Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/a2eda2-e885-4640-9c84-d6ef8e914307/1/rwAta7hamGvIjbzZMyCUVOW14II.mft
File: rwAta7hamGvIjbzZMyCUVOW14II.mft (raw, json)
Hash identifier: gxs/J223qcUtr5mUJw9mVf7twhzm5gg5hU1QFErStIk=
Subject key identifier: 3B:F2:F9:55:40:AB:A3:35:78:A4:C0:1C:9B:59:EC:DC:E2:A7:A9:13
Authority key identifier: AF:00:2D:6B:B8:5A:98:6B:C8:8D:BC:D9:33:20:94:54:E5:B5:E0:82
Certificate issuer: /CN=af002d6bb85a986bc88dbcd933209454e5b5e082
Certificate serial: 019D98BD9F61CD18AC996C60227E6E8550AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rwAta7hamGvIjbzZMyCUVOW14II.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/a2eda2-e885-4640-9c84-d6ef8e914307/1/rwAta7hamGvIjbzZMyCUVOW14II.mft
Manifest number: 13C1
Signing time: Fri 17 Apr 2026 00:00:57 +0000
Manifest this update: Fri 17 Apr 2026 00:00:57 +0000
Manifest next update: Sat 18 Apr 2026 00:00:57 +0000
Files and hashes: 1: p1Z5ag1eRovSGpghiltah3wrLp8.roa (hash: fdCiGCU5t+2pHmKwq78C8J8Bdqj2StfkhlW4J0RllGM=)
2: rwAta7hamGvIjbzZMyCUVOW14II.crl (hash: WJUQ13oFn8h42VcHGZnlFdiJuw7tMJvXeXUS9BEn5TQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/a2eda2-e885-4640-9c84-d6ef8e914307/1/rwAta7hamGvIjbzZMyCUVOW14II.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/a2eda2-e885-4640-9c84-d6ef8e914307/1/rwAta7hamGvIjbzZMyCUVOW14II.mft
rsync://rpki.ripe.net/repository/DEFAULT/rwAta7hamGvIjbzZMyCUVOW14II.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:bd:9f:61:cd:18:ac:99:6c:60:22:7e:6e:85:50:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af002d6bb85a986bc88dbcd933209454e5b5e082
Validity
Not Before: Apr 17 00:00:57 2026 GMT
Not After : Apr 18 00:00:57 2026 GMT
Subject: CN=3bf2f95540aba33578a4c01c9b59ecdce2a7a913
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:9a:f2:03:88:af:6e:66:37:0f:46:41:31:de:
ac:c6:60:2f:9e:f1:b1:f7:fc:13:e1:c6:94:52:68:
ce:7a:db:56:2c:c3:9b:77:fc:ea:21:29:0b:7c:25:
77:41:c5:33:2a:a5:e9:96:da:d1:14:f9:68:41:c7:
7e:02:cf:9e:d3:61:74:45:e3:fd:d7:28:39:dd:d5:
1f:6d:b2:3d:48:8b:41:45:64:32:01:57:ee:5a:14:
90:f2:5b:3e:5d:f5:55:3b:0b:52:15:f7:29:2a:1e:
65:8e:95:21:14:b7:35:2c:9f:7d:67:2f:cf:f3:6e:
7b:13:d2:c3:0b:39:f6:e3:a5:07:18:f6:d8:b1:88:
6e:06:d2:57:86:0a:10:81:75:94:46:ef:88:22:26:
f6:db:b1:f1:9d:1e:73:79:65:e4:c0:0e:3f:5f:44:
6c:ab:e2:33:50:12:fe:3e:70:40:6f:ad:a6:4d:1f:
f7:22:43:b6:5f:aa:de:53:22:4c:ba:4f:22:d4:46:
75:69:21:d5:43:f0:0d:57:c3:76:2e:ce:56:ae:2f:
7c:1c:d6:e6:1a:54:46:48:21:4d:95:60:35:d1:7f:
d1:1f:51:d0:73:65:b6:63:1d:f0:94:de:d1:ea:1d:
30:86:ee:46:26:63:6f:61:1c:1b:0f:43:fa:8f:04:
78:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:F2:F9:55:40:AB:A3:35:78:A4:C0:1C:9B:59:EC:DC:E2:A7:A9:13
X509v3 Authority Key Identifier:
keyid:AF:00:2D:6B:B8:5A:98:6B:C8:8D:BC:D9:33:20:94:54:E5:B5:E0:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rwAta7hamGvIjbzZMyCUVOW14II.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/a2eda2-e885-4640-9c84-d6ef8e914307/1/rwAta7hamGvIjbzZMyCUVOW14II.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/a2eda2-e885-4640-9c84-d6ef8e914307/1/rwAta7hamGvIjbzZMyCUVOW14II.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:4e:e4:ce:7d:08:e6:6e:0b:0d:ef:a4:97:dc:a9:29:36:44:
ee:8d:89:03:7c:a6:f2:d5:33:f0:ba:55:07:2a:71:8c:1f:ed:
74:99:f9:60:cb:d9:3c:36:fe:5c:b8:57:2e:47:70:ab:94:ad:
20:c7:f4:0c:d6:2a:71:61:f7:d7:35:cd:c4:b1:bc:8c:04:8d:
1d:b0:16:2f:4b:ac:74:58:ca:d0:55:07:b4:17:53:e9:f8:55:
5b:90:5b:0b:8c:a7:e2:b3:3c:fc:c0:65:d1:0b:54:10:2f:9c:
85:4d:b0:11:72:0d:15:23:d8:c8:8b:8b:9d:8d:ff:de:26:f9:
0d:ad:60:62:b6:22:01:96:fe:d4:36:8a:e3:7c:6c:18:91:64:
07:7b:ed:30:d4:e8:05:7b:d3:e2:e5:e0:73:55:07:47:47:c4:
e1:64:19:6e:c6:b6:89:03:20:43:5c:20:a7:52:a0:98:19:03:
7e:d9:56:8e:68:5d:7f:8c:e5:ca:83:5d:de:04:e7:da:cc:bd:
ba:b7:46:e2:5d:77:5b:94:0b:9a:1c:24:b7:55:e3:c6:17:23:
dd:46:cd:8a:86:f6:9a:e4:f3:80:0f:44:9d:a7:1c:6b:a0:5a:
ad:72:62:18:be:67:de:58:81:d4:f5:3f:d1:13:52:53:c0:1f:
a1:7d:b2:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:21:56 2026 by rpki-client