Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/f2553c-9bd6-49ae-9bed-1576c6f589c9/1/AWRUygmetS5VVg9dCeh-cxYa5zg.mft
File: AWRUygmetS5VVg9dCeh-cxYa5zg.mft (raw, json)
Hash identifier: FljHCizbMLVtg4Dm/63OwDYNWF0+B7e8cpQW3e+ak4I=
Subject key identifier: B8:3A:A3:73:BD:13:89:37:D0:96:39:6E:01:A3:72:63:48:ED:D2:1F
Authority key identifier: 01:64:54:CA:09:9E:B5:2E:55:56:0F:5D:09:E8:7E:73:16:1A:E7:38
Certificate issuer: /CN=016454ca099eb52e55560f5d09e87e73161ae738
Certificate serial: 019D26CCC0714A5206E1BEFFB605152F627F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AWRUygmetS5VVg9dCeh-cxYa5zg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/f2553c-9bd6-49ae-9bed-1576c6f589c9/1/AWRUygmetS5VVg9dCeh-cxYa5zg.mft
Manifest number: 0BA4
Signing time: Wed 25 Mar 2026 21:00:45 +0000
Manifest this update: Wed 25 Mar 2026 21:00:45 +0000
Manifest next update: Thu 26 Mar 2026 21:00:45 +0000
Files and hashes: 1: AWRUygmetS5VVg9dCeh-cxYa5zg.crl (hash: Q3IyiM/TubGQukj7GbXeCmQXlmt1gW03tSYmv+sEyyI=)
2: K6q6EsM1CavuOYyARfp1XcUUEVQ.roa (hash: Xi5EDv6jv4B5PT+szJmGPSgtZ1Lgdt1o2yppeSgzgSY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/f2553c-9bd6-49ae-9bed-1576c6f589c9/1/AWRUygmetS5VVg9dCeh-cxYa5zg.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/f2553c-9bd6-49ae-9bed-1576c6f589c9/1/AWRUygmetS5VVg9dCeh-cxYa5zg.mft
rsync://rpki.ripe.net/repository/DEFAULT/AWRUygmetS5VVg9dCeh-cxYa5zg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 21:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cc:c0:71:4a:52:06:e1:be:ff:b6:05:15:2f:62:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=016454ca099eb52e55560f5d09e87e73161ae738
Validity
Not Before: Mar 25 21:00:45 2026 GMT
Not After : Mar 26 21:00:45 2026 GMT
Subject: CN=b83aa373bd138937d096396e01a3726348edd21f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:66:f9:41:6c:ef:d3:a6:79:77:00:74:bc:b6:
4d:ad:70:d2:d2:83:87:ff:67:d1:f4:af:9b:e2:59:
d9:20:37:aa:79:42:13:f9:de:35:91:ea:ab:65:7b:
04:23:72:73:d1:64:52:91:aa:9f:9f:48:ae:b3:4b:
9c:1c:03:98:72:fb:f4:cb:17:4d:4b:ec:3f:f1:bd:
f7:00:d2:b3:5c:3e:49:74:51:85:d0:14:d2:3e:e3:
23:43:23:1f:9c:ad:4a:3a:09:97:2f:20:22:7e:a7:
c8:3d:61:ee:11:6e:41:8e:51:38:6e:c4:e2:10:9f:
06:cc:5c:ac:5d:55:9e:c6:37:e9:0b:39:d6:23:db:
24:2b:1f:b3:ca:d2:20:98:af:71:3a:ca:f0:f6:19:
59:d5:65:6f:ec:94:a9:4f:3d:b3:3f:80:17:20:e8:
f5:33:72:e2:43:b3:d0:99:e0:ed:b3:c6:8a:f2:51:
d0:70:1c:85:a3:25:91:13:db:d4:ff:0b:d0:11:23:
d6:03:7d:48:18:1b:92:c5:58:05:34:ef:83:42:de:
8c:a6:04:4f:18:b0:17:7b:6c:f9:a2:78:2d:29:8c:
c3:65:1f:06:93:02:f7:48:f1:13:4b:67:c7:ee:e4:
42:83:cd:52:e9:07:a3:ec:90:63:5b:03:be:14:33:
1e:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:3A:A3:73:BD:13:89:37:D0:96:39:6E:01:A3:72:63:48:ED:D2:1F
X509v3 Authority Key Identifier:
keyid:01:64:54:CA:09:9E:B5:2E:55:56:0F:5D:09:E8:7E:73:16:1A:E7:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AWRUygmetS5VVg9dCeh-cxYa5zg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/f2553c-9bd6-49ae-9bed-1576c6f589c9/1/AWRUygmetS5VVg9dCeh-cxYa5zg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/f2553c-9bd6-49ae-9bed-1576c6f589c9/1/AWRUygmetS5VVg9dCeh-cxYa5zg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:06:5c:c4:af:40:44:d1:49:5d:d8:db:5a:3e:92:d3:d5:8d:
89:f3:0a:30:86:93:a0:ef:9f:47:0b:35:67:d0:74:23:e1:9d:
2b:83:35:16:55:e3:3c:5d:37:47:f9:45:f4:e7:47:a4:21:c1:
9a:96:99:fc:e9:c7:c5:c7:a2:5c:b5:50:4f:73:7b:e7:a8:f8:
ef:dd:12:5d:6f:83:f5:ce:ab:d8:74:b6:71:7e:ea:2c:e0:55:
8d:9a:1a:d0:3d:47:e6:49:a1:1e:bc:33:8f:23:d1:b8:5f:5f:
1a:db:cb:52:80:c3:28:c6:9a:21:bf:d4:b6:81:cf:18:04:81:
e8:71:bb:76:42:b1:ad:b0:14:ff:0b:da:b3:55:2e:3b:48:9e:
da:92:0d:77:bc:49:40:1e:7e:a6:7a:70:92:64:ea:bb:1b:45:
39:cb:11:83:1b:33:c9:4b:e6:45:a0:0b:6f:ee:ff:13:a6:73:
11:6b:2f:a3:8d:ee:e0:a9:b8:70:fa:1b:e2:da:e4:a7:18:83:
8e:4d:3b:5f:1b:8b:88:e9:60:b3:37:bd:e5:87:43:9d:00:52:
92:13:5d:8c:83:0b:1d:a5:bc:78:19:7a:b3:02:76:f0:ce:65:
92:d5:3c:48:44:df:53:cc:9b:10:3f:67:2e:35:99:b9:64:d0:
43:60:db:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:43:36 2026 by rpki-client