Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/717615-d202-48f2-bb93-cc20f4172ced/1/aWIqGq33nnEdHn5DGfcywLLagB4.mft
File: aWIqGq33nnEdHn5DGfcywLLagB4.mft (raw, json)
Hash identifier: RdUoDVKoun/Wnk4z32GZKxg7MoyE3SHItzJeVhDsJrg=
Subject key identifier: DE:03:87:A8:FC:6C:73:DA:B7:2C:60:14:08:CE:00:0E:69:34:84:03
Authority key identifier: 69:62:2A:1A:AD:F7:9E:71:1D:1E:7E:43:19:F7:32:C0:B2:DA:80:1E
Certificate issuer: /CN=69622a1aadf79e711d1e7e4319f732c0b2da801e
Certificate serial: 019D26960B40D102724A9EF5BD69D14A9844
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aWIqGq33nnEdHn5DGfcywLLagB4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/717615-d202-48f2-bb93-cc20f4172ced/1/aWIqGq33nnEdHn5DGfcywLLagB4.mft
Manifest number: 1889
Signing time: Wed 25 Mar 2026 20:01:00 +0000
Manifest this update: Wed 25 Mar 2026 20:01:00 +0000
Manifest next update: Thu 26 Mar 2026 20:01:00 +0000
Files and hashes: 1: 0-VSXxZUPNE_NCyRYY4aOknsIgM.roa (hash: p3ie/xFXWDV8klzQ/kVNpHbbrPevYLWLmd0IwEUgv1A=)
2: U3PfejTQb2whMGKKVwhS4XwhEu0.roa (hash: xYX61cbjxOAGtEMGsVih/dcwxYwy4/ZCPIVGCthKU24=)
3: aWIqGq33nnEdHn5DGfcywLLagB4.crl (hash: 6pU1cp5rjo8lYIejcxdSf6EJi+8xuvkj8O1X8yInYtE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/717615-d202-48f2-bb93-cc20f4172ced/1/aWIqGq33nnEdHn5DGfcywLLagB4.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/717615-d202-48f2-bb93-cc20f4172ced/1/aWIqGq33nnEdHn5DGfcywLLagB4.mft
rsync://rpki.ripe.net/repository/DEFAULT/aWIqGq33nnEdHn5DGfcywLLagB4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:96:0b:40:d1:02:72:4a:9e:f5:bd:69:d1:4a:98:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69622a1aadf79e711d1e7e4319f732c0b2da801e
Validity
Not Before: Mar 25 20:01:00 2026 GMT
Not After : Mar 26 20:01:00 2026 GMT
Subject: CN=de0387a8fc6c73dab72c601408ce000e69348403
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:51:3f:72:8c:ca:e4:bc:4d:ac:ec:77:07:74:
24:16:01:bd:98:aa:a4:5c:cf:55:b5:4a:31:63:b1:
4a:c7:62:0c:90:8b:8d:b3:dd:f6:90:48:9f:f5:3c:
00:59:8d:96:1c:f4:24:ef:65:d1:e0:02:e8:e4:1a:
16:fe:c6:d2:95:0d:30:a6:7a:d7:f4:57:76:77:39:
a2:d6:2e:b5:ae:3b:28:3a:d5:6f:4f:3b:51:90:01:
cd:7c:98:20:49:6d:74:c2:6b:83:8d:2b:24:99:4c:
3a:8d:c4:41:16:72:38:de:c3:54:8a:17:3a:ef:d5:
a5:d8:f2:e6:eb:bc:db:09:e8:5e:8e:8b:22:03:87:
b9:dd:f8:f5:fe:ff:3e:14:eb:9f:64:80:57:4d:d3:
b6:8d:46:48:63:5f:cb:ca:f0:eb:1a:c3:24:7d:0b:
06:53:0a:01:bd:65:1b:08:8e:9b:01:de:4c:37:60:
1b:73:8a:ac:ef:bd:1e:93:0b:c4:bf:11:55:28:f2:
b0:a7:c6:ad:d6:41:23:d6:3f:6c:39:f0:2f:18:12:
78:1c:96:01:82:51:4c:0c:a3:50:68:17:46:58:31:
3d:62:78:8b:15:7b:38:60:c7:8c:ca:b3:1f:ff:df:
b5:8e:0e:f0:76:56:b6:af:6e:9e:f7:25:61:ad:be:
66:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:03:87:A8:FC:6C:73:DA:B7:2C:60:14:08:CE:00:0E:69:34:84:03
X509v3 Authority Key Identifier:
