Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/717615-d202-48f2-bb93-cc20f4172ced/1/aWIqGq33nnEdHn5DGfcywLLagB4.mft
File: aWIqGq33nnEdHn5DGfcywLLagB4.mft (raw, json)
Hash identifier: t5BcRN5IOQeuy9QDig6FzBCWibH9bMiSdgSbD/I9i+4=
Subject key identifier: C7:D7:28:7F:F8:95:0D:01:2F:1C:8B:FA:BC:4C:1D:1C:C9:8B:2E:26
Authority key identifier: 69:62:2A:1A:AD:F7:9E:71:1D:1E:7E:43:19:F7:32:C0:B2:DA:80:1E
Certificate issuer: /CN=69622a1aadf79e711d1e7e4319f732c0b2da801e
Certificate serial: 019E1FB5ADFA473B158096DE4EC4C820092E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aWIqGq33nnEdHn5DGfcywLLagB4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/717615-d202-48f2-bb93-cc20f4172ced/1/aWIqGq33nnEdHn5DGfcywLLagB4.mft
Manifest number: 190A
Signing time: Wed 13 May 2026 05:01:00 +0000
Manifest this update: Wed 13 May 2026 05:01:00 +0000
Manifest next update: Thu 14 May 2026 05:01:00 +0000
Files and hashes: 1: 0-VSXxZUPNE_NCyRYY4aOknsIgM.roa (hash: p3ie/xFXWDV8klzQ/kVNpHbbrPevYLWLmd0IwEUgv1A=)
2: U3PfejTQb2whMGKKVwhS4XwhEu0.roa (hash: xYX61cbjxOAGtEMGsVih/dcwxYwy4/ZCPIVGCthKU24=)
3: aWIqGq33nnEdHn5DGfcywLLagB4.crl (hash: eJ6T0vB1yeILHD+DjKAMKsKGQ1PBeIcsmQyHvOHOAjI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/717615-d202-48f2-bb93-cc20f4172ced/1/aWIqGq33nnEdHn5DGfcywLLagB4.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/717615-d202-48f2-bb93-cc20f4172ced/1/aWIqGq33nnEdHn5DGfcywLLagB4.mft
rsync://rpki.ripe.net/repository/DEFAULT/aWIqGq33nnEdHn5DGfcywLLagB4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 05:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:b5:ad:fa:47:3b:15:80:96:de:4e:c4:c8:20:09:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69622a1aadf79e711d1e7e4319f732c0b2da801e
Validity
Not Before: May 13 05:01:00 2026 GMT
Not After : May 14 05:01:00 2026 GMT
Subject: CN=c7d7287ff8950d012f1c8bfabc4c1d1cc98b2e26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:04:3d:43:57:95:e5:84:b0:53:02:bf:02:98:
ac:5d:b8:b4:84:5c:8d:4c:61:82:63:2c:4d:6e:cb:
61:02:8f:26:b6:67:42:48:ee:b7:7c:7a:29:22:14:
a4:c3:f7:84:d3:f8:23:c1:29:79:10:49:c8:41:9c:
c2:64:8f:8c:98:60:59:09:1c:df:dc:57:63:e8:59:
bb:90:6a:75:26:08:f7:57:fa:53:96:a9:5d:39:46:
cb:7f:33:87:07:89:66:72:c2:9e:40:6f:58:18:87:
89:8e:9f:c0:6b:04:7d:b2:2a:75:32:aa:10:33:63:
40:c4:27:e2:4b:de:47:e1:6c:0b:0b:92:e7:cd:7c:
a4:41:fe:1c:08:98:cb:96:e0:aa:8f:47:d0:c4:da:
b7:df:34:a0:e7:5b:d9:f4:b4:2d:30:71:77:f6:d2:
05:d8:e1:a5:3c:88:83:16:23:d9:0f:11:55:b8:90:
f7:b9:47:16:44:97:3a:d4:0d:14:c9:c5:e0:77:a0:
15:a9:25:59:6a:f5:45:8e:0d:22:2a:b6:04:6e:c9:
56:33:02:ab:b5:c8:d1:97:4c:26:23:06:3b:88:a2:
0a:c2:b4:26:cb:ad:49:c2:ca:41:f3:0d:9d:a1:9b:
c4:fe:5b:65:70:94:49:14:ce:b6:e7:52:d9:b0:66:
47:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:D7:28:7F:F8:95:0D:01:2F:1C:8B:FA:BC:4C:1D:1C:C9:8B:2E:26
X509v3 Authority Key Identifier:
keyid:69:62:2A:1A:AD:F7:9E:71:1D:1E:7E:43:19:F7:32:C0:B2:DA:80:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aWIqGq33nnEdHn5DGfcywLLagB4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/717615-d202-48f2-bb93-cc20f4172ced/1/aWIqGq33nnEdHn5DGfcywLLagB4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/717615-d202-48f2-bb93-cc20f4172ced/1/aWIqGq33nnEdHn5DGfcywLLagB4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:4e:04:0c:9a:e8:9a:f0:34:98:20:f2:4d:d0:c1:2d:de:35:
0a:04:51:83:4d:d1:59:f3:df:59:d4:b9:80:7e:a5:df:34:2d:
73:7b:74:26:cb:38:89:d8:57:9e:17:02:59:b0:34:ee:73:06:
1a:b4:50:39:2e:a6:e1:b7:53:39:fd:ef:51:2f:93:ac:3e:32:
bd:ba:41:4a:2f:3f:c8:cf:02:d3:b0:68:f4:00:84:7b:b2:d8:
18:9b:84:71:c3:f7:4a:9a:2c:00:df:f2:36:91:7e:fa:21:77:
43:24:15:1d:9a:ff:37:7c:2b:49:6e:2d:bf:e6:60:e9:d2:b8:
27:6e:61:4e:87:e0:69:b5:92:e4:b5:63:b9:46:87:74:26:11:
f4:90:bd:b8:fe:2a:a2:02:93:ba:8d:c6:cc:a9:85:b9:97:5f:
04:38:92:61:e9:ae:3a:16:ef:45:b8:a1:93:88:f0:d9:a1:bd:
f2:e1:55:2d:66:38:91:5c:b9:68:11:41:7d:e3:cd:2e:2c:b3:
0e:5f:4f:17:b2:a1:38:3c:c2:3f:9f:81:71:24:db:bd:1e:f4:
4f:18:45:dc:a1:ce:72:f7:0d:9a:65:82:29:35:9f:62:73:dc:
8d:60:d3:bb:af:f9:1e:c5:a9:e1:b9:d2:2f:ec:0a:7c:4d:ed:
1e:22:8d:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:42:29 2026 by rpki-client