Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a7/7ddf30-3c91-43f9-b3b1-c949f0591f5b/1/aRWYIN1xgAT7FchbJweWy06EpOo.mft
File: aRWYIN1xgAT7FchbJweWy06EpOo.mft (raw, json)
Hash identifier: Exw9LmFUrKl01itfIQof7CHJFJ+j5J2Cb8cRcBuUYdU=
Subject key identifier: 5E:E2:B2:18:96:E4:42:6A:D1:60:EE:7E:A2:9E:77:54:C3:3A:98:4F
Authority key identifier: 69:15:98:20:DD:71:80:04:FB:15:C8:5B:27:07:96:CB:4E:84:A4:EA
Certificate issuer: /CN=69159820dd718004fb15c85b270796cb4e84a4ea
Certificate serial: 01A0D2007EEA26196692E055F63CC5CB81F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aRWYIN1xgAT7FchbJweWy06EpOo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/7ddf30-3c91-43f9-b3b1-c949f0591f5b/1/aRWYIN1xgAT7FchbJweWy06EpOo.mft
Manifest number: 0595
Signing time: Thu 24 Sep 2026 06:00:42 +0000
Manifest this update: Thu 24 Sep 2026 06:00:42 +0000
Manifest next update: Fri 25 Sep 2026 06:00:42 +0000
Files and hashes: 1: aRWYIN1xgAT7FchbJweWy06EpOo.crl (hash: J/qrtWyUCDmhF7IHU+oiG6vRH/d1IDXte4IolVjzo2g=)
2: yFZe_4gAvKXHPPs1FyfrYpXP8Ow.roa (hash: 86Quhr4EELE+xPjStkhiLN4tCtReKxYPPaBQcYq5lDg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/7ddf30-3c91-43f9-b3b1-c949f0591f5b/1/aRWYIN1xgAT7FchbJweWy06EpOo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/7ddf30-3c91-43f9-b3b1-c949f0591f5b/1/aRWYIN1xgAT7FchbJweWy06EpOo.mft
rsync://rpki.ripe.net/repository/DEFAULT/aRWYIN1xgAT7FchbJweWy06EpOo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 06:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d2:00:7e:ea:26:19:66:92:e0:55:f6:3c:c5:cb:81:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69159820dd718004fb15c85b270796cb4e84a4ea
Validity
Not Before: Sep 24 06:00:42 2026 GMT
Not After : Sep 25 06:00:42 2026 GMT
Subject: CN=5ee2b21896e4426ad160ee7ea29e7754c33a984f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:8f:5b:24:0f:10:cc:a7:b6:3d:fa:18:c9:ad:
fe:0f:4b:99:9b:25:6d:29:58:55:09:05:52:92:4d:
9e:fd:b6:85:a8:fa:87:6a:b9:4a:df:b1:ec:02:5d:
c1:b3:6e:91:c5:82:a7:80:71:3f:fd:c6:c8:4f:a6:
e9:20:0e:d9:5d:22:1a:5f:66:98:83:23:f1:00:02:
96:db:21:cd:68:bd:ec:f6:0c:6c:15:91:4d:8b:69:
89:21:00:cf:e6:4e:22:a3:0a:82:fb:92:07:3e:68:
57:11:89:0d:5d:ca:c7:2b:cf:ba:a6:23:20:41:f0:
3c:ce:f0:78:6c:61:d7:2f:99:72:08:be:b6:65:a6:
d0:a7:30:ae:94:08:a5:f7:52:69:4f:7b:84:4b:09:
a1:ba:d7:a9:fd:ff:95:ca:97:ce:d0:7f:cc:44:a3:
43:bc:84:f5:e3:e5:f1:70:fe:d9:3e:4b:86:33:c2:
1b:6d:e5:4f:e0:07:60:86:a0:79:52:7b:c4:22:50:
0f:2b:c8:d9:3c:46:d2:bb:fa:86:1d:d8:f4:21:31:
4f:dd:8e:aa:a8:2a:fe:3d:88:ae:dd:aa:8f:f5:df:
16:52:fa:65:a6:0d:06:40:2c:08:93:b6:24:d0:b1:
a1:94:3d:49:b0:42:56:53:b1:78:99:d6:fa:f7:f3:
51:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:E2:B2:18:96:E4:42:6A:D1:60:EE:7E:A2:9E:77:54:C3:3A:98:4F
X509v3 Authority Key Identifier:
keyid:69:15:98:20:DD:71:80:04:FB:15:C8:5B:27:07:96:CB:4E:84:A4:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aRWYIN1xgAT7FchbJweWy06EpOo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/7ddf30-3c91-43f9-b3b1-c949f0591f5b/1/aRWYIN1xgAT7FchbJweWy06EpOo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/7ddf30-3c91-43f9-b3b1-c949f0591f5b/1/aRWYIN1xgAT7FchbJweWy06EpOo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:97:41:0b:a5:84:ad:0d:b8:56:57:f8:e8:75:4c:b7:40:6b:
cd:40:e0:9c:04:68:c0:ab:08:17:56:6f:46:58:49:73:74:45:
60:88:29:82:bd:ab:96:01:4d:91:b4:b2:0d:a3:c1:43:cf:a6:
63:9b:99:4b:6d:8e:cd:e8:cb:70:af:73:c1:27:36:3f:35:f1:
59:ba:6b:9a:08:08:37:1f:df:0d:01:dd:ea:f3:69:b9:bb:46:
0a:06:61:70:52:28:18:98:c3:56:e5:87:8b:a5:eb:41:61:88:
2f:a2:3c:9e:5a:64:ec:50:3f:15:85:54:62:54:71:76:9a:17:
64:ef:38:26:91:13:c6:ab:61:a5:d0:33:81:e8:5c:35:de:e8:
b4:ff:b5:da:d1:a2:78:23:1c:97:53:e7:4c:5b:a9:0d:b5:f8:
ea:30:36:fb:ab:90:a1:5c:19:42:86:a3:c3:48:2c:a5:2d:60:
da:1a:6d:ff:c1:ac:79:84:00:01:da:33:a0:89:ed:f3:3a:77:
8e:3a:ef:f5:84:3f:39:12:0b:7f:7d:81:7a:95:df:33:77:3b:
4c:ca:73:4b:bd:8e:ec:28:70:47:b1:4d:43:3d:21:7d:a3:7c:
53:cb:64:b1:ba:04:dd:0b:40:a4:d6:a9:6e:31:52:5d:66:bc:
1d:7f:fb:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 15:38:35 2026 by rpki-client