBk0NumAnEKppmas9kLJsMrlOPBDaBs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/a2eda2-e885-4640-9c84-d6ef8e914307/1/rwAta7hamGvIjbzZMyCUVOW14II.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/a2eda2-e885-4640-9c84-d6ef8e914307/1/rwAta7hamGvIjbzZMyCUVOW14II.mft
rsync://rpki.ripe.net/repository/DEFAULT/rwAta7hamGvIjbzZMyCUVOW14II.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Nov 2026 05:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:96:56:f9:ff:90:b7:e4:8a:37:24:72:fe:95:1d:b0:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af002d6bb85a986bc88dbcd933209454e5b5e082
Validity
Not Before: Nov 1 09:00:44 2026 GMT
Not After : Nov 2 09:00:44 2026 GMT
Subject: CN=d79cf9e7f778791cfbb912117c8c8b8cb902b2e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:39:83:5d:b6:fa:b3:13:84:83:e8:41:b6:d0:
43:6a:82:48:93:33:bb:b2:89:23:4a:c6:d6:4c:5d:
2f:ba:cf:75:2d:61:81:c5:92:2a:2f:64:ec:80:5e:
bd:c6:f9:b8:26:af:56:0d:8a:c7:fc:09:0f:d8:6f:
a4:0c:c7:ad:a1:61:a0:ee:02:33:66:c5:da:ad:3a:
ea:a1:20:16:94:5c:f0:2e:6e:a3:61:e1:40:38:db:
a5:81:b1:0d:8b:1a:7e:11:64:12:99:25:e2:7b:1b:
45:7b:96:e8:e8:73:17:14:c5:05:33:33:dd:31:f4:
4d:3e:cb:e6:4f:fc:43:64:b0:de:99:6c:4c:57:c7:
58:8d:7a:60:c9:46:c6:b1:06:32:50:be:d0:56:f4:
d6:fc:7e:b7:ff:64:e1:75:40:2e:4b:30:03:26:d7:
f5:ff:58:25:16:8d:7f:5a:92:71:87:d2:d4:1a:0b:
14:ec:5b:f4:2f:57:02:36:a0:4e:82:aa:4c:d9:b1:
c6:da:cc:ef:0f:1a:f0:c3:6c:e5:db:d6:4e:fe:a8:
58:ea:ee:e5:47:3a:0c:bb:f1:1d:46:43:30:18:95:
76:60:de:4e:14:1f:76:e8:2d:d6:18:34:89:cc:e8:
ef:e4:ab:5d:a2:14:8c:7f:43:07:79:2f:2b:22:f1:
e3:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:9C:F9:E7:F7:78:79:1C:FB:B9:12:11:7C:8C:8B:8C:B9:02:B2:E9
X509v3 Authority Key Identifier:
keyid:AF:00:2D:6B:B8:5A:98:6B:C8:8D:BC:D9:33:20:94:54:E5:B5:E0:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rwAta7hamGvIjbzZMyCUVOW14II.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/a2eda2-e885-4640-9c84-d6ef8e914307/1/rwAta7hamGvIjbzZMyCUVOW14II.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/a2eda2-e885-4640-9c84-d6ef8e914307/1/rwAta7hamGvIjbzZMyCUVOW14II.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:b7:c6:01:7f:61:ea:79:47:2f:6a:be:ca:cc:16:5a:71:97:
99:69:5e:14:11:39:1c:c6:70:4e:72:fc:c4:06:74:37:5b:3e:
05:ba:12:86:c7:7e:84:0d:cc:4b:ef:e2:3b:90:e9:07:f0:c9:
b5:c7:37:0a:b8:6c:03:a1:af:af:9b:d2:59:c7:f6:6b:ff:7a:
6c:bc:c7:5d:6a:5e:c0:77:b8:05:88:ed:13:1c:6e:37:5f:ac:
ad:50:9c:f1:cd:cc:65:ea:63:bd:23:e3:fd:cd:6b:69:d5:76:
14:e5:56:ef:0e:de:f1:75:75:4d:74:ff:d4:35:a6:f5:04:ad:
0e:76:bb:64:93:aa:d6:4b:e7:c8:69:df:e3:f7:ef:a6:cf:11:
e2:2a:c2:a4:0b:d1:0d:04:12:f8:78:e9:b9:0a:bc:b7:d6:56:
ed:f8:d5:ff:3a:1b:29:55:ce:65:4b:7a:e5:78:a9:22:2d:af:
ab:f6:7f:46:ea:d7:3d:78:60:3f:d9:14:1e:4c:53:47:db:59:
d3:ee:05:6c:0b:dd:d5:a3:f7:84:e5:5c:c5:e8:03:f2:50:b8:
e3:02:e7:1f:ea:d8:4c:75:ba:1d:a1:cc:3d:5b:45:81:4a:c8:
9e:c2:a3:2c:89:b1:0b:56:16:f8:22:e5:25:92:f1:06:a6:b7:
03:fa:96:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 13:01:04 2026 by rpki-client