Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/25/35b4c5-297b-420c-822a-169e537a890c/1/AwSWBHN8eL0k27Jeszb0pBbmRfY.mft
File: AwSWBHN8eL0k27Jeszb0pBbmRfY.mft (raw, json)
Hash identifier: faviwPX43U/4UZHTuXiTDrY47lmVNtQACgachCzqQlM=
Subject key identifier: 42:BE:23:BC:B1:2A:67:CE:9B:44:38:C3:5C:09:A9:61:75:57:D6:3F
Authority key identifier: 03:04:96:04:73:7C:78:BD:24:DB:B2:5E:B3:36:F4:A4:16:E6:45:F6
Certificate issuer: /CN=03049604737c78bd24dbb25eb336f4a416e645f6
Certificate serial: 01A1464DAC667A15A3C85803B18E44A43B55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AwSWBHN8eL0k27Jeszb0pBbmRfY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/35b4c5-297b-420c-822a-169e537a890c/1/AwSWBHN8eL0k27Jeszb0pBbmRfY.mft
Manifest number: 0861
Signing time: Fri 16 Oct 2026 20:00:57 +0000
Manifest this update: Fri 16 Oct 2026 20:00:57 +0000
Manifest next update: Sat 17 Oct 2026 20:00:57 +0000
Files and hashes: 1: 0N508Xe1lkHiB3GV4gBTEAMYSg0.roa (hash: 9ysDCSkav8KkWk0caqcKxtu4CxhKYt/csAkRzD0sTbY=)
2: AwSWBHN8eL0k27Jeszb0pBbmRfY.crl (hash: WhMQGyr88bsfvzehuS3/+hb8VX+I7I4/2taY9af8QWo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/35b4c5-297b-420c-822a-169e537a890c/1/AwSWBHN8eL0k27Jeszb0pBbmRfY.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/35b4c5-297b-420c-822a-169e537a890c/1/AwSWBHN8eL0k27Jeszb0pBbmRfY.mft
rsync://rpki.ripe.net/repository/DEFAULT/AwSWBHN8eL0k27Jeszb0pBbmRfY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 17 Oct 2026 20:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:46:4d:ac:66:7a:15:a3:c8:58:03:b1:8e:44:a4:3b:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03049604737c78bd24dbb25eb336f4a416e645f6
Validity
Not Before: Oct 16 20:00:57 2026 GMT
Not After : Oct 17 20:00:57 2026 GMT
Subject: CN=42be23bcb12a67ce9b4438c35c09a9617557d63f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:61:55:07:58:97:5a:98:18:e7:fa:5e:94:23:
d4:18:9a:9b:24:2f:6f:8b:96:e3:f5:a1:ec:14:b7:
e5:cf:00:d9:53:ab:3e:c2:71:f2:cb:9a:cf:f5:b6:
7d:5d:0c:78:a3:fc:4e:06:8d:68:cd:5b:4d:59:73:
84:0a:f6:9a:eb:9c:2f:63:54:4a:d0:f3:75:41:ef:
97:f6:77:25:fe:bf:dc:85:d7:85:ed:02:46:2d:54:
26:9f:49:44:79:95:a9:27:bf:8f:c3:2d:76:58:aa:
5a:03:6b:1f:00:06:8d:3e:6f:f5:d6:6d:40:b8:2b:
59:0b:7f:f5:96:3e:36:d5:e0:35:ed:1a:d7:67:86:
1d:a8:75:83:da:96:34:24:0b:d8:8a:76:06:41:5f:
e3:13:98:ba:7a:ba:77:b7:e0:48:fb:e0:38:e3:b9:
ee:64:b2:ad:6e:df:a2:13:e9:a3:8b:3e:71:bf:c0:
d8:a0:ee:82:f6:bc:86:72:79:cb:50:28:cc:f1:55:
b3:d2:43:43:8c:ee:7e:e9:1b:ef:4d:b1:86:42:95:
a5:67:11:54:52:93:8e:0e:b3:6b:5f:f3:b5:88:68:
b3:4b:3b:1a:02:17:0f:6a:3b:56:c3:09:ad:bf:22:
65:fc:7b:b4:35:6f:c2:5c:16:2d:2e:4c:08:32:88:
53:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:BE:23:BC:B1:2A:67:CE:9B:44:38:C3:5C:09:A9:61:75:57:D6:3F
X509v3 Authority Key Identifier:
keyid:03:04:96:04:73:7C:78:BD:24:DB:B2:5E:B3:36:F4:A4:16:E6:45:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AwSWBHN8eL0k27Jeszb0pBbmRfY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/35b4c5-297b-420c-822a-169e537a890c/1/AwSWBHN8eL0k27Jeszb0pBbmRfY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/35b4c5-297b-420c-822a-169e537a890c/1/AwSWBHN8eL0k27Jeszb0pBbmRfY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:3f:19:43:03:5d:ad:4a:6b:e0:87:eb:4f:8c:10:34:1f:a1:
4c:8b:20:f0:8f:91:a5:dc:c6:c9:13:5d:de:7a:c1:1f:23:60:
d5:9c:26:37:f8:41:bb:e8:f7:f7:ab:8f:82:23:a4:8c:19:b3:
3e:c1:fa:94:ec:54:e3:be:98:e2:03:48:a5:4f:dc:49:cc:96:
f1:50:52:13:38:77:fe:58:d3:52:0d:33:36:c9:4b:77:bb:dc:
90:08:99:8b:49:b0:b6:2d:1e:0c:dd:51:01:76:d6:94:27:4a:
d8:0a:08:c5:58:f8:1f:36:8c:7c:71:1f:3b:8a:dd:cd:3a:1f:
ec:72:16:68:d6:e3:79:8c:6d:67:50:6a:0f:a4:e8:6e:0e:c5:
8c:94:42:95:a6:8a:59:c9:08:88:89:ea:7f:09:05:44:df:c4:
a3:cb:4d:13:1b:b3:ef:31:d7:89:bf:dd:d1:42:d2:08:22:c2:
3d:c1:3b:1a:dd:56:6b:69:63:91:ab:65:30:8d:41:d1:9a:ae:
5b:e2:9b:f3:f4:18:b6:28:ff:e6:73:67:39:d7:73:69:ce:a8:
ee:76:8e:a6:3b:32:7c:3c:33:04:ce:9d:46:29:fd:9b:e6:6f:
29:7d:30:c9:3f:53:50:05:e6:da:5b:28:9a:34:0c:1b:c9:80:
ac:f5:f7:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 06:49:27 2026 by rpki-client