Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d7/1acb0c-31a3-4718-993d-11dffe108147/1/aw7Nv1E2DOyuYXq-GjrGpv8KW2w.mft
File: aw7Nv1E2DOyuYXq-GjrGpv8KW2w.mft (raw, json)
Hash identifier: ZmIy32tOwyMYLznpxN0gJEB9AjcV6USaAYQxf+PTtWI=
Subject key identifier: 9D:CF:17:4C:67:04:C2:EB:D1:57:66:BD:42:EC:1F:DC:2F:79:B3:A3
Authority key identifier: 6B:0E:CD:BF:51:36:0C:EC:AE:61:7A:BE:1A:3A:C6:A6:FF:0A:5B:6C
Certificate issuer: /CN=6b0ecdbf51360cecae617abe1a3ac6a6ff0a5b6c
Certificate serial: 01A0DEE14BE27006D1CE364208E49B7C0223
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aw7Nv1E2DOyuYXq-GjrGpv8KW2w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/1acb0c-31a3-4718-993d-11dffe108147/1/aw7Nv1E2DOyuYXq-GjrGpv8KW2w.mft
Manifest number: 1A79
Signing time: Sat 26 Sep 2026 18:01:41 +0000
Manifest this update: Sat 26 Sep 2026 18:01:41 +0000
Manifest next update: Sun 27 Sep 2026 18:01:41 +0000
Files and hashes: 1: IRp2Cv-8KzRBK5kjOx5O71bWsko.roa (hash: Ld1XWN7Sn3t+gSZshK2rptc8lciUjiiDr1oOC9C30/s=)
2: aw7Nv1E2DOyuYXq-GjrGpv8KW2w.crl (hash: uPLo3PSF0Lvda3ejR8+KBtbQgj/BL9zWQ0sx20bVnag=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/1acb0c-31a3-4718-993d-11dffe108147/1/aw7Nv1E2DOyuYXq-GjrGpv8KW2w.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/1acb0c-31a3-4718-993d-11dffe108147/1/aw7Nv1E2DOyuYXq-GjrGpv8KW2w.mft
rsync://rpki.ripe.net/repository/DEFAULT/aw7Nv1E2DOyuYXq-GjrGpv8KW2w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 18:01:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:de:e1:4b:e2:70:06:d1:ce:36:42:08:e4:9b:7c:02:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b0ecdbf51360cecae617abe1a3ac6a6ff0a5b6c
Validity
Not Before: Sep 26 18:01:41 2026 GMT
Not After : Sep 27 18:01:41 2026 GMT
Subject: CN=9dcf174c6704c2ebd15766bd42ec1fdc2f79b3a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:27:7d:84:0a:da:6e:2b:b9:ef:b3:a0:2b:70:
8f:86:23:02:48:bd:1e:6c:94:f9:3e:79:c7:fc:82:
5b:97:68:c5:d1:4a:13:c1:25:6f:6c:a1:65:13:a1:
b0:2a:81:3f:09:c1:35:fe:85:27:a4:cb:a4:73:93:
10:df:f4:78:f6:bd:ae:9d:81:9c:4f:57:b0:8a:0a:
41:89:63:6c:46:61:2c:29:76:3d:92:35:c5:f0:be:
12:21:c4:93:f3:9e:fe:f2:e4:92:67:bd:4f:14:db:
78:2e:0f:62:8b:91:53:6b:06:2c:cc:fb:6d:57:c6:
6d:bb:f6:d1:67:97:de:14:4e:e1:1b:2b:0f:27:be:
86:89:d0:e7:3e:c5:a9:6d:90:f1:8f:12:46:ba:31:
d5:8c:45:b4:40:60:d6:c3:4b:f9:f2:63:23:32:c2:
3b:78:0a:e6:5d:70:1a:2e:08:b0:a7:57:ae:30:af:
84:44:47:f2:e7:be:1c:1a:0c:34:64:3d:38:f5:57:
40:6f:72:a4:79:a6:57:b8:22:e9:f8:30:e6:ab:b2:
9c:78:d5:ad:19:f0:64:3f:13:c8:cf:70:02:74:c5:
cd:da:e6:a0:11:de:c6:17:21:3e:3d:56:91:44:a2:
2c:43:6d:29:27:bf:4d:19:51:fd:6b:1e:47:c5:ef:
b4:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:CF:17:4C:67:04:C2:EB:D1:57:66:BD:42:EC:1F:DC:2F:79:B3:A3
X509v3 Authority Key Identifier:
keyid:6B:0E:CD:BF:51:36:0C:EC:AE:61:7A:BE:1A:3A:C6:A6:FF:0A:5B:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aw7Nv1E2DOyuYXq-GjrGpv8KW2w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/1acb0c-31a3-4718-993d-11dffe108147/1/aw7Nv1E2DOyuYXq-GjrGpv8KW2w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/1acb0c-31a3-4718-993d-11dffe108147/1/aw7Nv1E2DOyuYXq-GjrGpv8KW2w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:ff:27:4e:e2:76:e0:73:8c:be:e7:88:46:6e:94:a4:13:3f:
81:4f:21:19:04:b8:06:36:73:4b:1d:c4:e6:f5:8c:bd:fc:40:
5f:9e:b4:b7:cb:85:ca:62:d4:61:17:ff:bf:82:68:bb:c9:8c:
73:52:71:6b:58:ba:a7:59:37:89:f5:e3:c3:42:77:5a:1c:25:
09:33:3a:51:70:50:eb:cc:2a:65:1b:72:d6:05:62:60:ff:f0:
d1:9a:23:68:53:e3:56:0d:aa:ff:05:38:6a:b3:8d:6c:6b:ed:
64:02:39:39:9f:21:ff:c6:5d:f8:ec:d9:4e:f4:88:b0:85:d1:
e6:be:f3:8e:e8:c9:99:de:36:37:7b:17:ee:a1:9d:2a:51:8a:
86:f2:8f:96:56:f3:4f:4c:3b:02:a7:04:15:d9:a9:9c:ff:ed:
30:84:04:90:2b:5b:a8:91:6b:37:30:d5:69:06:e6:36:65:ac:
12:e0:d0:1f:0c:11:cd:88:e0:18:ff:85:df:a5:6d:78:22:d0:
94:08:c4:41:cf:4f:17:6d:74:ce:61:f5:94:d8:18:ec:05:98:
79:f1:9d:e2:e1:f2:5f:71:3b:79:9f:6b:2c:83:b8:01:fc:87:
a0:4f:ac:f9:50:dc:8a:0b:62:00:f8:43:45:cd:65:a2:5e:d2:
09:54:6a:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 00:54:19 2026 by rpki-client