Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/717615-d202-48f2-bb93-cc20f4172ced/1/aWIqGq33nnEdHn5DGfcywLLagB4.mft
File: aWIqGq33nnEdHn5DGfcywLLagB4.mft (raw, json)
Hash identifier: xRYmYPC7vehMpS7jN/hxFc4s6e8NGngRAO2Y/GnsVeU=
Subject key identifier: 18:7E:38:86:24:B5:0C:3F:26:5D:05:54:27:93:FC:3D:19:CF:A6:DC
Authority key identifier: 69:62:2A:1A:AD:F7:9E:71:1D:1E:7E:43:19:F7:32:C0:B2:DA:80:1E
Certificate issuer: /CN=69622a1aadf79e711d1e7e4319f732c0b2da801e
Certificate serial: 019FAB9AAB3A00C63D988D1E99247A2D6175
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aWIqGq33nnEdHn5DGfcywLLagB4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/717615-d202-48f2-bb93-cc20f4172ced/1/aWIqGq33nnEdHn5DGfcywLLagB4.mft
Manifest number: 19D7
Signing time: Wed 29 Jul 2026 02:01:08 +0000
Manifest this update: Wed 29 Jul 2026 02:01:08 +0000
Manifest next update: Thu 30 Jul 2026 02:01:08 +0000
Files and hashes: 1: 0-VSXxZUPNE_NCyRYY4aOknsIgM.roa (hash: p3ie/xFXWDV8klzQ/kVNpHbbrPevYLWLmd0IwEUgv1A=)
2: U3PfejTQb2whMGKKVwhS4XwhEu0.roa (hash: xYX61cbjxOAGtEMGsVih/dcwxYwy4/ZCPIVGCthKU24=)
3: aWIqGq33nnEdHn5DGfcywLLagB4.crl (hash: nc5YENPTZ2gnn+T1AFcFqr+XmUNvKCr0bUxsYNCof8Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/717615-d202-48f2-bb93-cc20f4172ced/1/aWIqGq33nnEdHn5DGfcywLLagB4.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/717615-d202-48f2-bb93-cc20f4172ced/1/aWIqGq33nnEdHn5DGfcywLLagB4.mft
rsync://rpki.ripe.net/repository/DEFAULT/aWIqGq33nnEdHn5DGfcywLLagB4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 02:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:9a:ab:3a:00:c6:3d:98:8d:1e:99:24:7a:2d:61:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69622a1aadf79e711d1e7e4319f732c0b2da801e
Validity
Not Before: Jul 29 02:01:08 2026 GMT
Not After : Jul 30 02:01:08 2026 GMT
Subject: CN=187e388624b50c3f265d05542793fc3d19cfa6dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:98:cc:d7:56:10:34:d4:8f:17:49:4b:e3:3f:
d2:56:b2:cb:98:54:b4:32:d7:8b:10:9d:72:2f:b4:
9b:c2:fd:65:d5:fd:4d:71:62:cc:ee:9d:8f:d9:f8:
9e:5e:6f:3b:8c:c7:5c:b7:e6:0e:a0:84:a4:b9:ae:
04:6e:07:19:a7:fa:4d:7b:d2:ca:99:0b:98:8d:1b:
e9:e9:f5:ef:a9:f5:65:1e:7b:f0:8c:1b:57:00:bb:
fa:cc:42:d8:ae:bd:d1:ca:24:f3:c0:1d:3e:8f:20:
ee:ee:f1:ce:f8:a7:0a:86:76:65:53:da:65:8c:df:
bb:7b:b1:5a:f4:43:9c:db:53:47:3e:ca:2f:84:c4:
0c:99:97:d4:ed:8d:bf:d0:78:a0:ae:ab:54:da:bb:
17:74:0e:da:0b:88:2a:4f:ba:2d:ba:c4:63:e6:39:
fc:ae:08:96:2d:07:8b:ad:9a:11:c5:65:8a:56:e7:
95:d7:b7:d2:98:79:54:aa:e3:da:75:9a:9d:a4:2d:
64:61:7e:5e:69:c9:62:e9:02:a2:a0:4f:b8:8f:d8:
9c:df:6d:8e:5b:8d:9c:da:76:8f:ed:8a:c0:b9:0b:
86:7e:f7:b5:6a:47:65:13:89:15:08:d4:97:29:2a:
21:df:f9:c1:aa:74:8b:ed:d0:ba:69:e7:64:af:0e:
9b:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:7E:38:86:24:B5:0C:3F:26:5D:05:54:27:93:FC:3D:19:CF:A6:DC
X509v3 Authority Key Identifier:
keyid:69:62:2A:1A:AD:F7:9E:71:1D:1E:7E:43:19:F7:32:C0:B2:DA:80:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aWIqGq33nnEdHn5DGfcywLLagB4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/717615-d202-48f2-bb93-cc20f4172ced/1/aWIqGq33nnEdHn5DGfcywLLagB4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/717615-d202-48f2-bb93-cc20f4172ced/1/aWIqGq33nnEdHn5DGfcywLLagB4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:21:0b:86:a2:06:22:0b:00:f9:14:5b:55:f5:69:68:95:eb:
5d:a0:dd:e2:d3:49:7f:38:38:fe:4d:e4:67:f4:88:cd:01:d9:
55:fb:1c:8e:8d:9a:3a:42:0a:47:c2:b2:62:5f:ba:75:0c:a4:
9a:65:98:e9:69:f5:c5:aa:a8:3b:12:af:1e:c9:ec:af:d5:48:
16:c8:56:69:c2:14:76:41:9e:4f:e4:74:3f:9f:32:88:c6:d3:
1a:05:de:39:64:61:10:a7:12:4d:16:93:97:d4:31:5d:cf:17:
55:70:1a:c6:b0:b4:f6:38:2f:51:54:b7:d3:9a:48:c3:4b:59:
b4:ad:fd:40:c7:c1:13:26:01:b9:6d:5d:d6:52:37:78:52:ef:
79:fd:16:0f:bf:99:91:fb:54:79:df:1e:ac:81:9b:b1:7e:1a:
9b:c9:69:ef:bc:cd:8b:83:1b:83:98:08:fd:e2:3e:a6:0c:af:
2c:ff:57:5f:2f:a5:df:80:5e:e9:6e:df:66:7f:56:f1:ed:6f:
e4:4b:44:3f:ca:47:f2:ec:44:16:7a:c5:a9:1e:73:a6:66:6b:
e9:a5:d8:8f:e8:6c:9d:dc:e5:d2:d2:fd:0c:75:de:4b:be:38:
2f:8f:07:c9:9d:a6:a5:a8:90:c8:bf:bb:1b:a9:72:ea:ac:49:
a4:76:c4:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 11:13:16 2026 by rpki-client