Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/a2eda2-e885-4640-9c84-d6ef8e914307/1/rwAta7hamGvIjbzZMyCUVOW14II.mft
File: rwAta7hamGvIjbzZMyCUVOW14II.mft (raw, json)
Hash identifier: iCn5pcrrtiiSXTHoKW2JUR9JS9T9fJn8l8FiSe9w7h8=
Subject key identifier: 29:45:4D:3C:FC:77:06:55:89:51:79:CF:0C:AD:C1:9D:2E:FE:1A:D9
Authority key identifier: AF:00:2D:6B:B8:5A:98:6B:C8:8D:BC:D9:33:20:94:54:E5:B5:E0:82
Certificate issuer: /CN=af002d6bb85a986bc88dbcd933209454e5b5e082
Certificate serial: 019F92B6B398E977BA0CAB5CC7D76CC5405F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rwAta7hamGvIjbzZMyCUVOW14II.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/a2eda2-e885-4640-9c84-d6ef8e914307/1/rwAta7hamGvIjbzZMyCUVOW14II.mft
Manifest number: 14C7
Signing time: Fri 24 Jul 2026 06:01:14 +0000
Manifest this update: Fri 24 Jul 2026 06:01:14 +0000
Manifest next update: Sat 25 Jul 2026 06:01:14 +0000
Files and hashes: 1: p1Z5ag1eRovSGpghiltah3wrLp8.roa (hash: fdCiGCU5t+2pHmKwq78C8J8Bdqj2StfkhlW4J0RllGM=)
2: rwAta7hamGvIjbzZMyCUVOW14II.crl (hash: FjORYIXTTPEy1n+5uwgzxtGQjq3qVexPLhjM8wYxs1w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/a2eda2-e885-4640-9c84-d6ef8e914307/1/rwAta7hamGvIjbzZMyCUVOW14II.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/a2eda2-e885-4640-9c84-d6ef8e914307/1/rwAta7hamGvIjbzZMyCUVOW14II.mft
rsync://rpki.ripe.net/repository/DEFAULT/rwAta7hamGvIjbzZMyCUVOW14II.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 06:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:b6:b3:98:e9:77:ba:0c:ab:5c:c7:d7:6c:c5:40:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af002d6bb85a986bc88dbcd933209454e5b5e082
Validity
Not Before: Jul 24 06:01:14 2026 GMT
Not After : Jul 25 06:01:14 2026 GMT
Subject: CN=29454d3cfc770655895179cf0cadc19d2efe1ad9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:17:af:d1:ce:96:67:0e:fa:7a:3d:5b:e5:73:
46:56:58:16:39:ec:28:47:5e:f0:09:d5:9a:52:d3:
6a:ab:7e:08:57:a4:35:74:ec:b1:39:1d:49:91:73:
46:82:2e:90:50:dd:1d:d5:ec:91:ef:80:d6:34:25:
da:45:74:ed:47:b7:7c:63:e3:23:31:5b:6b:f3:f4:
3c:f8:ae:9d:d9:3c:90:24:bd:23:21:fd:5a:6e:20:
75:60:74:f2:5b:ae:a5:83:f3:03:90:b4:07:ca:be:
17:67:07:0c:7f:3d:37:47:4a:4c:86:40:c1:25:f0:
4b:3f:fa:08:ed:93:69:ba:b2:15:41:d3:68:50:5e:
d9:bb:e9:9e:4f:a5:f9:1f:c8:6d:64:98:0c:0a:98:
ef:46:a5:d7:74:b9:03:0c:91:04:cc:45:d5:47:c2:
85:7d:1b:93:a6:0e:5c:d6:aa:06:dd:34:8d:e5:9c:
e2:77:37:20:05:5f:ee:8b:4f:ef:70:5d:c4:7e:1e:
fc:2c:fe:ce:0c:95:05:81:13:d4:b9:c8:21:2d:a6:
30:ac:a6:a6:71:d6:28:ce:a3:32:b4:e5:5d:f3:b7:
d2:a9:3e:50:2a:eb:76:9f:df:64:4b:6a:11:b0:98:
8f:14:c7:ce:65:fb:5c:0c:55:f8:14:68:a0:d6:0d:
52:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:45:4D:3C:FC:77:06:55:89:51:79:CF:0C:AD:C1:9D:2E:FE:1A:D9
X509v3 Authority Key Identifier:
keyid:AF:00:2D:6B:B8:5A:98:6B:C8:8D:BC:D9:33:20:94:54:E5:B5:E0:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rwAta7hamGvIjbzZMyCUVOW14II.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/a2eda2-e885-4640-9c84-d6ef8e914307/1/rwAta7hamGvIjbzZMyCUVOW14II.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/a2eda2-e885-4640-9c84-d6ef8e914307/1/rwAta7hamGvIjbzZMyCUVOW14II.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:99:01:aa:24:e0:ec:43:b5:79:5b:d3:d6:73:26:2f:40:58:
86:b5:79:c6:7a:c4:9a:19:5d:d8:67:1d:52:19:4a:35:86:54:
f4:0e:53:11:0b:ad:9d:af:9c:77:4c:b8:ff:a4:9c:23:f6:f3:
dd:2d:aa:2b:39:93:6f:2f:a8:3c:a3:a1:ae:2a:ea:c1:57:d8:
b7:36:6f:c3:9d:28:e0:df:fa:3b:a8:98:f4:74:09:87:2e:2c:
6d:bf:14:0d:33:01:56:ec:27:a8:02:b9:12:03:32:85:9b:90:
6b:58:fd:df:32:aa:49:e8:8d:35:97:4f:c5:34:06:09:f9:e6:
4b:ea:b8:fc:a4:ff:df:f7:27:0e:8f:03:80:69:83:94:3a:d8:
2f:91:34:c6:65:8f:dc:2d:11:3a:8f:ef:ba:b1:83:e1:84:2a:
c0:f4:06:00:19:61:56:23:77:a4:20:c4:be:30:36:3e:7d:b6:
25:dc:e7:25:8e:44:ab:20:b6:7d:dd:4d:67:84:bf:48:f1:c9:
3a:ca:a0:a2:ff:e1:09:ee:60:96:c5:b1:15:28:f1:22:ec:20:
c3:f4:2e:b5:50:8a:cf:d4:7b:d7:ff:ae:59:cd:bb:12:46:b7:
83:be:34:5c:28:f2:f8:bb:ab:82:21:04:67:87:a9:9d:5c:cf:
be:8c:6d:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:36:55 2026 by rpki-client