Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/7ddf30-3c91-43f9-b3b1-c949f0591f5b/1/aRWYIN1xgAT7FchbJweWy06EpOo.mft
File: aRWYIN1xgAT7FchbJweWy06EpOo.mft (raw, json)
Hash identifier: WfQ3AeoeRc/VtyvRqnEJ21Wg73n6LWR+7e7HPv4u3MQ=
Subject key identifier: 6B:B2:C5:B6:8F:21:22:47:78:B0:E7:BB:81:84:EC:0C:9A:DA:4F:6B
Authority key identifier: 69:15:98:20:DD:71:80:04:FB:15:C8:5B:27:07:96:CB:4E:84:A4:EA
Certificate issuer: /CN=69159820dd718004fb15c85b270796cb4e84a4ea
Certificate serial: 019D38D3BE653E7B1835C9AF09C93981E853
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aRWYIN1xgAT7FchbJweWy06EpOo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/7ddf30-3c91-43f9-b3b1-c949f0591f5b/1/aRWYIN1xgAT7FchbJweWy06EpOo.mft
Manifest number: 03B8
Signing time: Sun 29 Mar 2026 09:01:34 +0000
Manifest this update: Sun 29 Mar 2026 09:01:34 +0000
Manifest next update: Mon 30 Mar 2026 09:01:34 +0000
Files and hashes: 1: aRWYIN1xgAT7FchbJweWy06EpOo.crl (hash: aWc2DrPqLWa+UToxeIfgMPsgwybqMPSgD5gRo8y99OA=)
2: yFZe_4gAvKXHPPs1FyfrYpXP8Ow.roa (hash: 86Quhr4EELE+xPjStkhiLN4tCtReKxYPPaBQcYq5lDg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/7ddf30-3c91-43f9-b3b1-c949f0591f5b/1/aRWYIN1xgAT7FchbJweWy06EpOo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/7ddf30-3c91-43f9-b3b1-c949f0591f5b/1/aRWYIN1xgAT7FchbJweWy06EpOo.mft
rsync://rpki.ripe.net/repository/DEFAULT/aRWYIN1xgAT7FchbJweWy06EpOo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:be:65:3e:7b:18:35:c9:af:09:c9:39:81:e8:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69159820dd718004fb15c85b270796cb4e84a4ea
Validity
Not Before: Mar 29 09:01:34 2026 GMT
Not After : Mar 30 09:01:34 2026 GMT
Subject: CN=6bb2c5b68f21224778b0e7bb8184ec0c9ada4f6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:ae:77:57:5b:7f:97:ee:06:55:bf:1d:f1:60:
90:cb:8d:96:10:61:3f:ea:ad:ab:af:20:fe:86:fa:
7e:a9:85:5b:d1:a8:1c:7b:eb:f1:2f:f0:a0:84:ac:
71:e9:b3:30:e2:aa:06:36:60:fb:9e:22:36:f0:45:
2d:f5:f4:ca:80:14:89:7e:cf:50:0b:72:e5:96:66:
6d:3a:b0:48:ec:25:42:0c:23:8c:cb:39:98:a7:44:
bf:3a:fa:8c:93:9b:b4:91:6f:fd:42:43:d0:73:ce:
ba:75:7a:43:7a:00:2c:ee:37:05:da:b2:ee:57:7c:
f1:b6:e9:21:d0:a1:fe:1e:2d:6c:eb:8f:03:9b:a3:
5c:fd:8f:17:40:e7:2c:54:d9:bb:a7:2a:0d:a6:a8:
47:4b:ae:d2:7d:ec:b3:1c:00:ec:70:aa:fe:75:2f:
25:3d:88:ab:0f:48:19:fe:f2:92:b8:24:5c:2a:2d:
c9:43:0a:2e:db:c7:a5:5d:66:8e:e6:9f:fa:d2:ff:
72:8d:11:26:62:f6:ef:50:ef:f6:27:ba:e3:45:47:
86:9c:1d:6e:17:b6:f8:8a:e2:65:7b:f1:53:f2:da:
50:e3:f8:da:35:4c:6e:c1:6b:3a:a2:4f:f4:f6:18:
f3:80:b2:7f:06:e1:bd:e6:ce:93:a5:f5:db:8d:5e:
b2:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:B2:C5:B6:8F:21:22:47:78:B0:E7:BB:81:84:EC:0C:9A:DA:4F:6B
X509v3 Authority Key Identifier:
keyid:69:15:98:20:DD:71:80:04:FB:15:C8:5B:27:07:96:CB:4E:84:A4:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aRWYIN1xgAT7FchbJweWy06EpOo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/7ddf30-3c91-43f9-b3b1-c949f0591f5b/1/aRWYIN1xgAT7FchbJweWy06EpOo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/7ddf30-3c91-43f9-b3b1-c949f0591f5b/1/aRWYIN1xgAT7FchbJweWy06EpOo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:54:a9:a8:41:97:36:62:60:57:2c:d4:94:ee:f8:d4:17:51:
3f:96:bc:2d:ca:1c:b9:84:a4:a6:90:5f:ee:b2:f5:d3:93:3d:
7f:f0:3d:75:56:a6:db:64:ec:5c:fc:88:e8:43:e3:ea:8a:e7:
22:61:7b:d2:41:c0:c0:89:55:a8:b9:04:1f:9f:1c:d1:32:2d:
cc:63:16:79:0b:0a:47:a5:a9:93:22:2b:75:c6:d9:5c:60:c3:
28:e7:a2:ab:df:8a:6b:42:ca:03:f2:be:b4:e3:af:28:dd:3c:
b4:07:d5:28:b8:12:f6:38:66:bd:2b:72:9c:19:47:50:1d:7a:
5c:47:6e:c0:9c:96:6e:8e:57:41:69:8d:52:a8:a3:34:64:da:
43:5d:3e:b4:5e:c0:87:9a:c7:e5:b3:0b:78:32:e3:ef:51:8d:
bd:d4:a7:d0:46:fd:49:00:4c:ed:46:de:5e:b1:c6:5e:c1:25:
6a:71:a5:6b:e0:49:43:40:4d:38:43:e8:d5:cd:61:11:a8:cd:
98:b7:a1:43:eb:be:c8:94:7a:89:a1:df:0c:61:99:f0:ec:2d:
09:dc:5e:42:f1:43:59:93:65:18:e2:fb:16:c4:ed:a5:3a:f6:
3a:d1:89:bd:f2:d9:99:ff:da:b5:d2:e1:24:0d:cb:df:c7:d5:
c6:94:7f:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:02:05 2026 by rpki-client