Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/af4ef8-ed07-4acd-a42f-c96c2ce859e5/1/AW5eMfqHFqqlThj83P7T_JTbkLU.mft
File: AW5eMfqHFqqlThj83P7T_JTbkLU.mft (raw, json)
Hash identifier: WJ69Wv4AO6DDNAGaaIqPCz/8u7fuLd8nnLI9ir+Zets=
Subject key identifier: 60:29:B0:CB:A7:45:35:FE:12:AA:4E:24:DC:2F:47:0C:89:96:4D:15
Authority key identifier: 01:6E:5E:31:FA:87:16:AA:A5:4E:18:FC:DC:FE:D3:FC:94:DB:90:B5
Certificate issuer: /CN=016e5e31fa8716aaa54e18fcdcfed3fc94db90b5
Certificate serial: 019D27A8E2FA280D19BEE2966246CB2EA47D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AW5eMfqHFqqlThj83P7T_JTbkLU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/af4ef8-ed07-4acd-a42f-c96c2ce859e5/1/AW5eMfqHFqqlThj83P7T_JTbkLU.mft
Manifest number: 188A
Signing time: Thu 26 Mar 2026 01:01:12 +0000
Manifest this update: Thu 26 Mar 2026 01:01:12 +0000
Manifest next update: Fri 27 Mar 2026 01:01:12 +0000
Files and hashes: 1: AW5eMfqHFqqlThj83P7T_JTbkLU.crl (hash: Aq4EeCdlxAw+Q1VOyowd2fvCb4tQBJBChFLIvKOn37U=)
2: VIwi371Ilu32-PFrptGj4IRsgO0.roa (hash: GJeobJzmQ47MTxxCaSTphRwACX/qnxopY4ODc2q66rk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/af4ef8-ed07-4acd-a42f-c96c2ce859e5/1/AW5eMfqHFqqlThj83P7T_JTbkLU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/af4ef8-ed07-4acd-a42f-c96c2ce859e5/1/AW5eMfqHFqqlThj83P7T_JTbkLU.mft
rsync://rpki.ripe.net/repository/DEFAULT/AW5eMfqHFqqlThj83P7T_JTbkLU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a8:e2:fa:28:0d:19:be:e2:96:62:46:cb:2e:a4:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=016e5e31fa8716aaa54e18fcdcfed3fc94db90b5
Validity
Not Before: Mar 26 01:01:12 2026 GMT
Not After : Mar 27 01:01:12 2026 GMT
Subject: CN=6029b0cba74535fe12aa4e24dc2f470c89964d15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:b1:d5:a7:cf:86:5b:4f:e9:b4:c9:e1:7e:24:
85:30:12:97:5e:77:ed:e9:79:b3:67:51:ae:45:ba:
d9:ca:9d:d4:81:6f:51:ff:05:56:34:57:71:bc:13:
c6:9c:b3:1c:46:3c:f4:97:3e:f0:3e:c7:99:e1:7f:
7a:9f:b6:c7:ad:18:c3:d8:b6:e4:09:24:8c:a6:29:
61:d6:34:28:ab:85:44:0c:bf:c4:08:33:58:64:db:
22:7d:95:b4:b3:ea:bf:64:4e:e2:9e:2a:7b:c2:88:
50:8f:27:43:8a:dc:70:07:f9:f6:f6:e9:ee:46:b4:
35:66:51:58:ad:bf:17:ed:29:05:10:87:0a:1d:67:
bb:b8:f5:e8:62:43:d4:a8:69:7b:3b:4a:68:43:a2:
21:d8:d9:4e:80:06:c5:09:7d:d5:91:03:c7:bb:b0:
0a:7d:0f:1c:8e:c8:58:bc:58:c9:74:a8:42:e8:a1:
7f:97:fc:0f:dc:71:31:e7:30:a3:3b:f7:63:66:f9:
9d:a0:6a:08:76:5e:b4:d1:dc:46:28:9a:8d:50:b9:
6c:be:a2:8a:7a:75:90:cc:2d:7c:55:f6:d6:35:76:
08:27:6d:7c:90:de:0a:fd:dc:19:4a:82:06:32:66:
f7:56:98:56:52:c3:a1:bb:72:9a:75:4e:4d:9a:7e:
d6:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:29:B0:CB:A7:45:35:FE:12:AA:4E:24:DC:2F:47:0C:89:96:4D:15
X509v3 Authority Key Identifier:
keyid:01:6E:5E:31:FA:87:16:AA:A5:4E:18:FC:DC:FE:D3:FC:94:DB:90:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AW5eMfqHFqqlThj83P7T_JTbkLU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/af4ef8-ed07-4acd-a42f-c96c2ce859e5/1/AW5eMfqHFqqlThj83P7T_JTbkLU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/af4ef8-ed07-4acd-a42f-c96c2ce859e5/1/AW5eMfqHFqqlThj83P7T_JTbkLU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:13:b7:0d:02:07:da:ff:a3:6d:e9:58:4a:a4:aa:8e:41:1c:
f9:52:b5:33:2e:24:5d:26:4f:82:10:18:0f:9b:ea:20:92:08:
5e:a0:8a:42:fe:e8:83:26:45:56:51:39:11:28:74:80:9c:8d:
7a:df:73:51:ed:33:e7:a6:46:08:70:37:06:b7:21:ea:f2:0b:
2a:2b:58:36:e9:fc:37:43:8a:82:e0:d7:c1:b7:3d:9e:c9:86:
01:84:7b:b1:06:2a:8e:eb:09:bb:ab:c1:22:0e:38:37:c8:61:
5d:19:bd:61:d8:78:23:c4:51:ef:5b:f4:62:0a:df:3a:41:0a:
26:8e:71:24:37:c9:39:a9:3e:d0:c5:b4:45:d7:33:d7:0b:52:
a2:c4:e9:82:76:46:1a:d4:32:06:24:ca:06:c5:57:c9:29:39:
6d:d3:cb:4a:12:24:79:e9:3f:5b:6c:82:ba:0c:cf:1f:2d:ed:
ac:dd:3e:b0:aa:8a:6f:90:75:bd:0e:06:43:93:87:04:34:d7:
7d:5e:19:e9:f4:ce:eb:df:64:87:42:1b:02:67:b6:d2:f7:8f:
67:50:88:05:e4:ba:9c:85:42:c7:aa:f2:d8:e2:fd:b9:c0:c4:
71:92:74:77:33:e9:8e:b8:62:a5:39:e4:9c:2e:7d:18:42:b5:
88:dd:04:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:41:52 2026 by rpki-client