Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/1acb0c-31a3-4718-993d-11dffe108147/1/aw7Nv1E2DOyuYXq-GjrGpv8KW2w.mft
File: aw7Nv1E2DOyuYXq-GjrGpv8KW2w.mft (raw, json)
Hash identifier: CuwZuPxOtnBZ+KzcNjrXlTquzz9oEdt6p7McgzRvoKc=
Subject key identifier: F3:EF:86:E5:34:AE:04:7F:FE:9B:D5:B6:97:D9:F5:6E:5A:45:AE:B4
Authority key identifier: 6B:0E:CD:BF:51:36:0C:EC:AE:61:7A:BE:1A:3A:C6:A6:FF:0A:5B:6C
Certificate issuer: /CN=6b0ecdbf51360cecae617abe1a3ac6a6ff0a5b6c
Certificate serial: 019E91DD7D9EA57B1D19DBD689BDAF859CA2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aw7Nv1E2DOyuYXq-GjrGpv8KW2w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/1acb0c-31a3-4718-993d-11dffe108147/1/aw7Nv1E2DOyuYXq-GjrGpv8KW2w.mft
Manifest number: 1948
Signing time: Thu 04 Jun 2026 09:01:12 +0000
Manifest this update: Thu 04 Jun 2026 09:01:12 +0000
Manifest next update: Fri 05 Jun 2026 09:01:12 +0000
Files and hashes: 1: IRp2Cv-8KzRBK5kjOx5O71bWsko.roa (hash: Ld1XWN7Sn3t+gSZshK2rptc8lciUjiiDr1oOC9C30/s=)
2: aw7Nv1E2DOyuYXq-GjrGpv8KW2w.crl (hash: uJE5PgXuy57Nmv7DYlhVOOepeKU5FW6y+9f6gCin6x4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/1acb0c-31a3-4718-993d-11dffe108147/1/aw7Nv1E2DOyuYXq-GjrGpv8KW2w.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/1acb0c-31a3-4718-993d-11dffe108147/1/aw7Nv1E2DOyuYXq-GjrGpv8KW2w.mft
rsync://rpki.ripe.net/repository/DEFAULT/aw7Nv1E2DOyuYXq-GjrGpv8KW2w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Jun 2026 07:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:91:dd:7d:9e:a5:7b:1d:19:db:d6:89:bd:af:85:9c:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b0ecdbf51360cecae617abe1a3ac6a6ff0a5b6c
Validity
Not Before: Jun 4 09:01:12 2026 GMT
Not After : Jun 5 09:01:12 2026 GMT
Subject: CN=f3ef86e534ae047ffe9bd5b697d9f56e5a45aeb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:46:2e:fa:be:4d:fd:31:38:0f:88:5f:d5:a1:
c3:53:32:8a:6a:55:53:e3:77:ca:28:54:cb:c3:ef:
72:c0:b7:30:5d:e4:b3:bd:87:82:ad:ed:b9:50:bc:
41:83:04:aa:28:4b:21:ad:47:4c:f0:4a:99:5e:0f:
c2:e3:04:ef:63:f9:88:38:fb:9b:eb:78:ed:d6:41:
64:ff:19:6b:c9:5c:23:54:07:fe:eb:4d:b6:7f:26:
0c:d1:93:7d:78:4f:f9:c2:01:d5:8a:29:b1:b7:bc:
8a:e2:54:47:13:d4:02:26:4f:47:9f:8e:49:9c:b8:
4d:08:3a:8a:67:cf:8e:1b:51:89:fa:30:75:bd:31:
1a:e2:1d:e0:d3:df:1e:de:54:9d:62:43:69:25:f3:
1d:37:66:fe:1f:5a:61:85:ae:e9:08:6a:98:94:4c:
24:f8:9a:56:10:a7:1c:d7:7a:2f:2c:ac:d0:0e:08:
5c:50:7f:a1:65:d4:5c:9d:05:f0:32:00:f9:a2:b8:
83:f8:de:33:c4:dc:ab:e5:f6:4a:63:f1:23:ca:67:
63:95:32:a0:a2:7f:5d:56:00:fc:a8:45:66:5e:a5:
11:8a:4f:aa:1f:73:b3:07:00:e1:21:7c:4f:f3:9f:
a3:56:38:bb:fd:99:c0:d5:ca:d0:13:2f:df:95:ed:
82:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:EF:86:E5:34:AE:04:7F:FE:9B:D5:B6:97:D9:F5:6E:5A:45:AE:B4
X509v3 Authority Key Identifier:
keyid:6B:0E:CD:BF:51:36:0C:EC:AE:61:7A:BE:1A:3A:C6:A6:FF:0A:5B:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aw7Nv1E2DOyuYXq-GjrGpv8KW2w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/1acb0c-31a3-4718-993d-11dffe108147/1/aw7Nv1E2DOyuYXq-GjrGpv8KW2w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/1acb0c-31a3-4718-993d-11dffe108147/1/aw7Nv1E2DOyuYXq-GjrGpv8KW2w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:7b:1d:b8:fa:5e:11:d1:8d:4a:bf:06:eb:4f:3b:3f:98:29:
99:bb:e0:96:14:0e:b5:59:49:f3:aa:45:1f:a8:bb:62:18:06:
d3:23:28:46:af:bb:4c:46:d4:05:3c:85:8b:c3:b6:fe:15:0d:
c9:64:cd:36:bc:3d:c7:31:c7:ae:71:a6:58:1c:43:d1:42:f6:
f5:d7:dd:62:90:09:17:b6:9b:0b:47:44:7f:a9:24:a4:40:62:
b6:6e:a6:dc:f6:c3:9e:16:53:e9:e7:09:61:44:27:16:b0:c7:
f5:40:40:cc:8d:ed:8e:af:9f:ff:b1:68:2d:e7:a4:7d:88:d4:
e6:35:1f:d9:c6:0d:42:92:35:5c:b4:2f:d8:4f:49:4e:81:bf:
71:4b:de:f8:cc:ba:a4:5c:5e:20:24:ee:a2:d4:88:cf:1e:a0:
72:cb:40:ea:eb:30:f1:71:78:01:01:92:54:02:fb:1a:f2:51:
58:14:c7:40:14:2a:02:b5:07:f1:45:70:7e:0b:10:b5:cb:6d:
a2:ef:4b:e9:15:05:02:30:ef:c6:a8:43:a1:46:89:9c:30:68:
7a:e9:65:35:90:7b:3a:bd:c7:68:c0:2e:08:27:42:d9:50:47:
b6:26:df:86:7a:95:3b:02:61:e8:30:3d:fd:d5:79:8f:9d:8b:
70:1f:50:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 13:23:42 2026 by rpki-client