Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ec/af4ef8-ed07-4acd-a42f-c96c2ce859e5/1/AW5eMfqHFqqlThj83P7T_JTbkLU.mft
File: AW5eMfqHFqqlThj83P7T_JTbkLU.mft (raw, json)
Hash identifier: 1RlbOfGxPJpn7vfZogP8hirwa30WcH19whOtb0OWd/c=
Subject key identifier: 2A:C9:69:EF:4F:3D:31:C3:5E:B4:8D:4D:18:63:20:6F:F0:CF:6B:66
Authority key identifier: 01:6E:5E:31:FA:87:16:AA:A5:4E:18:FC:DC:FE:D3:FC:94:DB:90:B5
Certificate issuer: /CN=016e5e31fa8716aaa54e18fcdcfed3fc94db90b5
Certificate serial: 01A0D236FD7DCAE66FB136F039A331C72B15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AW5eMfqHFqqlThj83P7T_JTbkLU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/af4ef8-ed07-4acd-a42f-c96c2ce859e5/1/AW5eMfqHFqqlThj83P7T_JTbkLU.mft
Manifest number: 1A70
Signing time: Thu 24 Sep 2026 07:00:14 +0000
Manifest this update: Thu 24 Sep 2026 07:00:14 +0000
Manifest next update: Fri 25 Sep 2026 07:00:14 +0000
Files and hashes: 1: AW5eMfqHFqqlThj83P7T_JTbkLU.crl (hash: JHiBXdmr9rkhmIayR2RNNx+4aVpoQBGmxobfqkxBtWY=)
2: VIwi371Ilu32-PFrptGj4IRsgO0.roa (hash: GJeobJzmQ47MTxxCaSTphRwACX/qnxopY4ODc2q66rk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/af4ef8-ed07-4acd-a42f-c96c2ce859e5/1/AW5eMfqHFqqlThj83P7T_JTbkLU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/af4ef8-ed07-4acd-a42f-c96c2ce859e5/1/AW5eMfqHFqqlThj83P7T_JTbkLU.mft
rsync://rpki.ripe.net/repository/DEFAULT/AW5eMfqHFqqlThj83P7T_JTbkLU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 07:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d2:36:fd:7d:ca:e6:6f:b1:36:f0:39:a3:31:c7:2b:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=016e5e31fa8716aaa54e18fcdcfed3fc94db90b5
Validity
Not Before: Sep 24 07:00:14 2026 GMT
Not After : Sep 25 07:00:14 2026 GMT
Subject: CN=2ac969ef4f3d31c35eb48d4d1863206ff0cf6b66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:f7:9f:8a:4c:25:ba:f3:55:29:aa:ca:61:46:
c1:6d:92:53:03:c6:9e:45:5b:7e:59:24:d5:23:f8:
d3:9d:85:ed:46:a5:ff:4a:ef:38:0f:96:a3:e2:30:
69:4f:61:5f:04:54:ea:e1:62:5a:52:7b:26:52:c9:
84:02:34:86:6f:6c:6c:61:60:35:b1:52:00:af:42:
34:79:a4:03:dd:cf:26:dd:0e:36:96:72:77:64:f9:
f5:e5:62:0a:66:58:bd:00:c2:36:a1:f5:e2:7b:33:
e8:69:da:b1:4e:19:63:3c:c5:22:5e:b9:7c:5d:94:
cf:81:eb:c7:9f:23:ed:9c:9d:7c:b8:af:32:f2:41:
3c:0c:b0:49:f5:23:d4:6d:8c:5f:97:81:d2:28:fe:
a5:63:7e:c6:02:b6:5f:e1:13:90:0e:a6:4e:a3:8c:
20:fc:cd:4f:9d:33:e5:1d:3d:54:4f:06:4a:3f:f4:
f5:ee:cd:0a:eb:f4:ea:83:21:d8:4c:e4:a9:35:19:
76:ad:12:38:ef:39:08:36:eb:e6:97:60:c6:0b:ca:
bb:1f:31:0d:3f:d0:5e:3d:82:44:a2:af:e1:8a:c6:
ff:f3:cd:07:42:8f:2c:90:51:a7:e3:9f:6e:bf:5a:
e8:4c:7a:0c:00:d4:99:39:1a:fa:25:ec:de:c7:77:
95:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:C9:69:EF:4F:3D:31:C3:5E:B4:8D:4D:18:63:20:6F:F0:CF:6B:66
X509v3 Authority Key Identifier:
keyid:01:6E:5E:31:FA:87:16:AA:A5:4E:18:FC:DC:FE:D3:FC:94:DB:90:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AW5eMfqHFqqlThj83P7T_JTbkLU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/af4ef8-ed07-4acd-a42f-c96c2ce859e5/1/AW5eMfqHFqqlThj83P7T_JTbkLU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/af4ef8-ed07-4acd-a42f-c96c2ce859e5/1/AW5eMfqHFqqlThj83P7T_JTbkLU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:d3:34:cc:be:b6:be:3f:1d:17:d8:58:b3:f7:b4:fb:ee:5c:
73:e5:f1:ee:88:3e:83:43:03:69:18:f1:d3:3a:b8:71:5a:c8:
fc:03:38:10:68:3c:a9:a5:75:1a:21:17:da:f3:e4:70:47:a0:
49:32:47:04:4a:7e:1b:b2:14:e2:e0:2f:65:e8:91:14:84:f2:
25:c5:18:24:d2:b7:d9:95:e0:17:bc:2c:f8:b2:f4:b3:68:1b:
a1:4b:e1:28:ed:d8:48:90:35:a7:b8:ad:af:c0:55:8b:3e:56:
a3:25:1e:7c:e5:eb:b1:01:4e:2c:2e:ef:1e:44:42:5f:ee:21:
12:7e:fb:04:4b:19:a4:67:8d:74:6a:ee:e4:15:23:cd:9b:9d:
cd:67:c6:48:ca:e8:c5:2e:4a:6d:b0:77:98:26:c8:4b:76:23:
c2:e9:87:09:2f:90:12:f0:a7:a6:e0:3c:a2:26:d9:c1:1a:e1:
86:04:0d:f1:e8:0f:e9:ca:5b:1b:cb:c1:fd:3e:88:68:e7:4c:
05:4b:0b:ea:fd:e1:da:22:ec:f6:12:85:2f:bc:79:f4:3a:fb:
b0:aa:ab:53:44:8f:b4:ce:cd:2b:0d:66:2a:33:40:fe:4d:55:
63:b6:7c:83:67:9b:24:ab:5d:9b:4d:8a:d1:35:ed:c4:c6:5a:
4f:77:02:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 16:56:27 2026 by rpki-client