Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/c43929-0c30-4b9f-b118-914a16e6a34e/1/awCXK9TKJAWeJn03XtZuQhq4VKE.mft
File: awCXK9TKJAWeJn03XtZuQhq4VKE.mft (raw, json)
Hash identifier: ZC8uURNCrHSzR7UhN2YNb3gFZMxiIXXAuxjmvCOFtds=
Subject key identifier: C1:DD:F3:B4:9C:4A:C5:9C:3C:77:21:5C:9C:6A:0E:68:32:A8:24:C5
Authority key identifier: 6B:00:97:2B:D4:CA:24:05:9E:26:7D:37:5E:D6:6E:42:1A:B8:54:A1
Certificate issuer: /CN=6b00972bd4ca24059e267d375ed66e421ab854a1
Certificate serial: 019F935C15470C7B34E68F68330092C6E0AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/awCXK9TKJAWeJn03XtZuQhq4VKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/c43929-0c30-4b9f-b118-914a16e6a34e/1/awCXK9TKJAWeJn03XtZuQhq4VKE.mft
Manifest number: 41
Signing time: Fri 24 Jul 2026 09:01:53 +0000
Manifest this update: Fri 24 Jul 2026 09:01:53 +0000
Manifest next update: Sat 25 Jul 2026 09:01:53 +0000
Files and hashes: 1: Zt4rLGa3Mseih4zBD3VqYASxG_g.asa (hash: xPFnItOCzJewWEE4IUYcupkBMHp593Ck5TZ7UHenULI=)
2: awCXK9TKJAWeJn03XtZuQhq4VKE.crl (hash: oBOkSSLQ1Ou+qMueyr1CS0RVFUxLD+Ww95aE7ee94qg=)
3: sv8DBXduAq39ib7q54YEUClNgI0.roa (hash: B2MY0kd7KKYotx5tbsCADH50Hj9mVdj3T+kyiDucng8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/c43929-0c30-4b9f-b118-914a16e6a34e/1/awCXK9TKJAWeJn03XtZuQhq4VKE.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/c43929-0c30-4b9f-b118-914a16e6a34e/1/awCXK9TKJAWeJn03XtZuQhq4VKE.mft
rsync://rpki.ripe.net/repository/DEFAULT/awCXK9TKJAWeJn03XtZuQhq4VKE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:5c:15:47:0c:7b:34:e6:8f:68:33:00:92:c6:e0:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b00972bd4ca24059e267d375ed66e421ab854a1
Validity
Not Before: Jul 24 09:01:53 2026 GMT
Not After : Jul 25 09:01:53 2026 GMT
Subject: CN=c1ddf3b49c4ac59c3c77215c9c6a0e6832a824c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:69:8f:59:25:ac:81:5e:5e:38:97:29:b2:96:
32:a3:b4:f0:c8:50:3d:f4:c1:95:aa:13:f3:73:c4:
6a:34:ff:10:96:a0:ff:c2:e9:be:e8:28:e5:96:c4:
06:f5:5d:c8:1f:fa:1b:26:a2:fe:48:2e:21:54:e5:
d7:99:97:b8:10:ea:dc:ef:cc:05:52:45:ca:94:28:
69:86:1a:62:ea:fe:6d:40:43:3c:d1:f6:c8:3a:b0:
6d:2e:f8:21:3f:ab:06:de:78:19:ac:ab:3b:e9:d3:
d4:96:3d:c0:24:f4:3c:0f:35:7c:dc:9b:92:e5:d8:
ac:0c:94:2e:2d:ae:3e:81:39:21:7d:c8:4e:ac:01:
19:99:c1:a6:12:1d:f6:8c:a4:bb:57:91:99:2d:81:
92:d4:d1:89:65:3c:c0:fd:5d:b9:91:31:dd:e8:85:
02:2e:3c:e7:b2:d9:7f:45:e9:2e:07:a2:80:8b:43:
87:21:b2:1a:cf:86:04:67:6e:65:38:51:c2:6d:dd:
95:db:e8:2f:d1:77:03:4b:8b:bb:b2:29:5b:9c:c7:
b2:cd:1e:9f:0b:91:d3:a3:c9:d1:64:4b:94:3b:26:
8f:00:a8:a1:ca:3d:c2:0d:c2:22:c8:4b:1b:ae:d8:
83:e6:1d:7c:4d:9c:69:84:ad:69:e9:3e:5c:b2:84:
80:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:DD:F3:B4:9C:4A:C5:9C:3C:77:21:5C:9C:6A:0E:68:32:A8:24:C5
X509v3 Authority Key Identifier:
