Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/1acb0c-31a3-4718-993d-11dffe108147/1/aw7Nv1E2DOyuYXq-GjrGpv8KW2w.mft
File: aw7Nv1E2DOyuYXq-GjrGpv8KW2w.mft (raw, json)
Hash identifier: hkz0zYnbFc1hik9ggz+ZDxdvbsKWO7UNQ83gT9CYtzo=
Subject key identifier: 32:64:85:A9:35:03:48:D2:57:0D:B0:71:B3:77:F7:5F:73:91:59:9D
Authority key identifier: 6B:0E:CD:BF:51:36:0C:EC:AE:61:7A:BE:1A:3A:C6:A6:FF:0A:5B:6C
Certificate issuer: /CN=6b0ecdbf51360cecae617abe1a3ac6a6ff0a5b6c
Certificate serial: 019F8531ADCEA280C157E639D9AA83F80655
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aw7Nv1E2DOyuYXq-GjrGpv8KW2w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/1acb0c-31a3-4718-993d-11dffe108147/1/aw7Nv1E2DOyuYXq-GjrGpv8KW2w.mft
Manifest number: 19C6
Signing time: Tue 21 Jul 2026 15:00:53 +0000
Manifest this update: Tue 21 Jul 2026 15:00:53 +0000
Manifest next update: Wed 22 Jul 2026 15:00:53 +0000
Files and hashes: 1: IRp2Cv-8KzRBK5kjOx5O71bWsko.roa (hash: Ld1XWN7Sn3t+gSZshK2rptc8lciUjiiDr1oOC9C30/s=)
2: aw7Nv1E2DOyuYXq-GjrGpv8KW2w.crl (hash: 3ukF5L6hBGfSetW+rE5X547CYgMjf7FZxhpd7IsBdAc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/1acb0c-31a3-4718-993d-11dffe108147/1/aw7Nv1E2DOyuYXq-GjrGpv8KW2w.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/1acb0c-31a3-4718-993d-11dffe108147/1/aw7Nv1E2DOyuYXq-GjrGpv8KW2w.mft
rsync://rpki.ripe.net/repository/DEFAULT/aw7Nv1E2DOyuYXq-GjrGpv8KW2w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:85:31:ad:ce:a2:80:c1:57:e6:39:d9:aa:83:f8:06:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b0ecdbf51360cecae617abe1a3ac6a6ff0a5b6c
Validity
Not Before: Jul 21 15:00:53 2026 GMT
Not After : Jul 22 15:00:53 2026 GMT
Subject: CN=326485a9350348d2570db071b377f75f7391599d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:f5:d1:00:99:a6:8d:b3:9a:3d:ea:43:8a:06:
be:d3:f6:94:c2:08:3a:b0:af:cc:9f:91:a0:94:8a:
f9:72:22:bd:c4:3c:51:e6:55:5d:b5:cc:89:77:d9:
bf:8b:1b:98:80:87:27:2a:6d:fb:22:e0:5e:c4:54:
0e:f7:44:c2:75:ce:ca:14:66:2d:14:6f:cd:ac:1b:
4a:65:2d:39:e4:7c:2d:fd:d9:7a:1e:45:6a:41:6a:
17:10:3d:e3:f6:37:a7:15:9a:b2:10:be:6a:89:5b:
ae:8b:64:a0:db:be:6b:ec:61:20:a9:27:97:97:ff:
46:4e:b5:28:74:8c:d4:a8:92:41:2e:df:e2:3e:8f:
5e:34:0b:38:97:d6:0d:5a:1a:6b:76:36:e7:7e:03:
f8:95:e9:8f:3c:04:24:9e:cb:37:49:d1:e4:96:39:
13:af:39:f6:ae:0a:0f:56:b3:5f:0e:ef:57:ca:9e:
64:ea:00:06:be:2c:c4:5c:a6:89:91:90:09:f7:63:
c2:43:39:15:22:16:5b:fa:a4:c5:10:30:5a:94:d2:
26:50:eb:a9:a1:ac:e6:2f:c5:36:09:c4:61:18:e9:
3f:35:3f:cb:cb:e9:65:f8:89:bf:f5:70:c4:ff:e9:
8a:28:88:f3:b6:c0:76:cc:bd:dc:f9:1a:21:3b:64:
42:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:64:85:A9:35:03:48:D2:57:0D:B0:71:B3:77:F7:5F:73:91:59:9D
X509v3 Authority Key Identifier:
keyid:6B:0E:CD:BF:51:36:0C:EC:AE:61:7A:BE:1A:3A:C6:A6:FF:0A:5B:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aw7Nv1E2DOyuYXq-GjrGpv8KW2w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/1acb0c-31a3-4718-993d-11dffe108147/1/aw7Nv1E2DOyuYXq-GjrGpv8KW2w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/1acb0c-31a3-4718-993d-11dffe108147/1/aw7Nv1E2DOyuYXq-GjrGpv8KW2w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:54:ae:b3:ff:69:a1:77:ba:77:0c:1e:16:b1:45:5e:bd:59:
4a:16:21:6a:06:04:0c:04:33:50:0e:a9:1a:27:fa:cc:83:c1:
80:47:80:5a:64:61:9e:42:cf:ee:f2:84:2a:49:a2:15:87:ef:
f9:95:c3:99:3b:01:3d:84:d9:58:15:eb:a9:47:33:3a:d7:05:
db:21:f2:2d:dd:18:c7:ed:32:6a:ec:9d:5d:56:49:50:6d:b3:
a3:ea:80:20:68:79:cd:ed:bf:f8:ed:1a:2b:cf:e9:7d:ea:00:
9f:74:28:ca:92:7b:ab:b1:68:f1:51:63:e8:9a:53:30:d3:a3:
a4:08:07:89:fc:3c:8a:54:3b:f5:02:2b:0f:93:39:b7:b3:91:
4b:d0:45:08:d2:c2:55:77:f8:49:7f:a9:22:e5:a1:8b:ba:1b:
d7:e1:e3:6a:ef:ef:00:f7:61:4f:59:37:9b:b0:90:5e:50:dd:
7f:08:61:f9:3f:34:d5:84:00:9c:3f:a1:f3:6f:9b:c3:2c:f2:
bb:9e:57:41:44:63:d3:aa:95:41:e6:14:e1:45:3a:25:ff:b7:
17:28:89:86:7b:ba:40:4a:17:e2:a6:2d:fc:5d:e3:d2:0a:96:
00:49:79:70:34:eb:72:a1:21:2a:a6:11:c9:9f:aa:b4:39:ae:
44:6c:08:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 23:02:29 2026 by rpki-client