Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/f2553c-9bd6-49ae-9bed-1576c6f589c9/1/AWRUygmetS5VVg9dCeh-cxYa5zg.mft
File: AWRUygmetS5VVg9dCeh-cxYa5zg.mft (raw, json)
Hash identifier: BPoiaOJ3B87ZZtepM2r6D/CNXi/BC480QaPBCZ2KTI4=
Subject key identifier: 74:3C:93:5C:1F:1F:73:95:58:3D:46:B5:DD:9B:02:84:63:01:DC:00
Authority key identifier: 01:64:54:CA:09:9E:B5:2E:55:56:0F:5D:09:E8:7E:73:16:1A:E7:38
Certificate issuer: /CN=016454ca099eb52e55560f5d09e87e73161ae738
Certificate serial: 019E1E356C41FEE29120D1D7EC94E292FE33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AWRUygmetS5VVg9dCeh-cxYa5zg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/f2553c-9bd6-49ae-9bed-1576c6f589c9/1/AWRUygmetS5VVg9dCeh-cxYa5zg.mft
Manifest number: 0C25
Signing time: Tue 12 May 2026 22:01:17 +0000
Manifest this update: Tue 12 May 2026 22:01:17 +0000
Manifest next update: Wed 13 May 2026 22:01:17 +0000
Files and hashes: 1: AWRUygmetS5VVg9dCeh-cxYa5zg.crl (hash: eJzLsL3Rl3tQa8a1Zc/IaDsfI6VI29IrztrNZq3c0zM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/f2553c-9bd6-49ae-9bed-1576c6f589c9/1/AWRUygmetS5VVg9dCeh-cxYa5zg.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/f2553c-9bd6-49ae-9bed-1576c6f589c9/1/AWRUygmetS5VVg9dCeh-cxYa5zg.mft
rsync://rpki.ripe.net/repository/DEFAULT/AWRUygmetS5VVg9dCeh-cxYa5zg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 22:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:35:6c:41:fe:e2:91:20:d1:d7:ec:94:e2:92:fe:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=016454ca099eb52e55560f5d09e87e73161ae738
Validity
Not Before: May 12 22:01:17 2026 GMT
Not After : May 13 22:01:17 2026 GMT
Subject: CN=743c935c1f1f7395583d46b5dd9b02846301dc00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:7e:ab:0f:55:cf:f7:a3:71:38:58:6e:94:1d:
0f:db:b8:26:b9:66:26:06:36:ba:5b:9d:6a:b1:bf:
ba:88:00:04:88:1f:89:56:c4:94:c3:79:7c:af:42:
02:4c:55:e3:9e:cf:db:f9:a8:9e:e7:a1:73:88:4c:
b9:b7:19:66:6c:58:2f:00:74:d5:79:92:e3:5d:07:
0e:49:a1:05:36:57:27:e8:a1:4a:17:ce:a6:49:5c:
bd:72:23:82:79:a0:c8:30:ec:86:2d:26:ad:dd:62:
e7:d1:a4:b5:5a:8d:0c:41:99:1a:79:ae:09:6f:40:
bc:73:ce:ed:46:a4:fc:4c:80:81:2a:0e:eb:f0:f1:
06:e1:c0:a6:2a:72:0d:f3:7b:45:e7:cc:5e:d7:76:
82:df:78:e7:5b:e9:13:da:7e:9b:b8:50:44:8c:05:
8f:f7:bd:5b:91:a3:09:d5:42:5e:29:63:e2:fe:3a:
d6:55:b6:9f:8c:06:02:45:ef:a6:da:00:2f:6d:cc:
73:76:7c:64:97:36:32:5f:72:19:1f:01:9b:29:8e:
70:5f:59:fc:6c:95:25:f7:7c:4e:dc:29:64:6c:35:
40:f3:9c:8e:c2:dd:ff:a4:b3:35:73:29:0a:c3:10:
e8:7d:24:e5:39:a5:4d:e0:b5:91:61:4a:d4:0e:b2:
50:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:3C:93:5C:1F:1F:73:95:58:3D:46:B5:DD:9B:02:84:63:01:DC:00
X509v3 Authority Key Identifier:
keyid:01:64:54:CA:09:9E:B5:2E:55:56:0F:5D:09:E8:7E:73:16:1A:E7:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AWRUygmetS5VVg9dCeh-cxYa5zg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/f2553c-9bd6-49ae-9bed-1576c6f589c9/1/AWRUygmetS5VVg9dCeh-cxYa5zg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/f2553c-9bd6-49ae-9bed-1576c6f589c9/1/AWRUygmetS5VVg9dCeh-cxYa5zg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:9e:26:6f:e4:32:02:97:76:04:ce:58:ef:34:fc:b0:e8:f9:
d4:02:51:fe:b3:2c:df:a9:4d:52:8d:61:cd:40:67:39:db:2e:
d8:d3:6c:56:2d:3e:a2:4a:51:27:8f:1b:fb:e9:62:55:8e:96:
3a:19:85:84:41:8b:a7:4e:9d:15:17:ec:19:39:a3:af:d5:ca:
1d:16:74:1d:c8:00:06:21:2b:05:50:dc:a0:a2:c2:cc:ac:63:
2d:bd:e4:b8:45:16:1b:62:ab:e9:03:73:41:72:2b:1a:2b:c4:
1c:ba:d1:26:e0:60:b5:13:ad:ac:60:a7:fc:ad:69:d0:71:ba:
ee:b2:22:58:6a:42:b8:fb:cd:17:cb:c8:52:c5:0f:5f:83:75:
46:7e:fd:c4:ab:fd:20:59:cd:ed:8c:56:2a:3c:7d:ed:91:d7:
4a:b7:8d:8e:25:9c:17:3e:c1:8c:90:c7:40:f3:98:90:6a:69:
cf:a1:96:e4:b6:fe:ae:6c:cc:1f:d1:15:b4:01:e4:e3:45:df:
0c:14:f3:0e:9c:5e:1a:00:d0:58:39:43:77:47:64:f9:9a:f2:
27:62:11:8d:d6:a2:7c:bc:db:63:b5:2c:2f:7a:9f:12:ea:a0:
05:1c:d7:1e:61:29:94:19:91:c2:6c:2f:e2:80:22:0a:e6:01:
98:8c:9e:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:05:43 2026 by rpki-client