keyid:6B:00:97:2B:D4:CA:24:05:9E:26:7D:37:5E:D6:6E:42:1A:B8:54:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/awCXK9TKJAWeJn03XtZuQhq4VKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/c43929-0c30-4b9f-b118-914a16e6a34e/1/awCXK9TKJAWeJn03XtZuQhq4VKE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/c43929-0c30-4b9f-b118-914a16e6a34e/1/awCXK9TKJAWeJn03XtZuQhq4VKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:81:b1:23:14:09:0d:51:41:62:2a:72:34:b2:f9:9b:58:a0:
f5:ae:65:bf:1c:4d:62:6c:3c:70:44:2d:3c:2d:88:d0:f2:9c:
1a:fd:7a:f8:d9:76:4f:96:da:4b:83:9a:ed:ca:bb:e1:b5:aa:
1e:a2:86:19:79:f1:8c:0a:b0:4c:d3:00:34:b4:01:cf:0f:a6:
e7:27:07:d6:b4:91:21:4e:3a:70:3a:11:e5:4e:9b:11:a4:40:
98:13:1c:d1:39:4e:d8:f8:6f:38:da:f8:38:35:c4:db:5f:57:
4f:05:8d:a2:a7:3b:4d:98:e8:d1:37:5b:01:64:a5:9b:e4:fa:
12:f2:2b:91:ce:f2:5b:08:56:cd:76:68:ac:85:82:3c:3c:3d:
40:0d:96:b3:88:44:e2:51:a4:3d:1e:4f:78:3f:c8:05:51:9e:
fb:79:f2:7e:f1:44:0b:e0:40:8f:9c:4b:73:dc:2d:f5:40:8f:
d4:b9:b3:ae:f9:92:5e:6d:4e:28:90:47:65:f0:4a:e0:59:7c:
ba:88:da:8d:1a:88:68:4a:19:c4:78:de:7f:72:41:ca:0c:34:
8d:11:21:fc:22:aa:57:01:84:7a:00:5e:3d:a4:9c:6c:9e:f5:
3d:69:62:67:0f:80:96:63:5b:b8:49:10:d4:f7:c7:28:41:cf:
05:5e:89:c8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+TXBVHDHs05o9oMwCSxuCvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZiMDA5NzJiZDRjYTI0MDU5ZTI2N2QzNzVlZDY2ZTQyMWFi
ODU0YTEwHhcNMjYwNzI0MDkwMTUzWhcNMjYwNzI1MDkwMTUzWjAzMTEwLwYDVQQD
EyhjMWRkZjNiNDljNGFjNTljM2M3NzIxNWM5YzZhMGU2ODMyYTgyNGM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvWmPWSWsgV5eOJcpspYyo7TwyFA9
9MGVqhPzc8RqNP8QlqD/wum+6CjllsQG9V3IH/obJqL+SC4hVOXXmZe4EOrc78wF
UkXKlChphhpi6v5tQEM80fbIOrBtLvghP6sG3ngZrKs76dPUlj3AJPQ8DzV83JuS
5disDJQuLa4+gTkhfchOrAEZmcGmEh32jKS7V5GZLYGS1NGJZTzA/V25kTHd6IUC
Ljznstl/RekuB6KAi0OHIbIaz4YEZ25lOFHCbd2V2+gv0XcDS4u7silbnMeyzR6f
C5HTo8nRZEuUOyaPAKihyj3CDcIiyEsbrtiD5h18TZxphK1p6T5csoSABwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMHd87ScSsWcPHchXJxqDmgyqCTFMB8GA1UdIwQY
MBaAFGsAlyvUyiQFniZ9N17WbkIauFShMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYXdDWEs5VEtKQVdlSm4wM1h0WnVRaHE0VktFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi9jNDM5MjktMGMzMC00YjlmLWIxMTgt
OTE0YTE2ZTZhMzRlLzEvYXdDWEs5VEtKQVdlSm4wM1h0WnVRaHE0VktFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMi9jNDM5MjktMGMzMC00YjlmLWIxMTgtOTE0YTE2ZTZhMzRl
LzEvYXdDWEs5VEtKQVdlSm4wM1h0WnVRaHE0VktFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwIGxIxQJ
DVFBYipyNLL5m1ig9a5lvxxNYmw8cEQtPC2I0PKcGv16+Nl2T5baS4Oa7cq74bWq
HqKGGXnxjAqwTNMANLQBzw+m5ycH1rSRIU46cDoR5U6bEaRAmBMc0TlO2PhvONr4
ODXE219XTwWNoqc7TZjo0TdbAWSlm+T6EvIrkc7yWwhWzXZorIWCPDw9QA2Ws4hE
4lGkPR5PeD/IBVGe+3nyfvFEC+BAj5xLc9wt9UCP1LmzrvmSXm1OKJBHZfBK4Fl8
uojajRqIaEoZxHjef3JBygw0jREh/CKqVwGEegBePaScbJ71PWliZw+AlmNbuEkQ
1PfHKEHPBV6JyA==
-----END CERTIFICATE-----
Generated at Fri Jul 24 17:21:41 2026 by rpki-client