Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/de66a0-a148-4eac-a264-164d4b236ae6/1/AW5k-UAi6UrdFYDuA5HhG2e_pVo.mft
File: AW5k-UAi6UrdFYDuA5HhG2e_pVo.mft (raw, json)
Hash identifier: o/4GThPJdWuGKXc60TTOCvU5R9lSsoZvEoK+U7UK+Fg=
Subject key identifier: 43:16:A3:B6:D2:7E:AA:CD:CE:FF:75:1D:FB:2A:E6:47:8C:D8:86:E6
Authority key identifier: 01:6E:64:F9:40:22:E9:4A:DD:15:80:EE:03:91:E1:1B:67:BF:A5:5A
Certificate issuer: /CN=016e64f94022e94add1580ee0391e11b67bfa55a
Certificate serial: 019F8ED91936ABB0BB934AAE9F3ED4A77AE7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AW5k-UAi6UrdFYDuA5HhG2e_pVo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/de66a0-a148-4eac-a264-164d4b236ae6/1/AW5k-UAi6UrdFYDuA5HhG2e_pVo.mft
Manifest number: B2
Signing time: Thu 23 Jul 2026 12:00:20 +0000
Manifest this update: Thu 23 Jul 2026 12:00:20 +0000
Manifest next update: Fri 24 Jul 2026 12:00:20 +0000
Files and hashes: 1: AW5k-UAi6UrdFYDuA5HhG2e_pVo.crl (hash: c9GW6/ifwwemCpdQ56rgWf47mF/C+yeY+fT/8bqnqCg=)
2: JSbL4a4S2OSMlezz2eB_WGFeLoM.roa (hash: JWOr6A62VPGr8Z3wejaGhvp4bUBldEfEf/frsYKtaLw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/de66a0-a148-4eac-a264-164d4b236ae6/1/AW5k-UAi6UrdFYDuA5HhG2e_pVo.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/de66a0-a148-4eac-a264-164d4b236ae6/1/AW5k-UAi6UrdFYDuA5HhG2e_pVo.mft
rsync://rpki.ripe.net/repository/DEFAULT/AW5k-UAi6UrdFYDuA5HhG2e_pVo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 12:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8e:d9:19:36:ab:b0:bb:93:4a:ae:9f:3e:d4:a7:7a:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=016e64f94022e94add1580ee0391e11b67bfa55a
Validity
Not Before: Jul 23 12:00:20 2026 GMT
Not After : Jul 24 12:00:20 2026 GMT
Subject: CN=4316a3b6d27eaacdceff751dfb2ae6478cd886e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:ff:40:1e:dd:b6:3f:c0:77:09:52:af:17:d5:
44:e2:db:d3:ea:07:01:4c:f0:85:ab:f8:d4:5b:d0:
56:6e:ca:7d:dd:6d:ac:85:b2:91:c6:1e:ec:e6:03:
0d:87:d1:e3:c0:9d:ba:1a:eb:1e:d6:9a:8e:96:be:
01:9c:93:c5:d0:7a:44:47:b6:1e:29:6b:ac:44:55:
9b:e3:3d:0c:31:03:7a:d6:2b:26:78:5d:cc:7d:21:
7a:66:5a:67:ad:6b:d5:69:65:25:d2:9b:3e:4c:53:
99:78:75:34:3d:51:2b:f1:27:ec:bb:a9:a4:97:82:
93:7b:c2:bd:e3:3a:e7:3f:23:cf:c7:cf:e7:2f:a9:
ff:ac:94:47:e7:74:26:74:20:82:c3:77:2f:f5:ac:
57:c1:e4:4f:7f:98:23:b1:a3:b6:24:63:33:4d:92:
6b:e4:17:64:63:a1:97:97:dc:20:0c:6f:46:f2:60:
34:42:58:88:5f:d1:0a:3d:d3:61:fd:15:e9:b1:96:
08:ea:07:4f:d6:82:6b:22:f1:d6:bb:cb:ae:58:e1:
9b:56:7f:1a:be:d1:56:9d:a5:fb:db:09:2d:19:72:
6a:a7:b6:0a:f5:d3:05:e4:30:50:fb:e1:d9:2a:bc:
f9:19:24:c1:34:73:1b:30:e8:84:df:db:91:94:1b:
52:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:16:A3:B6:D2:7E:AA:CD:CE:FF:75:1D:FB:2A:E6:47:8C:D8:86:E6
X509v3 Authority Key Identifier:
keyid:01:6E:64:F9:40:22:E9:4A:DD:15:80:EE:03:91:E1:1B:67:BF:A5:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AW5k-UAi6UrdFYDuA5HhG2e_pVo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/de66a0-a148-4eac-a264-164d4b236ae6/1/AW5k-UAi6UrdFYDuA5HhG2e_pVo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/de66a0-a148-4eac-a264-164d4b236ae6/1/AW5k-UAi6UrdFYDuA5HhG2e_pVo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:dc:78:d8:bf:b8:8f:5f:de:3b:33:3b:53:07:35:23:18:46:
88:28:e9:2b:21:4a:7c:66:d4:2f:fb:19:7a:c0:51:6f:f2:80:
62:70:d5:66:38:93:c2:92:e5:88:0a:dc:b4:fa:bb:40:b7:1b:
c3:52:9e:51:78:f1:dc:00:a8:4a:38:be:2e:75:92:69:44:37:
13:42:04:4f:78:57:69:f4:ba:6a:f0:85:4f:26:fe:b4:63:22:
52:1b:70:7c:73:d6:80:e6:45:47:ba:fa:17:a8:5b:5f:92:d6:
c3:92:ff:b7:73:89:9c:50:d2:62:c2:2d:a3:fc:90:72:cc:4e:
22:42:cc:1e:98:6d:71:8f:33:a1:8d:ea:8d:3b:26:03:d8:18:
cb:23:74:8c:a0:77:0e:16:f2:29:f0:05:44:23:98:b4:21:1e:
3f:e8:3b:d8:96:25:ea:83:23:57:bf:09:06:74:42:0d:4d:cd:
55:e5:4f:1f:ab:00:ac:78:5a:58:2a:d5:6d:13:e9:ed:7b:d6:
2a:b3:bd:ec:f1:0b:5f:96:76:b9:a5:0f:59:0d:99:f4:82:e6:
20:e8:08:7a:f4:d7:98:61:52:69:d3:75:3f:cf:56:88:d8:29:
02:06:c8:5a:bc:c3:b9:84:b9:2e:0f:54:6b:29:3e:46:10:5f:
af:25:22:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:30:32 2026 by rpki-client