Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/f31982-cd8c-45f6-a302-3d75c4f489e7/1/A-wIrmqTJShb3UpK3pwgfX-hBFk.mft
File: A-wIrmqTJShb3UpK3pwgfX-hBFk.mft (raw, json)
Hash identifier: APravPvZxzBnzXixl1Ry3JSxOmQ2ULN5U5w6UcOaboY=
Subject key identifier: 04:63:0E:35:BB:FF:87:4C:73:FE:AC:52:A5:19:B0:08:FB:26:2B:F8
Authority key identifier: 03:EC:08:AE:6A:93:25:28:5B:DD:4A:4A:DE:9C:20:7D:7F:A1:04:59
Certificate issuer: /CN=03ec08ae6a9325285bdd4a4ade9c207d7fa10459
Certificate serial: 019FAA5066AA32CBEA0D7E6B51FBA83E537F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A-wIrmqTJShb3UpK3pwgfX-hBFk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/f31982-cd8c-45f6-a302-3d75c4f489e7/1/A-wIrmqTJShb3UpK3pwgfX-hBFk.mft
Manifest number: 06BA
Signing time: Tue 28 Jul 2026 20:00:23 +0000
Manifest this update: Tue 28 Jul 2026 20:00:23 +0000
Manifest next update: Wed 29 Jul 2026 20:00:23 +0000
Files and hashes: 1: A-wIrmqTJShb3UpK3pwgfX-hBFk.crl (hash: sb/QNCxIWUbNTF/hdDllXqiEH7CFHLiLh+JYCHfYCtI=)
2: Lo4U5uzIqQymJnHj6wN0AbLyZbM.roa (hash: ycmh+M2BZFC7JlSPZ+8HQ4O+vAT26Z/Ysr616GoAdi4=)
3: qiZqn4t44rqOklzg05vu8ezVPj8.roa (hash: tlCFx29Qdk4Q9WIDOMKfJRel9JippLh4IujxGOwL5Jo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/f31982-cd8c-45f6-a302-3d75c4f489e7/1/A-wIrmqTJShb3UpK3pwgfX-hBFk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/f31982-cd8c-45f6-a302-3d75c4f489e7/1/A-wIrmqTJShb3UpK3pwgfX-hBFk.mft
rsync://rpki.ripe.net/repository/DEFAULT/A-wIrmqTJShb3UpK3pwgfX-hBFk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:50:66:aa:32:cb:ea:0d:7e:6b:51:fb:a8:3e:53:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03ec08ae6a9325285bdd4a4ade9c207d7fa10459
Validity
Not Before: Jul 28 20:00:23 2026 GMT
Not After : Jul 29 20:00:23 2026 GMT
Subject: CN=04630e35bbff874c73feac52a519b008fb262bf8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:1b:68:a4:5e:2e:cf:1f:52:da:73:2e:39:f7:
7d:93:67:e8:bf:a2:6d:1e:52:97:ad:f7:3a:74:e2:
08:ec:1d:55:7c:7e:92:6d:a0:fa:15:dd:ee:f4:7d:
1f:80:10:c5:ac:d3:0a:33:6e:10:7a:1b:fe:d9:04:
a7:d1:14:cb:1a:a5:d4:b7:a9:fd:e9:9a:c9:84:eb:
3d:5a:7d:68:d3:bb:bc:e9:c4:db:84:ff:99:6c:4b:
97:b7:57:c5:9e:81:32:b6:b8:02:c1:3e:62:41:d3:
b8:71:83:7f:74:68:46:bf:c5:2e:42:c3:02:fe:66:
6d:b4:c0:64:9e:dc:27:95:23:65:9e:cc:e8:27:5d:
ac:93:fd:c4:6d:5a:9a:4a:f0:9c:a9:64:d2:ef:3f:
e4:e1:e3:84:4c:ac:06:33:30:49:fa:ec:31:23:d4:
7d:04:ab:98:52:0b:4c:e1:65:70:e9:cc:b3:0e:90:
f7:7e:5f:52:06:ba:1d:b0:a5:42:ad:f3:57:db:54:
5f:ae:68:f4:73:eb:80:7f:9a:cf:00:21:ca:c8:0f:
d9:5e:b4:03:2c:ce:52:fe:26:d8:76:ff:cc:1a:54:
c9:19:38:cc:38:06:ed:3c:ee:ce:2f:c4:42:eb:1a:
f1:6f:76:01:df:86:0d:7c:03:81:6d:2f:2b:5e:1e:
84:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:63:0E:35:BB:FF:87:4C:73:FE:AC:52:A5:19:B0:08:FB:26:2B:F8
X509v3 Authority Key Identifier:
keyid:03:EC:08:AE:6A:93:25:28:5B:DD:4A:4A:DE:9C:20:7D:7F:A1:04:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A-wIrmqTJShb3UpK3pwgfX-hBFk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/f31982-cd8c-45f6-a302-3d75c4f489e7/1/A-wIrmqTJShb3UpK3pwgfX-hBFk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/f31982-cd8c-45f6-a302-3d75c4f489e7/1/A-wIrmqTJShb3UpK3pwgfX-hBFk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:72:d7:9a:0d:5b:a8:6d:ca:c1:21:89:49:3f:76:14:57:43:
1f:dd:42:36:70:13:e8:94:d9:2e:b6:ce:48:1e:39:32:52:aa:
cf:c7:6f:29:0f:98:b4:f6:8a:f7:2b:43:f6:cd:55:00:d0:65:
ba:12:0c:3d:78:a3:ee:a5:00:e1:36:ff:c5:4e:da:3a:c0:fd:
e4:c0:5d:76:a0:67:20:5c:ac:80:f3:d5:26:8d:b3:65:85:c7:
86:11:66:8e:51:75:71:8b:0f:1e:29:5c:d4:c6:4e:47:b4:22:
be:1c:2a:0f:76:ad:33:6e:41:24:23:58:2f:92:d4:82:98:58:
7a:b7:7a:8d:95:7c:58:34:88:0a:7a:02:8f:d8:c3:4f:05:47:
5f:71:d0:9e:af:99:c8:0a:5c:08:7c:f0:26:35:2d:7c:48:e5:
74:c6:c6:c6:bc:67:a4:67:ff:18:93:b1:bf:14:0b:a5:50:17:
fd:61:73:4e:a4:91:f6:7e:87:94:5d:05:4a:69:88:5c:2e:0f:
e5:f7:52:db:ba:7f:f7:27:34:fb:0f:eb:80:12:0a:a3:f3:36:
16:75:84:c3:48:dc:df:c3:5d:96:92:63:43:95:28:a1:cf:14:
42:c9:2b:b4:38:40:7d:5d:c2:58:86:34:fe:74:c9:ea:83:23:
02:61:8f:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:21:13 2026 by rpki-client