keyid:69:62:2A:1A:AD:F7:9E:71:1D:1E:7E:43:19:F7:32:C0:B2:DA:80:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aWIqGq33nnEdHn5DGfcywLLagB4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/717615-d202-48f2-bb93-cc20f4172ced/1/aWIqGq33nnEdHn5DGfcywLLagB4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/717615-d202-48f2-bb93-cc20f4172ced/1/aWIqGq33nnEdHn5DGfcywLLagB4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:a1:e8:34:c6:d3:2d:f6:c1:b8:41:7a:84:12:39:08:7a:97:
ab:fa:e7:f5:b8:d7:ea:05:1d:92:f4:8b:42:02:52:3a:b5:cd:
02:50:51:d6:44:65:85:d1:7d:14:e1:eb:9c:e5:c4:4d:83:fe:
40:cd:57:05:d9:aa:e5:89:e9:5d:d4:88:cd:10:66:5a:20:dd:
bd:63:da:b1:be:44:7e:b0:05:55:42:30:d4:1c:6c:ab:87:1d:
3f:b3:45:b9:28:0c:ee:d4:78:08:76:96:6d:6e:5e:ae:3d:92:
b5:d7:3c:b6:8b:1a:07:38:11:58:50:39:dc:e7:1b:dd:bc:d6:
ce:f9:a2:92:74:5e:e4:8a:20:d7:e1:be:00:5c:f1:a5:46:4c:
ed:91:1c:7a:4b:6b:eb:25:6d:5e:7d:3a:ca:6b:cd:bb:d2:5a:
74:6e:73:77:b1:9a:7c:ab:9e:8f:1d:b5:6b:43:ff:39:91:3e:
39:2c:22:31:bc:2c:78:99:64:9b:2f:44:1f:ab:d4:7c:d8:5c:
e3:4f:22:31:0e:65:8d:d5:bd:28:59:de:14:02:0f:fd:53:03:
f8:80:99:98:03:ec:96:6d:2e:d0:7a:ad:4d:a4:9d:6c:7b:4e:
84:c9:d6:52:d2:61:50:f1:b5:1b:12:a3:b1:dc:bc:6e:c2:0a:
f0:51:96:0b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mlgtA0QJySp71vWnRSphEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY5NjIyYTFhYWRmNzllNzExZDFlN2U0MzE5ZjczMmMwYjJk
YTgwMWUwHhcNMjYwMzI1MjAwMTAwWhcNMjYwMzI2MjAwMTAwWjAzMTEwLwYDVQQD
EyhkZTAzODdhOGZjNmM3M2RhYjcyYzYwMTQwOGNlMDAwZTY5MzQ4NDAzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArVE/cozK5LxNrOx3B3QkFgG9mKqk
XM9VtUoxY7FKx2IMkIuNs932kEif9TwAWY2WHPQk72XR4ALo5BoW/sbSlQ0wpnrX
9Fd2dzmi1i61rjsoOtVvTztRkAHNfJggSW10wmuDjSskmUw6jcRBFnI43sNUihc6
79Wl2PLm67zbCehejosiA4e53fj1/v8+FOufZIBXTdO2jUZIY1/LyvDrGsMkfQsG
UwoBvWUbCI6bAd5MN2Abc4qs770ekwvEvxFVKPKwp8at1kEj1j9sOfAvGBJ4HJYB
glFMDKNQaBdGWDE9YniLFXs4YMeMyrMf/9+1jg7wdla2r26e9yVhrb5mVQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN4Dh6j8bHPatyxgFAjOAA5pNIQDMB8GA1UdIwQY
MBaAFGliKhqt955xHR5+Qxn3MsCy2oAeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYVdJcUdxMzNubkVkSG41REdmY3l3TExhZ0I0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC83MTc2MTUtZDIwMi00OGYyLWJiOTMt
Y2MyMGY0MTcyY2VkLzEvYVdJcUdxMzNubkVkSG41REdmY3l3TExhZ0I0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZC83MTc2MTUtZDIwMi00OGYyLWJiOTMtY2MyMGY0MTcyY2Vk
LzEvYVdJcUdxMzNubkVkSG41REdmY3l3TExhZ0I0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOqHoNMbT
LfbBuEF6hBI5CHqXq/rn9bjX6gUdkvSLQgJSOrXNAlBR1kRlhdF9FOHrnOXETYP+
QM1XBdmq5YnpXdSIzRBmWiDdvWPasb5EfrAFVUIw1Bxsq4cdP7NFuSgM7tR4CHaW
bW5erj2Stdc8tosaBzgRWFA53Ocb3bzWzvmiknRe5Iog1+G+AFzxpUZM7ZEcektr
6yVtXn06ymvNu9JadG5zd7GafKuejx21a0P/OZE+OSwiMbwseJlkmy9EH6vUfNhc
408iMQ5ljdW9KFneFAIP/VMD+ICZmAPslm0u0HqtTaSdbHtOhMnWUtJhUPG1GxKj
sdy8bsIK8FGWCw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:06:15 2026 by rpki-client