Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a1/a2eda2-e885-4640-9c84-d6ef8e914307/1/rwAta7hamGvIjbzZMyCUVOW14II.mft
File: rwAta7hamGvIjbzZMyCUVOW14II.mft (raw, json)
Hash identifier: j1y03zGkumL+rL3QI0hwOtc0yY0kNYClLyUVdDl3mL0=
Subject key identifier: 59:B3:DF:C6:C0:B8:92:4B:B8:5E:F2:EB:D2:EA:49:6C:E7:BC:B7:0A
Authority key identifier: AF:00:2D:6B:B8:5A:98:6B:C8:8D:BC:D9:33:20:94:54:E5:B5:E0:82
Certificate issuer: /CN=af002d6bb85a986bc88dbcd933209454e5b5e082
Certificate serial: 01A0DCF2F65D9D57E87D02086C1A5722B078
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rwAta7hamGvIjbzZMyCUVOW14II.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/a2eda2-e885-4640-9c84-d6ef8e914307/1/rwAta7hamGvIjbzZMyCUVOW14II.mft
Manifest number: 1572
Signing time: Sat 26 Sep 2026 09:01:45 +0000
Manifest this update: Sat 26 Sep 2026 09:01:45 +0000
Manifest next update: Sun 27 Sep 2026 09:01:45 +0000
Files and hashes: 1: p1Z5ag1eRovSGpghiltah3wrLp8.roa (hash: fdCiGCU5t+2pHmKwq78C8J8Bdqj2StfkhlW4J0RllGM=)
2: rwAta7hamGvIjbzZMyCUVOW14II.crl (hash: WLEAgZIiZZny/rRntrwmIBSRgj7PeQcOUN1tjleqIWU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/a2eda2-e885-4640-9c84-d6ef8e914307/1/rwAta7hamGvIjbzZMyCUVOW14II.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/a2eda2-e885-4640-9c84-d6ef8e914307/1/rwAta7hamGvIjbzZMyCUVOW14II.mft
rsync://rpki.ripe.net/repository/DEFAULT/rwAta7hamGvIjbzZMyCUVOW14II.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 09:01:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dc:f2:f6:5d:9d:57:e8:7d:02:08:6c:1a:57:22:b0:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af002d6bb85a986bc88dbcd933209454e5b5e082
Validity
Not Before: Sep 26 09:01:45 2026 GMT
Not After : Sep 27 09:01:45 2026 GMT
Subject: CN=59b3dfc6c0b8924bb85ef2ebd2ea496ce7bcb70a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:39:3c:38:91:ea:10:80:93:11:5b:01:0c:be:
a0:9b:bf:49:e4:36:97:96:5c:df:00:2b:f1:d3:59:
c2:46:6b:ec:9b:5f:30:cb:90:6c:8b:35:97:10:95:
8e:c4:4b:51:b0:b8:70:d7:34:9c:e9:98:66:31:c6:
65:91:e9:3a:8d:e8:0b:bb:db:52:39:2a:35:03:10:
1a:25:80:84:26:da:00:48:0a:d5:61:c0:40:9e:d0:
f9:9f:6d:84:c2:62:ef:62:e3:a0:06:b7:21:c2:c4:
67:d5:94:d1:bb:84:12:99:6d:bd:0c:cc:11:c5:2a:
ee:84:10:f1:50:e2:55:d3:e1:c8:33:5b:26:b1:00:
b7:9c:02:9b:2f:0f:3f:da:9d:29:3a:6e:48:6f:ed:
6e:36:20:4f:19:c2:3c:93:3f:fe:d8:f7:36:ca:de:
2c:e7:5c:a2:4b:0e:25:4d:82:33:47:e0:23:e9:dd:
0b:85:c1:9b:3f:a6:ea:85:50:64:33:85:9b:45:83:
97:5d:b4:b3:7b:13:c4:b9:3a:9e:78:4d:42:96:7a:
96:7f:bc:58:36:17:2c:39:6e:57:f2:ae:6d:bd:95:
e8:75:d0:a1:c9:72:59:02:94:ff:7b:2c:92:98:3e:
67:7b:1c:e3:21:5c:4a:23:84:cd:24:b1:65:40:63:
73:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:B3:DF:C6:C0:B8:92:4B:B8:5E:F2:EB:D2:EA:49:6C:E7:BC:B7:0A
X509v3 Authority Key Identifier:
keyid:AF:00:2D:6B:B8:5A:98:6B:C8:8D:BC:D9:33:20:94:54:E5:B5:E0:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rwAta7hamGvIjbzZMyCUVOW14II.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/a2eda2-e885-4640-9c84-d6ef8e914307/1/rwAta7hamGvIjbzZMyCUVOW14II.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/a2eda2-e885-4640-9c84-d6ef8e914307/1/rwAta7hamGvIjbzZMyCUVOW14II.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:45:f1:dd:0a:00:42:64:49:d7:c7:80:dd:33:02:44:84:56:
2c:64:5c:f0:47:4b:a2:5e:a6:71:88:6a:78:c8:8f:c7:ca:02:
86:58:48:2f:3a:bb:a1:1d:d9:a5:b8:09:b6:27:d0:b5:48:ef:
3b:d5:f1:70:e5:81:c0:98:07:77:c5:ad:4c:04:80:58:2c:1f:
3b:ce:90:e7:3a:9e:2e:65:8f:8f:6a:72:4f:3b:18:56:5a:07:
8a:97:b3:1c:ef:cd:02:d0:cb:b6:f7:72:61:36:6e:70:10:eb:
84:c8:19:db:ef:b0:33:99:e2:17:e1:3b:b1:89:93:0f:55:78:
c3:56:47:26:57:60:5b:26:e5:eb:c5:27:a0:ff:79:5e:70:9c:
cf:94:a6:1a:f7:c4:a6:eb:1f:6c:50:8d:f2:99:cc:ab:39:a0:
62:e6:19:4a:89:df:ba:f5:a4:ae:a0:f0:45:d6:3d:fd:d3:14:
09:88:e8:42:5e:7d:82:1e:4f:d2:ce:5d:86:71:4c:8a:45:80:
16:f7:21:73:94:d2:89:f2:c3:07:3c:61:2c:85:6b:8f:28:ea:
44:d9:52:d4:f6:54:7a:c5:20:79:41:e7:58:d7:6f:3c:a5:7d:
86:72:bc:eb:01:ef:c9:ae:02:eb:cd:6a:33:cb:7a:89:b8:19:
56:af:56:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 14:44:17 2026 by rpki-client