Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/f31982-cd8c-45f6-a302-3d75c4f489e7/1/A-wIrmqTJShb3UpK3pwgfX-hBFk.mft
File: A-wIrmqTJShb3UpK3pwgfX-hBFk.mft (raw, json)
Hash identifier: h/I94E8P6/X9BuQOxRskRka+og+xrBAnLpkdgzPvZ10=
Subject key identifier: 77:2E:89:27:95:94:65:82:52:09:B4:9B:AC:74:B0:2E:E5:30:BB:F0
Authority key identifier: 03:EC:08:AE:6A:93:25:28:5B:DD:4A:4A:DE:9C:20:7D:7F:A1:04:59
Certificate issuer: /CN=03ec08ae6a9325285bdd4a4ade9c207d7fa10459
Certificate serial: 019F91357B20E51DFF358B219AFD65A5013F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A-wIrmqTJShb3UpK3pwgfX-hBFk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/f31982-cd8c-45f6-a302-3d75c4f489e7/1/A-wIrmqTJShb3UpK3pwgfX-hBFk.mft
Manifest number: 06AD
Signing time: Thu 23 Jul 2026 23:00:28 +0000
Manifest this update: Thu 23 Jul 2026 23:00:28 +0000
Manifest next update: Fri 24 Jul 2026 23:00:28 +0000
Files and hashes: 1: A-wIrmqTJShb3UpK3pwgfX-hBFk.crl (hash: iVho/1DI2zKTYHLvawwgZWkaF4fp8z+LoOWdCdvAC58=)
2: Lo4U5uzIqQymJnHj6wN0AbLyZbM.roa (hash: ycmh+M2BZFC7JlSPZ+8HQ4O+vAT26Z/Ysr616GoAdi4=)
3: qiZqn4t44rqOklzg05vu8ezVPj8.roa (hash: tlCFx29Qdk4Q9WIDOMKfJRel9JippLh4IujxGOwL5Jo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/f31982-cd8c-45f6-a302-3d75c4f489e7/1/A-wIrmqTJShb3UpK3pwgfX-hBFk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/f31982-cd8c-45f6-a302-3d75c4f489e7/1/A-wIrmqTJShb3UpK3pwgfX-hBFk.mft
rsync://rpki.ripe.net/repository/DEFAULT/A-wIrmqTJShb3UpK3pwgfX-hBFk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:35:7b:20:e5:1d:ff:35:8b:21:9a:fd:65:a5:01:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03ec08ae6a9325285bdd4a4ade9c207d7fa10459
Validity
Not Before: Jul 23 23:00:28 2026 GMT
Not After : Jul 24 23:00:28 2026 GMT
Subject: CN=772e8927959465825209b49bac74b02ee530bbf0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:7f:be:6c:7f:79:8f:10:5a:bf:a1:15:16:ec:
bf:58:32:44:2b:2d:ec:a6:71:66:69:39:25:62:e3:
4d:5d:79:7b:b6:ad:04:f7:d8:ac:50:68:bc:d8:f1:
51:c7:d9:8f:ca:4c:38:e8:39:1a:6c:c8:c1:69:cd:
59:e3:a5:d1:fa:6e:1b:b3:59:e5:07:18:6d:55:4b:
fc:b0:14:aa:a0:01:08:f5:ea:42:2b:21:d9:4a:21:
d7:22:a8:2e:3f:3d:2d:2d:ac:92:2b:f6:ab:ca:5c:
6c:ce:9a:ea:e3:28:0b:54:d9:d8:1e:fb:ce:23:22:
e8:37:3e:fa:77:3d:b2:15:2f:7c:5b:bd:18:7f:a0:
3d:df:2a:cc:7c:06:87:ec:c3:9c:58:60:2a:ba:c5:
a3:8e:8f:58:98:34:72:e9:5b:3b:26:b3:74:75:3d:
09:71:2a:37:79:1d:f0:2a:b5:36:7c:a4:9b:5e:f7:
0c:66:7c:ad:cd:fc:59:52:d1:f6:bd:62:68:37:90:
3d:be:41:d5:f3:ff:9a:dc:6b:5a:8c:5e:f6:10:da:
35:19:e8:53:28:5b:cb:ca:dc:a6:49:99:12:7a:11:
82:37:cd:3e:fd:f7:cb:46:73:05:b8:15:f7:44:c8:
ee:3c:32:35:5c:9a:91:57:c4:07:46:8a:23:fc:58:
df:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:2E:89:27:95:94:65:82:52:09:B4:9B:AC:74:B0:2E:E5:30:BB:F0
X509v3 Authority Key Identifier:
keyid:03:EC:08:AE:6A:93:25:28:5B:DD:4A:4A:DE:9C:20:7D:7F:A1:04:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A-wIrmqTJShb3UpK3pwgfX-hBFk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/f31982-cd8c-45f6-a302-3d75c4f489e7/1/A-wIrmqTJShb3UpK3pwgfX-hBFk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/f31982-cd8c-45f6-a302-3d75c4f489e7/1/A-wIrmqTJShb3UpK3pwgfX-hBFk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:6a:20:65:c6:df:b8:e0:2f:39:39:5a:9b:38:12:59:fa:d2:
74:a7:68:90:fe:2d:24:5c:11:3a:1a:31:d4:dc:f0:a5:b2:44:
c9:60:41:df:f1:3b:94:77:82:a0:3a:db:1a:2c:c8:9a:cd:dd:
65:41:1c:ca:48:07:98:e9:8d:c3:b2:5e:27:5b:95:06:a0:d8:
02:ca:e2:e7:75:58:e2:8e:74:fa:76:68:2b:c4:cc:7b:ee:fc:
e2:99:c5:ad:24:b1:64:04:1b:f5:0d:f9:1f:89:29:a9:a7:9b:
90:a6:ae:db:29:3c:be:8f:45:2c:d3:c1:50:03:f4:a1:56:65:
d1:aa:fb:47:0f:9d:ca:a2:01:58:de:72:5e:e8:52:20:f9:28:
ae:ec:2a:63:b6:3a:15:21:dc:fa:78:90:09:2a:ab:2c:bd:df:
09:2c:52:f1:5f:fd:68:21:09:cc:c4:c0:b7:6a:c6:68:da:b8:
fa:05:de:53:75:37:75:47:05:91:6f:7a:14:aa:48:37:ee:66:
65:79:45:46:a9:5d:c5:79:db:49:07:77:fa:6c:3c:b3:d9:b0:
82:74:07:d5:7a:4b:9d:d0:5f:7f:81:62:40:ca:44:95:6a:17:
1d:a2:a7:1c:45:c8:2d:c2:8e:e1:1c:ec:2a:a0:03:86:4e:86:
65:45:cc:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:36:56 2026 by rpki-client