Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/5c2868-3a27-4df4-8f00-fdd23b43c52e/1/AwkPrDzELxmXRVoS5kMGRjfGncM.mft
File: AwkPrDzELxmXRVoS5kMGRjfGncM.mft (raw, json)
Hash identifier: FzucceaHZKQBN6+cEAgFVnF5ytlyeDfN9dme6estkjU=
Subject key identifier: EF:54:E9:9B:66:AF:95:D0:E2:41:6E:8A:2A:40:B5:00:1D:A4:F8:6B
Authority key identifier: 03:09:0F:AC:3C:C4:2F:19:97:45:5A:12:E6:43:06:46:37:C6:9D:C3
Certificate issuer: /CN=03090fac3cc42f1997455a12e643064637c69dc3
Certificate serial: 019D37C1227DBF1F60A122AD08A6D3233E5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AwkPrDzELxmXRVoS5kMGRjfGncM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/5c2868-3a27-4df4-8f00-fdd23b43c52e/1/AwkPrDzELxmXRVoS5kMGRjfGncM.mft
Manifest number: 0DCB
Signing time: Sun 29 Mar 2026 04:01:37 +0000
Manifest this update: Sun 29 Mar 2026 04:01:37 +0000
Manifest next update: Mon 30 Mar 2026 04:01:37 +0000
Files and hashes: 1: AwkPrDzELxmXRVoS5kMGRjfGncM.crl (hash: 2sLrcXU+tMxOlssASkSd3xlH2/BzyWmw48kX9vUMVaI=)
2: OoyL6bjrpv7zlvqenv5ZgNB0gGE.roa (hash: Tm9hWa2oiDIAZqLLnYyHl8n9xWir4VblcdnhJ8WlcHo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/5c2868-3a27-4df4-8f00-fdd23b43c52e/1/AwkPrDzELxmXRVoS5kMGRjfGncM.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/5c2868-3a27-4df4-8f00-fdd23b43c52e/1/AwkPrDzELxmXRVoS5kMGRjfGncM.mft
rsync://rpki.ripe.net/repository/DEFAULT/AwkPrDzELxmXRVoS5kMGRjfGncM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c1:22:7d:bf:1f:60:a1:22:ad:08:a6:d3:23:3e:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03090fac3cc42f1997455a12e643064637c69dc3
Validity
Not Before: Mar 29 04:01:37 2026 GMT
Not After : Mar 30 04:01:37 2026 GMT
Subject: CN=ef54e99b66af95d0e2416e8a2a40b5001da4f86b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:94:5a:40:2e:34:ff:0d:d0:f7:77:26:0e:5d:
86:76:fb:8e:69:51:f7:be:7d:08:0d:91:39:90:dc:
10:6d:39:8e:bc:fa:6d:47:1f:ce:1e:7c:ab:0b:3d:
a3:63:7c:bc:39:b7:e7:03:ab:2e:02:47:b9:b1:d1:
ab:67:f2:93:92:e2:13:05:0f:21:12:4b:ba:62:9a:
c2:9f:aa:b0:74:36:90:55:72:79:c9:65:38:a7:5e:
c0:0d:6e:b5:02:1d:50:f0:60:cf:08:7d:06:77:ce:
45:a2:eb:41:e4:7b:16:3c:86:c3:df:1b:2b:8b:a0:
27:38:ca:a8:88:54:e7:d3:5c:ab:6b:f2:1b:c6:d5:
4c:f6:0d:a8:b9:ed:64:e6:37:b2:dd:c6:c0:6d:c6:
c2:c2:9d:10:92:23:46:81:ea:a1:ae:bb:d9:ce:6e:
3e:1f:3c:18:62:1c:43:32:97:cc:e1:68:db:40:7f:
eb:3c:ee:88:4e:eb:d2:cb:d2:f3:3a:d1:a8:3a:37:
94:2b:29:ed:28:3d:be:8a:c7:73:1b:00:19:d1:77:
17:c7:15:6f:bc:4e:40:56:86:bd:cc:04:7c:c5:5c:
3a:b5:52:31:c6:1a:ad:c2:05:c7:55:28:5d:8b:6f:
c8:ac:e9:65:19:c7:15:cb:e5:8f:b5:9d:b1:f8:95:
78:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:54:E9:9B:66:AF:95:D0:E2:41:6E:8A:2A:40:B5:00:1D:A4:F8:6B
X509v3 Authority Key Identifier:
keyid:03:09:0F:AC:3C:C4:2F:19:97:45:5A:12:E6:43:06:46:37:C6:9D:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AwkPrDzELxmXRVoS5kMGRjfGncM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/5c2868-3a27-4df4-8f00-fdd23b43c52e/1/AwkPrDzELxmXRVoS5kMGRjfGncM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/5c2868-3a27-4df4-8f00-fdd23b43c52e/1/AwkPrDzELxmXRVoS5kMGRjfGncM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:0f:70:02:9a:43:96:98:1b:69:2c:6a:b2:16:9c:e0:78:09:
92:a5:f0:e6:e6:f1:31:fe:03:10:4d:5c:d0:2c:81:ce:93:e0:
12:84:7f:2b:24:2f:49:80:19:87:7b:fa:d0:78:cb:43:65:4a:
43:e1:95:25:a0:af:a0:e1:14:7e:a1:89:a1:9b:f5:7b:f4:09:
7e:d0:84:2f:c6:87:09:97:b3:ee:8e:3c:9b:dd:72:0c:4c:ae:
36:21:77:ca:2d:eb:b4:66:5c:19:8c:54:89:03:34:04:e1:9c:
80:95:24:5f:5c:47:53:ab:d0:8a:25:cd:0f:3f:11:34:b3:45:
23:7c:1f:c2:3d:a2:1e:00:97:a1:16:40:70:01:6b:c1:d2:93:
47:07:8c:40:11:3c:d3:7f:d4:96:56:70:7b:35:a1:d6:d6:2d:
9a:22:c5:b8:39:c8:cb:cc:c4:f5:69:02:eb:6a:d5:33:19:4c:
3f:25:9a:8a:d7:e7:2b:b1:c9:e5:90:2c:8a:cb:3d:04:b0:f9:
d1:51:4b:e9:57:7c:16:c8:84:26:23:77:e0:d8:af:29:89:86:
97:4d:91:38:e9:61:14:a1:a3:58:68:7e:80:a2:5f:93:c7:58:
84:3a:0d:ea:e7:37:66:e5:d9:26:e2:44:30:15:33:a7:b4:31:
2c:d2:88:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:13:40 2026 by rpki-client