Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/c069f1-9f82-4d5a-8631-451cda077d86/1/aGWWsztIwpNd0Sn6xuYdvACBk_8.mft
File: aGWWsztIwpNd0Sn6xuYdvACBk_8.mft (raw, json)
Hash identifier: IV9GVEsI0rUyWWacQeyQU8ZcdJuI7Vakbb+gkOYgatM=
Subject key identifier: 46:48:5E:A3:16:E3:0C:CF:9C:21:13:CB:11:16:8B:09:33:7E:1D:5C
Authority key identifier: 68:65:96:B3:3B:48:C2:93:5D:D1:29:FA:C6:E6:1D:BC:00:81:93:FF
Certificate issuer: /CN=686596b33b48c2935dd129fac6e61dbc008193ff
Certificate serial: 019DA378BBA34C674E782A23D7D2C73BB02A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aGWWsztIwpNd0Sn6xuYdvACBk_8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/c069f1-9f82-4d5a-8631-451cda077d86/1/aGWWsztIwpNd0Sn6xuYdvACBk_8.mft
Manifest number: 0D33
Signing time: Sun 19 Apr 2026 02:01:31 +0000
Manifest this update: Sun 19 Apr 2026 02:01:31 +0000
Manifest next update: Mon 20 Apr 2026 02:01:31 +0000
Files and hashes: 1: IXySvGWwyIxI8nEtVddBkpUSzNs.roa (hash: PeXAtaHvOlNgD7t5U7ac8b5w1Raf72aXS6L9wTOS/m0=)
2: aGWWsztIwpNd0Sn6xuYdvACBk_8.crl (hash: wjQSVVwwy2+rONyUb6hJ6zCBMlfOmchTW15CJFCg6HM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/c069f1-9f82-4d5a-8631-451cda077d86/1/aGWWsztIwpNd0Sn6xuYdvACBk_8.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/c069f1-9f82-4d5a-8631-451cda077d86/1/aGWWsztIwpNd0Sn6xuYdvACBk_8.mft
rsync://rpki.ripe.net/repository/DEFAULT/aGWWsztIwpNd0Sn6xuYdvACBk_8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:78:bb:a3:4c:67:4e:78:2a:23:d7:d2:c7:3b:b0:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=686596b33b48c2935dd129fac6e61dbc008193ff
Validity
Not Before: Apr 19 02:01:31 2026 GMT
Not After : Apr 20 02:01:31 2026 GMT
Subject: CN=46485ea316e30ccf9c2113cb11168b09337e1d5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:3c:e4:ad:d5:fa:c6:a1:17:4d:9f:98:53:4e:
44:c1:b1:26:fb:e0:b8:8b:82:69:17:ef:e9:0d:41:
13:35:63:d7:df:f5:55:04:ea:df:cf:50:37:9f:a5:
01:f2:de:91:73:03:7a:19:02:19:4a:92:e3:16:dd:
a1:b4:cd:8b:99:69:2d:ff:b1:71:b3:a1:6f:ce:fa:
3f:09:01:ae:00:bb:18:ba:f1:f3:81:a5:7a:ea:5e:
a0:67:e9:b8:43:73:f4:d3:30:69:6a:12:d2:7e:b8:
d5:4d:a2:7d:38:b5:51:65:85:a2:38:8a:46:43:e7:
76:81:24:38:99:73:d4:4a:4e:c3:5b:01:60:03:8f:
a6:22:3e:75:c7:b5:7e:d3:3c:1d:95:a9:45:a5:50:
e3:57:97:9f:f3:e5:06:fa:49:52:7d:ca:c6:6d:66:
a6:e7:85:93:55:10:c1:d8:eb:22:78:e8:ce:df:9d:
e5:71:61:2d:e5:dc:b8:3b:f7:5d:eb:2f:a7:51:03:
86:29:13:50:09:7e:31:57:5d:53:e3:a9:bb:63:3a:
33:15:70:71:04:fb:61:90:1a:c7:f4:83:09:90:23:
06:e5:34:c3:95:7d:da:d7:34:bf:a6:05:0e:a3:d3:
8f:c2:17:85:7d:9a:ef:6e:08:21:9a:f8:29:3c:5e:
97:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:48:5E:A3:16:E3:0C:CF:9C:21:13:CB:11:16:8B:09:33:7E:1D:5C
X509v3 Authority Key Identifier:
