Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a1/a2eda2-e885-4640-9c84-d6ef8e914307/1/rwAta7hamGvIjbzZMyCUVOW14II.mft
File: rwAta7hamGvIjbzZMyCUVOW14II.mft (raw, json)
Hash identifier: 7cYrlkezS1TmdntAIM1vh7RYBC6IAlD9jTOoP/Ect+w=
Subject key identifier: F4:E3:5B:3D:0C:C4:79:5F:62:BF:1B:BC:7A:3C:88:A5:79:23:6F:0E
Authority key identifier: AF:00:2D:6B:B8:5A:98:6B:C8:8D:BC:D9:33:20:94:54:E5:B5:E0:82
Certificate issuer: /CN=af002d6bb85a986bc88dbcd933209454e5b5e082
Certificate serial: 01A08DC4E1341B1BE6A01613FE2FFA510876
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rwAta7hamGvIjbzZMyCUVOW14II.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/a2eda2-e885-4640-9c84-d6ef8e914307/1/rwAta7hamGvIjbzZMyCUVOW14II.mft
Manifest number: 1549
Signing time: Fri 11 Sep 2026 00:01:25 +0000
Manifest this update: Fri 11 Sep 2026 00:01:25 +0000
Manifest next update: Sat 12 Sep 2026 00:01:25 +0000
Files and hashes: 1: p1Z5ag1eRovSGpghiltah3wrLp8.roa (hash: fdCiGCU5t+2pHmKwq78C8J8Bdqj2StfkhlW4J0RllGM=)
2: rwAta7hamGvIjbzZMyCUVOW14II.crl (hash: 7VkUGmt6aiK39Pa/IfjdTBim3nNppbeUVN68waGvoSQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/a2eda2-e885-4640-9c84-d6ef8e914307/1/rwAta7hamGvIjbzZMyCUVOW14II.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/a2eda2-e885-4640-9c84-d6ef8e914307/1/rwAta7hamGvIjbzZMyCUVOW14II.mft
rsync://rpki.ripe.net/repository/DEFAULT/rwAta7hamGvIjbzZMyCUVOW14II.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8d:c4:e1:34:1b:1b:e6:a0:16:13:fe:2f:fa:51:08:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af002d6bb85a986bc88dbcd933209454e5b5e082
Validity
Not Before: Sep 11 00:01:25 2026 GMT
Not After : Sep 12 00:01:25 2026 GMT
Subject: CN=f4e35b3d0cc4795f62bf1bbc7a3c88a579236f0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:fc:c3:27:cb:41:1c:f3:51:01:8d:06:ea:69:
18:54:dd:67:ed:7f:02:b3:e7:2e:07:98:43:be:d2:
aa:b3:5d:7e:07:b6:d5:3d:94:31:0b:8a:84:58:6c:
9a:88:5e:8c:ee:0b:c4:7b:b7:75:ab:72:dc:b6:7b:
a0:38:59:c6:e1:a6:f9:71:a7:5c:2c:bc:4d:28:90:
bd:04:d8:42:98:ec:61:5b:bc:ad:9a:bf:0a:5f:5e:
43:fa:03:a5:0e:4c:a1:f8:8e:d7:2b:de:8a:7e:ee:
c2:07:35:5a:49:0b:ff:40:6a:07:46:96:ea:3a:55:
25:b4:60:29:9b:92:61:7b:18:84:00:66:0d:08:8a:
dd:1b:1c:17:28:19:42:4d:1a:d4:c6:37:ae:dd:a4:
94:4e:a4:3b:47:85:09:0a:bf:a5:11:e9:3f:df:b0:
e9:26:ee:e9:9b:0e:13:cb:08:64:f0:ac:b0:d3:02:
0e:d8:87:b5:52:7b:49:39:29:f1:f9:71:25:46:c6:
16:f7:52:18:d7:a7:35:c5:fe:6e:dd:3b:49:83:26:
fc:12:16:24:42:a9:49:f3:9f:c8:15:8f:41:ee:32:
42:73:ac:20:ae:2c:23:19:4b:84:28:84:35:18:cc:
c3:c5:65:3f:be:eb:06:5d:68:bd:06:7b:a7:97:68:
79:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:E3:5B:3D:0C:C4:79:5F:62:BF:1B:BC:7A:3C:88:A5:79:23:6F:0E
X509v3 Authority Key Identifier:
keyid:AF:00:2D:6B:B8:5A:98:6B:C8:8D:BC:D9:33:20:94:54:E5:B5:E0:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rwAta7hamGvIjbzZMyCUVOW14II.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/a2eda2-e885-4640-9c84-d6ef8e914307/1/rwAta7hamGvIjbzZMyCUVOW14II.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/a2eda2-e885-4640-9c84-d6ef8e914307/1/rwAta7hamGvIjbzZMyCUVOW14II.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:10:b3:75:98:42:0c:1e:28:8f:bd:ac:63:1c:16:ee:19:6c:
a4:a7:6f:af:4a:e1:45:b9:0b:05:9a:18:87:d0:4d:5a:dc:3b:
bd:84:ba:f8:ab:61:0f:be:fe:f1:9d:87:1f:fc:71:fe:cf:b7:
d1:83:df:75:78:f3:59:31:46:fe:8b:b7:45:f3:90:8a:86:a7:
4e:65:15:21:c1:33:52:88:7f:08:20:51:5e:20:fa:12:ef:75:
b1:13:43:48:c7:e7:1e:89:d7:b5:70:28:ae:13:36:44:11:5d:
65:53:88:19:c6:46:d6:6f:db:21:d5:b3:d9:e7:bb:cf:e4:66:
2f:77:c4:fa:7c:72:1f:d1:b5:94:6f:57:66:2d:d2:fe:8b:e2:
15:35:c3:e4:a0:9e:ef:4b:fd:cc:38:07:ee:75:bf:c8:a0:1c:
7b:d7:6d:4c:0f:fc:db:a3:91:a3:c0:b2:3f:17:ea:81:a2:6c:
fb:2a:82:9a:0b:b3:8c:e1:49:38:a7:b0:7f:04:7a:11:f3:3a:
cd:06:1f:df:94:4e:ac:06:95:35:34:2a:80:90:b4:0b:be:e1:
73:03:a5:6c:32:51:6e:8f:d5:b1:ba:9d:10:64:59:b8:2d:b4:
f0:4a:97:b9:c6:77:c3:d1:52:df:01:dd:48:ac:76:ab:49:4d:
04:d6:dc:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 09:05:16 2026 by rpki-client