Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/ec0453-7e8f-41b1-85d1-1cb1a8f80238/1/aWxnhn4OICJI5_Xjy9V0vRoy_j8.mft
File: aWxnhn4OICJI5_Xjy9V0vRoy_j8.mft (raw, json)
Hash identifier: uqsdA/lBS1lae+jNujHavlCSvPvyZ1YnQ5rrzncjmF0=
Subject key identifier: 50:25:84:DB:A8:93:0C:94:87:69:93:D5:46:D2:DF:42:0F:75:E4:12
Authority key identifier: 69:6C:67:86:7E:0E:20:22:48:E7:F5:E3:CB:D5:74:BD:1A:32:FE:3F
Certificate issuer: /CN=696c67867e0e202248e7f5e3cbd574bd1a32fe3f
Certificate serial: 019FAA1A3995A911B9888A8762B4DDB9150C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aWxnhn4OICJI5_Xjy9V0vRoy_j8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/ec0453-7e8f-41b1-85d1-1cb1a8f80238/1/aWxnhn4OICJI5_Xjy9V0vRoy_j8.mft
Manifest number: 0B32
Signing time: Tue 28 Jul 2026 19:01:13 +0000
Manifest this update: Tue 28 Jul 2026 19:01:13 +0000
Manifest next update: Wed 29 Jul 2026 19:01:13 +0000
Files and hashes: 1: Wqs5JSkx7_0Orjd3NSN3cscazxs.roa (hash: l0alqd0AN6rhg4vGvxDTD+n/+usdmoBFuJFkQbyIonc=)
2: aWxnhn4OICJI5_Xjy9V0vRoy_j8.crl (hash: uiCerctR01RW9D9O1ZlX9J4ygwLtFdGrVENtUaH/auY=)
3: hoOh2lQ6xX4vf4vHzx-4VSNBDEQ.roa (hash: QvTMus8rtJvNC+3lcBpZ7MeQ/XKaChIMsEOr9EuRiJc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/ec0453-7e8f-41b1-85d1-1cb1a8f80238/1/aWxnhn4OICJI5_Xjy9V0vRoy_j8.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/ec0453-7e8f-41b1-85d1-1cb1a8f80238/1/aWxnhn4OICJI5_Xjy9V0vRoy_j8.mft
rsync://rpki.ripe.net/repository/DEFAULT/aWxnhn4OICJI5_Xjy9V0vRoy_j8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 19:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:1a:39:95:a9:11:b9:88:8a:87:62:b4:dd:b9:15:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=696c67867e0e202248e7f5e3cbd574bd1a32fe3f
Validity
Not Before: Jul 28 19:01:13 2026 GMT
Not After : Jul 29 19:01:13 2026 GMT
Subject: CN=502584dba8930c94876993d546d2df420f75e412
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:4a:0d:8c:09:e2:5d:c2:e8:66:d3:47:c2:7d:
bd:98:8d:02:59:d4:d9:be:9d:f0:dd:df:f6:86:5d:
f4:3b:4f:d2:18:b3:f4:15:24:42:8d:8d:a7:5a:8f:
62:0f:3c:8a:30:a8:00:00:b3:3e:dc:c4:3c:74:8a:
1b:95:58:0e:68:4e:3e:5a:d7:17:3a:d3:b1:de:6e:
25:34:b6:a6:32:85:a9:10:b4:d1:77:16:59:cd:bb:
38:fb:fe:42:c0:2c:6f:73:be:0b:de:f0:a1:c6:d8:
96:2d:8a:24:32:03:d6:ec:99:42:b1:44:76:b1:bc:
d0:f3:00:9d:c2:ae:83:88:90:0a:ab:3c:86:bf:2d:
67:91:ab:19:4e:a4:b8:ea:1c:7a:80:69:0d:71:51:
13:d1:f3:e9:c2:be:f7:fe:38:5e:91:fd:d9:f9:37:
6d:95:69:b3:68:a7:e9:a3:37:ac:46:a6:3d:5c:cc:
ce:e3:a7:1c:62:9d:60:08:28:70:34:3a:03:07:f8:
63:56:c3:c7:c8:68:ba:36:c2:57:77:c9:83:55:29:
67:1e:11:2a:51:8a:7a:59:ea:11:06:41:11:22:76:
de:93:c7:c3:e1:7c:9e:a8:65:33:48:c2:26:51:f3:
27:7b:b0:b4:e3:5a:b8:c9:7f:bd:0f:75:50:22:a2:
21:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:25:84:DB:A8:93:0C:94:87:69:93:D5:46:D2:DF:42:0F:75:E4:12
X509v3 Authority Key Identifier:
keyid:69:6C:67:86:7E:0E:20:22:48:E7:F5:E3:CB:D5:74:BD:1A:32:FE:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aWxnhn4OICJI5_Xjy9V0vRoy_j8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/ec0453-7e8f-41b1-85d1-1cb1a8f80238/1/aWxnhn4OICJI5_Xjy9V0vRoy_j8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/ec0453-7e8f-41b1-85d1-1cb1a8f80238/1/aWxnhn4OICJI5_Xjy9V0vRoy_j8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c2:04:84:1f:46:d9:2f:38:b5:49:30:c2:47:59:ce:35:c9:6e:
68:55:2b:52:29:f2:b2:12:f5:74:af:04:3b:04:ed:c2:3a:2c:
e8:fa:05:b1:91:eb:8c:8f:9e:38:d3:b1:cd:2b:39:7d:81:62:
e0:5b:91:56:1f:d5:b9:c8:de:e2:5a:71:42:67:69:64:83:13:
4b:1f:b6:38:cf:43:f3:08:74:dc:97:6b:76:7b:e3:0d:29:ca:
f2:0c:b0:b5:4b:4b:64:9d:92:0d:40:d2:70:78:bb:c4:85:e1:
81:7b:16:3f:59:50:36:9a:fe:4b:6e:6a:87:ac:02:fb:cb:ca:
a0:e3:ed:92:70:31:1b:90:9a:64:ed:d7:11:e6:81:37:c8:aa:
e0:ae:b1:fb:42:45:b5:2f:c5:c0:08:3e:8c:88:e2:46:6a:b5:
da:1e:92:50:ae:42:ec:e0:a9:5b:81:4c:e2:95:40:00:ed:27:
5f:d0:0f:73:cf:bb:17:48:87:35:a7:ce:26:65:d0:7c:42:40:
7c:44:97:c1:44:c7:4b:6d:05:f9:e6:5a:d1:c4:74:2d:24:c1:
27:8c:bc:03:2c:06:f9:e9:2d:28:bd:ec:db:b6:b6:43:1d:64:
1f:45:ce:bd:76:4e:60:39:30:33:a5:d4:6a:89:10:44:9c:2b:
c3:02:a0:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 03:39:46 2026 by rpki-client