keyid:68:65:96:B3:3B:48:C2:93:5D:D1:29:FA:C6:E6:1D:BC:00:81:93:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aGWWsztIwpNd0Sn6xuYdvACBk_8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/c069f1-9f82-4d5a-8631-451cda077d86/1/aGWWsztIwpNd0Sn6xuYdvACBk_8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/c069f1-9f82-4d5a-8631-451cda077d86/1/aGWWsztIwpNd0Sn6xuYdvACBk_8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:83:ed:67:6d:5b:1d:68:10:f0:ab:af:9a:6c:cf:d8:42:e7:
98:2e:1f:7b:d4:a2:ef:5e:9f:41:48:98:5d:c4:59:05:f2:a9:
0a:d4:14:a0:b3:80:38:11:e0:0c:27:5f:bb:63:f7:5e:6a:96:
d7:4d:96:47:30:63:47:65:60:6c:17:1c:40:9b:e5:f5:cd:05:
42:12:ce:03:94:e8:5f:35:3e:59:51:f7:d5:58:52:07:17:ca:
de:4b:55:2b:4c:b5:37:18:53:79:18:fe:f9:59:96:17:7d:98:
cf:65:33:e2:53:d5:13:7d:54:26:8d:68:5f:70:7e:75:25:af:
f3:13:95:e3:59:22:59:ad:d3:8e:5f:60:53:b2:6d:62:08:18:
71:f8:f6:3d:13:7b:35:04:58:6e:4b:9b:5d:39:21:66:2f:7a:
20:d8:2b:ef:85:55:e7:26:2c:ac:af:cc:f2:af:ad:80:48:ff:
6f:40:6b:bd:8e:27:10:9a:34:89:87:5c:f4:24:64:f6:4a:b1:
69:e8:48:58:c3:75:dc:65:e0:fc:b6:32:21:70:3f:28:e3:fb:
43:8f:0c:b8:ac:32:54:f4:eb:d9:aa:ee:07:90:79:3c:b1:66:
9f:c2:e1:75:d1:b1:f9:8d:75:e3:da:7e:1f:60:4c:44:5f:af:
0d:1d:99:b9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2jeLujTGdOeCoj19LHO7AqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY4NjU5NmIzM2I0OGMyOTM1ZGQxMjlmYWM2ZTYxZGJjMDA4
MTkzZmYwHhcNMjYwNDE5MDIwMTMxWhcNMjYwNDIwMDIwMTMxWjAzMTEwLwYDVQQD
Eyg0NjQ4NWVhMzE2ZTMwY2NmOWMyMTEzY2IxMTE2OGIwOTMzN2UxZDVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAojzkrdX6xqEXTZ+YU05EwbEm++C4
i4JpF+/pDUETNWPX3/VVBOrfz1A3n6UB8t6RcwN6GQIZSpLjFt2htM2LmWkt/7Fx
s6Fvzvo/CQGuALsYuvHzgaV66l6gZ+m4Q3P00zBpahLSfrjVTaJ9OLVRZYWiOIpG
Q+d2gSQ4mXPUSk7DWwFgA4+mIj51x7V+0zwdlalFpVDjV5ef8+UG+klSfcrGbWam
54WTVRDB2OsieOjO353lcWEt5dy4O/dd6y+nUQOGKRNQCX4xV11T46m7YzozFXBx
BPthkBrH9IMJkCMG5TTDlX3a1zS/pgUOo9OPwheFfZrvbgghmvgpPF6XOwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEZIXqMW4wzPnCETyxEWiwkzfh1cMB8GA1UdIwQY
MBaAFGhllrM7SMKTXdEp+sbmHbwAgZP/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYUdXV3N6dEl3cE5kMFNuNnh1WWR2QUNCa184LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS9jMDY5ZjEtOWY4Mi00ZDVhLTg2MzEt
NDUxY2RhMDc3ZDg2LzEvYUdXV3N6dEl3cE5kMFNuNnh1WWR2QUNCa184Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OS9jMDY5ZjEtOWY4Mi00ZDVhLTg2MzEtNDUxY2RhMDc3ZDg2
LzEvYUdXV3N6dEl3cE5kMFNuNnh1WWR2QUNCa184LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS4PtZ21b
HWgQ8KuvmmzP2ELnmC4fe9Si716fQUiYXcRZBfKpCtQUoLOAOBHgDCdfu2P3XmqW
102WRzBjR2VgbBccQJvl9c0FQhLOA5ToXzU+WVH31VhSBxfK3ktVK0y1NxhTeRj+
+VmWF32Yz2Uz4lPVE31UJo1oX3B+dSWv8xOV41kiWa3Tjl9gU7JtYggYcfj2PRN7
NQRYbkubXTkhZi96INgr74VV5yYsrK/M8q+tgEj/b0BrvY4nEJo0iYdc9CRk9kqx
aehIWMN13GXg/LYyIXA/KOP7Q48MuKwyVPTr2aruB5B5PLFmn8LhddGx+Y1149p+
H2BMRF+vDR2ZuQ==
-----END CERTIFICATE-----
Generated at Sun Apr 19 11:35:26 2026 by rpki-client