Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/1acb0c-31a3-4718-993d-11dffe108147/1/aw7Nv1E2DOyuYXq-GjrGpv8KW2w.mft
File: aw7Nv1E2DOyuYXq-GjrGpv8KW2w.mft (raw, json)
Hash identifier: q7n6zQVlmRmJZQJkYEGo7owmj5WpMxeEomxWCBWlIeY=
Subject key identifier: 00:95:9A:92:59:E4:D9:F9:C6:C3:48:62:9C:4F:4C:76:A9:B1:52:1D
Authority key identifier: 6B:0E:CD:BF:51:36:0C:EC:AE:61:7A:BE:1A:3A:C6:A6:FF:0A:5B:6C
Certificate issuer: /CN=6b0ecdbf51360cecae617abe1a3ac6a6ff0a5b6c
Certificate serial: 019D26CCFE904BE47F74A6C3B0CE1DC1E25A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aw7Nv1E2DOyuYXq-GjrGpv8KW2w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/1acb0c-31a3-4718-993d-11dffe108147/1/aw7Nv1E2DOyuYXq-GjrGpv8KW2w.mft
Manifest number: 188B
Signing time: Wed 25 Mar 2026 21:01:01 +0000
Manifest this update: Wed 25 Mar 2026 21:01:01 +0000
Manifest next update: Thu 26 Mar 2026 21:01:01 +0000
Files and hashes: 1: RbQOKPPCGMpyM4K5C4AKNXpnbds.roa (hash: Gf2GIsuTgxftxzUXHkquqSxcD5pOA/yKwpoQBnJXO2Y=)
2: aw7Nv1E2DOyuYXq-GjrGpv8KW2w.crl (hash: Nhy/g8eDJ3u/59u26pP08/TTZWgzT3TIIgbtywvsOL4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/1acb0c-31a3-4718-993d-11dffe108147/1/aw7Nv1E2DOyuYXq-GjrGpv8KW2w.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/1acb0c-31a3-4718-993d-11dffe108147/1/aw7Nv1E2DOyuYXq-GjrGpv8KW2w.mft
rsync://rpki.ripe.net/repository/DEFAULT/aw7Nv1E2DOyuYXq-GjrGpv8KW2w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cc:fe:90:4b:e4:7f:74:a6:c3:b0:ce:1d:c1:e2:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b0ecdbf51360cecae617abe1a3ac6a6ff0a5b6c
Validity
Not Before: Mar 25 21:01:01 2026 GMT
Not After : Mar 26 21:01:01 2026 GMT
Subject: CN=00959a9259e4d9f9c6c348629c4f4c76a9b1521d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:6d:07:d9:c1:72:26:14:b6:bb:ea:eb:01:f8:
4f:85:6d:78:74:40:1c:25:1d:24:1c:a9:8d:60:33:
c2:22:9f:85:ff:fb:ea:9d:4c:8f:f6:50:f4:91:cf:
2b:6f:7d:be:d2:3e:4e:a5:8f:0e:d3:60:a4:8b:f5:
c5:0b:3d:d5:5d:85:ea:23:b2:c7:3b:26:0e:43:96:
a6:3e:de:4f:0d:08:e8:a3:35:8d:46:5a:a5:5d:10:
05:62:67:4c:d2:fb:8c:20:2a:a2:bb:b8:1c:9d:19:
00:3b:6a:0f:d1:d8:d4:c3:88:7c:30:3a:fb:5b:80:
d8:56:54:b5:f6:b4:47:9c:f1:68:c7:f1:6b:f4:a3:
1d:c2:90:18:a4:0a:cf:21:48:87:e3:2a:a1:11:40:
fa:b8:8c:06:3c:4b:c9:68:5c:e7:33:ff:8e:6e:8b:
dd:66:23:d2:82:3d:21:76:a0:a2:fc:b3:51:14:23:
1c:c9:45:d5:d2:4d:7e:1d:02:0b:12:17:bd:ed:01:
70:f4:c5:12:57:1e:63:fa:b9:8a:0d:81:8b:97:bb:
34:24:4c:be:16:10:49:8d:88:1d:7b:dc:e4:a1:5f:
e6:a8:93:0b:92:2d:82:b6:67:2c:cc:2b:09:e3:9a:
38:82:95:88:8e:fe:d0:de:c0:fe:21:f9:9a:82:b5:
80:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:95:9A:92:59:E4:D9:F9:C6:C3:48:62:9C:4F:4C:76:A9:B1:52:1D
X509v3 Authority Key Identifier:
keyid:6B:0E:CD:BF:51:36:0C:EC:AE:61:7A:BE:1A:3A:C6:A6:FF:0A:5B:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aw7Nv1E2DOyuYXq-GjrGpv8KW2w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/1acb0c-31a3-4718-993d-11dffe108147/1/aw7Nv1E2DOyuYXq-GjrGpv8KW2w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/1acb0c-31a3-4718-993d-11dffe108147/1/aw7Nv1E2DOyuYXq-GjrGpv8KW2w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:08:3a:e8:cf:1c:d4:03:6f:ba:e7:51:4a:80:9d:fa:bd:98:
4e:c7:33:e3:e0:5c:e2:6e:15:fe:9a:66:ab:f5:dc:63:ed:fa:
d7:f2:99:65:d4:13:b6:c3:f1:9a:97:93:00:c5:4b:ae:3a:1c:
2d:31:b5:e1:22:f7:52:1b:65:43:38:94:92:e4:76:3b:30:b6:
8c:75:9e:c9:2b:65:58:e3:6c:98:49:0d:fc:9b:9a:ae:fc:f7:
b1:38:da:96:87:c6:0a:6f:76:f4:11:37:0f:1c:e8:ea:1e:1d:
44:8a:0e:64:1f:77:f0:22:61:43:ce:28:27:f9:be:ec:ac:ff:
65:db:86:e1:79:7b:d9:7a:b9:d6:cd:99:6f:b9:52:ac:47:3c:
f6:d8:85:e6:ae:9a:c2:d9:7b:95:d0:97:04:82:a2:d6:ab:c6:
26:0d:ac:ed:7b:cb:22:ec:2e:0b:98:c7:e1:d6:21:1b:6d:d1:
95:d3:96:a5:ad:94:a3:73:a0:7a:8d:a8:e3:b2:3b:48:e0:58:
bf:b7:24:6d:7b:08:b4:3e:1d:60:51:f5:4f:14:40:a1:de:45:
70:b7:d8:a6:cd:d9:2d:86:ac:76:6a:93:8b:d8:9f:13:2c:8c:
68:f8:f0:2f:32:65:fb:cb:c0:a3:42:f9:1d:c9:ff:5c:23:c6:
4c:99:86:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:22:03 2026 by rpki-client