Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/a2eda2-e885-4640-9c84-d6ef8e914307/1/rwAta7hamGvIjbzZMyCUVOW14II.mft
File: rwAta7hamGvIjbzZMyCUVOW14II.mft (raw, json)
Hash identifier: 2+ANG3SRdcUs4SlOdxuI8Ow+wvLmySyRG//CQgLMV8I=
Subject key identifier: DD:3C:04:CE:A9:97:01:2D:FA:88:E0:65:76:E1:AD:B1:C6:10:4E:2E
Authority key identifier: AF:00:2D:6B:B8:5A:98:6B:C8:8D:BC:D9:33:20:94:54:E5:B5:E0:82
Certificate issuer: /CN=af002d6bb85a986bc88dbcd933209454e5b5e082
Certificate serial: 019FABD0E8AA45092F69C242ACCB57F51A8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rwAta7hamGvIjbzZMyCUVOW14II.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/a2eda2-e885-4640-9c84-d6ef8e914307/1/rwAta7hamGvIjbzZMyCUVOW14II.mft
Manifest number: 14D4
Signing time: Wed 29 Jul 2026 03:00:22 +0000
Manifest this update: Wed 29 Jul 2026 03:00:22 +0000
Manifest next update: Thu 30 Jul 2026 03:00:22 +0000
Files and hashes: 1: p1Z5ag1eRovSGpghiltah3wrLp8.roa (hash: fdCiGCU5t+2pHmKwq78C8J8Bdqj2StfkhlW4J0RllGM=)
2: rwAta7hamGvIjbzZMyCUVOW14II.crl (hash: Lr17iTLTeyNY40Veai9At9bjLFipAJC7kljyx6QOWL4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/a2eda2-e885-4640-9c84-d6ef8e914307/1/rwAta7hamGvIjbzZMyCUVOW14II.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/a2eda2-e885-4640-9c84-d6ef8e914307/1/rwAta7hamGvIjbzZMyCUVOW14II.mft
rsync://rpki.ripe.net/repository/DEFAULT/rwAta7hamGvIjbzZMyCUVOW14II.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 03:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:d0:e8:aa:45:09:2f:69:c2:42:ac:cb:57:f5:1a:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af002d6bb85a986bc88dbcd933209454e5b5e082
Validity
Not Before: Jul 29 03:00:22 2026 GMT
Not After : Jul 30 03:00:22 2026 GMT
Subject: CN=dd3c04cea997012dfa88e06576e1adb1c6104e2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:33:2e:04:5e:02:94:65:f9:e6:1f:39:bf:c4:
47:f3:fd:b9:94:22:5b:1e:7f:6b:d7:95:75:45:63:
97:3e:c4:01:86:81:f3:a9:76:33:f5:4f:62:d8:da:
e5:8c:3f:92:a8:01:ae:78:81:4a:c2:e9:f1:eb:99:
f7:f3:37:e4:c9:bb:b8:fc:69:b7:99:88:ce:66:1d:
22:57:af:c7:ef:7f:9b:83:87:a3:fb:a1:a9:ae:09:
7f:72:77:00:38:f3:8b:0a:52:71:50:3c:5d:82:48:
6b:9f:65:71:34:ce:93:0d:a4:22:45:1d:c7:08:33:
b3:cc:a6:63:79:8c:d0:cb:09:23:30:54:ac:49:c3:
e8:76:d2:e4:94:69:0a:84:89:3b:ca:fe:12:c5:0a:
ae:df:33:d0:62:fe:8e:0d:d3:13:c7:23:cb:fe:af:
68:54:18:dd:4d:41:0a:24:bf:65:ea:2b:93:b1:da:
5d:be:73:bc:bc:4b:da:c6:08:33:ae:4b:42:59:03:
f6:33:e2:f9:27:f9:4b:5e:25:ff:bd:2d:ac:78:de:
14:4b:a4:a6:2a:7e:61:c4:c8:a6:0c:a0:07:e4:80:
c6:f8:c3:8f:bc:68:bf:67:fe:d9:8b:d1:a9:fe:2b:
6f:4a:10:c6:ae:3c:f3:bc:b8:75:44:1e:41:c6:05:
77:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:3C:04:CE:A9:97:01:2D:FA:88:E0:65:76:E1:AD:B1:C6:10:4E:2E
X509v3 Authority Key Identifier:
keyid:AF:00:2D:6B:B8:5A:98:6B:C8:8D:BC:D9:33:20:94:54:E5:B5:E0:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rwAta7hamGvIjbzZMyCUVOW14II.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/a2eda2-e885-4640-9c84-d6ef8e914307/1/rwAta7hamGvIjbzZMyCUVOW14II.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/a2eda2-e885-4640-9c84-d6ef8e914307/1/rwAta7hamGvIjbzZMyCUVOW14II.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:bc:c3:30:db:33:a1:0a:20:71:a0:36:37:fb:0b:7d:7c:04:
96:22:20:f8:c9:db:5d:4e:a7:5d:c3:ac:bf:ba:4a:36:43:5f:
2e:1e:13:2b:6b:8c:91:30:2d:03:9a:c5:1a:63:bc:48:68:68:
b5:a1:92:bb:61:18:f3:84:13:38:ad:12:2e:b2:a0:9d:c3:b7:
94:5d:8a:eb:34:d5:6c:f0:d8:2a:47:da:b5:30:28:81:f4:c5:
7b:fb:fb:12:f6:4e:df:5d:a3:0f:99:e6:42:70:46:08:ea:bb:
ae:79:8b:b6:0e:a1:03:90:07:48:5d:76:22:43:41:eb:2e:b8:
61:19:e7:c6:b5:e8:e6:ae:fb:4b:b9:77:56:1e:90:d2:aa:e9:
44:a2:ad:2d:62:81:02:72:f3:2c:1d:8d:f3:da:f1:f9:44:d6:
35:64:f2:33:23:57:98:a0:96:be:aa:52:07:1a:a6:79:7f:0e:
d3:60:6e:19:34:b0:72:28:59:e8:00:2a:c2:7c:0e:25:f6:75:
2c:5b:9e:18:9f:35:b8:ab:28:82:63:db:5d:43:e0:81:e4:d6:
21:0c:e8:e9:6c:82:14:93:7b:90:63:4e:2d:02:84:95:3d:bc:
cf:d0:f4:9f:99:ae:a0:f2:6b:90:52:9b:ff:dd:f0:53:f7:30:
13:fe:ad:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 13:57:36 2026 by rpki-client