Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/da/de66a0-a148-4eac-a264-164d4b236ae6/1/AW5k-UAi6UrdFYDuA5HhG2e_pVo.mft
File: AW5k-UAi6UrdFYDuA5HhG2e_pVo.mft (raw, json)
Hash identifier: iLRzjMO2pNedVKrPyjSZrZqCA339YB4aIaghP7ph2HA=
Subject key identifier: A2:C4:6F:C1:F2:F8:78:AD:91:C6:B3:21:77:B1:54:FE:85:07:94:05
Authority key identifier: 01:6E:64:F9:40:22:E9:4A:DD:15:80:EE:03:91:E1:1B:67:BF:A5:5A
Certificate issuer: /CN=016e64f94022e94add1580ee0391e11b67bfa55a
Certificate serial: 01A0CD7E95FE842592741233964ECD2BC684
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AW5k-UAi6UrdFYDuA5HhG2e_pVo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/de66a0-a148-4eac-a264-164d4b236ae6/1/AW5k-UAi6UrdFYDuA5HhG2e_pVo.mft
Manifest number: 0157
Signing time: Wed 23 Sep 2026 09:00:20 +0000
Manifest this update: Wed 23 Sep 2026 09:00:20 +0000
Manifest next update: Thu 24 Sep 2026 09:00:20 +0000
Files and hashes: 1: AW5k-UAi6UrdFYDuA5HhG2e_pVo.crl (hash: PmGAy1/Mpf5RmW3QcNKbpFpspWr7s9Q/5eUdjkXIHvU=)
2: JSbL4a4S2OSMlezz2eB_WGFeLoM.roa (hash: JWOr6A62VPGr8Z3wejaGhvp4bUBldEfEf/frsYKtaLw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/de66a0-a148-4eac-a264-164d4b236ae6/1/AW5k-UAi6UrdFYDuA5HhG2e_pVo.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/de66a0-a148-4eac-a264-164d4b236ae6/1/AW5k-UAi6UrdFYDuA5HhG2e_pVo.mft
rsync://rpki.ripe.net/repository/DEFAULT/AW5k-UAi6UrdFYDuA5HhG2e_pVo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 09:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cd:7e:95:fe:84:25:92:74:12:33:96:4e:cd:2b:c6:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=016e64f94022e94add1580ee0391e11b67bfa55a
Validity
Not Before: Sep 23 09:00:20 2026 GMT
Not After : Sep 24 09:00:20 2026 GMT
Subject: CN=a2c46fc1f2f878ad91c6b32177b154fe85079405
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:35:d3:b4:c7:83:1a:72:76:84:a7:29:d4:30:
08:3d:1a:b5:5d:25:ec:cd:d5:23:25:cf:65:6e:c7:
6e:29:10:61:fb:bc:d3:de:79:80:48:ba:7a:7c:d7:
4c:92:d7:f1:9e:90:79:e4:90:7b:8a:37:ea:c2:b4:
53:ad:8f:a5:c9:23:5d:cd:47:62:6d:62:c3:21:8e:
d2:08:b4:d7:39:d1:cf:14:e3:6c:e3:ae:7d:fc:21:
99:93:52:0c:ac:76:69:fc:34:30:55:9c:b6:4e:16:
b1:39:af:66:04:e8:6f:da:77:86:fc:44:3a:de:d6:
b4:4a:01:a8:8e:90:2b:51:6c:20:7d:ce:1f:cf:ab:
af:6e:e3:c1:f1:59:f4:77:1f:ad:79:43:95:98:1a:
e7:b6:96:05:cb:bd:7c:04:c1:d8:04:a9:25:45:2c:
41:a2:20:0d:38:77:38:11:1a:bf:1b:0a:02:ee:99:
24:8c:23:f2:a6:c8:f2:45:a0:d5:60:57:8b:ff:ff:
b0:c2:21:39:81:b3:42:c2:46:e4:cd:d3:5c:c9:98:
ef:30:8c:9f:93:f5:b1:6a:7d:0b:a1:83:91:94:a2:
55:09:15:5e:ee:65:e4:cb:b1:8b:9d:d8:2f:47:72:
71:61:a0:02:5a:38:5e:78:89:e3:bf:45:1f:74:da:
25:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:C4:6F:C1:F2:F8:78:AD:91:C6:B3:21:77:B1:54:FE:85:07:94:05
X509v3 Authority Key Identifier:
keyid:01:6E:64:F9:40:22:E9:4A:DD:15:80:EE:03:91:E1:1B:67:BF:A5:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AW5k-UAi6UrdFYDuA5HhG2e_pVo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/de66a0-a148-4eac-a264-164d4b236ae6/1/AW5k-UAi6UrdFYDuA5HhG2e_pVo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/de66a0-a148-4eac-a264-164d4b236ae6/1/AW5k-UAi6UrdFYDuA5HhG2e_pVo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:8c:fb:75:50:b8:45:51:20:4d:91:c9:4f:23:dd:88:ee:36:
c0:2f:3d:65:cf:b5:d1:59:ef:ca:d9:c6:a5:50:f5:3a:b3:67:
aa:9d:60:1d:07:7e:f3:64:06:6b:8a:49:ba:00:91:af:8c:61:
b9:51:a9:ed:6f:52:c4:72:75:fd:87:c5:26:18:86:eb:c5:48:
a6:7d:6a:c3:13:6f:15:b8:d7:22:1c:00:f7:07:97:e6:1e:2e:
6d:ff:27:20:b5:ee:30:aa:b3:69:8d:16:2f:31:e2:45:1b:2f:
b8:de:ce:82:74:d3:24:88:55:93:65:9b:f0:e2:ae:fa:2d:b6:
b9:d8:49:de:48:dd:76:2c:17:70:f9:65:26:6d:25:9a:c5:21:
96:86:eb:a7:2b:30:08:41:f9:eb:ff:d0:ae:5a:5f:07:aa:03:
d4:0a:67:a1:df:fc:31:7a:47:20:67:9f:02:2d:32:4e:af:46:
66:82:9f:82:52:84:e3:5c:fe:7b:6f:26:ea:29:e9:78:87:1c:
c1:69:8c:bc:05:15:48:a7:dc:7b:25:e5:42:33:2c:f5:80:1c:
be:c5:e9:b9:9d:31:5f:73:57:bb:c4:d6:96:a2:ba:ae:ac:2e:
54:79:3e:02:fc:82:e8:e7:32:50:29:5b:57:5a:03:c1:81:ed:
be:53:3c:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 19:00:05 2026 by rpki-client