Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/7ddf30-3c91-43f9-b3b1-c949f0591f5b/1/aRWYIN1xgAT7FchbJweWy06EpOo.mft
File: aRWYIN1xgAT7FchbJweWy06EpOo.mft (raw, json)
Hash identifier: ePbpYZMUL5pkjoAPL0NAURix6pzKaoPl9/HjfcqiKVw=
Subject key identifier: 16:BE:C3:45:E3:40:C8:F4:66:67:FB:EF:E5:42:0A:EE:F1:49:7A:A8
Authority key identifier: 69:15:98:20:DD:71:80:04:FB:15:C8:5B:27:07:96:CB:4E:84:A4:EA
Certificate issuer: /CN=69159820dd718004fb15c85b270796cb4e84a4ea
Certificate serial: 019CADC858899E0689744B2C308E516A773C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aRWYIN1xgAT7FchbJweWy06EpOo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/7ddf30-3c91-43f9-b3b1-c949f0591f5b/1/aRWYIN1xgAT7FchbJweWy06EpOo.mft
Manifest number: 0370
Signing time: Mon 02 Mar 2026 09:01:54 +0000
Manifest this update: Mon 02 Mar 2026 09:01:54 +0000
Manifest next update: Tue 03 Mar 2026 09:01:54 +0000
Files and hashes: 1: aRWYIN1xgAT7FchbJweWy06EpOo.crl (hash: Wq6jnLpepkZ58fFBRheQp9U8mqncCfcfwwDRBhmu7Yc=)
2: yFZe_4gAvKXHPPs1FyfrYpXP8Ow.roa (hash: 86Quhr4EELE+xPjStkhiLN4tCtReKxYPPaBQcYq5lDg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/7ddf30-3c91-43f9-b3b1-c949f0591f5b/1/aRWYIN1xgAT7FchbJweWy06EpOo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/7ddf30-3c91-43f9-b3b1-c949f0591f5b/1/aRWYIN1xgAT7FchbJweWy06EpOo.mft
rsync://rpki.ripe.net/repository/DEFAULT/aRWYIN1xgAT7FchbJweWy06EpOo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:c8:58:89:9e:06:89:74:4b:2c:30:8e:51:6a:77:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69159820dd718004fb15c85b270796cb4e84a4ea
Validity
Not Before: Mar 2 09:01:54 2026 GMT
Not After : Mar 3 09:01:54 2026 GMT
Subject: CN=16bec345e340c8f46667fbefe5420aeef1497aa8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:0f:52:71:11:c8:93:97:32:fe:08:76:53:90:
6f:2e:44:af:67:6b:79:e7:65:02:34:8d:39:e3:cf:
bd:c2:44:c5:9f:ae:7c:ad:0d:98:ae:59:c9:51:ef:
4a:4a:72:44:ee:f0:9f:30:a2:b9:66:3a:45:6c:25:
49:4c:a1:01:c2:9f:ae:4e:ad:ca:ba:d7:5a:ac:de:
82:8b:49:58:99:cf:a0:db:41:8b:f5:b2:6a:7a:4c:
10:c5:97:0e:9a:5c:c5:37:69:b0:c3:e6:84:36:d6:
32:81:da:01:88:f5:76:b2:e3:a9:85:61:84:86:a7:
4b:63:c6:ab:b5:ec:2c:7c:8c:3e:96:e6:8c:fe:b8:
32:a5:3c:f3:43:c4:ff:bc:d1:99:fe:6c:3b:05:03:
da:15:ee:40:41:b4:6e:d6:27:fe:26:7d:55:58:97:
10:34:92:a0:1d:0d:61:3d:32:02:21:8f:b9:64:1b:
7b:c7:3c:b1:84:56:6b:84:a5:bd:b4:2d:d3:e2:f8:
3f:a3:ae:8d:65:52:39:c0:2b:2a:16:b6:4a:ce:e9:
b9:f8:7c:63:44:84:60:f9:16:ee:68:73:8b:51:ae:
bb:35:7f:ca:fd:c2:1e:de:a9:b1:17:c5:ad:75:27:
24:c2:1e:8c:1b:5a:25:14:12:1b:75:09:ab:dc:7b:
4e:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:BE:C3:45:E3:40:C8:F4:66:67:FB:EF:E5:42:0A:EE:F1:49:7A:A8
X509v3 Authority Key Identifier:
keyid:69:15:98:20:DD:71:80:04:FB:15:C8:5B:27:07:96:CB:4E:84:A4:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aRWYIN1xgAT7FchbJweWy06EpOo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/7ddf30-3c91-43f9-b3b1-c949f0591f5b/1/aRWYIN1xgAT7FchbJweWy06EpOo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/7ddf30-3c91-43f9-b3b1-c949f0591f5b/1/aRWYIN1xgAT7FchbJweWy06EpOo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:d0:1e:6f:41:29:ce:48:49:68:01:10:c5:01:d7:45:93:4b:
95:69:41:87:94:87:92:67:0d:8c:30:31:41:00:19:96:54:2c:
cc:07:16:ce:97:52:32:8c:c1:c8:4a:13:fe:f7:59:cf:3e:a2:
c0:65:1b:43:c6:57:b9:59:87:bc:4b:5a:5c:28:33:47:05:4d:
32:09:84:c5:38:35:c4:d4:29:8b:a4:bc:ab:0c:94:c1:5e:19:
89:a3:8a:07:ff:d2:03:07:af:06:b8:d0:1f:43:ec:09:7a:15:
1c:18:63:ff:84:14:2f:64:dd:ec:a1:74:89:dc:a7:54:60:bd:
fb:63:c8:54:b7:ae:82:ee:21:fe:85:38:42:ab:b5:a6:59:96:
75:a5:f5:5a:95:20:c1:57:98:33:51:13:95:dd:5b:95:88:cb:
cd:4b:0f:26:57:36:39:70:a5:22:7f:e4:83:66:51:7a:c7:00:
6b:e9:f4:6f:0a:fe:fd:fd:ac:80:b8:6a:23:67:3b:d7:aa:65:
6a:94:68:1b:26:2f:ef:c9:2f:8c:ce:cb:24:1b:85:51:f1:5b:
34:12:bf:a7:f8:50:45:be:0b:9e:b5:25:33:34:c0:c8:5d:c9:
76:7b:96:b9:40:b4:eb:a9:b7:1b:ef:0e:30:c7:47:7e:09:ec:
05:7f:41:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:40:39 2026 by rpki-client