Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/13df90-71bc-40be-824e-2c40d811fd4e/1/AwvpEyEHRDTJ6CDbZhyRymLMsP0.mft
File: AwvpEyEHRDTJ6CDbZhyRymLMsP0.mft (raw, json)
Hash identifier: y2fGYQp4JEM5JaaslnYOwkxzxJ3V3HIic48RjDxjst0=
Subject key identifier: 81:F9:6E:C4:49:26:C3:E8:0D:C1:21:62:25:7A:76:C8:33:71:AA:8A
Authority key identifier: 03:0B:E9:13:21:07:44:34:C9:E8:20:DB:66:1C:91:CA:62:CC:B0:FD
Certificate issuer: /CN=030be91321074434c9e820db661c91ca62ccb0fd
Certificate serial: 019E1C476055FFF6C2A82E26319D00511899
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AwvpEyEHRDTJ6CDbZhyRymLMsP0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/13df90-71bc-40be-824e-2c40d811fd4e/1/AwvpEyEHRDTJ6CDbZhyRymLMsP0.mft
Manifest number: 12FD
Signing time: Tue 12 May 2026 13:01:40 +0000
Manifest this update: Tue 12 May 2026 13:01:40 +0000
Manifest next update: Wed 13 May 2026 13:01:40 +0000
Files and hashes: 1: AwvpEyEHRDTJ6CDbZhyRymLMsP0.crl (hash: BLeSW1J8RS1WwtonpDhItRzgEgSNfWdsoXp+M8K4V2c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/13df90-71bc-40be-824e-2c40d811fd4e/1/AwvpEyEHRDTJ6CDbZhyRymLMsP0.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/13df90-71bc-40be-824e-2c40d811fd4e/1/AwvpEyEHRDTJ6CDbZhyRymLMsP0.mft
rsync://rpki.ripe.net/repository/DEFAULT/AwvpEyEHRDTJ6CDbZhyRymLMsP0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 13:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:47:60:55:ff:f6:c2:a8:2e:26:31:9d:00:51:18:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=030be91321074434c9e820db661c91ca62ccb0fd
Validity
Not Before: May 12 13:01:40 2026 GMT
Not After : May 13 13:01:40 2026 GMT
Subject: CN=81f96ec44926c3e80dc12162257a76c83371aa8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:ee:73:aa:dc:ec:b7:3a:1d:44:7d:3a:63:df:
8e:a9:17:84:74:ba:7f:cd:1f:51:13:8a:a5:b1:48:
30:b5:51:30:6e:95:aa:ac:af:97:e3:13:66:21:49:
a6:81:0c:3f:2b:8f:9e:70:7f:4a:92:3d:f3:2b:7f:
d0:33:9e:f8:56:2f:08:a7:68:da:6f:0a:e8:af:62:
bf:70:df:1b:b0:e4:ba:82:5c:db:3e:68:a3:b8:ef:
f8:ec:51:71:b4:0d:84:1c:4a:f7:f1:91:cd:25:43:
43:43:a3:5c:34:f0:d1:08:87:74:16:60:8c:67:18:
25:76:85:63:47:73:e5:81:93:c2:7f:19:f1:9e:af:
84:9e:40:e2:ab:b8:3f:ba:ad:46:ff:94:82:06:b9:
81:38:07:9b:01:48:86:f8:95:7c:01:df:03:b7:a9:
61:f7:b1:f5:26:50:2b:ce:37:5e:f2:db:88:e4:41:
dc:1f:fc:d6:bb:09:44:bd:4c:c3:ee:af:b3:6f:cf:
74:b4:b3:5a:78:b8:16:d5:73:cf:67:21:f3:3e:ce:
6a:84:80:92:43:80:92:57:8a:93:95:75:d3:96:7a:
b7:44:6b:69:e7:b7:80:e0:ca:b1:ae:f9:f0:81:d8:
ae:41:6b:d0:de:4a:c6:e1:ff:ed:a9:b2:d2:a1:36:
cf:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:F9:6E:C4:49:26:C3:E8:0D:C1:21:62:25:7A:76:C8:33:71:AA:8A
X509v3 Authority Key Identifier:
keyid:03:0B:E9:13:21:07:44:34:C9:E8:20:DB:66:1C:91:CA:62:CC:B0:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AwvpEyEHRDTJ6CDbZhyRymLMsP0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/13df90-71bc-40be-824e-2c40d811fd4e/1/AwvpEyEHRDTJ6CDbZhyRymLMsP0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/13df90-71bc-40be-824e-2c40d811fd4e/1/AwvpEyEHRDTJ6CDbZhyRymLMsP0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:cb:db:22:af:3b:58:84:13:78:ac:29:8e:f3:18:83:a0:27:
52:e2:f6:5f:ed:40:f0:c1:2a:24:b9:46:26:f3:8d:49:32:38:
64:08:51:e4:2d:6e:c0:ab:79:c9:55:d1:9a:2d:d4:92:e5:d4:
c0:0a:48:bd:c8:19:8b:7b:59:ee:75:66:29:fd:3f:b2:31:d9:
a6:33:ab:87:45:2b:2b:1c:3a:c4:c4:61:1a:cf:d4:fb:86:f8:
64:d6:b9:b5:0a:cd:6d:59:6b:aa:72:f1:9e:99:db:48:9c:96:
65:b4:a9:47:ee:35:bf:0a:45:86:26:6b:14:b8:f2:4f:be:64:
05:20:9b:f1:69:77:4f:0d:55:2f:e8:36:53:81:93:81:dd:dd:
20:76:6a:c0:0c:11:56:31:5c:35:ab:a6:ec:22:a6:c8:da:80:
58:b2:ea:97:03:e7:d3:e9:03:c7:a8:7e:54:72:1c:04:49:fa:
84:38:60:94:84:b3:bb:5f:01:fe:2e:0b:d1:b7:a5:cf:06:f7:
15:4d:06:3b:1a:58:5c:89:81:8c:47:4a:76:30:df:4a:8f:37:
12:c9:02:5c:33:91:72:3e:ff:7d:18:6b:5d:90:25:9f:f8:02:
02:9f:41:79:32:c3:74:85:57:97:e7:e0:c8:f4:36:e7:c5:14:
f3:55:a2:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:17:14 2026 by rpki-client