Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/c26458-fda8-4f0a-957a-7756438544ca/1/AwsA5gdFAuZTg5H-qxg1goGjJ5s.mft
File: AwsA5gdFAuZTg5H-qxg1goGjJ5s.mft (raw, json)
Hash identifier: dQ0uTfybiYp242PN0oAJwoO/6rnebVUDrWjIVr2cU24=
Subject key identifier: 6B:49:3A:2F:06:A9:00:9B:E9:58:E9:91:DE:4C:E5:74:09:EE:19:01
Authority key identifier: 03:0B:00:E6:07:45:02:E6:53:83:91:FE:AB:18:35:82:81:A3:27:9B
Certificate issuer: /CN=030b00e6074502e6538391feab18358281a3279b
Certificate serial: 019D29CECB8476589194F22588D696639FE1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AwsA5gdFAuZTg5H-qxg1goGjJ5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/c26458-fda8-4f0a-957a-7756438544ca/1/AwsA5gdFAuZTg5H-qxg1goGjJ5s.mft
Manifest number: 0460
Signing time: Thu 26 Mar 2026 11:01:51 +0000
Manifest this update: Thu 26 Mar 2026 11:01:51 +0000
Manifest next update: Fri 27 Mar 2026 11:01:51 +0000
Files and hashes: 1: AwsA5gdFAuZTg5H-qxg1goGjJ5s.crl (hash: 36kYhuhEW/kgiOVMbXYOMMSw+SOzTGBTrAPgGIAJEGs=)
2: CmiC5mJyQYGGKAJggm-od_rF7aY.roa (hash: VDuSSA+oUsQz/2iqadrnhGgyrgM5bD5FatxlCOVAvTw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/c26458-fda8-4f0a-957a-7756438544ca/1/AwsA5gdFAuZTg5H-qxg1goGjJ5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/c26458-fda8-4f0a-957a-7756438544ca/1/AwsA5gdFAuZTg5H-qxg1goGjJ5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/AwsA5gdFAuZTg5H-qxg1goGjJ5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:ce:cb:84:76:58:91:94:f2:25:88:d6:96:63:9f:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=030b00e6074502e6538391feab18358281a3279b
Validity
Not Before: Mar 26 11:01:51 2026 GMT
Not After : Mar 27 11:01:51 2026 GMT
Subject: CN=6b493a2f06a9009be958e991de4ce57409ee1901
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:bc:38:76:30:a4:71:c2:46:5f:53:d6:f4:df:
8a:9a:3e:bb:c7:82:93:41:5e:4e:b9:15:4e:57:ad:
44:60:a7:6f:d2:68:d1:8e:73:1d:29:37:43:de:2f:
09:56:27:e0:57:18:f4:39:0a:26:91:b4:4f:1d:ca:
36:fc:44:b7:93:05:fe:1c:29:57:d0:70:99:7d:89:
d2:5b:37:a6:7c:ae:15:bd:d9:a3:e1:20:b2:45:55:
54:54:2a:10:73:a0:1c:5e:4f:77:1e:eb:44:49:23:
da:15:ab:7b:26:d7:59:f3:c6:4c:dd:b8:f4:c3:37:
ce:0d:ec:8f:ce:58:b0:e8:68:86:da:93:2b:1e:b1:
2d:ac:13:56:86:16:80:0d:03:e8:66:90:47:02:16:
74:3e:df:b5:42:91:76:2d:f6:83:6c:01:6e:40:6b:
0c:a1:23:30:7c:1a:89:3b:c3:45:98:d7:44:72:13:
45:48:9d:fd:03:3b:c7:ef:03:5e:de:8c:5e:94:e1:
ed:e1:de:76:f0:17:4f:3b:96:58:4a:57:19:d8:6f:
8a:8a:e0:55:3a:6a:af:91:dc:17:38:ec:74:44:4c:
b2:17:01:32:48:b9:be:f6:10:10:f2:d5:5a:d8:7e:
d0:4b:77:9c:40:b4:99:e4:31:80:6c:3d:ce:d4:cf:
6b:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:49:3A:2F:06:A9:00:9B:E9:58:E9:91:DE:4C:E5:74:09:EE:19:01
X509v3 Authority Key Identifier:
keyid:03:0B:00:E6:07:45:02:E6:53:83:91:FE:AB:18:35:82:81:A3:27:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AwsA5gdFAuZTg5H-qxg1goGjJ5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/c26458-fda8-4f0a-957a-7756438544ca/1/AwsA5gdFAuZTg5H-qxg1goGjJ5s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/c26458-fda8-4f0a-957a-7756438544ca/1/AwsA5gdFAuZTg5H-qxg1goGjJ5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:3b:34:93:f9:17:cf:5b:07:f7:53:57:2a:1d:72:96:43:99:
57:6d:42:63:e1:e4:59:e8:14:e5:71:18:21:2d:3a:1f:76:34:
b4:21:6f:e8:c9:d2:b2:26:a2:0f:7b:bc:83:ce:54:aa:ae:69:
d6:bb:9d:b8:47:3e:41:b9:fc:4c:c4:3c:1b:49:2b:4c:1b:4c:
e7:8e:41:a3:11:2a:aa:85:81:91:5e:66:b3:80:95:0a:01:7a:
8e:d5:ae:a2:ae:be:94:8f:e4:e2:b3:29:e8:49:17:be:9e:1f:
64:55:f2:ee:23:a5:e1:77:0d:77:20:e2:1e:1d:45:7b:f2:22:
f9:bb:db:85:d9:05:c8:81:63:c3:b5:b7:37:b0:9f:5c:c2:af:
77:67:32:64:ce:2c:2e:c5:ec:b2:55:06:17:f6:bf:75:69:53:
61:bf:cb:4c:44:d0:b1:d3:05:fe:59:e8:79:2d:1f:c3:7e:3b:
17:1f:1b:3d:da:93:cf:2b:cc:01:4e:e3:ce:b9:48:22:7e:62:
21:7f:55:a4:39:0f:46:23:bf:4f:95:1f:70:d8:7e:c7:a9:dd:
08:21:0d:4d:93:3c:03:26:e6:90:1b:81:83:4e:6f:f8:e5:f8:
11:72:c4:b0:f9:8c:87:84:be:61:88:5a:b3:3a:57:c3:51:47:
84:dd:9f:fd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0pzsuEdliRlPIliNaWY5/hMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAzMGIwMGU2MDc0NTAyZTY1MzgzOTFmZWFiMTgzNTgyODFh
MzI3OWIwHhcNMjYwMzI2MTEwMTUxWhcNMjYwMzI3MTEwMTUxWjAzMTEwLwYDVQQD
Eyg2YjQ5M2EyZjA2YTkwMDliZTk1OGU5OTFkZTRjZTU3NDA5ZWUxOTAxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz7w4djCkccJGX1PW9N+Kmj67x4KT
QV5OuRVOV61EYKdv0mjRjnMdKTdD3i8JVifgVxj0OQomkbRPHco2/ES3kwX+HClX
0HCZfYnSWzemfK4Vvdmj4SCyRVVUVCoQc6AcXk93HutESSPaFat7JtdZ88ZM3bj0
wzfODeyPzliw6GiG2pMrHrEtrBNWhhaADQPoZpBHAhZ0Pt+1QpF2LfaDbAFuQGsM
oSMwfBqJO8NFmNdEchNFSJ39AzvH7wNe3oxelOHt4d528BdPO5ZYSlcZ2G+KiuBV
OmqvkdwXOOx0REyyFwEySLm+9hAQ8tVa2H7QS3ecQLSZ5DGAbD3O1M9ruQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGtJOi8GqQCb6Vjpkd5M5XQJ7hkBMB8GA1UdIwQY
MBaAFAMLAOYHRQLmU4OR/qsYNYKBoyebMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQXdzQTVnZEZBdVpUZzVILXF4ZzFnb0dqSjVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC9jMjY0NTgtZmRhOC00ZjBhLTk1N2Et
Nzc1NjQzODU0NGNhLzEvQXdzQTVnZEZBdVpUZzVILXF4ZzFnb0dqSjVzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OC9jMjY0NTgtZmRhOC00ZjBhLTk1N2EtNzc1NjQzODU0NGNh
LzEvQXdzQTVnZEZBdVpUZzVILXF4ZzFnb0dqSjVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgjs0k/kX
z1sH91NXKh1ylkOZV21CY+HkWegU5XEYIS06H3Y0tCFv6MnSsiaiD3u8g85Uqq5p
1ruduEc+Qbn8TMQ8G0krTBtM545BoxEqqoWBkV5ms4CVCgF6jtWuoq6+lI/k4rMp
6EkXvp4fZFXy7iOl4XcNdyDiHh1Fe/Ii+bvbhdkFyIFjw7W3N7CfXMKvd2cyZM4s
LsXsslUGF/a/dWlTYb/LTETQsdMF/lnoeS0fw347Fx8bPdqTzyvMAU7jzrlIIn5i
IX9VpDkPRiO/T5UfcNh+x6ndCCENTZM8AybmkBuBg05v+OX4EXLEsPmMh4S+YYha
szpXw1FHhN2f/Q==
-----END CERTIFICATE-----
Generated at Thu Mar 26 19:56:36 2026 by rpki-client