Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/25/35b4c5-297b-420c-822a-169e537a890c/1/AwSWBHN8eL0k27Jeszb0pBbmRfY.mft
File: AwSWBHN8eL0k27Jeszb0pBbmRfY.mft (raw, json)
Hash identifier: GLYLOjDShk1C3Htr5kDxPm0gDvcAoSyPtO8uEGSDNhA=
Subject key identifier: F1:2D:9E:AC:30:96:10:FC:68:A6:C8:BD:59:80:2E:B3:0B:59:A5:01
Authority key identifier: 03:04:96:04:73:7C:78:BD:24:DB:B2:5E:B3:36:F4:A4:16:E6:45:F6
Certificate issuer: /CN=03049604737c78bd24dbb25eb336f4a416e645f6
Certificate serial: 01A1DCF0750B277EE6C495AFCF2D614BCBE5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AwSWBHN8eL0k27Jeszb0pBbmRfY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/35b4c5-297b-420c-822a-169e537a890c/1/AwSWBHN8eL0k27Jeszb0pBbmRfY.mft
Manifest number: 08AF
Signing time: Sun 15 Nov 2026 02:01:48 +0000
Manifest this update: Sun 15 Nov 2026 02:01:48 +0000
Manifest next update: Mon 16 Nov 2026 02:01:48 +0000
Files and hashes: 1: 0N508Xe1lkHiB3GV4gBTEAMYSg0.roa (hash: 9ysDCSkav8KkWk0caqcKxtu4CxhKYt/csAkRzD0sTbY=)
2: AwSWBHN8eL0k27Jeszb0pBbmRfY.crl (hash: NhnSYmo0PxOWG+YPmhlIhXScyDcT8bG7QhsMx0W5RZg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/35b4c5-297b-420c-822a-169e537a890c/1/AwSWBHN8eL0k27Jeszb0pBbmRfY.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/35b4c5-297b-420c-822a-169e537a890c/1/AwSWBHN8eL0k27Jeszb0pBbmRfY.mft
rsync://rpki.ripe.net/repository/DEFAULT/AwSWBHN8eL0k27Jeszb0pBbmRfY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 02:01:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:dc:f0:75:0b:27:7e:e6:c4:95:af:cf:2d:61:4b:cb:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03049604737c78bd24dbb25eb336f4a416e645f6
Validity
Not Before: Nov 15 02:01:48 2026 GMT
Not After : Nov 16 02:01:48 2026 GMT
Subject: CN=f12d9eac309610fc68a6c8bd59802eb30b59a501
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:08:fa:1e:09:80:02:e7:b1:b2:fb:1d:64:f7:
ea:7f:d2:af:b7:6c:03:a4:00:10:27:e0:4b:c8:56:
6f:0f:51:9d:ed:de:98:21:2a:34:da:04:9d:5b:30:
69:05:00:d2:39:d9:8c:1c:3a:39:e0:f4:07:7e:12:
9a:e7:b3:32:3e:9d:e8:8b:fd:10:ea:96:c8:51:49:
9b:9a:50:ab:8b:54:9b:7c:84:6c:d7:3f:25:62:b8:
00:46:28:e6:d6:13:d2:b2:9c:40:e3:8f:ef:b2:d5:
dc:2f:21:36:fd:49:da:b6:f7:b4:b2:77:5f:a5:4a:
b5:a0:04:0b:d5:e2:26:f9:5a:01:dd:e5:94:2b:22:
15:ef:85:38:1f:fe:6a:e4:64:68:2d:10:1e:d2:3f:
33:37:c3:1a:c1:14:24:fb:6c:71:c5:34:4f:20:fa:
50:5a:75:68:71:45:4d:d9:d1:c2:18:59:88:07:14:
74:6a:8a:71:17:de:02:60:bf:5a:53:8d:a4:5b:cc:
3d:94:6e:b9:42:27:7a:13:e3:bb:f8:ca:a9:0e:c0:
ec:71:70:af:67:c0:0b:04:b5:ce:5e:2a:52:25:5d:
cf:5f:cd:a8:5c:54:40:a0:4e:2b:97:a7:a4:43:f0:
f4:47:96:00:cc:52:cc:ef:19:3a:02:b9:a8:34:73:
df:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:2D:9E:AC:30:96:10:FC:68:A6:C8:BD:59:80:2E:B3:0B:59:A5:01
X509v3 Authority Key Identifier:
keyid:03:04:96:04:73:7C:78:BD:24:DB:B2:5E:B3:36:F4:A4:16:E6:45:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AwSWBHN8eL0k27Jeszb0pBbmRfY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/35b4c5-297b-420c-822a-169e537a890c/1/AwSWBHN8eL0k27Jeszb0pBbmRfY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/35b4c5-297b-420c-822a-169e537a890c/1/AwSWBHN8eL0k27Jeszb0pBbmRfY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:0b:cf:88:ad:09:43:1c:dd:05:70:70:e0:d7:7c:51:65:5b:
23:2b:d2:8d:45:99:8e:c9:2f:f7:d7:1a:c8:1c:2f:a8:da:a9:
ad:c1:64:19:fd:3e:ba:e8:7b:7c:68:e7:3a:69:7c:7c:f5:08:
6d:7a:4f:fa:da:f5:f5:69:24:f8:b2:b5:13:f1:c2:ae:a0:0a:
23:d8:d4:ca:40:27:ec:0a:41:9f:b5:03:aa:fd:ab:f1:e1:90:
f1:f0:68:8e:98:b2:6f:6d:8c:22:d6:b1:d6:1c:58:cb:be:be:
8e:28:8e:d2:4a:95:78:a3:11:4c:be:3f:f4:9c:22:a8:09:64:
6a:07:5b:79:d2:58:a6:f7:d9:02:63:50:31:1a:5d:42:c4:00:
3d:0f:e1:8b:30:5e:7e:03:8d:d6:2d:e3:05:82:e0:1e:ce:12:
73:42:f3:2c:ae:d4:6f:8a:4a:e7:ba:7b:0b:94:20:44:67:97:
ff:02:25:fa:4c:85:3f:db:e7:2e:8c:fb:d5:00:f0:bd:01:e7:
ae:26:53:c7:2f:a9:a9:ff:06:4c:cc:4f:fd:2b:57:f8:0b:2a:
43:19:5f:64:2b:af:2f:93:fc:10:8b:48:15:1c:0c:97:46:7c:
f5:e7:fd:c6:8e:91:f7:82:17:a7:0a:c9:d7:3e:b1:ba:a1:da:
47:93:80:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 13:19:17 2026 by rpki-client