Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/bfc6b1-02af-4cb1-a06d-4d493082da1c/1/aweCDo1ADzwl3dC-G0bFTpVZYKE.mft
File: aweCDo1ADzwl3dC-G0bFTpVZYKE.mft (raw, json)
Hash identifier: y5sc2GGa/hpYbbEIFaLX/aXjqcrkJxTD7nQowm+hVMs=
Subject key identifier: F4:53:59:88:F1:24:6C:F8:CD:D5:75:00:55:76:CE:28:50:D5:43:E7
Authority key identifier: 6B:07:82:0E:8D:40:0F:3C:25:DD:D0:BE:1B:46:C5:4E:95:59:60:A1
Certificate issuer: /CN=6b07820e8d400f3c25ddd0be1b46c54e955960a1
Certificate serial: 019D27A874077E00987CBD4E7B85857E673C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aweCDo1ADzwl3dC-G0bFTpVZYKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/bfc6b1-02af-4cb1-a06d-4d493082da1c/1/aweCDo1ADzwl3dC-G0bFTpVZYKE.mft
Manifest number: 0FA0
Signing time: Thu 26 Mar 2026 01:00:44 +0000
Manifest this update: Thu 26 Mar 2026 01:00:44 +0000
Manifest next update: Fri 27 Mar 2026 01:00:44 +0000
Files and hashes: 1: aweCDo1ADzwl3dC-G0bFTpVZYKE.crl (hash: ZUMfCSSs2esgngYpS6YGOFCgp3/awtq1KjFV6/rN0Sg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/bfc6b1-02af-4cb1-a06d-4d493082da1c/1/aweCDo1ADzwl3dC-G0bFTpVZYKE.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/bfc6b1-02af-4cb1-a06d-4d493082da1c/1/aweCDo1ADzwl3dC-G0bFTpVZYKE.mft
rsync://rpki.ripe.net/repository/DEFAULT/aweCDo1ADzwl3dC-G0bFTpVZYKE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a8:74:07:7e:00:98:7c:bd:4e:7b:85:85:7e:67:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b07820e8d400f3c25ddd0be1b46c54e955960a1
Validity
Not Before: Mar 26 01:00:44 2026 GMT
Not After : Mar 27 01:00:44 2026 GMT
Subject: CN=f4535988f1246cf8cdd575005576ce2850d543e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:98:0e:b9:53:0a:59:37:dc:aa:89:cf:59:bc:
a1:56:a2:31:8e:8f:c2:3e:10:34:65:0f:c1:d1:cb:
89:b6:85:92:39:23:ca:dd:59:f4:e2:93:68:a2:f5:
b6:4f:35:e9:a2:44:f8:44:87:8c:f4:2e:cc:cf:78:
08:9d:3c:8d:56:6d:12:d3:d2:31:5f:c0:5b:91:4c:
f8:e4:3c:98:c3:de:f1:77:1f:85:6f:80:cc:05:fc:
d9:1e:2c:d6:05:b7:c8:b9:b7:bf:f6:44:40:b2:11:
e6:01:c3:bd:bc:2f:77:05:9f:7a:9d:84:2d:63:ed:
01:30:92:db:e4:8c:8e:77:48:9d:c9:e0:20:32:b6:
a4:a4:0a:e5:d0:cd:47:2a:b6:f0:30:8c:83:ed:16:
30:ae:b6:f0:57:1d:81:01:f0:7e:41:32:a6:36:c8:
20:b3:94:c9:b2:1a:4b:c7:07:70:80:2a:5c:02:8b:
49:8f:ec:8c:9a:4d:5e:17:e0:87:ea:0e:e7:1b:20:
db:6a:a0:ff:b8:0a:fc:a2:50:54:ad:ac:bd:22:79:
04:9e:77:f1:2c:5f:27:bf:8b:48:4d:cd:a6:c9:71:
4f:32:f8:89:3a:da:e3:77:c0:90:e3:f2:91:7c:e9:
e4:a0:39:a3:aa:9d:47:13:4b:3e:e6:49:64:f2:f9:
88:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:53:59:88:F1:24:6C:F8:CD:D5:75:00:55:76:CE:28:50:D5:43:E7
X509v3 Authority Key Identifier:
keyid:6B:07:82:0E:8D:40:0F:3C:25:DD:D0:BE:1B:46:C5:4E:95:59:60:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aweCDo1ADzwl3dC-G0bFTpVZYKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/bfc6b1-02af-4cb1-a06d-4d493082da1c/1/aweCDo1ADzwl3dC-G0bFTpVZYKE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/bfc6b1-02af-4cb1-a06d-4d493082da1c/1/aweCDo1ADzwl3dC-G0bFTpVZYKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:11:ff:19:22:80:23:b9:98:43:25:4c:87:3d:cb:e7:9d:a9:
fb:87:6c:ba:2d:05:47:7e:e7:44:7c:69:00:fc:ce:a4:75:de:
27:c2:f1:3f:2d:fa:53:af:d9:12:5e:c9:5a:e4:1f:84:9c:b6:
98:44:9f:fe:5b:5a:9d:c4:d1:57:3e:ef:15:5b:10:df:27:3c:
dc:fb:ee:6c:85:24:ef:8c:c4:67:88:a7:ec:36:26:06:b6:46:
a3:2d:6d:c5:01:51:57:59:95:e6:82:60:10:7f:c8:1b:26:50:
a4:ab:03:3c:d5:ca:6d:07:90:74:8d:97:83:24:15:06:8b:69:
00:cf:dd:c7:72:41:40:bc:b0:03:8d:68:72:86:50:f4:40:b6:
83:ec:dc:06:58:80:2a:c2:79:1f:7b:c2:ba:69:75:54:f7:83:
10:f9:31:ed:18:e2:69:6d:ad:7c:0b:0b:a7:71:a3:a8:b5:a6:
bd:e5:b4:37:d0:6d:14:61:c6:e1:23:f8:5c:7b:82:8a:1c:4e:
c9:e0:cd:fc:85:ba:c0:cd:22:e5:e9:97:76:c1:21:dc:5b:e7:
c9:1b:7c:0b:ca:11:22:cd:23:66:4a:ae:27:09:c9:eb:e3:33:
28:42:52:b7:b8:fc:d6:f8:ed:30:a7:ba:f7:9f:4b:55:42:a8:
c0:92:ac:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:59:19 2026 by rpki-client