Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/7ddf30-3c91-43f9-b3b1-c949f0591f5b/1/aRWYIN1xgAT7FchbJweWy06EpOo.mft
File: aRWYIN1xgAT7FchbJweWy06EpOo.mft (raw, json)
Hash identifier: xCwOZMmj6jiQbScKGVGpJY2r8JAag+n8b5I0f/0MW/M=
Subject key identifier: 65:94:29:EB:A1:71:DA:48:45:55:1F:CE:99:01:92:EA:71:B3:1C:A6
Authority key identifier: 69:15:98:20:DD:71:80:04:FB:15:C8:5B:27:07:96:CB:4E:84:A4:EA
Certificate issuer: /CN=69159820dd718004fb15c85b270796cb4e84a4ea
Certificate serial: 019D2772E031FB6E1E16E85BCF08E683E3BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aRWYIN1xgAT7FchbJweWy06EpOo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/7ddf30-3c91-43f9-b3b1-c949f0591f5b/1/aRWYIN1xgAT7FchbJweWy06EpOo.mft
Manifest number: 03AF
Signing time: Thu 26 Mar 2026 00:02:13 +0000
Manifest this update: Thu 26 Mar 2026 00:02:13 +0000
Manifest next update: Fri 27 Mar 2026 00:02:13 +0000
Files and hashes: 1: aRWYIN1xgAT7FchbJweWy06EpOo.crl (hash: yfqwcUJ2w54Xu5ijgZCz3GcRN8plXC4kZtYKTgy3QfA=)
2: yFZe_4gAvKXHPPs1FyfrYpXP8Ow.roa (hash: 86Quhr4EELE+xPjStkhiLN4tCtReKxYPPaBQcYq5lDg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/7ddf30-3c91-43f9-b3b1-c949f0591f5b/1/aRWYIN1xgAT7FchbJweWy06EpOo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/7ddf30-3c91-43f9-b3b1-c949f0591f5b/1/aRWYIN1xgAT7FchbJweWy06EpOo.mft
rsync://rpki.ripe.net/repository/DEFAULT/aRWYIN1xgAT7FchbJweWy06EpOo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:e0:31:fb:6e:1e:16:e8:5b:cf:08:e6:83:e3:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69159820dd718004fb15c85b270796cb4e84a4ea
Validity
Not Before: Mar 26 00:02:13 2026 GMT
Not After : Mar 27 00:02:13 2026 GMT
Subject: CN=659429eba171da4845551fce990192ea71b31ca6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:21:ec:0f:ea:5b:fc:8b:62:43:31:07:74:52:
8e:57:ee:a8:89:8c:12:90:1d:b5:6c:b4:21:92:14:
42:59:60:73:aa:a9:82:f7:6f:f1:15:54:8e:61:44:
10:11:75:c3:ab:a7:62:37:13:e8:9f:60:3e:14:e3:
79:47:d6:1c:e7:6b:ed:a0:c3:09:16:c6:97:88:c4:
2b:94:c5:27:15:03:8f:df:b7:bc:dd:26:e7:b6:25:
32:53:53:bb:5a:04:79:bb:48:d2:d0:a5:15:1a:af:
44:da:7d:94:7c:c1:cc:df:a2:73:bc:7d:4c:e3:53:
46:47:04:29:ab:49:73:0c:5e:d3:f2:a2:69:4a:d8:
bc:7d:13:9f:00:bc:77:f0:af:1f:4b:4a:cd:5e:ab:
5e:8a:aa:62:11:11:e1:77:c7:24:28:a3:6b:cf:b6:
7e:a9:fc:01:fd:3c:e1:52:5a:b4:f3:d9:66:e9:f0:
e7:2e:50:f5:14:df:e3:98:5d:e9:13:76:61:47:9a:
26:53:df:65:30:a2:8c:45:b9:d1:b7:ff:7c:f0:c1:
c5:04:c4:fc:e3:bd:cf:af:4b:f6:e9:5c:84:3e:4a:
3a:45:1a:9e:58:04:10:c2:c2:a9:4b:ad:64:0f:8a:
30:4c:d2:b3:da:36:6b:95:32:02:6c:43:8b:54:d5:
0b:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:94:29:EB:A1:71:DA:48:45:55:1F:CE:99:01:92:EA:71:B3:1C:A6
X509v3 Authority Key Identifier:
keyid:69:15:98:20:DD:71:80:04:FB:15:C8:5B:27:07:96:CB:4E:84:A4:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aRWYIN1xgAT7FchbJweWy06EpOo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/7ddf30-3c91-43f9-b3b1-c949f0591f5b/1/aRWYIN1xgAT7FchbJweWy06EpOo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/7ddf30-3c91-43f9-b3b1-c949f0591f5b/1/aRWYIN1xgAT7FchbJweWy06EpOo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:6a:90:12:86:09:66:52:a8:d8:5f:d2:6c:7d:ae:95:a7:77:
0b:5d:ce:8b:8e:f9:71:b6:0e:eb:9a:54:b8:26:9b:51:72:8d:
16:f6:2b:f6:b6:b2:e9:7d:21:52:88:40:41:72:67:9e:69:85:
72:0f:b5:a6:72:c5:7e:97:d5:30:f5:a8:83:a6:34:ec:74:26:
aa:b2:73:39:fe:c3:25:f9:46:6b:d3:1f:cd:6e:9b:49:5a:be:
ea:58:c7:49:7a:df:78:72:26:76:d6:87:79:60:89:18:92:75:
9c:b7:f4:1e:17:5d:6d:21:ed:42:3d:37:39:6c:a7:04:85:0b:
f4:62:c5:18:35:13:69:ae:43:71:26:a5:dc:25:a3:24:32:cc:
21:1c:b7:fc:e3:77:5b:4f:f8:ff:b9:f8:55:71:38:fc:97:fc:
8b:37:03:70:50:1c:8f:19:38:87:64:ec:72:94:bb:f1:5d:e9:
05:b2:0b:0a:88:f7:00:8a:c5:8a:4d:ae:c5:a5:ec:9f:b7:5e:
3b:2a:3f:6c:aa:ff:2f:3f:1d:74:56:6a:c7:33:d8:0f:5d:12:
fc:19:64:dc:46:5b:c7:d9:bc:33:c1:06:de:98:35:a8:22:b8:
a7:c3:e4:9d:f5:fe:17:c7:cc:1a:6f:12:3e:31:83:a8:b4:4d:
16:c2:78:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:09:55 2026 by rpki-client