Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/af/2e5c22-3036-4d75-b4b5-854695db9289/1/AWtxVR3aNr6-50NSGHGZW0qwgr0.mft
File: AWtxVR3aNr6-50NSGHGZW0qwgr0.mft (raw, json)
Hash identifier: jK2zW3ox8QhZhw4U6su60BdIouGG0h0137N+Q9axMBQ=
Subject key identifier: FF:D2:69:53:76:CF:D5:6F:F7:2E:8E:92:6A:F1:F0:A0:CB:87:97:AA
Authority key identifier: 01:6B:71:55:1D:DA:36:BE:BE:E7:43:52:18:71:99:5B:4A:B0:82:BD
Certificate issuer: /CN=016b71551dda36bebee743521871995b4ab082bd
Certificate serial: 01A1035B91D829D027533CB211CEFCC2E14D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AWtxVR3aNr6-50NSGHGZW0qwgr0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/2e5c22-3036-4d75-b4b5-854695db9289/1/AWtxVR3aNr6-50NSGHGZW0qwgr0.mft
Manifest number: 01C6
Signing time: Sat 03 Oct 2026 20:01:35 +0000
Manifest this update: Sat 03 Oct 2026 20:01:35 +0000
Manifest next update: Sun 04 Oct 2026 20:01:35 +0000
Files and hashes: 1: AWtxVR3aNr6-50NSGHGZW0qwgr0.crl (hash: VGyyfQOWbBm9w5fFExgC6akG8FcdsIxIR4Ezz4gUEeo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/2e5c22-3036-4d75-b4b5-854695db9289/1/AWtxVR3aNr6-50NSGHGZW0qwgr0.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/2e5c22-3036-4d75-b4b5-854695db9289/1/AWtxVR3aNr6-50NSGHGZW0qwgr0.mft
rsync://rpki.ripe.net/repository/DEFAULT/AWtxVR3aNr6-50NSGHGZW0qwgr0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 20:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:03:5b:91:d8:29:d0:27:53:3c:b2:11:ce:fc:c2:e1:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=016b71551dda36bebee743521871995b4ab082bd
Validity
Not Before: Oct 3 20:01:35 2026 GMT
Not After : Oct 4 20:01:35 2026 GMT
Subject: CN=ffd2695376cfd56ff72e8e926af1f0a0cb8797aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:72:1e:d6:b6:29:6e:ef:ca:9f:a5:c8:90:f7:
1a:91:47:54:d5:ab:a1:df:17:04:fc:17:a4:2b:56:
e2:02:82:c5:a1:f6:7c:97:6d:48:9e:43:ca:6a:35:
43:43:10:ea:2d:ed:64:16:ff:27:80:6c:46:dd:90:
2c:50:f6:a8:73:9a:21:17:d7:d7:01:be:4c:85:b6:
e1:12:8a:c3:21:f5:93:35:aa:8d:4e:9c:9f:04:6a:
be:44:b8:59:51:e9:86:d6:03:fe:32:0a:8a:7d:64:
40:ae:ba:78:9d:62:a5:98:26:fb:a6:4d:d1:a5:3c:
4a:eb:21:7b:40:1c:ff:1a:b8:f6:fa:a5:ae:61:e7:
8c:c9:33:20:48:25:94:7a:39:ed:6b:59:d0:2f:ec:
98:b2:15:10:06:19:45:aa:11:4a:72:a5:17:89:be:
78:98:03:9c:df:6a:e9:9c:85:7f:4a:fd:9f:fb:60:
90:89:0a:1f:86:00:d8:b4:1b:12:e4:4b:3c:61:2a:
c9:05:54:91:97:0c:8c:07:2f:91:6d:f4:bc:db:1c:
22:2f:20:35:14:bb:32:8e:d5:3d:a5:8e:c5:13:6b:
d4:81:62:04:f2:67:9a:90:44:0c:ce:2a:67:af:06:
15:d4:29:e2:aa:d2:35:ea:04:c0:c3:1c:6e:02:eb:
2c:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:D2:69:53:76:CF:D5:6F:F7:2E:8E:92:6A:F1:F0:A0:CB:87:97:AA
X509v3 Authority Key Identifier:
