Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/1acb0c-31a3-4718-993d-11dffe108147/1/aw7Nv1E2DOyuYXq-GjrGpv8KW2w.mft
File: aw7Nv1E2DOyuYXq-GjrGpv8KW2w.mft (raw, json)
Hash identifier: X1WGYSHptIn+6AkdL6/ryZy4D/w6FIWhY4aD+T+BtDE=
Subject key identifier: C1:19:74:ED:89:BB:7E:D7:F0:4C:3F:3C:25:E5:63:58:EA:82:84:9E
Authority key identifier: 6B:0E:CD:BF:51:36:0C:EC:AE:61:7A:BE:1A:3A:C6:A6:FF:0A:5B:6C
Certificate issuer: /CN=6b0ecdbf51360cecae617abe1a3ac6a6ff0a5b6c
Certificate serial: 019FABD153A8AD9F29E4A4927E1B68282389
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aw7Nv1E2DOyuYXq-GjrGpv8KW2w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/1acb0c-31a3-4718-993d-11dffe108147/1/aw7Nv1E2DOyuYXq-GjrGpv8KW2w.mft
Manifest number: 19DA
Signing time: Wed 29 Jul 2026 03:00:50 +0000
Manifest this update: Wed 29 Jul 2026 03:00:50 +0000
Manifest next update: Thu 30 Jul 2026 03:00:50 +0000
Files and hashes: 1: IRp2Cv-8KzRBK5kjOx5O71bWsko.roa (hash: Ld1XWN7Sn3t+gSZshK2rptc8lciUjiiDr1oOC9C30/s=)
2: aw7Nv1E2DOyuYXq-GjrGpv8KW2w.crl (hash: XMi844HRCQdCGAUIJOdmOqCKy9rRxBE1BqK6V2njxR8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/1acb0c-31a3-4718-993d-11dffe108147/1/aw7Nv1E2DOyuYXq-GjrGpv8KW2w.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/1acb0c-31a3-4718-993d-11dffe108147/1/aw7Nv1E2DOyuYXq-GjrGpv8KW2w.mft
rsync://rpki.ripe.net/repository/DEFAULT/aw7Nv1E2DOyuYXq-GjrGpv8KW2w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:d1:53:a8:ad:9f:29:e4:a4:92:7e:1b:68:28:23:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b0ecdbf51360cecae617abe1a3ac6a6ff0a5b6c
Validity
Not Before: Jul 29 03:00:50 2026 GMT
Not After : Jul 30 03:00:50 2026 GMT
Subject: CN=c11974ed89bb7ed7f04c3f3c25e56358ea82849e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:98:bb:98:fc:b4:62:a8:13:7e:b1:cb:0c:76:
51:49:01:82:b6:3c:1c:ca:7c:00:18:b1:de:9a:51:
07:a0:7c:e3:b6:85:67:06:00:22:98:fb:d3:d1:3d:
8f:c8:10:81:e2:a8:a7:47:87:79:59:81:bd:34:1f:
b2:15:9e:5e:b6:35:09:5c:fe:ce:a3:a8:d9:d1:a7:
f1:76:4f:13:de:ad:0d:c5:cb:bc:20:5c:97:de:ea:
1a:a0:e7:38:15:ad:a9:5c:0a:bb:5f:a8:71:9b:f9:
23:77:cd:44:a3:a9:f7:f4:7b:6a:56:c7:25:67:b3:
4e:40:dd:2d:52:51:bc:58:46:66:e2:47:e1:3d:2a:
5f:25:06:ef:58:67:18:a0:05:dc:99:50:ab:13:87:
66:4b:6c:13:7b:24:4c:44:64:7b:dc:e6:ce:78:72:
10:af:cf:c3:fe:07:8b:29:d9:b1:af:89:c3:31:e0:
94:d1:27:82:1a:6c:36:35:4a:93:13:c2:94:d8:3b:
9b:12:60:b5:03:8f:8e:d8:45:43:1c:c1:f1:66:83:
28:27:39:3b:72:a1:e4:53:c9:39:e1:9a:9a:55:4d:
ba:15:4c:02:e0:7e:55:24:90:f3:a3:3c:56:37:70:
f5:0d:40:5b:79:e0:e3:55:c4:92:59:5d:e6:20:71:
03:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:19:74:ED:89:BB:7E:D7:F0:4C:3F:3C:25:E5:63:58:EA:82:84:9E
X509v3 Authority Key Identifier:
keyid:6B:0E:CD:BF:51:36:0C:EC:AE:61:7A:BE:1A:3A:C6:A6:FF:0A:5B:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aw7Nv1E2DOyuYXq-GjrGpv8KW2w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/1acb0c-31a3-4718-993d-11dffe108147/1/aw7Nv1E2DOyuYXq-GjrGpv8KW2w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/1acb0c-31a3-4718-993d-11dffe108147/1/aw7Nv1E2DOyuYXq-GjrGpv8KW2w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:29:a9:f2:8f:6b:86:b9:e5:da:f0:0f:a7:37:c2:a3:58:ba:
65:5d:b4:47:5d:50:e9:22:18:bd:4a:bb:c8:84:84:b6:4c:ae:
4c:d6:8e:7e:ba:1f:71:e5:76:9b:c4:a9:2a:d9:21:33:47:29:
34:e7:f2:eb:88:71:bf:cc:77:02:6d:90:e8:9c:70:2f:53:81:
23:a1:bd:07:e7:b0:57:26:41:3d:83:53:cb:15:00:09:5b:7c:
31:08:12:2e:82:93:a1:bd:13:18:39:0d:98:93:b1:cc:46:a6:
11:20:b3:cf:2e:88:d1:23:25:02:e5:df:17:fa:0e:f2:f1:54:
2d:1a:40:79:3e:3e:00:97:d3:0d:fa:45:f4:e2:9a:80:69:7c:
79:0e:a7:03:b3:e0:bc:be:fe:e9:7c:eb:2e:37:b3:85:eb:d0:
15:48:0e:0a:79:16:7c:d6:02:41:16:91:16:21:0c:e4:ab:e3:
4c:84:da:99:a7:51:f8:08:15:8c:a8:61:5d:9c:30:d1:99:e6:
e8:ad:c8:c5:c6:99:e6:70:d9:a4:9d:7f:a8:2c:e0:11:27:41:
a7:5d:19:e9:df:00:f9:35:ae:8b:a7:01:d9:07:1f:0a:bc:2c:
25:a6:da:2b:8a:0b:05:9c:d7:f8:a8:91:9b:6c:d4:f6:02:3e:
bc:36:61:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 08:51:38 2026 by rpki-client