Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/13df90-71bc-40be-824e-2c40d811fd4e/1/AwvpEyEHRDTJ6CDbZhyRymLMsP0.mft
File: AwvpEyEHRDTJ6CDbZhyRymLMsP0.mft (raw, json)
Hash identifier: auxlthNMA0r1C2QmnIqPIxSQRYHDgunOOpUljVdQuTo=
Subject key identifier: 84:EF:00:FA:F9:88:2F:FD:3A:C2:8E:9B:B4:20:B6:C1:D3:21:28:39
Authority key identifier: 03:0B:E9:13:21:07:44:34:C9:E8:20:DB:66:1C:91:CA:62:CC:B0:FD
Certificate issuer: /CN=030be91321074434c9e820db661c91ca62ccb0fd
Certificate serial: 019D28F263DEFF8C4DC0C261C07BCF5D6ABA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AwvpEyEHRDTJ6CDbZhyRymLMsP0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/13df90-71bc-40be-824e-2c40d811fd4e/1/AwvpEyEHRDTJ6CDbZhyRymLMsP0.mft
Manifest number: 127F
Signing time: Thu 26 Mar 2026 07:01:06 +0000
Manifest this update: Thu 26 Mar 2026 07:01:06 +0000
Manifest next update: Fri 27 Mar 2026 07:01:06 +0000
Files and hashes: 1: AwvpEyEHRDTJ6CDbZhyRymLMsP0.crl (hash: NNCN0mNqklq7Qpm+VO7pc1OFU5ikv+XdHH4bKcCFnT0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/13df90-71bc-40be-824e-2c40d811fd4e/1/AwvpEyEHRDTJ6CDbZhyRymLMsP0.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/13df90-71bc-40be-824e-2c40d811fd4e/1/AwvpEyEHRDTJ6CDbZhyRymLMsP0.mft
rsync://rpki.ripe.net/repository/DEFAULT/AwvpEyEHRDTJ6CDbZhyRymLMsP0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f2:63:de:ff:8c:4d:c0:c2:61:c0:7b:cf:5d:6a:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=030be91321074434c9e820db661c91ca62ccb0fd
Validity
Not Before: Mar 26 07:01:06 2026 GMT
Not After : Mar 27 07:01:06 2026 GMT
Subject: CN=84ef00faf9882ffd3ac28e9bb420b6c1d3212839
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:91:2e:e1:c8:24:27:27:c7:bb:da:38:de:71:
e4:7d:8d:e0:20:f9:28:69:c5:22:e8:38:dc:03:3b:
85:8e:10:92:da:e0:d1:59:da:7f:a2:b2:ac:bc:ce:
97:6a:50:e8:60:db:a9:d4:a4:04:54:5f:76:6a:2d:
88:59:cb:f8:b0:1f:bb:9a:3e:33:e4:5d:e0:5f:ed:
ac:5c:aa:85:0c:e9:7f:2b:54:f0:e5:62:b2:86:af:
12:a7:72:8b:cb:ee:88:24:9b:3b:2a:3c:ad:7b:76:
52:83:c9:f9:3f:82:d2:07:bf:d1:2e:07:ab:06:52:
89:5b:10:fb:18:b1:40:d0:1c:ed:0e:db:4c:13:5a:
76:25:1a:3a:db:3b:c6:f4:6c:1d:18:7c:df:f8:c3:
6e:3b:70:de:1d:3f:8f:e1:d5:68:10:33:3c:6b:98:
4b:e1:86:01:c5:e0:ba:ea:68:da:8c:32:68:42:72:
2a:9c:1e:84:38:56:a2:71:6b:19:bb:45:15:27:80:
0e:97:09:71:55:16:0f:f3:f8:cc:21:67:58:dc:14:
c5:15:5b:9f:83:b3:59:08:09:a1:10:d8:cf:c1:81:
b0:b4:1b:6c:be:c0:ee:c6:57:5b:8d:71:53:38:4f:
30:a9:e2:86:8f:42:36:8d:77:84:e4:28:61:96:6d:
be:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:EF:00:FA:F9:88:2F:FD:3A:C2:8E:9B:B4:20:B6:C1:D3:21:28:39
X509v3 Authority Key Identifier:
keyid:03:0B:E9:13:21:07:44:34:C9:E8:20:DB:66:1C:91:CA:62:CC:B0:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AwvpEyEHRDTJ6CDbZhyRymLMsP0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/13df90-71bc-40be-824e-2c40d811fd4e/1/AwvpEyEHRDTJ6CDbZhyRymLMsP0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/13df90-71bc-40be-824e-2c40d811fd4e/1/AwvpEyEHRDTJ6CDbZhyRymLMsP0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:df:a1:52:81:52:d0:ce:9d:a2:e2:8d:6b:4a:22:3f:6d:de:
4a:0d:e0:5e:60:28:b8:7c:dc:60:76:f8:d7:ec:24:6d:27:3b:
e2:12:84:35:02:65:62:07:f0:db:0a:ed:10:5d:86:07:e5:da:
5f:9a:84:d9:b6:ec:8e:59:7d:4d:d9:35:fb:10:9f:68:72:1d:
3c:24:1a:51:9e:e6:4b:a2:b0:ec:90:00:15:97:35:97:53:57:
82:58:98:5e:14:e9:5d:68:50:d5:e5:53:68:63:fe:ec:55:44:
77:5b:5b:ff:77:3e:51:8d:dd:9e:61:2a:da:fb:18:f6:0f:69:
b2:c9:43:09:4a:b1:c4:bc:83:a9:c0:aa:dc:99:42:81:a2:24:
93:1a:cd:77:12:72:4a:4d:44:ed:09:42:b6:b8:5d:b8:b8:8c:
83:62:62:cb:a1:ac:78:7f:9a:55:b5:1c:e5:aa:05:0a:a8:42:
0a:13:57:b5:57:95:01:77:16:7c:01:7b:50:da:6c:e9:34:5c:
85:bd:42:f9:73:34:e7:85:a3:40:e7:37:de:67:3b:8d:af:db:
07:b7:fd:bc:63:2e:06:15:d1:dd:b3:48:e2:60:b3:7f:31:f4:
09:c1:db:cc:e0:7b:57:bd:95:2b:ad:7c:6f:2f:1b:a4:f0:72:
4a:92:62:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:13:09 2026 by rpki-client