keyid:01:6B:71:55:1D:DA:36:BE:BE:E7:43:52:18:71:99:5B:4A:B0:82:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AWtxVR3aNr6-50NSGHGZW0qwgr0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/2e5c22-3036-4d75-b4b5-854695db9289/1/AWtxVR3aNr6-50NSGHGZW0qwgr0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/2e5c22-3036-4d75-b4b5-854695db9289/1/AWtxVR3aNr6-50NSGHGZW0qwgr0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:a3:dc:35:0b:11:69:ff:ff:82:66:7f:0e:8f:05:a6:6d:62:
c0:23:59:c3:ad:da:df:60:b7:6e:4f:08:78:8e:ab:28:84:b8:
65:85:81:91:02:f4:5d:c2:24:54:b8:a6:ec:6b:d4:e4:4c:bf:
7b:54:a6:44:da:3e:3d:dd:9f:0d:61:ce:ec:55:ab:d0:da:f7:
17:ba:d3:a2:13:6d:8e:9c:59:ab:7a:b3:2a:0a:8f:2e:0f:de:
10:d2:84:db:45:61:b5:a5:c0:dd:f3:92:9d:96:e8:86:ab:5b:
12:95:9f:de:e5:1d:5f:2c:3c:b3:70:fb:42:03:f3:94:2b:2e:
a0:3f:31:b6:2b:75:1f:1a:06:cb:5b:4b:8a:98:4d:35:83:7c:
d0:4a:ed:c8:72:90:44:a2:50:f9:3a:0f:af:ef:ad:b6:01:3d:
6f:3b:23:63:0a:25:d7:6e:36:8f:34:c3:59:77:f9:9a:fe:09:
3e:f5:0b:a9:2f:0f:e4:71:d9:b8:bb:01:b2:79:03:c8:e4:db:
7a:c3:f1:05:66:3d:e4:1a:4c:e0:c6:db:13:0e:22:e4:60:86:
77:67:3a:a9:2d:b3:83:cc:5f:01:72:08:9d:fb:45:d9:92:52:
0f:de:51:2f:1f:d0:49:22:87:0a:01:e9:6f:9d:c2:4c:c9:f2:
8b:be:1a:71
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEDW5HYKdAnUzyyEc78wuFNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAxNmI3MTU1MWRkYTM2YmViZWU3NDM1MjE4NzE5OTViNGFi
MDgyYmQwHhcNMjYxMDAzMjAwMTM1WhcNMjYxMDA0MjAwMTM1WjAzMTEwLwYDVQQD
EyhmZmQyNjk1Mzc2Y2ZkNTZmZjcyZThlOTI2YWYxZjBhMGNiODc5N2FhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz3Ie1rYpbu/Kn6XIkPcakUdU1auh
3xcE/BekK1biAoLFofZ8l21InkPKajVDQxDqLe1kFv8ngGxG3ZAsUPaoc5ohF9fX
Ab5MhbbhEorDIfWTNaqNTpyfBGq+RLhZUemG1gP+MgqKfWRArrp4nWKlmCb7pk3R
pTxK6yF7QBz/Grj2+qWuYeeMyTMgSCWUejnta1nQL+yYshUQBhlFqhFKcqUXib54
mAOc32rpnIV/Sv2f+2CQiQofhgDYtBsS5Es8YSrJBVSRlwyMBy+RbfS82xwiLyA1
FLsyjtU9pY7FE2vUgWIE8meakEQMzipnrwYV1CniqtI16gTAwxxuAussNwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP/SaVN2z9Vv9y6Okmrx8KDLh5eqMB8GA1UdIwQY
MBaAFAFrcVUd2ja+vudDUhhxmVtKsIK9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQVd0eFZSM2FOcjYtNTBOU0dIR1pXMHF3Z3IwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi8yZTVjMjItMzAzNi00ZDc1LWI0YjUt
ODU0Njk1ZGI5Mjg5LzEvQVd0eFZSM2FOcjYtNTBOU0dIR1pXMHF3Z3IwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZi8yZTVjMjItMzAzNi00ZDc1LWI0YjUtODU0Njk1ZGI5Mjg5
LzEvQVd0eFZSM2FOcjYtNTBOU0dIR1pXMHF3Z3IwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ6PcNQsR
af//gmZ/Do8Fpm1iwCNZw63a32C3bk8IeI6rKIS4ZYWBkQL0XcIkVLim7GvU5Ey/
e1SmRNo+Pd2fDWHO7FWr0Nr3F7rTohNtjpxZq3qzKgqPLg/eENKE20VhtaXA3fOS
nZbohqtbEpWf3uUdXyw8s3D7QgPzlCsuoD8xtit1HxoGy1tLiphNNYN80ErtyHKQ
RKJQ+ToPr++ttgE9bzsjYwol1242jzTDWXf5mv4JPvULqS8P5HHZuLsBsnkDyOTb
esPxBWY95BpM4MbbEw4i5GCGd2c6qS2zg8xfAXIInftF2ZJSD95RLx/QSSKHCgHp
b53CTMnyi74acQ==
-----END CERTIFICATE-----
Generated at Sun Oct 4 06:47:45 2026 by rpki-client