Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/2e5c22-3036-4d75-b4b5-854695db9289/1/AWtxVR3aNr6-50NSGHGZW0qwgr0.mft
File: AWtxVR3aNr6-50NSGHGZW0qwgr0.mft (raw, json)
Hash identifier: ZSG/euvwLfCIKDIxpXVNnGcJ8+AdeR7E8R/w6OkFy+4=
Subject key identifier: EF:67:65:40:6B:9F:FC:9E:6E:83:92:4F:AC:4F:00:56:9E:84:60:60
Authority key identifier: 01:6B:71:55:1D:DA:36:BE:BE:E7:43:52:18:71:99:5B:4A:B0:82:BD
Certificate issuer: /CN=016b71551dda36bebee743521871995b4ab082bd
Certificate serial: 019E1DC765F47C6EC45C09668EC70F166455
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AWtxVR3aNr6-50NSGHGZW0qwgr0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/2e5c22-3036-4d75-b4b5-854695db9289/1/AWtxVR3aNr6-50NSGHGZW0qwgr0.mft
Manifest number: 46
Signing time: Tue 12 May 2026 20:01:07 +0000
Manifest this update: Tue 12 May 2026 20:01:07 +0000
Manifest next update: Wed 13 May 2026 20:01:07 +0000
Files and hashes: 1: AWtxVR3aNr6-50NSGHGZW0qwgr0.crl (hash: 1qGkEkHPYJiVe6wo2mQcJEZpuNPCQfJ/d2CI0wMBLmk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/2e5c22-3036-4d75-b4b5-854695db9289/1/AWtxVR3aNr6-50NSGHGZW0qwgr0.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/2e5c22-3036-4d75-b4b5-854695db9289/1/AWtxVR3aNr6-50NSGHGZW0qwgr0.mft
rsync://rpki.ripe.net/repository/DEFAULT/AWtxVR3aNr6-50NSGHGZW0qwgr0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:c7:65:f4:7c:6e:c4:5c:09:66:8e:c7:0f:16:64:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=016b71551dda36bebee743521871995b4ab082bd
Validity
Not Before: May 12 20:01:07 2026 GMT
Not After : May 13 20:01:07 2026 GMT
Subject: CN=ef6765406b9ffc9e6e83924fac4f00569e846060
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:4d:c6:cc:ad:34:ab:1e:45:d3:1f:00:bc:b8:
7c:ca:23:81:1e:eb:9a:58:2e:f6:d1:e4:5b:3c:23:
5f:63:80:ab:8b:c7:c5:c8:99:62:c0:d5:11:f0:6a:
9c:75:41:e5:4b:28:37:17:15:23:11:c7:d1:a6:9c:
11:8c:e7:bf:8a:d6:9e:ed:3f:4b:1c:e8:8f:5c:ce:
c3:e7:54:24:e1:6b:49:43:5b:f9:95:7b:2c:0b:c6:
11:66:b9:e6:87:e8:b3:aa:b0:61:86:79:33:8f:2f:
bd:12:b8:d2:71:2f:e2:6b:45:45:1b:64:95:29:82:
d2:76:4b:97:00:37:d4:5a:cf:99:d2:0d:a5:8e:52:
2c:0c:43:f0:32:95:b6:d5:72:9e:d4:50:96:98:60:
6b:26:b6:3a:5d:9a:5e:ae:2e:1d:99:05:9d:85:f7:
63:bd:5a:1d:58:c1:eb:d5:b5:ef:a8:88:09:d3:86:
74:db:8a:2b:cf:84:19:4f:78:25:13:cc:fa:fc:ad:
58:df:e8:ab:88:ad:51:9c:ef:86:47:a2:9b:4c:33:
b5:9f:27:06:c8:b1:bb:10:a6:d7:b7:e3:63:54:2a:
08:0f:62:01:a9:44:e1:73:08:ce:fc:b8:50:f3:16:
ed:eb:c8:c4:a2:bf:25:6d:aa:ec:e8:8b:6e:87:79:
b3:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:67:65:40:6B:9F:FC:9E:6E:83:92:4F:AC:4F:00:56:9E:84:60:60
X509v3 Authority Key Identifier:
keyid:01:6B:71:55:1D:DA:36:BE:BE:E7:43:52:18:71:99:5B:4A:B0:82:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AWtxVR3aNr6-50NSGHGZW0qwgr0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/2e5c22-3036-4d75-b4b5-854695db9289/1/AWtxVR3aNr6-50NSGHGZW0qwgr0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/2e5c22-3036-4d75-b4b5-854695db9289/1/AWtxVR3aNr6-50NSGHGZW0qwgr0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:97:9f:8d:e2:b1:24:9f:42:cc:62:2d:62:0f:04:77:ac:73:
0b:9a:29:a9:87:24:8c:94:c7:b2:a4:60:24:ec:33:39:84:04:
95:7b:e6:a0:27:c5:5a:5d:9d:c6:bc:76:f2:cb:a9:55:77:92:
19:99:8e:8d:d1:46:b7:3a:1a:0e:c1:de:45:6c:81:af:d1:7b:
da:6d:9b:ee:f7:42:0d:ff:49:8b:5b:ce:9a:4e:bc:84:ef:20:
15:83:92:4c:94:27:ab:2f:9d:3b:c8:d7:86:b4:c6:f2:1c:38:
44:cc:f4:7d:33:1f:2a:4c:5b:40:12:0e:d9:cc:98:03:29:9d:
20:70:81:3b:29:08:da:0b:d5:ec:54:57:d5:80:53:0f:c7:8e:
42:55:f0:24:c2:12:66:72:4b:0e:c9:ae:d2:37:c4:2e:4e:e8:
9f:c5:eb:3c:91:09:c6:21:85:62:54:35:4a:7d:85:59:da:63:
dd:67:f1:5d:5b:ec:d4:76:9c:41:d2:be:b3:d6:0a:11:f9:53:
79:c4:fa:e4:15:03:d0:ec:39:da:fb:58:93:8d:8f:0d:35:a9:
d4:d7:81:61:31:8a:03:52:cb:91:c9:6d:57:a8:70:02:9e:8e:
bd:ce:05:f0:bb:20:89:30:8a:0f:4a:b8:1f:af:72:24:b8:77:
b9:0a:06:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:17:13 2026 by rpki-client