Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/a2eda2-e885-4640-9c84-d6ef8e914307/1/rwAta7hamGvIjbzZMyCUVOW14II.mft
File: rwAta7hamGvIjbzZMyCUVOW14II.mft (raw, json)
Hash identifier: zVHfFG+WFQ2l/obDKuRGQcSEjHC5PEwZyto58S9orQc=
Subject key identifier: 51:2A:1A:A2:45:BA:E3:20:8F:B6:32:BD:20:FD:FF:79:2F:1F:E1:45
Authority key identifier: AF:00:2D:6B:B8:5A:98:6B:C8:8D:BC:D9:33:20:94:54:E5:B5:E0:82
Certificate issuer: /CN=af002d6bb85a986bc88dbcd933209454e5b5e082
Certificate serial: 019D26CCA61B7C267B98222F1D80952E5240
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rwAta7hamGvIjbzZMyCUVOW14II.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/a2eda2-e885-4640-9c84-d6ef8e914307/1/rwAta7hamGvIjbzZMyCUVOW14II.mft
Manifest number: 1386
Signing time: Wed 25 Mar 2026 21:00:38 +0000
Manifest this update: Wed 25 Mar 2026 21:00:38 +0000
Manifest next update: Thu 26 Mar 2026 21:00:38 +0000
Files and hashes: 1: p1Z5ag1eRovSGpghiltah3wrLp8.roa (hash: fdCiGCU5t+2pHmKwq78C8J8Bdqj2StfkhlW4J0RllGM=)
2: rwAta7hamGvIjbzZMyCUVOW14II.crl (hash: /Cf55cS1jy5dTJ4G90ThHCzfY4jb9IRepvey4QcLmRM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/a2eda2-e885-4640-9c84-d6ef8e914307/1/rwAta7hamGvIjbzZMyCUVOW14II.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/a2eda2-e885-4640-9c84-d6ef8e914307/1/rwAta7hamGvIjbzZMyCUVOW14II.mft
rsync://rpki.ripe.net/repository/DEFAULT/rwAta7hamGvIjbzZMyCUVOW14II.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cc:a6:1b:7c:26:7b:98:22:2f:1d:80:95:2e:52:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af002d6bb85a986bc88dbcd933209454e5b5e082
Validity
Not Before: Mar 25 21:00:38 2026 GMT
Not After : Mar 26 21:00:38 2026 GMT
Subject: CN=512a1aa245bae3208fb632bd20fdff792f1fe145
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:5e:68:df:00:1d:c4:1c:7c:01:80:67:91:44:
ad:35:67:3a:15:eb:9c:30:b1:e5:ca:58:4e:8b:ed:
08:d7:55:c2:6e:95:41:2e:9d:69:5a:6e:4a:9a:a5:
30:c4:83:95:2c:f3:64:99:35:84:e9:5a:3b:42:52:
78:29:f2:5f:6a:57:c3:d0:78:45:8e:8b:60:b2:c3:
32:d9:8a:a4:6e:19:81:35:24:41:80:25:6f:28:d3:
2d:b2:68:5a:a9:74:12:af:a8:3b:bf:53:84:da:3e:
27:00:69:4b:9b:e3:c6:78:eb:cf:71:d4:0a:c1:a6:
5f:a2:48:d5:68:ed:f3:7e:32:80:92:48:44:22:0d:
14:76:e4:87:0c:8d:70:ee:7c:2c:95:d0:35:0a:e4:
a8:56:08:b6:3b:47:fa:69:73:3b:d2:36:92:aa:ea:
d0:20:95:ee:41:c6:fa:fa:a5:6d:21:75:6a:4f:34:
d4:9d:0c:07:f9:a8:64:d6:e6:06:49:e4:2e:7b:e0:
87:67:48:85:b6:75:84:92:ab:ec:01:78:1e:e2:c4:
96:de:66:db:70:f1:f7:af:25:a8:16:f0:30:f3:dc:
3f:e1:d0:85:b2:04:c1:e3:5f:3e:ea:30:d4:a4:4c:
37:a6:5a:31:ff:e1:7f:fa:55:35:cc:bc:68:a1:c0:
d8:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:2A:1A:A2:45:BA:E3:20:8F:B6:32:BD:20:FD:FF:79:2F:1F:E1:45
X509v3 Authority Key Identifier:
keyid:AF:00:2D:6B:B8:5A:98:6B:C8:8D:BC:D9:33:20:94:54:E5:B5:E0:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rwAta7hamGvIjbzZMyCUVOW14II.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/a2eda2-e885-4640-9c84-d6ef8e914307/1/rwAta7hamGvIjbzZMyCUVOW14II.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/a2eda2-e885-4640-9c84-d6ef8e914307/1/rwAta7hamGvIjbzZMyCUVOW14II.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:a8:29:fa:3d:dd:d1:06:c4:79:da:36:7d:7c:63:87:bd:a4:
8d:05:6d:0d:a1:2d:e5:93:47:58:0b:e7:ad:03:3a:55:11:52:
0b:0a:46:a2:46:c8:bb:a5:03:c8:a2:1d:64:0c:4b:73:db:fb:
70:7a:19:0b:01:7f:de:c3:8a:6e:dc:60:db:31:3e:6c:3b:6e:
3b:68:5d:16:44:0d:06:f4:34:9b:2e:2f:75:c8:39:1a:f1:db:
f6:be:09:6e:76:9c:a8:4f:bc:c4:cf:ee:36:63:12:7e:4a:e4:
df:cd:fd:01:9f:eb:2d:c1:0d:58:b9:60:f5:84:53:65:7e:25:
44:5b:f9:8c:3b:88:fe:09:b9:a7:9f:f4:d0:81:40:f8:66:75:
64:c0:e9:01:54:be:60:d3:85:a8:4a:a2:6c:3e:09:42:d9:f5:
c9:67:1d:b7:ed:fd:aa:22:81:e5:13:d9:59:07:2a:59:92:a6:
8f:20:fe:5a:68:ad:30:d0:2f:58:32:10:25:df:f7:6b:a5:7c:
26:3f:01:1d:1e:a1:2d:d5:b6:6f:00:19:ef:0e:82:29:30:e1:
d3:ca:c7:23:33:82:9a:25:b6:34:b0:14:52:87:ad:de:cc:e2:
3e:9a:3e:08:d3:35:d0:72:4b:c2:84:0a:ef:02:12:cf:b6:4b:
2e:6d:83:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:19:20 2026 by rpki-client