Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/717615-d202-48f2-bb93-cc20f4172ced/1/aWIqGq33nnEdHn5DGfcywLLagB4.mft
File: aWIqGq33nnEdHn5DGfcywLLagB4.mft (raw, json)
Hash identifier: H5BRxx+0jxezZWNw1DFxODi2Gz1p1VbRL4FLzJ1Y5yA=
Subject key identifier: 19:E4:2E:7E:D6:23:79:5E:3C:95:4B:BC:9A:C4:D2:12:76:32:43:D7
Authority key identifier: 69:62:2A:1A:AD:F7:9E:71:1D:1E:7E:43:19:F7:32:C0:B2:DA:80:1E
Certificate issuer: /CN=69622a1aadf79e711d1e7e4319f732c0b2da801e
Certificate serial: 019EC1ED97D9A419DF3A3318600367467572
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aWIqGq33nnEdHn5DGfcywLLagB4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/717615-d202-48f2-bb93-cc20f4172ced/1/aWIqGq33nnEdHn5DGfcywLLagB4.mft
Manifest number: 195E
Signing time: Sat 13 Jun 2026 17:00:34 +0000
Manifest this update: Sat 13 Jun 2026 17:00:34 +0000
Manifest next update: Sun 14 Jun 2026 17:00:34 +0000
Files and hashes: 1: 0-VSXxZUPNE_NCyRYY4aOknsIgM.roa (hash: p3ie/xFXWDV8klzQ/kVNpHbbrPevYLWLmd0IwEUgv1A=)
2: U3PfejTQb2whMGKKVwhS4XwhEu0.roa (hash: xYX61cbjxOAGtEMGsVih/dcwxYwy4/ZCPIVGCthKU24=)
3: aWIqGq33nnEdHn5DGfcywLLagB4.crl (hash: EexP0wCoLC8jtQcnz/bI8LUDEpHyuBpPO/yv6EAgztg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/717615-d202-48f2-bb93-cc20f4172ced/1/aWIqGq33nnEdHn5DGfcywLLagB4.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/717615-d202-48f2-bb93-cc20f4172ced/1/aWIqGq33nnEdHn5DGfcywLLagB4.mft
rsync://rpki.ripe.net/repository/DEFAULT/aWIqGq33nnEdHn5DGfcywLLagB4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 10:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c1:ed:97:d9:a4:19:df:3a:33:18:60:03:67:46:75:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69622a1aadf79e711d1e7e4319f732c0b2da801e
Validity
Not Before: Jun 13 17:00:34 2026 GMT
Not After : Jun 14 17:00:34 2026 GMT
Subject: CN=19e42e7ed623795e3c954bbc9ac4d212763243d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:7d:be:f4:9c:95:c1:ee:ac:2c:5b:6d:5f:cb:
36:38:0d:b0:f8:c4:3c:6a:d0:13:d4:cc:d8:42:0d:
d9:03:47:43:79:61:83:8f:fa:e1:3e:1e:59:9d:19:
31:5e:c5:87:8c:d1:e5:8e:ea:af:67:6f:80:3c:4a:
df:fb:dc:56:e7:24:07:cf:ec:e7:26:55:fc:e7:f4:
89:fc:09:0c:14:4f:8f:5f:ed:2f:af:93:1d:3a:87:
d8:f0:36:01:38:09:26:84:4a:32:3f:e8:57:0a:8a:
ad:12:f9:c4:d0:40:7d:c9:76:2a:19:34:a3:98:4a:
8e:d7:32:04:f9:a9:5e:6d:45:b2:60:d7:bf:cf:13:
59:4e:6b:b6:f9:74:c7:97:c4:24:a7:f2:b2:ae:58:
e7:29:7b:be:a0:36:0a:74:72:04:d6:6f:4d:ab:70:
aa:b7:50:f1:2e:ef:16:c3:eb:91:d1:93:d8:17:fe:
00:85:4f:2c:6a:2b:a4:6f:eb:05:13:b1:fc:3b:f5:
37:09:83:71:c5:72:2a:c5:09:98:e2:19:f8:6a:00:
bd:e3:6f:bf:e8:ca:92:77:55:37:a6:1e:a4:9e:0f:
9e:1a:64:2e:5b:22:c4:8e:02:8b:31:07:c0:30:5b:
a4:56:4c:90:50:4a:1e:bc:9a:87:62:7a:60:6c:c5:
20:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:E4:2E:7E:D6:23:79:5E:3C:95:4B:BC:9A:C4:D2:12:76:32:43:D7
X509v3 Authority Key Identifier:
keyid:69:62:2A:1A:AD:F7:9E:71:1D:1E:7E:43:19:F7:32:C0:B2:DA:80:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aWIqGq33nnEdHn5DGfcywLLagB4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/717615-d202-48f2-bb93-cc20f4172ced/1/aWIqGq33nnEdHn5DGfcywLLagB4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/717615-d202-48f2-bb93-cc20f4172ced/1/aWIqGq33nnEdHn5DGfcywLLagB4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:ef:e2:c7:d0:d5:68:3c:4b:f4:d7:f0:c3:70:e9:b5:c1:2c:
a4:30:9c:98:3f:06:23:c6:10:54:d5:cf:82:e6:1f:dc:e8:57:
74:86:0b:bb:4e:bb:e2:6a:c5:d5:1a:6c:f2:19:0a:4b:c6:d6:
d7:0a:66:4c:2d:31:82:09:c1:a1:e6:48:ed:1c:13:9d:6c:96:
44:7a:cd:df:02:ee:75:d6:bf:1e:23:73:a3:9a:c4:96:47:56:
fe:8c:00:9b:f7:af:97:7b:03:0f:63:29:75:0b:55:5c:c5:dd:
f3:b0:4a:0e:3f:88:71:85:ce:e4:0e:24:3d:80:f2:fe:fb:24:
0e:b0:bc:07:71:0c:d0:da:1d:88:94:50:d5:23:3d:a8:09:f1:
66:d2:b7:44:65:81:da:d4:ea:6d:1b:47:63:eb:ef:d5:1d:0e:
5c:57:bf:c1:c8:82:5c:3e:b1:11:92:ac:19:c2:37:13:52:19:
18:74:29:35:61:d2:6b:3f:75:a0:2b:f2:17:3e:de:e2:17:81:
d7:46:13:ee:9f:b6:c3:64:6f:6d:c6:67:fa:87:91:48:51:f8:
62:a4:56:e8:74:f9:e4:15:47:2d:5f:f8:2f:b2:e6:18:18:fe:
a9:c0:5a:54:94:6e:a6:1e:b0:d5:e7:3a:fa:0d:b2:57:76:4f:
3e:e3:4a:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 20:45:19 2026 by rpki-client