Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/5c2868-3a27-4df4-8f00-fdd23b43c52e/1/AwkPrDzELxmXRVoS5kMGRjfGncM.mft
File: AwkPrDzELxmXRVoS5kMGRjfGncM.mft (raw, json)
Hash identifier: cx9pE6DczOqf3xsP8Zs9HsQe3eyU66+KHotcOntGh0s=
Subject key identifier: C1:59:57:C0:8F:82:80:86:4A:47:23:5E:0B:01:EA:FF:C2:41:C5:52
Authority key identifier: 03:09:0F:AC:3C:C4:2F:19:97:45:5A:12:E6:43:06:46:37:C6:9D:C3
Certificate issuer: /CN=03090fac3cc42f1997455a12e643064637c69dc3
Certificate serial: 019D284D943E5DA245AE777CDDF1F4FC30D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AwkPrDzELxmXRVoS5kMGRjfGncM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/5c2868-3a27-4df4-8f00-fdd23b43c52e/1/AwkPrDzELxmXRVoS5kMGRjfGncM.mft
Manifest number: 0DC3
Signing time: Thu 26 Mar 2026 04:01:06 +0000
Manifest this update: Thu 26 Mar 2026 04:01:06 +0000
Manifest next update: Fri 27 Mar 2026 04:01:06 +0000
Files and hashes: 1: AwkPrDzELxmXRVoS5kMGRjfGncM.crl (hash: gLzrdI2dkMPbECPhYuJGEdoiL8O5noSJ4lYaroeMkWo=)
2: OoyL6bjrpv7zlvqenv5ZgNB0gGE.roa (hash: Tm9hWa2oiDIAZqLLnYyHl8n9xWir4VblcdnhJ8WlcHo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/5c2868-3a27-4df4-8f00-fdd23b43c52e/1/AwkPrDzELxmXRVoS5kMGRjfGncM.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/5c2868-3a27-4df4-8f00-fdd23b43c52e/1/AwkPrDzELxmXRVoS5kMGRjfGncM.mft
rsync://rpki.ripe.net/repository/DEFAULT/AwkPrDzELxmXRVoS5kMGRjfGncM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4d:94:3e:5d:a2:45:ae:77:7c:dd:f1:f4:fc:30:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03090fac3cc42f1997455a12e643064637c69dc3
Validity
Not Before: Mar 26 04:01:06 2026 GMT
Not After : Mar 27 04:01:06 2026 GMT
Subject: CN=c15957c08f8280864a47235e0b01eaffc241c552
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:03:e6:c3:f2:5b:af:ff:4e:ad:75:6e:52:89:
93:f0:07:cf:a3:0e:4c:71:77:e9:69:75:20:a9:53:
61:9d:ce:1f:b5:cc:0b:ec:1e:f8:db:a0:fe:db:b1:
ce:9c:b9:ef:e2:1a:c7:cb:78:57:ab:24:13:18:cb:
44:b3:67:71:57:ea:72:80:57:85:a8:df:2e:4d:d2:
30:32:13:1c:fe:e6:56:02:2a:cf:8d:92:9c:4b:2a:
7e:0b:35:f3:3d:2f:9e:70:b9:f7:ff:74:87:0b:e9:
fd:e2:44:39:11:f2:15:13:be:eb:cc:69:8f:5a:92:
b2:b3:bd:fd:53:ea:ac:63:1f:11:f2:2e:60:9b:e8:
ca:1c:43:13:9d:92:5b:b7:94:08:3d:4f:24:a8:70:
c5:67:f4:ff:6f:5f:ab:03:1f:c2:2a:fb:3b:48:a0:
f1:7d:e4:66:05:51:7e:82:41:aa:a6:a5:03:13:22:
55:ca:b7:71:e5:7e:a9:c8:17:c1:de:52:b8:a1:eb:
cc:0e:ad:97:6f:9c:3a:f7:0b:37:08:70:26:dd:fd:
80:aa:96:2d:fd:b5:6c:8e:9c:6c:c1:79:ee:77:2a:
68:db:42:89:86:95:5b:1f:17:5a:92:86:00:d8:53:
f7:9c:c7:12:46:a7:2c:37:34:9d:27:2e:59:5e:e7:
b4:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:59:57:C0:8F:82:80:86:4A:47:23:5E:0B:01:EA:FF:C2:41:C5:52
X509v3 Authority Key Identifier:
keyid:03:09:0F:AC:3C:C4:2F:19:97:45:5A:12:E6:43:06:46:37:C6:9D:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AwkPrDzELxmXRVoS5kMGRjfGncM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/5c2868-3a27-4df4-8f00-fdd23b43c52e/1/AwkPrDzELxmXRVoS5kMGRjfGncM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/5c2868-3a27-4df4-8f00-fdd23b43c52e/1/AwkPrDzELxmXRVoS5kMGRjfGncM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:fc:a8:fc:83:59:97:ac:e4:bc:77:eb:37:76:76:68:fc:3e:
3d:b1:8d:8a:01:ba:1e:03:14:7f:7e:76:13:7e:1c:9d:89:22:
2c:18:e8:6a:da:68:0c:8b:7c:b5:f2:d5:4f:1e:ee:ec:81:8d:
8b:c9:2e:40:82:41:e7:54:81:10:d8:b0:07:5f:f2:fa:80:54:
3a:8e:b4:57:e3:c2:b0:3a:d7:78:ef:98:e8:b2:71:9a:fd:c2:
99:c9:1e:df:92:a1:0e:8a:65:80:7f:15:f7:35:7a:e9:d5:72:
e7:f0:ae:6e:84:04:13:e3:ce:89:56:6f:49:c0:20:3a:52:89:
20:23:90:aa:16:4d:d0:d6:ef:64:3e:59:fa:ac:c1:f3:c4:2c:
e0:78:10:e4:18:68:51:5d:6a:89:4c:4a:aa:83:ac:39:7d:f9:
f6:a5:b1:ff:23:15:45:1f:0c:69:9a:15:62:a6:b1:db:24:df:
17:b6:5d:ab:33:94:9c:7f:69:e5:eb:f7:30:0d:d2:06:08:f6:
57:56:e2:70:37:d9:97:fa:60:56:f4:8a:99:e6:38:70:55:ab:
c8:9c:f7:59:b8:f5:13:2a:2f:ca:8c:85:70:bc:b9:9d:4e:16:
59:d2:16:65:e2:d6:98:3e:6c:15:8a:34:e0:26:ad:e5:12:c0:
00:f9:99:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:26:14 2026 by rpki-client