Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/25/35b4c5-297b-420c-822a-169e537a890c/1/AwSWBHN8eL0k27Jeszb0pBbmRfY.mft
File: AwSWBHN8eL0k27Jeszb0pBbmRfY.mft (raw, json)
Hash identifier: Ctm92h9TDV75AIlXBcQCECaCZ3RggxWKEI567Vnt4hI=
Subject key identifier: DD:43:3D:D4:F3:0D:26:77:24:D7:6D:14:B2:CE:64:D1:EB:7E:9E:0B
Authority key identifier: 03:04:96:04:73:7C:78:BD:24:DB:B2:5E:B3:36:F4:A4:16:E6:45:F6
Certificate issuer: /CN=03049604737c78bd24dbb25eb336f4a416e645f6
Certificate serial: 01A0D0800C515F9807B6F05D8D7597D468FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AwSWBHN8eL0k27Jeszb0pBbmRfY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/35b4c5-297b-420c-822a-169e537a890c/1/AwSWBHN8eL0k27Jeszb0pBbmRfY.mft
Manifest number: 0824
Signing time: Wed 23 Sep 2026 23:00:47 +0000
Manifest this update: Wed 23 Sep 2026 23:00:47 +0000
Manifest next update: Thu 24 Sep 2026 23:00:47 +0000
Files and hashes: 1: 0N508Xe1lkHiB3GV4gBTEAMYSg0.roa (hash: 9ysDCSkav8KkWk0caqcKxtu4CxhKYt/csAkRzD0sTbY=)
2: AwSWBHN8eL0k27Jeszb0pBbmRfY.crl (hash: oEu8BLUx0wB8qUUGHM/wNo7qBS6AsLjHxVYa22Oop6k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/35b4c5-297b-420c-822a-169e537a890c/1/AwSWBHN8eL0k27Jeszb0pBbmRfY.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/35b4c5-297b-420c-822a-169e537a890c/1/AwSWBHN8eL0k27Jeszb0pBbmRfY.mft
rsync://rpki.ripe.net/repository/DEFAULT/AwSWBHN8eL0k27Jeszb0pBbmRfY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d0:80:0c:51:5f:98:07:b6:f0:5d:8d:75:97:d4:68:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03049604737c78bd24dbb25eb336f4a416e645f6
Validity
Not Before: Sep 23 23:00:47 2026 GMT
Not After : Sep 24 23:00:47 2026 GMT
Subject: CN=dd433dd4f30d267724d76d14b2ce64d1eb7e9e0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:7c:06:cb:60:1c:e5:0a:92:2d:e3:0d:e2:9c:
cc:4f:19:03:18:25:00:c8:f4:ed:f5:e8:c8:8c:42:
19:d8:3c:3e:65:1d:7c:58:a6:a8:13:82:ab:eb:02:
bd:93:37:81:79:10:e7:ac:77:1c:28:84:a6:db:32:
2a:ef:8d:b0:cc:31:be:b7:a4:70:b7:30:36:e5:c8:
45:7d:aa:8f:a5:b6:c2:32:ff:f8:78:f1:38:ca:d4:
f3:19:ca:d4:68:b3:e9:87:5f:46:15:d7:c5:fe:5a:
69:d3:9a:3c:c9:7e:b0:05:4b:35:ad:0b:04:03:a3:
ee:57:88:06:53:5b:1e:4a:0a:bd:97:f0:ff:1f:23:
8a:15:2b:5c:2d:f9:ec:ff:02:d3:88:fb:42:72:7a:
d9:47:45:dc:55:e2:87:bc:4c:c6:40:34:f4:72:f1:
07:60:b6:b4:97:94:8d:c4:87:0d:ff:77:1a:34:dd:
17:e7:b4:3b:37:e4:c5:0e:7f:45:74:c0:97:a9:61:
42:7c:f7:35:b1:8d:7c:f3:cb:f4:b3:cb:b8:72:e7:
38:39:27:69:16:d2:18:50:50:c8:4c:5a:c7:0c:c4:
3f:05:de:3d:1b:0f:c4:e2:a3:54:e2:82:f4:aa:f2:
0e:24:61:0e:72:10:1f:7d:ff:76:dd:32:41:4f:f3:
0e:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:43:3D:D4:F3:0D:26:77:24:D7:6D:14:B2:CE:64:D1:EB:7E:9E:0B
X509v3 Authority Key Identifier:
