Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/13df90-71bc-40be-824e-2c40d811fd4e/1/AwvpEyEHRDTJ6CDbZhyRymLMsP0.mft
File: AwvpEyEHRDTJ6CDbZhyRymLMsP0.mft (raw, json)
Hash identifier: rrftzH0eFp/0LDkgwUhoVa3Gf4Cg7tF3fvR2OySxWYU=
Subject key identifier: C1:11:44:C2:C3:80:0A:A0:BD:F6:1E:9D:6E:DA:72:0E:72:D0:1D:3C
Authority key identifier: 03:0B:E9:13:21:07:44:34:C9:E8:20:DB:66:1C:91:CA:62:CC:B0:FD
Certificate issuer: /CN=030be91321074434c9e820db661c91ca62ccb0fd
Certificate serial: 019D386588F0A49FF12FC92F1AEFF0AEAFC9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AwvpEyEHRDTJ6CDbZhyRymLMsP0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/13df90-71bc-40be-824e-2c40d811fd4e/1/AwvpEyEHRDTJ6CDbZhyRymLMsP0.mft
Manifest number: 1287
Signing time: Sun 29 Mar 2026 07:01:11 +0000
Manifest this update: Sun 29 Mar 2026 07:01:11 +0000
Manifest next update: Mon 30 Mar 2026 07:01:11 +0000
Files and hashes: 1: AwvpEyEHRDTJ6CDbZhyRymLMsP0.crl (hash: 97PlHaOiIbQsWbaKaCnOp17nTt8nsg05lyCslKDk3rI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/13df90-71bc-40be-824e-2c40d811fd4e/1/AwvpEyEHRDTJ6CDbZhyRymLMsP0.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/13df90-71bc-40be-824e-2c40d811fd4e/1/AwvpEyEHRDTJ6CDbZhyRymLMsP0.mft
rsync://rpki.ripe.net/repository/DEFAULT/AwvpEyEHRDTJ6CDbZhyRymLMsP0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:88:f0:a4:9f:f1:2f:c9:2f:1a:ef:f0:ae:af:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=030be91321074434c9e820db661c91ca62ccb0fd
Validity
Not Before: Mar 29 07:01:11 2026 GMT
Not After : Mar 30 07:01:11 2026 GMT
Subject: CN=c11144c2c3800aa0bdf61e9d6eda720e72d01d3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:b3:3a:c8:67:90:a2:c8:a4:f7:d8:98:31:e8:
2f:a8:cc:c2:d5:c8:d2:f6:03:f2:a4:51:8f:e4:7d:
e3:60:fc:b0:21:30:2d:52:15:c4:21:60:20:ae:bf:
7a:89:db:49:24:18:0d:34:04:43:9c:53:52:fe:d7:
3f:75:7e:35:dd:e2:80:85:69:52:f7:5b:8a:0c:42:
ba:7a:46:c4:8b:d2:26:23:a7:7d:51:83:e9:0c:cb:
20:0e:9b:58:c3:d2:1c:8d:d1:1b:d3:75:df:d6:8b:
30:b1:81:03:e3:3a:0b:9a:3a:a8:c9:53:32:7a:01:
98:1c:ef:2b:0d:f7:42:ee:8c:f5:69:8e:ae:43:6f:
77:d3:58:3d:5c:03:b2:23:fa:c4:49:e6:0e:91:f6:
35:4c:3a:81:97:ae:ff:07:72:e0:ad:d1:59:5c:33:
10:5f:15:1e:a8:69:7d:43:9b:87:50:0b:5e:43:f1:
73:45:58:88:14:2c:84:e4:16:da:bb:3f:2e:92:ad:
b3:c3:0b:de:04:69:9f:3f:0f:90:27:6f:83:0e:cf:
7b:ca:04:47:a5:cf:4f:77:a2:11:63:90:72:31:58:
78:d1:92:07:ab:95:0a:0c:6e:50:97:9b:52:76:e6:
13:fc:80:db:46:17:2d:a4:cd:bf:73:c2:5f:36:8b:
75:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:11:44:C2:C3:80:0A:A0:BD:F6:1E:9D:6E:DA:72:0E:72:D0:1D:3C
X509v3 Authority Key Identifier:
keyid:03:0B:E9:13:21:07:44:34:C9:E8:20:DB:66:1C:91:CA:62:CC:B0:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AwvpEyEHRDTJ6CDbZhyRymLMsP0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/13df90-71bc-40be-824e-2c40d811fd4e/1/AwvpEyEHRDTJ6CDbZhyRymLMsP0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/13df90-71bc-40be-824e-2c40d811fd4e/1/AwvpEyEHRDTJ6CDbZhyRymLMsP0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:a9:bb:59:92:8b:72:5c:3d:f8:6f:3b:a5:50:94:5d:77:36:
38:fa:29:3f:74:ae:f8:44:d9:10:51:c5:d6:b1:8a:29:8e:1f:
16:52:c5:3b:1d:36:4c:b6:f8:56:45:e9:42:2f:3f:a8:7c:4f:
25:29:db:71:5d:58:d4:8d:75:32:b1:1d:b5:6f:1d:3c:4f:b5:
59:e3:1c:d1:52:68:3c:f2:dc:45:a2:a4:f5:fc:cf:69:da:24:
2e:9b:e0:de:77:a5:e9:8f:d5:2a:59:25:b2:30:3e:a7:92:44:
fc:9a:76:a1:00:c9:bb:a9:1e:23:1e:a3:ba:2c:89:5f:c6:ca:
1f:4a:bc:fa:0a:e6:60:51:b1:9a:de:b8:e4:34:31:c5:98:e9:
98:56:42:cb:03:7d:17:ea:d3:d7:bf:73:1b:c3:76:d5:d2:ab:
d1:67:44:85:19:4b:56:88:43:10:48:46:1a:f2:cc:d5:a7:fa:
e0:81:50:69:57:9b:84:ba:1a:73:bb:29:ab:9d:ba:2d:44:64:
b8:96:a1:2f:b8:cb:88:30:13:62:e9:72:ed:9f:8d:2e:be:d2:
b5:26:4e:db:19:6d:92:d4:2a:f7:35:32:0d:72:d3:0e:24:63:
34:cc:40:9b:8f:77:a0:b2:d5:2a:66:d0:81:df:35:e5:34:45:
16:10:42:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:13:19 2026 by rpki-client