Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/a2eda2-e885-4640-9c84-d6ef8e914307/1/rwAta7hamGvIjbzZMyCUVOW14II.mft
File: rwAta7hamGvIjbzZMyCUVOW14II.mft (raw, json)
Hash identifier: xly7TlO/O8OQzbEKj0nzPF83oaB+5x+r0EwYsooiJLM=
Subject key identifier: 78:10:DD:3C:57:06:BD:04:86:70:00:F1:F5:F7:E6:0A:F2:03:34:EC
Authority key identifier: AF:00:2D:6B:B8:5A:98:6B:C8:8D:BC:D9:33:20:94:54:E5:B5:E0:82
Certificate issuer: /CN=af002d6bb85a986bc88dbcd933209454e5b5e082
Certificate serial: 019E333C7D876DE03A1CD0E82EE2365B2E53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rwAta7hamGvIjbzZMyCUVOW14II.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/a2eda2-e885-4640-9c84-d6ef8e914307/1/rwAta7hamGvIjbzZMyCUVOW14II.mft
Manifest number: 1411
Signing time: Sun 17 May 2026 00:01:02 +0000
Manifest this update: Sun 17 May 2026 00:01:02 +0000
Manifest next update: Mon 18 May 2026 00:01:02 +0000
Files and hashes: 1: p1Z5ag1eRovSGpghiltah3wrLp8.roa (hash: fdCiGCU5t+2pHmKwq78C8J8Bdqj2StfkhlW4J0RllGM=)
2: rwAta7hamGvIjbzZMyCUVOW14II.crl (hash: U2dXXmO8/PRbV8Q/kVZKZWoLWVsYBwFtLa/Di1OJOWo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/a2eda2-e885-4640-9c84-d6ef8e914307/1/rwAta7hamGvIjbzZMyCUVOW14II.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/a2eda2-e885-4640-9c84-d6ef8e914307/1/rwAta7hamGvIjbzZMyCUVOW14II.mft
rsync://rpki.ripe.net/repository/DEFAULT/rwAta7hamGvIjbzZMyCUVOW14II.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 21:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:33:3c:7d:87:6d:e0:3a:1c:d0:e8:2e:e2:36:5b:2e:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af002d6bb85a986bc88dbcd933209454e5b5e082
Validity
Not Before: May 17 00:01:02 2026 GMT
Not After : May 18 00:01:02 2026 GMT
Subject: CN=7810dd3c5706bd04867000f1f5f7e60af20334ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:9b:b9:63:66:c9:e5:7c:64:9c:6f:9d:ff:c5:
a9:88:3c:1d:b0:d1:1d:75:f7:5f:c3:3b:a5:ff:cb:
dc:a9:5c:82:89:5e:09:62:60:74:25:87:2e:38:76:
b1:1c:53:78:03:92:5a:3c:a8:94:28:c0:05:18:f2:
fe:64:d8:40:e5:d6:60:b7:6d:93:be:55:a3:bc:5b:
4c:d0:19:f4:6d:b6:40:37:30:d8:5f:da:c0:1e:8f:
77:5b:9b:de:14:fc:ec:39:96:41:c1:98:14:a2:1e:
de:46:c2:15:78:eb:28:84:d8:8a:27:17:da:95:c3:
35:e4:16:1f:fc:a2:db:ac:d8:c7:23:7d:52:d9:7e:
d7:07:24:20:9a:7d:39:09:70:14:c7:fc:a3:bb:81:
91:1a:c7:92:da:ed:00:93:a9:eb:b8:64:21:57:8f:
df:11:3b:1c:43:71:fe:e0:d9:10:51:e7:38:72:37:
b7:c1:d9:9d:6e:22:d3:9b:b5:e4:12:88:f7:18:13:
ef:f0:7f:38:04:0d:e2:11:e8:28:8b:02:3c:07:76:
93:81:f2:d1:92:93:26:4d:36:52:fb:d0:ca:5f:ab:
16:52:fa:3f:5f:ed:44:9b:0f:53:42:d9:92:a0:40:
39:f0:50:e6:82:dc:fb:55:d7:50:1b:e7:2a:2b:70:
51:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:10:DD:3C:57:06:BD:04:86:70:00:F1:F5:F7:E6:0A:F2:03:34:EC
X509v3 Authority Key Identifier:
keyid:AF:00:2D:6B:B8:5A:98:6B:C8:8D:BC:D9:33:20:94:54:E5:B5:E0:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rwAta7hamGvIjbzZMyCUVOW14II.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/a2eda2-e885-4640-9c84-d6ef8e914307/1/rwAta7hamGvIjbzZMyCUVOW14II.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/a2eda2-e885-4640-9c84-d6ef8e914307/1/rwAta7hamGvIjbzZMyCUVOW14II.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:02:08:b7:30:b1:7b:de:05:dc:34:1a:6f:b1:a9:fc:03:49:
2d:a3:7e:e6:1d:7d:c7:fc:07:f1:4a:e2:81:37:12:f6:1d:91:
7f:9d:e3:60:3e:12:ca:2c:b5:cd:f1:07:c5:98:b3:2a:d7:f2:
a2:7f:66:19:fb:94:cf:f3:34:82:e4:96:70:5e:16:68:cc:52:
49:e0:73:d5:aa:fa:a4:36:15:51:4e:f9:0b:a9:b2:d2:40:70:
aa:61:b4:3d:76:81:9c:8a:74:06:c9:89:04:97:e5:a2:6e:7a:
44:5c:3c:a9:b0:3c:f4:2b:fe:6d:8a:9e:2b:fe:f2:e3:85:0a:
75:15:cb:79:45:f5:a6:5a:74:c3:a0:18:cc:f8:5a:b6:64:e8:
1c:85:29:35:36:9f:ba:2c:d4:3a:77:fc:0f:2a:8e:26:24:1f:
a6:5d:e4:e9:59:2d:8c:26:c1:31:ef:06:19:0e:84:c4:2a:b4:
f2:58:b4:1a:c1:9e:7a:3f:bc:32:c9:cf:89:a7:33:6e:22:99:
40:8d:20:7c:09:8b:d7:5c:96:79:61:dc:05:49:bc:da:da:4c:
fc:d9:2b:cb:71:6f:20:eb:ec:b0:b3:ce:a0:5a:40:1c:88:7f:
fe:8e:ed:7c:67:ab:15:f0:e6:10:37:07:63:f9:6d:a3:a1:86:
45:8b:9b:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 17 02:05:27 2026 by rpki-client