Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/1acb0c-31a3-4718-993d-11dffe108147/1/aw7Nv1E2DOyuYXq-GjrGpv8KW2w.mft
File: aw7Nv1E2DOyuYXq-GjrGpv8KW2w.mft (raw, json)
Hash identifier: BWgRx0jFhUuVP3OIuqV8BVpGhW9s04VIhtve6JhS0h8=
Subject key identifier: 1C:79:BE:B1:A7:E3:46:39:26:C8:20:FA:C1:F4:3C:D9:22:A3:9B:0C
Authority key identifier: 6B:0E:CD:BF:51:36:0C:EC:AE:61:7A:BE:1A:3A:C6:A6:FF:0A:5B:6C
Certificate issuer: /CN=6b0ecdbf51360cecae617abe1a3ac6a6ff0a5b6c
Certificate serial: 019D382E53BDBD62F063202B0D127CB3A50B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aw7Nv1E2DOyuYXq-GjrGpv8KW2w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/1acb0c-31a3-4718-993d-11dffe108147/1/aw7Nv1E2DOyuYXq-GjrGpv8KW2w.mft
Manifest number: 1894
Signing time: Sun 29 Mar 2026 06:00:53 +0000
Manifest this update: Sun 29 Mar 2026 06:00:53 +0000
Manifest next update: Mon 30 Mar 2026 06:00:53 +0000
Files and hashes: 1: RbQOKPPCGMpyM4K5C4AKNXpnbds.roa (hash: Gf2GIsuTgxftxzUXHkquqSxcD5pOA/yKwpoQBnJXO2Y=)
2: aw7Nv1E2DOyuYXq-GjrGpv8KW2w.crl (hash: wx8kTJnXaeOBvof2dSk/OSpMbqn7dbGttzNb4tO56WI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/1acb0c-31a3-4718-993d-11dffe108147/1/aw7Nv1E2DOyuYXq-GjrGpv8KW2w.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/1acb0c-31a3-4718-993d-11dffe108147/1/aw7Nv1E2DOyuYXq-GjrGpv8KW2w.mft
rsync://rpki.ripe.net/repository/DEFAULT/aw7Nv1E2DOyuYXq-GjrGpv8KW2w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:53:bd:bd:62:f0:63:20:2b:0d:12:7c:b3:a5:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b0ecdbf51360cecae617abe1a3ac6a6ff0a5b6c
Validity
Not Before: Mar 29 06:00:53 2026 GMT
Not After : Mar 30 06:00:53 2026 GMT
Subject: CN=1c79beb1a7e3463926c820fac1f43cd922a39b0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:dd:4b:a9:78:8c:1d:3d:19:59:df:04:76:b9:
8d:1a:f6:e9:b1:d4:cd:00:44:db:69:3d:bd:68:5c:
b1:91:f3:9f:cd:b7:51:37:ec:19:73:66:eb:0a:99:
32:42:ac:18:0e:f6:16:ea:d9:52:64:fc:3b:56:e5:
ec:d8:a5:1a:5d:d3:99:e5:6c:4b:c9:9d:ec:4f:9b:
d2:60:2e:d3:e4:1f:8f:e2:82:59:01:cf:ea:19:e5:
2c:79:14:fa:78:8f:17:75:e6:00:ed:ad:6a:ed:0b:
4c:93:f4:e9:e7:6c:bd:ee:6d:87:49:d1:66:42:97:
3e:a3:7f:80:a5:fb:e8:1a:b3:19:ff:d5:c9:ae:66:
f1:47:38:1c:51:54:9d:e5:be:f3:1d:7c:89:b9:7e:
50:b3:25:b0:81:ec:99:5c:9a:99:71:f4:57:1a:e5:
a8:ec:05:ef:98:ae:d9:7f:0f:76:89:16:a9:42:d3:
e0:77:71:fe:f5:9f:46:23:63:e6:88:6b:75:07:5a:
72:ff:2f:ee:2e:3b:62:38:bc:ce:a3:df:16:cf:98:
95:27:f4:91:c1:59:c5:06:03:7e:b6:fc:45:01:85:
85:51:f2:6b:d3:d1:44:fb:70:b2:e2:24:1f:40:b8:
b0:89:15:5e:ea:28:9f:eb:a0:a2:e6:4a:fd:9e:d2:
03:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:79:BE:B1:A7:E3:46:39:26:C8:20:FA:C1:F4:3C:D9:22:A3:9B:0C
X509v3 Authority Key Identifier:
keyid:6B:0E:CD:BF:51:36:0C:EC:AE:61:7A:BE:1A:3A:C6:A6:FF:0A:5B:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aw7Nv1E2DOyuYXq-GjrGpv8KW2w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/1acb0c-31a3-4718-993d-11dffe108147/1/aw7Nv1E2DOyuYXq-GjrGpv8KW2w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/1acb0c-31a3-4718-993d-11dffe108147/1/aw7Nv1E2DOyuYXq-GjrGpv8KW2w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:69:74:a9:86:eb:8a:cd:a7:e9:1f:9b:40:ba:e8:ce:33:d5:
0e:6d:38:cb:aa:9b:b0:ca:cd:46:a7:ed:df:38:96:49:f7:60:
71:67:74:e8:f2:b9:37:7c:c2:c8:e4:05:eb:34:da:c5:2e:dd:
16:17:f9:07:f0:f0:9e:78:e6:fc:9b:9e:fb:aa:d7:24:08:11:
78:25:44:54:7c:14:5f:8c:8e:83:04:1a:b6:09:ca:a6:fb:91:
72:4f:9b:7e:3d:36:00:8e:c9:eb:d4:fd:95:c9:74:69:eb:c4:
e0:bd:19:d5:14:2a:d2:a2:b0:07:ef:39:8d:77:3c:e2:f2:ff:
be:79:ff:29:94:92:ce:6e:f1:d0:9e:17:4d:03:47:f2:bb:6d:
81:ee:5a:7b:72:53:d4:43:8c:c2:1b:cd:05:c5:52:5f:1b:22:
ec:5b:b7:f1:07:57:be:49:c6:b6:bd:25:fc:ab:f9:a4:f5:01:
f7:39:bc:cf:c0:7e:18:a0:c1:ae:73:46:92:38:c5:ae:49:97:
5f:be:c9:f4:0e:07:36:96:43:ae:36:f9:d2:fe:a2:da:08:75:
c4:ce:c4:bd:63:78:1d:e7:72:04:c5:88:ee:39:76:25:c1:fe:
68:c0:df:96:bb:f2:2b:31:9c:e3:74:1e:f8:d1:a9:ed:c3:12:
16:d3:8a:10
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04LlO9vWLwYyArDRJ8s6ULMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZiMGVjZGJmNTEzNjBjZWNhZTYxN2FiZTFhM2FjNmE2ZmYw
YTViNmMwHhcNMjYwMzI5MDYwMDUzWhcNMjYwMzMwMDYwMDUzWjAzMTEwLwYDVQQD
EygxYzc5YmViMWE3ZTM0NjM5MjZjODIwZmFjMWY0M2NkOTIyYTM5YjBjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtN1LqXiMHT0ZWd8EdrmNGvbpsdTN
AETbaT29aFyxkfOfzbdRN+wZc2brCpkyQqwYDvYW6tlSZPw7VuXs2KUaXdOZ5WxL
yZ3sT5vSYC7T5B+P4oJZAc/qGeUseRT6eI8XdeYA7a1q7QtMk/Tp52y97m2HSdFm
Qpc+o3+ApfvoGrMZ/9XJrmbxRzgcUVSd5b7zHXyJuX5QsyWwgeyZXJqZcfRXGuWo
7AXvmK7Zfw92iRapQtPgd3H+9Z9GI2PmiGt1B1py/y/uLjtiOLzOo98Wz5iVJ/SR
wVnFBgN+tvxFAYWFUfJr09FE+3Cy4iQfQLiwiRVe6iif66Ci5kr9ntIDEQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBx5vrGn40Y5Jsgg+sH0PNkio5sMMB8GA1UdIwQY
MBaAFGsOzb9RNgzsrmF6vho6xqb/CltsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYXc3TnYxRTJET3l1WVhxLUdqckdwdjhLVzJ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy8xYWNiMGMtMzFhMy00NzE4LTk5M2Qt
MTFkZmZlMTA4MTQ3LzEvYXc3TnYxRTJET3l1WVhxLUdqckdwdjhLVzJ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNy8xYWNiMGMtMzFhMy00NzE4LTk5M2QtMTFkZmZlMTA4MTQ3
LzEvYXc3TnYxRTJET3l1WVhxLUdqckdwdjhLVzJ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD2l0qYbr
is2n6R+bQLrozjPVDm04y6qbsMrNRqft3ziWSfdgcWd06PK5N3zCyOQF6zTaxS7d
Fhf5B/Dwnnjm/Jue+6rXJAgReCVEVHwUX4yOgwQatgnKpvuRck+bfj02AI7J69T9
lcl0aevE4L0Z1RQq0qKwB+85jXc84vL/vnn/KZSSzm7x0J4XTQNH8rttge5ae3JT
1EOMwhvNBcVSXxsi7Fu38QdXvknGtr0l/Kv5pPUB9zm8z8B+GKDBrnNGkjjFrkmX
X77J9A4HNpZDrjb50v6i2gh1xM7EvWN4HedyBMWI7jl2JcH+aMDflrvyKzGc43Qe
+NGp7cMSFtOKEA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:52:10 2026 by rpki-client