keyid:03:04:96:04:73:7C:78:BD:24:DB:B2:5E:B3:36:F4:A4:16:E6:45:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AwSWBHN8eL0k27Jeszb0pBbmRfY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/35b4c5-297b-420c-822a-169e537a890c/1/AwSWBHN8eL0k27Jeszb0pBbmRfY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/35b4c5-297b-420c-822a-169e537a890c/1/AwSWBHN8eL0k27Jeszb0pBbmRfY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:3b:5d:62:07:97:0c:11:31:fd:31:98:7e:07:89:5e:96:db:
45:4a:30:19:ca:32:60:46:38:5b:ec:37:86:42:fa:a9:26:ca:
f5:9e:32:15:d3:23:7e:3e:b4:1f:d7:02:ab:a4:e7:d1:3c:ac:
ac:28:69:49:f4:2f:e8:9d:17:62:34:db:b1:bc:9c:62:20:55:
34:6a:a9:2a:25:8a:2a:a2:b1:18:a2:93:03:6a:c5:07:84:c6:
a4:c3:b6:fd:e1:c2:be:9a:59:21:02:c3:5b:26:a0:87:a7:46:
51:dd:72:e6:0c:40:5d:d5:e1:09:8c:5b:9c:3b:4e:b4:b1:88:
6a:72:32:f8:f6:0d:16:58:d2:59:c4:72:42:15:b7:f0:dc:29:
ab:d8:eb:79:45:e4:7e:a5:4c:9f:5d:6e:c3:db:89:86:e8:59:
8d:64:e9:c8:b0:58:bc:fd:c0:ef:07:36:d6:fc:bf:0b:4e:15:
79:7f:4e:1c:10:13:c1:0d:ec:3e:9e:85:42:71:d1:8a:54:97:
83:21:67:ea:2f:c6:81:40:ee:b3:f2:7b:3b:61:f3:7d:86:94:
8a:7d:d3:cb:a5:88:92:f0:4d:a7:92:61:b3:59:bb:0f:5a:64:
a6:79:1b:54:4c:1b:95:19:23:65:e5:a4:cb:3c:fd:d5:c4:de:
7c:fa:fc:95
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDQgAxRX5gHtvBdjXWX1Gj6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAzMDQ5NjA0NzM3Yzc4YmQyNGRiYjI1ZWIzMzZmNGE0MTZl
NjQ1ZjYwHhcNMjYwOTIzMjMwMDQ3WhcNMjYwOTI0MjMwMDQ3WjAzMTEwLwYDVQQD
EyhkZDQzM2RkNGYzMGQyNjc3MjRkNzZkMTRiMmNlNjRkMWViN2U5ZTBiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsnwGy2Ac5QqSLeMN4pzMTxkDGCUA
yPTt9ejIjEIZ2Dw+ZR18WKaoE4Kr6wK9kzeBeRDnrHccKISm2zIq742wzDG+t6Rw
tzA25chFfaqPpbbCMv/4ePE4ytTzGcrUaLPph19GFdfF/lpp05o8yX6wBUs1rQsE
A6PuV4gGU1seSgq9l/D/HyOKFStcLfns/wLTiPtCcnrZR0XcVeKHvEzGQDT0cvEH
YLa0l5SNxIcN/3caNN0X57Q7N+TFDn9FdMCXqWFCfPc1sY1888v0s8u4cuc4OSdp
FtIYUFDITFrHDMQ/Bd49Gw/E4qNU4oL0qvIOJGEOchAfff923TJBT/MOcwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN1DPdTzDSZ3JNdtFLLOZNHrfp4LMB8GA1UdIwQY
MBaAFAMElgRzfHi9JNuyXrM29KQW5kX2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQXdTV0JITjhlTDBrMjdKZXN6YjBwQmJtUmZZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS8zNWI0YzUtMjk3Yi00MjBjLTgyMmEt
MTY5ZTUzN2E4OTBjLzEvQXdTV0JITjhlTDBrMjdKZXN6YjBwQmJtUmZZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNS8zNWI0YzUtMjk3Yi00MjBjLTgyMmEtMTY5ZTUzN2E4OTBj
LzEvQXdTV0JITjhlTDBrMjdKZXN6YjBwQmJtUmZZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHTtdYgeX
DBEx/TGYfgeJXpbbRUowGcoyYEY4W+w3hkL6qSbK9Z4yFdMjfj60H9cCq6Tn0Tys
rChpSfQv6J0XYjTbsbycYiBVNGqpKiWKKqKxGKKTA2rFB4TGpMO2/eHCvppZIQLD
Wyagh6dGUd1y5gxAXdXhCYxbnDtOtLGIanIy+PYNFljSWcRyQhW38Nwpq9jreUXk
fqVMn11uw9uJhuhZjWTpyLBYvP3A7wc21vy/C04VeX9OHBATwQ3sPp6FQnHRilSX
gyFn6i/GgUDus/J7O2HzfYaUin3Ty6WIkvBNp5Jhs1m7D1pkpnkbVEwblRkjZeWk
yzz91cTefPr8lQ==
-----END CERTIFICATE-----
Generated at Thu Sep 24 07:05:46 2026 by rpki-client