Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/c43929-0c30-4b9f-b118-914a16e6a34e/1/awCXK9TKJAWeJn03XtZuQhq4VKE.mft
File: awCXK9TKJAWeJn03XtZuQhq4VKE.mft (raw, json)
Hash identifier: 5zqPKwQ09GSJzOu4/nU3SFTINVhV7rciJVMe36NO4qw=
Subject key identifier: EB:7F:AA:5E:02:18:7B:90:5A:B8:1E:7A:3C:88:33:05:DC:37:4E:B7
Authority key identifier: 6B:00:97:2B:D4:CA:24:05:9E:26:7D:37:5E:D6:6E:42:1A:B8:54:A1
Certificate issuer: /CN=6b00972bd4ca24059e267d375ed66e421ab854a1
Certificate serial: 019FA898CDC082249D44E7E1C25B901156CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/awCXK9TKJAWeJn03XtZuQhq4VKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/c43929-0c30-4b9f-b118-914a16e6a34e/1/awCXK9TKJAWeJn03XtZuQhq4VKE.mft
Manifest number: 4C
Signing time: Tue 28 Jul 2026 12:00:14 +0000
Manifest this update: Tue 28 Jul 2026 12:00:14 +0000
Manifest next update: Wed 29 Jul 2026 12:00:14 +0000
Files and hashes: 1: Zt4rLGa3Mseih4zBD3VqYASxG_g.asa (hash: xPFnItOCzJewWEE4IUYcupkBMHp593Ck5TZ7UHenULI=)
2: awCXK9TKJAWeJn03XtZuQhq4VKE.crl (hash: P33CWANCLpyZVuq0yNpbA9cCdqSI8VZkJAbir1TMVN4=)
3: sv8DBXduAq39ib7q54YEUClNgI0.roa (hash: B2MY0kd7KKYotx5tbsCADH50Hj9mVdj3T+kyiDucng8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/c43929-0c30-4b9f-b118-914a16e6a34e/1/awCXK9TKJAWeJn03XtZuQhq4VKE.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/c43929-0c30-4b9f-b118-914a16e6a34e/1/awCXK9TKJAWeJn03XtZuQhq4VKE.mft
rsync://rpki.ripe.net/repository/DEFAULT/awCXK9TKJAWeJn03XtZuQhq4VKE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 12:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:98:cd:c0:82:24:9d:44:e7:e1:c2:5b:90:11:56:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b00972bd4ca24059e267d375ed66e421ab854a1
Validity
Not Before: Jul 28 12:00:14 2026 GMT
Not After : Jul 29 12:00:14 2026 GMT
Subject: CN=eb7faa5e02187b905ab81e7a3c883305dc374eb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:1b:91:4d:b7:b4:03:3b:2d:a4:cf:09:a2:9e:
99:91:56:90:08:aa:f8:1a:d1:65:7c:a8:01:00:9e:
79:84:d9:0f:11:b6:c4:37:29:11:76:82:fb:5f:ab:
2d:78:1e:71:03:ff:c5:f1:dd:92:3b:1b:e5:69:14:
7a:6c:11:4d:53:c2:ac:8e:42:ef:87:c2:16:bd:84:
73:5f:af:77:e5:75:57:23:27:0f:89:fe:d2:33:06:
57:70:c7:63:3a:b4:dd:4e:ba:c3:61:a8:fc:0c:cd:
f7:51:6a:5a:53:30:b0:0f:ba:eb:b6:26:3c:6d:4d:
16:26:43:1a:84:e0:fb:20:ce:96:13:0f:74:82:f9:
03:98:f0:b8:f5:6a:2a:13:36:06:c3:a9:05:ef:2f:
e7:00:03:b3:8c:7c:78:9e:08:69:17:b3:66:6e:02:
fe:cc:24:11:93:d7:52:8d:5d:e7:a7:e1:33:3b:51:
bb:51:59:f4:c8:83:e3:91:96:1e:9b:74:7c:e5:88:
6d:b5:59:e8:30:f6:cc:67:da:e1:e5:6b:be:47:4a:
21:bd:ad:ef:af:fe:9b:fa:fd:74:91:0a:27:b1:8a:
76:a6:d5:68:2a:08:02:fe:98:5a:2e:1d:dd:f6:45:
4c:f7:19:04:4f:7a:af:a6:e7:7a:75:b7:b4:3f:35:
c7:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:7F:AA:5E:02:18:7B:90:5A:B8:1E:7A:3C:88:33:05:DC:37:4E:B7
X509v3 Authority Key Identifier:
keyid:6B:00:97:2B:D4:CA:24:05:9E:26:7D:37:5E:D6:6E:42:1A:B8:54:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/awCXK9TKJAWeJn03XtZuQhq4VKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/c43929-0c30-4b9f-b118-914a16e6a34e/1/awCXK9TKJAWeJn03XtZuQhq4VKE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/c43929-0c30-4b9f-b118-914a16e6a34e/1/awCXK9TKJAWeJn03XtZuQhq4VKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:73:10:87:46:06:06:55:50:ac:82:89:cc:a1:89:48:fc:1f:
3c:39:4c:e3:a8:1f:6e:a6:f7:62:36:37:5e:d1:65:23:79:e7:
cc:ee:33:88:61:67:2c:fa:91:1c:e4:9b:24:9b:9e:bf:ec:07:
34:49:69:4f:45:9b:91:27:40:68:0e:70:46:0b:2c:f8:31:74:
b5:6c:1a:d4:a6:f9:0d:09:ba:54:de:55:e8:b0:93:b8:db:4a:
fb:b2:f0:d1:a3:7d:2e:3b:37:a6:7b:86:d9:9f:81:92:e6:66:
d2:c2:57:9d:91:2e:ea:f7:db:58:9b:f6:93:37:c2:d7:b4:89:
ad:57:ae:51:5c:fe:e4:0d:b9:ec:95:94:90:47:0c:16:22:9b:
21:10:34:c4:b1:e6:c0:a1:75:92:4f:23:43:86:4f:e3:c9:8a:
e9:5f:03:0d:dc:69:f9:e0:91:46:a1:d1:6a:3a:29:0b:a2:fc:
a1:88:61:36:93:c4:76:08:3d:a0:ed:16:f4:f1:a4:45:63:2d:
b0:25:80:8c:77:b4:64:3e:a0:5e:53:f0:eb:d3:37:bb:71:5a:
19:94:51:7e:c6:f8:15:38:ad:c9:0e:00:6a:d9:e7:80:41:ae:
0d:65:3e:20:c0:ad:6f:04:32:cf:3f:36:ee:59:e4:4e:3d:60:
8f:a0:e1:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 15:43:09 2026 by rpki-client