Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/717615-d202-48f2-bb93-cc20f4172ced/1/aWIqGq33nnEdHn5DGfcywLLagB4.mft
File: aWIqGq33nnEdHn5DGfcywLLagB4.mft (raw, json)
Hash identifier: HnyUz5sLSiJwtcnfNombq5aCTnNRnjgKh/oJOrPKX1Q=
Subject key identifier: BB:B0:2B:31:4D:A2:62:F3:D4:0C:A0:4B:40:BB:16:8E:3F:D2:55:35
Authority key identifier: 69:62:2A:1A:AD:F7:9E:71:1D:1E:7E:43:19:F7:32:C0:B2:DA:80:1E
Certificate issuer: /CN=69622a1aadf79e711d1e7e4319f732c0b2da801e
Certificate serial: 019F946DBCFEECCAA2A0FFF47679BBD3E6FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aWIqGq33nnEdHn5DGfcywLLagB4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/717615-d202-48f2-bb93-cc20f4172ced/1/aWIqGq33nnEdHn5DGfcywLLagB4.mft
Manifest number: 19CB
Signing time: Fri 24 Jul 2026 14:00:47 +0000
Manifest this update: Fri 24 Jul 2026 14:00:47 +0000
Manifest next update: Sat 25 Jul 2026 14:00:47 +0000
Files and hashes: 1: 0-VSXxZUPNE_NCyRYY4aOknsIgM.roa (hash: p3ie/xFXWDV8klzQ/kVNpHbbrPevYLWLmd0IwEUgv1A=)
2: U3PfejTQb2whMGKKVwhS4XwhEu0.roa (hash: xYX61cbjxOAGtEMGsVih/dcwxYwy4/ZCPIVGCthKU24=)
3: aWIqGq33nnEdHn5DGfcywLLagB4.crl (hash: J2k6bnT6NQStruMeF1oJyxhfiy0wz9rCPnLGWFMI0GE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/717615-d202-48f2-bb93-cc20f4172ced/1/aWIqGq33nnEdHn5DGfcywLLagB4.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/717615-d202-48f2-bb93-cc20f4172ced/1/aWIqGq33nnEdHn5DGfcywLLagB4.mft
rsync://rpki.ripe.net/repository/DEFAULT/aWIqGq33nnEdHn5DGfcywLLagB4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:6d:bc:fe:ec:ca:a2:a0:ff:f4:76:79:bb:d3:e6:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69622a1aadf79e711d1e7e4319f732c0b2da801e
Validity
Not Before: Jul 24 14:00:47 2026 GMT
Not After : Jul 25 14:00:47 2026 GMT
Subject: CN=bbb02b314da262f3d40ca04b40bb168e3fd25535
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:e9:e6:e7:f9:09:69:7c:0b:21:53:66:71:1e:
6d:a7:52:54:80:3d:4f:5f:6b:42:1a:6a:60:c4:9c:
18:97:8e:d4:b8:5e:33:02:1a:ce:30:29:bd:08:74:
f2:8f:f9:3c:4f:3e:84:fd:0c:c1:df:db:4e:d0:4a:
48:61:71:7f:e6:f3:fb:ba:f1:e3:39:80:a2:bd:4c:
5a:18:89:e6:a9:fb:8e:e1:cc:e4:8e:21:ee:75:0d:
67:bb:95:c5:9a:1b:cf:1d:d7:fd:d5:c7:00:20:c5:
2f:cd:49:39:26:b4:ae:4e:a0:b8:33:79:33:e4:b1:
36:ba:ea:73:e2:39:6d:d7:bb:4f:08:f5:66:f8:84:
a5:8d:28:45:32:c5:64:81:d9:b8:d2:fe:2b:41:cb:
9c:4a:0b:c3:17:10:6a:3f:83:b2:e5:d3:5a:5d:5f:
e8:56:53:4c:96:b6:de:da:70:b2:90:29:4a:a6:ef:
3f:d0:6e:7c:f7:bb:91:e9:8a:fb:ef:93:03:3c:b5:
eb:0f:2f:20:13:d1:05:a6:15:52:62:c5:39:fa:60:
b6:3f:42:d2:1a:cd:c3:64:32:79:ba:e8:9b:00:31:
fd:d8:1c:8c:97:71:d1:ac:67:60:a2:21:bc:24:5b:
65:33:bf:9f:cd:eb:ec:65:e8:8f:71:76:ad:2d:68:
98:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:B0:2B:31:4D:A2:62:F3:D4:0C:A0:4B:40:BB:16:8E:3F:D2:55:35
X509v3 Authority Key Identifier:
keyid:69:62:2A:1A:AD:F7:9E:71:1D:1E:7E:43:19:F7:32:C0:B2:DA:80:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aWIqGq33nnEdHn5DGfcywLLagB4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/717615-d202-48f2-bb93-cc20f4172ced/1/aWIqGq33nnEdHn5DGfcywLLagB4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/717615-d202-48f2-bb93-cc20f4172ced/1/aWIqGq33nnEdHn5DGfcywLLagB4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:29:ff:2b:1b:8f:d9:4b:10:68:ee:be:84:ed:8f:32:2c:60:
dc:f7:41:d2:79:f9:bf:99:78:c1:1b:32:0a:b8:5e:72:42:a5:
7e:7a:1d:5d:5d:9e:64:84:95:80:75:54:0c:41:79:4b:d9:b0:
e4:1b:9b:25:fd:0d:7e:4f:6c:68:a1:5f:22:a8:8a:ea:17:4d:
c9:ed:50:f5:7f:2a:cf:9a:e2:ff:70:d8:e2:ed:9e:60:c4:2b:
ba:b4:7a:40:0e:c6:d6:97:af:25:75:e7:98:75:7b:d6:99:b5:
29:4d:37:43:d8:38:9b:6f:bc:89:af:f2:9a:3e:8a:49:6d:e2:
1a:05:d7:ba:c0:50:a6:3a:6c:58:f8:05:b8:3a:6c:2c:90:6c:
60:08:6b:51:36:69:5c:d8:02:41:9e:12:53:8b:76:d5:a3:da:
8b:cb:bd:c6:65:f0:54:b8:d4:c2:14:65:2d:2f:2e:f4:ec:95:
01:bd:e0:7f:d0:fc:a1:f2:4d:e0:36:a4:1c:76:d4:6f:dd:35:
b0:63:56:d3:c3:ec:89:94:19:01:de:93:7f:ce:ee:55:2d:0c:
4e:b2:7d:29:69:02:be:40:bc:30:82:2a:d2:17:a7:45:aa:c2:
8e:16:44:48:8b:a6:d5:98:9e:56:0f:6f:c4:b2:0f:d2:e2:70:
70:78:28:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:54:03 2026 by rpki-client