Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/1acb0c-31a3-4718-993d-11dffe108147/1/aw7Nv1E2DOyuYXq-GjrGpv8KW2w.mft
File: aw7Nv1E2DOyuYXq-GjrGpv8KW2w.mft (raw, json)
Hash identifier: C+okoM1wLL0Z9FEHJkj1Dcm5wDiTpbqUSfrOS/l7JgU=
Subject key identifier: 4D:5B:BD:88:D3:8B:0E:63:0A:A6:6F:2F:8F:28:46:DC:BB:FD:35:8E
Authority key identifier: 6B:0E:CD:BF:51:36:0C:EC:AE:61:7A:BE:1A:3A:C6:A6:FF:0A:5B:6C
Certificate issuer: /CN=6b0ecdbf51360cecae617abe1a3ac6a6ff0a5b6c
Certificate serial: 019D9AAC27F7A0DAACA4044FF275F148886D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aw7Nv1E2DOyuYXq-GjrGpv8KW2w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/1acb0c-31a3-4718-993d-11dffe108147/1/aw7Nv1E2DOyuYXq-GjrGpv8KW2w.mft
Manifest number: 18C7
Signing time: Fri 17 Apr 2026 09:01:06 +0000
Manifest this update: Fri 17 Apr 2026 09:01:06 +0000
Manifest next update: Sat 18 Apr 2026 09:01:06 +0000
Files and hashes: 1: RbQOKPPCGMpyM4K5C4AKNXpnbds.roa (hash: Gf2GIsuTgxftxzUXHkquqSxcD5pOA/yKwpoQBnJXO2Y=)
2: aw7Nv1E2DOyuYXq-GjrGpv8KW2w.crl (hash: jgVH9k+AKe32E8yWDISgp1t1YZbRpPxMSky+Rja/lYk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/1acb0c-31a3-4718-993d-11dffe108147/1/aw7Nv1E2DOyuYXq-GjrGpv8KW2w.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/1acb0c-31a3-4718-993d-11dffe108147/1/aw7Nv1E2DOyuYXq-GjrGpv8KW2w.mft
rsync://rpki.ripe.net/repository/DEFAULT/aw7Nv1E2DOyuYXq-GjrGpv8KW2w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 09:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:ac:27:f7:a0:da:ac:a4:04:4f:f2:75:f1:48:88:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b0ecdbf51360cecae617abe1a3ac6a6ff0a5b6c
Validity
Not Before: Apr 17 09:01:06 2026 GMT
Not After : Apr 18 09:01:06 2026 GMT
Subject: CN=4d5bbd88d38b0e630aa66f2f8f2846dcbbfd358e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:e5:d4:b8:11:d8:85:8d:09:cf:2f:5a:4b:b1:
1e:33:02:24:af:31:d3:a8:31:9c:ba:bd:2b:67:8e:
ca:06:ee:44:30:0e:44:9a:3f:df:e6:1a:b1:a1:81:
08:79:26:27:08:63:31:c4:06:85:98:53:02:1f:fc:
ca:48:f0:8c:e2:35:8b:5b:f4:89:6a:63:9d:48:51:
e9:98:c0:6a:d4:7b:d2:53:e7:3e:e7:dc:8c:44:f5:
0c:6f:4c:9b:a1:ac:f4:46:cf:8a:a6:1f:ce:75:6a:
d0:a3:2b:4d:a4:a7:7e:4a:a9:29:f5:1b:e3:f8:c3:
92:d9:36:e8:1b:09:37:2e:8a:d4:d0:76:27:50:f7:
2f:90:19:9d:56:1e:8a:ad:ad:d1:1e:ac:aa:e8:f2:
d0:12:98:0a:d5:c5:30:85:10:7f:bd:0a:7b:b2:5f:
e6:23:e9:dc:03:34:1b:1a:b6:cc:b2:f8:89:73:18:
1b:c7:a0:b7:db:cb:60:09:d0:5b:8a:73:67:02:12:
57:73:01:dc:10:67:48:b9:3b:c1:30:2a:d7:4c:bf:
6c:3a:07:bb:83:39:e3:d7:2e:bb:70:74:38:e0:68:
11:c0:e4:ac:63:6a:80:22:26:eb:39:7f:ae:86:58:
86:02:d6:a6:04:1d:92:c1:b1:1f:a3:ed:24:68:a8:
b6:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:5B:BD:88:D3:8B:0E:63:0A:A6:6F:2F:8F:28:46:DC:BB:FD:35:8E
X509v3 Authority Key Identifier:
keyid:6B:0E:CD:BF:51:36:0C:EC:AE:61:7A:BE:1A:3A:C6:A6:FF:0A:5B:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aw7Nv1E2DOyuYXq-GjrGpv8KW2w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/1acb0c-31a3-4718-993d-11dffe108147/1/aw7Nv1E2DOyuYXq-GjrGpv8KW2w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/1acb0c-31a3-4718-993d-11dffe108147/1/aw7Nv1E2DOyuYXq-GjrGpv8KW2w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:2f:90:14:67:92:88:03:7b:56:cf:3a:f8:19:be:ab:41:6e:
8b:2d:86:72:68:67:d7:92:29:68:f0:f8:59:e4:c5:83:06:c0:
ab:63:53:92:87:06:7f:5e:f4:41:14:4b:83:b7:27:2d:51:3e:
14:88:d0:f7:9c:53:ae:e4:37:7c:48:9f:3b:32:6b:96:08:e2:
16:a6:80:e0:b7:94:55:40:76:c6:42:63:44:c8:df:40:21:f1:
3a:5b:58:b4:52:5e:e0:34:42:1d:66:4e:c1:5c:9f:c7:f3:4f:
7c:a4:52:94:c3:0e:34:04:e5:1a:f0:8d:4f:30:d2:49:46:37:
36:54:e9:76:1f:d1:c4:9a:7e:0a:b4:bb:66:20:5d:39:95:53:
e7:4e:b3:77:a1:03:33:9b:c2:f3:b1:49:3b:77:61:e7:8a:05:
02:4c:19:ca:fc:7e:a6:3d:45:0d:16:b2:e1:45:d3:2f:a5:2e:
2e:4f:1d:01:32:00:98:b1:e9:f3:06:68:e0:b6:51:d6:8e:5a:
5b:01:19:a9:92:9e:c3:d5:ab:54:e2:6e:e0:5c:6f:11:d6:4d:
cc:04:fe:36:35:8a:d1:df:89:ae:54:fc:32:da:10:ae:c6:19:
2f:94:2e:c2:11:09:1f:3b:cf:37:32:7d:53:06:6e:8a:87:a6:
17:74:7c:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:30:37 2026 by rpki-client