Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/7ddf30-3c91-43f9-b3b1-c949f0591f5b/1/aRWYIN1xgAT7FchbJweWy06EpOo.mft
File: aRWYIN1xgAT7FchbJweWy06EpOo.mft (raw, json)
Hash identifier: RJF6KMbGQd1gfenQVMOgMJJL8Un3s477iBDD4xrdLdQ=
Subject key identifier: 2C:07:EA:A6:DB:00:8D:83:86:C6:56:CD:72:16:5A:21:6F:90:31:61
Authority key identifier: 69:15:98:20:DD:71:80:04:FB:15:C8:5B:27:07:96:CB:4E:84:A4:EA
Certificate issuer: /CN=69159820dd718004fb15c85b270796cb4e84a4ea
Certificate serial: 019FAA87C49A5501A02A2AEA550EAD1D2C90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aRWYIN1xgAT7FchbJweWy06EpOo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/7ddf30-3c91-43f9-b3b1-c949f0591f5b/1/aRWYIN1xgAT7FchbJweWy06EpOo.mft
Manifest number: 04FC
Signing time: Tue 28 Jul 2026 21:00:52 +0000
Manifest this update: Tue 28 Jul 2026 21:00:52 +0000
Manifest next update: Wed 29 Jul 2026 21:00:52 +0000
Files and hashes: 1: aRWYIN1xgAT7FchbJweWy06EpOo.crl (hash: hPDgD6G6z2GkVlnb2GSRZZj2tt+LJKrw3IU6CbB21xA=)
2: yFZe_4gAvKXHPPs1FyfrYpXP8Ow.roa (hash: 86Quhr4EELE+xPjStkhiLN4tCtReKxYPPaBQcYq5lDg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/7ddf30-3c91-43f9-b3b1-c949f0591f5b/1/aRWYIN1xgAT7FchbJweWy06EpOo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/7ddf30-3c91-43f9-b3b1-c949f0591f5b/1/aRWYIN1xgAT7FchbJweWy06EpOo.mft
rsync://rpki.ripe.net/repository/DEFAULT/aRWYIN1xgAT7FchbJweWy06EpOo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 21:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:87:c4:9a:55:01:a0:2a:2a:ea:55:0e:ad:1d:2c:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69159820dd718004fb15c85b270796cb4e84a4ea
Validity
Not Before: Jul 28 21:00:52 2026 GMT
Not After : Jul 29 21:00:52 2026 GMT
Subject: CN=2c07eaa6db008d8386c656cd72165a216f903161
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:00:97:8a:ea:49:04:8b:64:67:31:fc:e6:de:
3f:79:f4:d0:cf:80:82:30:81:3b:e2:a9:bf:aa:b5:
47:2d:6f:99:bc:f1:8f:91:37:af:35:f8:eb:8b:62:
4d:ee:b5:b0:a8:eb:6c:71:67:90:0b:e5:e1:c1:45:
e1:c8:d6:2b:da:4a:19:0f:fb:42:86:ab:be:22:f2:
2c:a1:50:67:c8:e4:39:2a:b8:ed:68:1b:34:8e:69:
54:50:f8:ae:b5:cb:11:43:97:9d:10:d2:fe:ff:4f:
2d:4c:de:f2:e0:91:0f:2a:df:46:27:57:45:a7:1a:
a6:3c:d1:ab:1b:e5:70:33:3d:98:35:86:7c:c0:20:
27:ba:f5:c9:9f:e7:40:72:1e:a1:2a:68:a3:01:22:
48:29:fd:78:e2:74:6c:e5:18:a7:1e:7b:b8:4f:2b:
67:c6:24:fd:9c:2d:cd:49:db:d6:3e:01:75:c1:1c:
fb:93:3f:3e:61:2a:be:4d:5f:bc:38:b1:28:04:d3:
65:cd:bd:97:80:f5:80:52:ca:96:88:1d:61:5a:e4:
98:33:f8:20:14:70:e1:6b:5a:9e:9c:69:59:c2:6a:
24:91:61:50:76:ec:f6:80:9e:80:7d:d9:c5:0b:c3:
47:3f:af:e8:70:b1:03:51:ac:72:93:ab:fb:7b:cd:
3e:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:07:EA:A6:DB:00:8D:83:86:C6:56:CD:72:16:5A:21:6F:90:31:61
X509v3 Authority Key Identifier:
keyid:69:15:98:20:DD:71:80:04:FB:15:C8:5B:27:07:96:CB:4E:84:A4:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aRWYIN1xgAT7FchbJweWy06EpOo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/7ddf30-3c91-43f9-b3b1-c949f0591f5b/1/aRWYIN1xgAT7FchbJweWy06EpOo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/7ddf30-3c91-43f9-b3b1-c949f0591f5b/1/aRWYIN1xgAT7FchbJweWy06EpOo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:aa:ed:c9:11:b1:cd:2a:8e:7b:42:31:f5:cc:c5:e3:1f:fa:
0f:20:1d:70:f4:47:f7:3c:e0:75:38:9b:e7:6e:4c:0a:20:29:
06:4c:4e:e0:fc:a2:6d:a9:06:45:66:28:77:0d:1c:2d:eb:21:
d1:8a:8a:5a:6d:e4:08:ca:bd:bc:c0:5a:b8:9c:f0:36:ab:77:
c1:91:3e:51:f3:ab:4d:da:0c:7e:9d:89:04:3e:70:73:aa:fa:
36:d2:1a:8c:04:37:22:db:29:6a:60:02:6a:9f:a2:bc:8d:f9:
c4:ee:0f:52:ab:d0:fe:74:c4:eb:8e:32:95:68:78:e5:7b:9c:
9a:2d:89:46:f8:2f:12:83:da:39:60:e8:e6:2a:9c:2d:bd:3d:
cc:0c:e0:f5:f6:00:ca:2a:8d:88:9b:a6:2b:6e:9d:95:f7:ac:
d0:78:50:49:6d:65:c8:94:30:55:24:40:b1:2d:b5:76:ec:96:
da:1a:71:3f:6a:75:6c:ef:fd:af:5d:a9:b6:40:17:95:54:96:
6b:9e:15:11:7e:9d:74:6e:e8:77:19:82:7f:5c:35:1d:d3:93:
d5:6a:b0:d4:b5:09:44:e9:f3:24:3b:6a:3a:f8:7d:72:a2:36:
00:b8:32:39:a2:54:dd:ac:f1:7f:22:a4:86:52:ab:6a:0a:6d:
cc:5d:8a:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 06:06:47 2026 by rpki-client