Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/7ddf30-3c91-43f9-b3b1-c949f0591f5b/1/aRWYIN1xgAT7FchbJweWy06EpOo.mft
File: aRWYIN1xgAT7FchbJweWy06EpOo.mft (raw, json)
Hash identifier: AMaGSS93y0Xln9Y3lm+4evGWRFOsg0CanlYc1ne7f0k=
Subject key identifier: B3:D6:4B:D8:D5:46:7D:B1:0D:D1:E5:25:62:F6:FB:3D:E6:42:4E:26
Authority key identifier: 69:15:98:20:DD:71:80:04:FB:15:C8:5B:27:07:96:CB:4E:84:A4:EA
Certificate issuer: /CN=69159820dd718004fb15c85b270796cb4e84a4ea
Certificate serial: 019F916CDA433C99F1A4EEEE2CBD93D486A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aRWYIN1xgAT7FchbJweWy06EpOo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/7ddf30-3c91-43f9-b3b1-c949f0591f5b/1/aRWYIN1xgAT7FchbJweWy06EpOo.mft
Manifest number: 04EF
Signing time: Fri 24 Jul 2026 00:00:57 +0000
Manifest this update: Fri 24 Jul 2026 00:00:57 +0000
Manifest next update: Sat 25 Jul 2026 00:00:57 +0000
Files and hashes: 1: aRWYIN1xgAT7FchbJweWy06EpOo.crl (hash: bKt7iz5SSS81XyrPZMw+K5tTMcpIolBlvi/3ivfuTZE=)
2: yFZe_4gAvKXHPPs1FyfrYpXP8Ow.roa (hash: 86Quhr4EELE+xPjStkhiLN4tCtReKxYPPaBQcYq5lDg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/7ddf30-3c91-43f9-b3b1-c949f0591f5b/1/aRWYIN1xgAT7FchbJweWy06EpOo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/7ddf30-3c91-43f9-b3b1-c949f0591f5b/1/aRWYIN1xgAT7FchbJweWy06EpOo.mft
rsync://rpki.ripe.net/repository/DEFAULT/aRWYIN1xgAT7FchbJweWy06EpOo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:6c:da:43:3c:99:f1:a4:ee:ee:2c:bd:93:d4:86:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69159820dd718004fb15c85b270796cb4e84a4ea
Validity
Not Before: Jul 24 00:00:57 2026 GMT
Not After : Jul 25 00:00:57 2026 GMT
Subject: CN=b3d64bd8d5467db10dd1e52562f6fb3de6424e26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:27:2c:b1:b5:76:c2:2f:bf:c2:e6:78:11:ee:
77:67:cf:f8:22:7f:c1:52:fd:ac:75:58:c3:70:27:
37:07:1a:50:57:fb:ff:9d:85:18:da:39:5f:e1:1a:
64:b7:69:6d:ed:43:2b:92:8d:80:3d:2a:16:6a:f0:
4d:44:8c:35:ef:3e:19:3f:e4:b5:7a:4f:d1:db:80:
e0:22:c9:42:c6:9d:1c:72:29:2f:22:06:89:91:9b:
0a:1f:5b:64:09:b0:60:79:25:61:af:3d:1c:6c:c9:
d8:fa:7a:ad:83:d4:bc:bf:61:5c:50:5c:98:da:c3:
e2:55:02:df:0a:dd:f2:a1:f4:35:70:9b:04:90:ae:
b5:4f:d8:18:c3:fd:54:f5:25:36:13:80:43:f0:ac:
3b:37:4f:a9:2a:26:53:9e:e8:fe:b8:b4:18:04:4a:
8d:b7:a8:21:61:2c:6c:da:05:77:e8:18:06:e4:f6:
32:43:d2:bf:9f:60:5a:3f:a6:1b:f1:03:2a:03:c2:
08:80:4d:3f:39:30:89:bd:70:18:d2:88:fe:7a:60:
74:c5:a0:3c:c9:21:43:c7:fc:4d:85:1a:6f:d6:a4:
74:ec:9d:14:e4:97:bc:22:e3:2b:9e:bb:4e:1b:66:
b6:65:98:4f:87:1c:ab:6e:0b:20:d8:a5:be:4f:c5:
ea:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:D6:4B:D8:D5:46:7D:B1:0D:D1:E5:25:62:F6:FB:3D:E6:42:4E:26
X509v3 Authority Key Identifier:
keyid:69:15:98:20:DD:71:80:04:FB:15:C8:5B:27:07:96:CB:4E:84:A4:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aRWYIN1xgAT7FchbJweWy06EpOo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/7ddf30-3c91-43f9-b3b1-c949f0591f5b/1/aRWYIN1xgAT7FchbJweWy06EpOo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/7ddf30-3c91-43f9-b3b1-c949f0591f5b/1/aRWYIN1xgAT7FchbJweWy06EpOo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:ca:84:0c:78:41:99:c2:9c:85:51:ea:64:0a:36:1d:c9:15:
7f:50:54:99:7e:d8:bf:b5:e0:a3:73:d6:f0:d5:02:4b:0c:bd:
c7:03:90:4b:ee:7d:48:1d:ab:13:57:1e:c8:0d:ef:c6:ec:ac:
00:e7:99:30:44:c9:99:1d:1f:1c:6e:03:ba:14:a4:69:8e:03:
f9:c9:50:83:30:16:26:df:e9:ad:84:6f:73:ab:c7:d5:9e:5d:
ab:f3:0f:c2:24:79:23:6d:43:6b:6e:6b:b4:dc:2d:39:96:97:
d2:03:cf:5b:14:34:1d:fb:7e:16:f7:7c:89:e5:cc:9f:73:12:
a1:a3:00:8c:88:c8:a4:03:5d:76:50:4a:0c:96:ef:86:6d:ba:
7a:44:9f:38:4e:e5:dd:1e:24:b2:6f:4f:ca:61:e1:a4:33:4f:
5e:1a:75:7e:d3:c2:b6:4e:5f:21:17:df:b1:be:21:d1:7d:f6:
e6:96:41:46:c7:e3:6b:9b:69:0a:e9:79:53:c4:b8:44:21:72:
00:c8:e7:2a:53:f4:5c:2c:3a:74:da:e5:62:0b:69:60:cb:6b:
3c:4a:1d:e6:b4:ca:7d:4b:50:1c:ae:9c:aa:c0:6d:e6:5b:5d:
42:7d:59:8f:94:46:ec:13:e6:c2:39:0b:48:0c:82:fe:c0:e4:
75:72:60:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:43:46 2026 by rpki-client