Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1d/717615-d202-48f2-bb93-cc20f4172ced/1/aWIqGq33nnEdHn5DGfcywLLagB4.mft
File: aWIqGq33nnEdHn5DGfcywLLagB4.mft (raw, json)
Hash identifier: D9bwsjIbuhBRzQp0J3tfKwaGgcUHNvCAcvuHBmjnUmI=
Subject key identifier: DF:EE:BD:A7:BD:82:04:C1:15:FC:29:13:EF:4E:C5:A1:AB:93:DE:CC
Authority key identifier: 69:62:2A:1A:AD:F7:9E:71:1D:1E:7E:43:19:F7:32:C0:B2:DA:80:1E
Certificate issuer: /CN=69622a1aadf79e711d1e7e4319f732c0b2da801e
Certificate serial: 01A0F1FA2FA04C0BA5BC186AB318E9D30CE9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aWIqGq33nnEdHn5DGfcywLLagB4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/717615-d202-48f2-bb93-cc20f4172ced/1/aWIqGq33nnEdHn5DGfcywLLagB4.mft
Manifest number: 1A80
Signing time: Wed 30 Sep 2026 11:01:40 +0000
Manifest this update: Wed 30 Sep 2026 11:01:40 +0000
Manifest next update: Thu 01 Oct 2026 11:01:40 +0000
Files and hashes: 1: 0-VSXxZUPNE_NCyRYY4aOknsIgM.roa (hash: p3ie/xFXWDV8klzQ/kVNpHbbrPevYLWLmd0IwEUgv1A=)
2: U3PfejTQb2whMGKKVwhS4XwhEu0.roa (hash: xYX61cbjxOAGtEMGsVih/dcwxYwy4/ZCPIVGCthKU24=)
3: aWIqGq33nnEdHn5DGfcywLLagB4.crl (hash: tZRG4H6gP8DZkqD1k8/NmnLBsYxzZi65uYWvWVDTz1k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/717615-d202-48f2-bb93-cc20f4172ced/1/aWIqGq33nnEdHn5DGfcywLLagB4.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/717615-d202-48f2-bb93-cc20f4172ced/1/aWIqGq33nnEdHn5DGfcywLLagB4.mft
rsync://rpki.ripe.net/repository/DEFAULT/aWIqGq33nnEdHn5DGfcywLLagB4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 Oct 2026 09:59:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f1:fa:2f:a0:4c:0b:a5:bc:18:6a:b3:18:e9:d3:0c:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69622a1aadf79e711d1e7e4319f732c0b2da801e
Validity
Not Before: Sep 30 11:01:40 2026 GMT
Not After : Oct 1 11:01:40 2026 GMT
Subject: CN=dfeebda7bd8204c115fc2913ef4ec5a1ab93decc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:88:65:77:17:ae:8f:17:4a:62:a3:0e:83:ae:
04:b6:bb:83:dd:46:6b:de:76:b5:23:fd:01:20:e4:
de:29:17:7c:f0:8a:22:42:b8:e6:15:c6:84:69:92:
35:16:0d:a6:80:bd:85:8a:87:f2:ff:63:27:3d:1b:
f9:07:01:21:22:4f:ee:7c:a1:4c:20:90:a1:3a:68:
99:19:7d:f2:a2:0f:fe:14:49:34:7a:20:1c:5e:d2:
af:e5:40:35:ad:86:67:e6:26:9a:72:70:f6:63:cd:
f7:72:26:db:2e:6d:d6:da:67:7b:46:dd:6f:bb:59:
e6:70:f4:33:65:fd:c5:ae:0a:9a:00:42:16:3d:47:
c6:bf:13:d2:7e:db:8b:6c:e6:ec:31:c1:ee:83:74:
21:aa:16:68:f9:03:f0:28:73:96:2f:d0:74:d7:13:
4d:54:44:34:10:56:66:42:84:c4:e2:86:f7:ca:76:
ab:8e:4b:3f:23:06:5c:10:23:0e:ae:eb:8a:42:ec:
a2:56:12:b0:13:62:b7:11:1a:c0:6f:b8:96:20:da:
b6:c9:e0:48:c0:40:fb:e9:9b:8d:43:83:9f:82:44:
c6:70:89:a1:b7:90:ee:86:f7:49:80:01:dc:68:4f:
9f:c1:a8:7b:d4:4a:ce:8b:96:17:0a:61:86:dc:18:
49:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:EE:BD:A7:BD:82:04:C1:15:FC:29:13:EF:4E:C5:A1:AB:93:DE:CC
X509v3 Authority Key Identifier:
keyid:69:62:2A:1A:AD:F7:9E:71:1D:1E:7E:43:19:F7:32:C0:B2:DA:80:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aWIqGq33nnEdHn5DGfcywLLagB4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/717615-d202-48f2-bb93-cc20f4172ced/1/aWIqGq33nnEdHn5DGfcywLLagB4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/717615-d202-48f2-bb93-cc20f4172ced/1/aWIqGq33nnEdHn5DGfcywLLagB4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:90:4b:db:1b:63:cd:b1:37:82:52:d8:f9:aa:23:a3:8b:39:
49:0d:2d:9a:1f:3d:52:b8:02:a5:47:15:f3:2f:40:72:40:b5:
c2:3a:d2:f5:bc:30:bd:cd:64:0c:39:9f:e9:1f:63:15:2c:f2:
77:15:df:36:d4:2b:8e:9b:b0:d6:8f:17:9d:40:65:9b:54:4a:
6e:0f:8f:78:ae:e8:c7:a2:4c:e0:a8:41:d1:34:e3:77:51:87:
e5:3c:4e:7b:45:64:51:7c:5a:41:0a:91:18:ba:5b:93:0c:e2:
02:b9:db:7f:9b:34:e5:1a:0c:f0:04:05:59:bc:bb:63:fe:f5:
ef:ab:46:68:e4:f8:e6:8d:24:75:a1:35:9f:1a:b8:9c:05:ea:
e5:05:80:d8:45:2d:35:c6:04:25:24:60:f4:08:12:d0:c2:1f:
dd:f4:1b:0e:06:01:41:25:74:70:15:ee:4b:fc:1f:ed:ad:90:
79:95:fe:47:74:5a:b5:bf:0b:c3:09:ec:4b:71:64:5f:ab:5f:
df:1e:54:9f:d8:42:27:e6:d6:65:59:77:5c:74:51:86:15:e0:
5c:f7:9e:62:b2:08:62:75:18:07:e5:00:4f:e3:8a:87:49:70:
9d:61:11:63:7e:d4:dc:d0:de:f3:13:cd:fb:7e:20:3f:c2:ef:
e6:68:11:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 17:11:35 2026 by rpki-client