Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/1acb0c-31a3-4718-993d-11dffe108147/1/aw7Nv1E2DOyuYXq-GjrGpv8KW2w.mft
File: aw7Nv1E2DOyuYXq-GjrGpv8KW2w.mft (raw, json)
Hash identifier: v9lGXXVPgxcIQN84o/2rWi64mwV2QHt51ug8HgnFw2A=
Subject key identifier: D4:42:0A:75:AE:B0:06:D4:AF:24:6D:81:C7:A0:A2:AF:F7:85:09:EF
Authority key identifier: 6B:0E:CD:BF:51:36:0C:EC:AE:61:7A:BE:1A:3A:C6:A6:FF:0A:5B:6C
Certificate issuer: /CN=6b0ecdbf51360cecae617abe1a3ac6a6ff0a5b6c
Certificate serial: 019CAF10EE75991098845DC9F385E98A5B61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aw7Nv1E2DOyuYXq-GjrGpv8KW2w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/1acb0c-31a3-4718-993d-11dffe108147/1/aw7Nv1E2DOyuYXq-GjrGpv8KW2w.mft
Manifest number: 184D
Signing time: Mon 02 Mar 2026 15:00:48 +0000
Manifest this update: Mon 02 Mar 2026 15:00:48 +0000
Manifest next update: Tue 03 Mar 2026 15:00:48 +0000
Files and hashes: 1: RbQOKPPCGMpyM4K5C4AKNXpnbds.roa (hash: Gf2GIsuTgxftxzUXHkquqSxcD5pOA/yKwpoQBnJXO2Y=)
2: aw7Nv1E2DOyuYXq-GjrGpv8KW2w.crl (hash: vkD4UzbWKW9q0LmAlcHyQvsoelz8xwqki0wTKuj+vY8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/1acb0c-31a3-4718-993d-11dffe108147/1/aw7Nv1E2DOyuYXq-GjrGpv8KW2w.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/1acb0c-31a3-4718-993d-11dffe108147/1/aw7Nv1E2DOyuYXq-GjrGpv8KW2w.mft
rsync://rpki.ripe.net/repository/DEFAULT/aw7Nv1E2DOyuYXq-GjrGpv8KW2w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 15:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:af:10:ee:75:99:10:98:84:5d:c9:f3:85:e9:8a:5b:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b0ecdbf51360cecae617abe1a3ac6a6ff0a5b6c
Validity
Not Before: Mar 2 15:00:48 2026 GMT
Not After : Mar 3 15:00:48 2026 GMT
Subject: CN=d4420a75aeb006d4af246d81c7a0a2aff78509ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:b8:9c:62:b4:c6:ec:85:58:23:81:97:34:6b:
3d:60:f5:cd:7a:9d:34:31:6a:e4:fc:16:d6:a7:15:
94:49:52:cd:9d:1c:37:5c:11:25:f9:e4:13:27:77:
01:ab:18:cf:e8:dd:b3:42:c5:89:f4:63:4d:72:d5:
9f:e2:58:7c:c7:17:df:63:6c:dd:71:af:74:66:02:
73:95:ee:12:9c:e7:b9:07:91:80:77:94:6b:9f:4c:
98:54:5f:31:52:d0:13:7f:f7:e3:86:dc:dd:76:e5:
fb:3a:14:f0:bd:37:a4:20:5b:1f:b8:e4:12:31:ea:
59:02:2c:ad:0d:c3:b5:74:73:9b:e6:53:69:7c:fc:
53:6b:75:81:67:8f:22:2e:94:c5:43:50:55:09:25:
33:01:0c:34:85:18:49:18:35:5e:2c:65:82:18:51:
f1:87:1a:46:71:fa:75:eb:f2:71:4c:97:38:77:3e:
f1:0d:45:11:1c:57:1c:b8:64:f8:ab:c2:03:3c:af:
4d:4c:f4:f0:56:42:37:1a:08:7b:36:73:64:f4:ee:
ad:21:11:7b:28:77:ea:15:9f:cc:e4:eb:17:88:6f:
fd:c4:40:c4:4e:15:ec:e7:55:d1:22:79:74:61:49:
38:bb:14:00:d9:af:77:6d:02:a6:23:85:3d:04:24:
47:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:42:0A:75:AE:B0:06:D4:AF:24:6D:81:C7:A0:A2:AF:F7:85:09:EF
X509v3 Authority Key Identifier:
keyid:6B:0E:CD:BF:51:36:0C:EC:AE:61:7A:BE:1A:3A:C6:A6:FF:0A:5B:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aw7Nv1E2DOyuYXq-GjrGpv8KW2w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/1acb0c-31a3-4718-993d-11dffe108147/1/aw7Nv1E2DOyuYXq-GjrGpv8KW2w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/1acb0c-31a3-4718-993d-11dffe108147/1/aw7Nv1E2DOyuYXq-GjrGpv8KW2w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:64:89:82:26:9a:3a:72:ea:87:2a:6c:05:97:de:78:8b:0d:
d7:e6:42:01:9e:da:e9:6b:80:f2:4b:a0:12:d3:5b:af:0e:5f:
3d:03:dc:af:e9:76:3e:81:d4:73:c5:95:a7:9c:c3:b0:d1:72:
34:6d:32:b0:80:c4:56:13:90:fc:22:31:84:0c:ac:0e:e1:68:
ee:6c:68:60:1c:aa:19:5e:f0:6a:c1:c1:3b:08:fa:52:59:a6:
8b:10:7c:78:8b:64:db:14:c6:da:1b:18:af:5d:ea:4d:3e:e5:
59:44:66:64:07:d0:c7:13:05:f7:06:bc:e1:0f:c6:97:9b:46:
f5:72:aa:57:80:e5:e1:74:70:c7:b6:ea:6c:0e:36:97:ab:bc:
15:2a:8a:74:17:e1:74:e7:ab:18:d3:29:69:16:69:5d:df:9d:
6f:dc:42:71:e3:e5:27:c5:d2:18:b9:cc:8b:4d:32:55:67:1d:
67:30:c4:44:48:e1:b3:3e:ee:01:c0:db:9b:e5:2a:e4:dd:9a:
e0:b7:4e:1a:a5:7b:cd:56:38:65:ac:6f:91:5b:8d:e7:0d:7d:
d1:05:14:e0:27:df:69:e4:16:c4:a1:bd:9a:27:be:58:cc:90:
58:0c:8b:3e:47:da:fb:d3:53:d2:fb:3e:a6:17:1f:0f:dd:a0:
4e:13:9e:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 21:56:02 2026 by rpki-client