Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/717615-d202-48f2-bb93-cc20f4172ced/1/aWIqGq33nnEdHn5DGfcywLLagB4.mft
File: aWIqGq33nnEdHn5DGfcywLLagB4.mft (raw, json)
Hash identifier: WwKgq7iSg89tuJvKjYMeeRS2KiC9vxToxoyXTs1O6xk=
Subject key identifier: 97:D1:60:42:CE:84:AE:C4:F7:97:37:2A:F3:AE:8C:43:71:67:F1:BB
Authority key identifier: 69:62:2A:1A:AD:F7:9E:71:1D:1E:7E:43:19:F7:32:C0:B2:DA:80:1E
Certificate issuer: /CN=69622a1aadf79e711d1e7e4319f732c0b2da801e
Certificate serial: 019CAAFD9A49348C6EE2EADEB82B19852D81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aWIqGq33nnEdHn5DGfcywLLagB4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/717615-d202-48f2-bb93-cc20f4172ced/1/aWIqGq33nnEdHn5DGfcywLLagB4.mft
Manifest number: 1849
Signing time: Sun 01 Mar 2026 20:01:12 +0000
Manifest this update: Sun 01 Mar 2026 20:01:12 +0000
Manifest next update: Mon 02 Mar 2026 20:01:12 +0000
Files and hashes: 1: 0-VSXxZUPNE_NCyRYY4aOknsIgM.roa (hash: p3ie/xFXWDV8klzQ/kVNpHbbrPevYLWLmd0IwEUgv1A=)
2: U3PfejTQb2whMGKKVwhS4XwhEu0.roa (hash: xYX61cbjxOAGtEMGsVih/dcwxYwy4/ZCPIVGCthKU24=)
3: aWIqGq33nnEdHn5DGfcywLLagB4.crl (hash: OaYZvcfxKUs0RjGO1RqjrnJx94q+n3sy+4GoJlBqqIQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/717615-d202-48f2-bb93-cc20f4172ced/1/aWIqGq33nnEdHn5DGfcywLLagB4.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/717615-d202-48f2-bb93-cc20f4172ced/1/aWIqGq33nnEdHn5DGfcywLLagB4.mft
rsync://rpki.ripe.net/repository/DEFAULT/aWIqGq33nnEdHn5DGfcywLLagB4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 20:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fd:9a:49:34:8c:6e:e2:ea:de:b8:2b:19:85:2d:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69622a1aadf79e711d1e7e4319f732c0b2da801e
Validity
Not Before: Mar 1 20:01:12 2026 GMT
Not After : Mar 2 20:01:12 2026 GMT
Subject: CN=97d16042ce84aec4f797372af3ae8c437167f1bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:9d:65:19:0c:56:7b:65:9b:ec:07:98:9e:fb:
a8:76:16:10:93:41:42:ec:7a:8a:b2:39:a2:3b:ad:
3e:c4:f8:00:08:d7:f7:84:25:6c:d7:7d:1f:1b:12:
82:2d:da:eb:15:1a:1b:c0:dc:25:62:10:ab:24:c6:
16:32:18:e7:e6:af:74:57:65:36:8f:cf:0c:1b:45:
89:f2:92:91:e9:9e:10:b7:c8:3d:d3:94:48:a3:ef:
7e:4b:7c:78:9e:1f:a7:dd:14:ec:3c:f0:9e:85:38:
f1:4f:d4:46:cf:c5:b4:69:eb:9c:64:5d:36:3d:34:
8e:34:e0:7f:08:4f:7f:7d:6e:01:cf:e8:9c:6b:c4:
f3:73:d5:11:bb:1e:05:56:cd:4d:e3:32:54:83:da:
f1:9d:c1:f5:9a:5a:ca:94:5c:43:a4:15:aa:53:bd:
78:e9:84:ec:8d:99:ca:ab:67:d2:f0:ba:47:bf:a3:
e3:8e:c4:68:be:0a:17:57:ae:70:84:b7:7d:90:c8:
be:72:2f:98:2e:3b:0b:e5:c2:6b:57:68:6e:02:05:
13:46:e0:a7:62:3b:87:e2:3e:ab:fc:ff:55:1d:46:
2b:7d:cd:7c:61:0e:7b:20:59:7c:93:1f:48:3b:af:
d7:14:49:d2:cf:84:d2:f3:25:f3:19:c4:67:0c:05:
ee:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:D1:60:42:CE:84:AE:C4:F7:97:37:2A:F3:AE:8C:43:71:67:F1:BB
X509v3 Authority Key Identifier:
keyid:69:62:2A:1A:AD:F7:9E:71:1D:1E:7E:43:19:F7:32:C0:B2:DA:80:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aWIqGq33nnEdHn5DGfcywLLagB4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/717615-d202-48f2-bb93-cc20f4172ced/1/aWIqGq33nnEdHn5DGfcywLLagB4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/717615-d202-48f2-bb93-cc20f4172ced/1/aWIqGq33nnEdHn5DGfcywLLagB4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:1f:dd:0d:28:e1:75:49:0e:a0:b5:0b:23:99:2a:2f:d0:97:
ba:70:3e:f7:a7:b3:63:6d:a9:d3:55:4a:e2:c3:08:e0:a1:66:
9b:36:9f:f8:91:5d:91:0e:f1:98:f0:c3:f7:43:3a:d2:da:3b:
1a:64:59:92:d1:a2:36:64:30:b3:87:b4:be:86:11:cf:d3:86:
53:76:de:fc:2a:d6:a8:99:50:eb:31:a4:c8:22:82:2d:41:41:
bb:49:72:82:7a:61:24:18:39:1a:e0:7a:5b:82:f0:c3:01:35:
b0:16:e1:e9:d7:65:aa:af:3d:98:28:33:5b:64:b9:4b:c8:11:
64:0a:d9:cf:f6:a3:b1:21:fb:ff:2c:56:1c:67:1f:bf:df:f7:
c3:2e:0f:ef:9e:47:e2:01:5c:48:4f:2f:93:84:a9:be:36:82:
eb:85:5e:23:ae:dc:f3:21:50:85:8c:a2:ca:0f:4c:fa:85:73:
b8:3d:4e:93:da:df:b6:7b:19:06:82:f7:83:43:a6:6c:a0:ee:
ec:84:e9:b0:b6:eb:c0:6c:8a:b9:d0:76:e5:97:96:42:87:f3:
be:72:33:cd:93:2f:f3:29:99:38:83:14:cf:79:db:71:e1:24:
63:ac:88:cf:95:f2:d4:db:63:0b:52:82:0e:a5:3d:b3:b3:10:
28:cc:64:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:45:41 2026 by rpki-client