Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/98/09f13c-cbf1-484f-b4b7-6bb7c31420c7/1/AWl3kK0EKAif_JZjcZlBiJD_6Ik.mft
File: AWl3kK0EKAif_JZjcZlBiJD_6Ik.mft (raw, json)
Hash identifier: vkWIbPrKRfjsv/xUXZJWTo9zojTuOcKkaO3yZ4kMuMc=
Subject key identifier: 2A:4C:6D:AD:16:A7:0A:48:06:DA:CF:3C:71:96:C9:0F:93:B8:7C:76
Authority key identifier: 01:69:77:90:AD:04:28:08:9F:FC:96:63:71:99:41:88:90:FF:E8:89
Certificate issuer: /CN=01697790ad0428089ffc96637199418890ffe889
Certificate serial: 01A0D493FCBA9684DFB5ADDAC73463EFD1E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AWl3kK0EKAif_JZjcZlBiJD_6Ik.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/09f13c-cbf1-484f-b4b7-6bb7c31420c7/1/AWl3kK0EKAif_JZjcZlBiJD_6Ik.mft
Manifest number: 0168
Signing time: Thu 24 Sep 2026 18:01:03 +0000
Manifest this update: Thu 24 Sep 2026 18:01:03 +0000
Manifest next update: Fri 25 Sep 2026 18:01:03 +0000
Files and hashes: 1: 4BaFgiySl9ZuiLKt3cqa-GBtHZ0.roa (hash: N8kdOninId/klp3EyFdJsImC3+vMapb24sb5Y1paYvQ=)
2: AWl3kK0EKAif_JZjcZlBiJD_6Ik.crl (hash: Vly3Ic2dfL5U535QsoGsg+4dSZHqfma6Brde49B6+7I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/09f13c-cbf1-484f-b4b7-6bb7c31420c7/1/AWl3kK0EKAif_JZjcZlBiJD_6Ik.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/09f13c-cbf1-484f-b4b7-6bb7c31420c7/1/AWl3kK0EKAif_JZjcZlBiJD_6Ik.mft
rsync://rpki.ripe.net/repository/DEFAULT/AWl3kK0EKAif_JZjcZlBiJD_6Ik.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d4:93:fc:ba:96:84:df:b5:ad:da:c7:34:63:ef:d1:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01697790ad0428089ffc96637199418890ffe889
Validity
Not Before: Sep 24 18:01:03 2026 GMT
Not After : Sep 25 18:01:03 2026 GMT
Subject: CN=2a4c6dad16a70a4806dacf3c7196c90f93b87c76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:97:02:71:b1:00:dd:f5:d3:f9:70:94:d8:f3:
94:44:a4:2b:c6:da:70:aa:27:dd:c9:60:d8:ff:e7:
27:cc:3b:4b:8c:4a:d5:6d:56:df:7e:86:45:01:80:
da:fb:35:8d:2c:34:b1:19:63:2c:dd:1d:74:ff:e6:
a9:6e:19:33:8c:22:dd:60:87:34:a7:aa:16:5f:03:
6f:d0:87:80:76:82:5a:d3:62:1e:97:8c:cb:fa:c0:
77:e1:56:a6:e8:ee:e0:1c:d4:1d:4b:32:e7:d7:47:
7b:d1:76:95:06:ae:8e:cb:61:c3:53:76:2f:0e:7e:
29:c7:94:29:ee:de:b1:e9:0f:29:4b:d4:bb:44:e5:
e9:b7:93:c5:c3:69:7b:e7:8f:25:c9:c7:f9:bd:a3:
8f:c8:e2:8a:cd:f2:36:27:c1:ee:ad:d8:a6:c4:05:
8d:82:52:01:0f:2a:0d:db:e0:01:76:c4:37:8a:67:
ce:bc:ee:c6:e4:95:18:8d:54:50:b6:9b:bc:3d:52:
6a:a4:8b:cd:a7:b0:4b:13:e1:54:c6:f5:4b:e4:7b:
82:20:f7:f7:38:29:43:3c:dc:03:b8:45:52:6a:ce:
9e:86:29:72:8e:88:c6:ec:11:6c:8f:cd:b5:6b:55:
d0:ea:72:73:d8:39:57:89:c8:95:ea:71:4a:66:d7:
ef:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:4C:6D:AD:16:A7:0A:48:06:DA:CF:3C:71:96:C9:0F:93:B8:7C:76
X509v3 Authority Key Identifier:
keyid:01:69:77:90:AD:04:28:08:9F:FC:96:63:71:99:41:88:90:FF:E8:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AWl3kK0EKAif_JZjcZlBiJD_6Ik.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/09f13c-cbf1-484f-b4b7-6bb7c31420c7/1/AWl3kK0EKAif_JZjcZlBiJD_6Ik.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/09f13c-cbf1-484f-b4b7-6bb7c31420c7/1/AWl3kK0EKAif_JZjcZlBiJD_6Ik.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:f4:d8:81:ad:5a:1b:35:91:07:41:bf:62:eb:40:f3:52:59:
0e:e0:77:15:08:97:99:c9:b4:65:ac:fe:2a:f6:c4:68:f9:af:
6d:e8:f8:b5:cb:0f:e4:f7:97:02:bb:3c:b3:ee:04:79:b9:75:
36:d5:48:c4:83:c6:d2:13:49:10:a1:c0:d7:cb:cb:63:02:5a:
24:b2:e4:fb:ab:fb:cf:47:2f:29:a5:f2:52:a2:49:5f:1e:2d:
06:51:25:25:c4:b1:0f:60:2f:2e:f2:df:af:53:9a:8f:8c:a0:
03:f2:43:49:af:fa:6e:49:3c:13:75:6f:b7:d7:84:14:c4:82:
e4:87:91:13:a2:f0:bf:92:f1:c2:20:55:e0:bf:a9:98:46:2d:
96:dc:20:4e:3a:5e:91:99:07:ef:c0:4d:8e:23:d8:a7:c0:53:
76:8f:51:16:6d:39:77:8e:97:71:40:a2:2e:a2:d5:2b:1e:88:
b3:25:11:52:d6:34:c7:58:7b:04:6e:17:b2:da:ef:49:79:79:
20:0b:55:3f:5c:26:02:c6:73:43:53:92:62:02:fc:68:8f:0d:
7c:d1:7f:bc:ca:6b:62:7a:b5:6d:da:95:90:8e:f2:22:60:f3:
19:82:78:8e:30:48:a7:06:5c:13:5a:2d:13:6f:d3:65:39:8d:
15:3d:18:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 23:32:55 2026 by rpki-client