Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/35b4c5-297b-420c-822a-169e537a890c/1/AwSWBHN8eL0k27Jeszb0pBbmRfY.mft
File: AwSWBHN8eL0k27Jeszb0pBbmRfY.mft (raw, json)
Hash identifier: XMEmxXqvCj4Ytj/qcL0KF4gSWh3CX6nu8p9TdoQfw74=
Subject key identifier: 29:76:04:70:2E:69:B3:FF:03:D9:68:32:5C:69:7C:24:1A:9D:3D:4C
Authority key identifier: 03:04:96:04:73:7C:78:BD:24:DB:B2:5E:B3:36:F4:A4:16:E6:45:F6
Certificate issuer: /CN=03049604737c78bd24dbb25eb336f4a416e645f6
Certificate serial: 019D39418B5ADCE99D6F5C6682A559272312
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AwSWBHN8eL0k27Jeszb0pBbmRfY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/35b4c5-297b-420c-822a-169e537a890c/1/AwSWBHN8eL0k27Jeszb0pBbmRfY.mft
Manifest number: 0648
Signing time: Sun 29 Mar 2026 11:01:29 +0000
Manifest this update: Sun 29 Mar 2026 11:01:29 +0000
Manifest next update: Mon 30 Mar 2026 11:01:29 +0000
Files and hashes: 1: 0N508Xe1lkHiB3GV4gBTEAMYSg0.roa (hash: 9ysDCSkav8KkWk0caqcKxtu4CxhKYt/csAkRzD0sTbY=)
2: AwSWBHN8eL0k27Jeszb0pBbmRfY.crl (hash: 0tMMZdLmB2tijz55hixjxk7Vsh4N8O9zybFiJ6TLT9M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/35b4c5-297b-420c-822a-169e537a890c/1/AwSWBHN8eL0k27Jeszb0pBbmRfY.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/35b4c5-297b-420c-822a-169e537a890c/1/AwSWBHN8eL0k27Jeszb0pBbmRfY.mft
rsync://rpki.ripe.net/repository/DEFAULT/AwSWBHN8eL0k27Jeszb0pBbmRfY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:41:8b:5a:dc:e9:9d:6f:5c:66:82:a5:59:27:23:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03049604737c78bd24dbb25eb336f4a416e645f6
Validity
Not Before: Mar 29 11:01:29 2026 GMT
Not After : Mar 30 11:01:29 2026 GMT
Subject: CN=297604702e69b3ff03d968325c697c241a9d3d4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:41:63:3f:e4:58:73:43:b2:5c:c9:3a:f4:70:
7a:8f:97:04:1a:92:9e:d1:32:87:d9:60:23:69:93:
02:66:72:d9:17:8c:46:98:3a:da:a3:0e:09:91:5f:
12:97:44:e8:20:3a:db:5c:12:97:f5:c1:5d:8e:b9:
14:cc:ea:26:17:d9:2e:39:a7:30:79:c0:0a:ea:99:
c1:42:c8:cb:f8:9a:6b:cb:95:60:cf:59:1f:43:f0:
de:9c:18:50:58:ca:1f:fe:96:d3:a5:85:44:39:1e:
a7:b1:3f:49:fe:08:7a:12:b0:a5:8e:03:bc:e4:c1:
e9:15:86:87:2f:9f:f9:9c:6c:82:1f:4e:cd:e3:87:
47:a2:5b:83:4b:c0:a1:ef:1f:aa:d4:6a:68:54:7f:
03:7e:c8:50:e0:22:7e:31:59:6d:e6:27:4f:e7:4c:
47:c5:d3:07:c2:c2:a8:08:fc:8d:82:10:d3:ad:56:
ef:79:93:28:c1:cf:af:f5:a5:6a:29:de:44:a1:74:
68:94:51:bc:b2:fd:0e:7c:53:c4:6f:24:f5:23:c6:
10:b3:0e:4e:3e:e9:68:78:c2:ee:23:d9:4a:57:25:
6f:55:d5:76:ca:c2:42:19:19:19:79:6b:3c:77:1f:
a2:66:03:fd:72:5a:dc:9a:37:93:7d:b8:7a:3f:59:
ee:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:76:04:70:2E:69:B3:FF:03:D9:68:32:5C:69:7C:24:1A:9D:3D:4C
X509v3 Authority Key Identifier:
keyid:03:04:96:04:73:7C:78:BD:24:DB:B2:5E:B3:36:F4:A4:16:E6:45:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AwSWBHN8eL0k27Jeszb0pBbmRfY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/35b4c5-297b-420c-822a-169e537a890c/1/AwSWBHN8eL0k27Jeszb0pBbmRfY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/35b4c5-297b-420c-822a-169e537a890c/1/AwSWBHN8eL0k27Jeszb0pBbmRfY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:a0:be:8c:31:1d:93:96:5a:3c:7a:2a:21:ea:c9:52:4b:ee:
b5:c5:00:53:1e:6f:48:c4:8f:ad:e4:2f:d6:4d:17:5a:55:ba:
a7:48:88:ed:84:a6:60:b8:d8:bf:96:ec:66:fa:a4:87:f3:7c:
bd:30:62:2d:3f:d6:02:5f:15:fa:28:3e:c2:67:cf:a2:a3:77:
58:1f:d1:08:f2:20:f4:a2:07:95:0d:63:ce:ba:8e:7b:c6:79:
47:3c:d1:88:39:ca:9c:5f:68:20:10:c8:5c:62:77:bc:3d:d4:
60:89:73:4f:fd:72:79:67:d5:0c:ea:42:62:20:14:e0:79:32:
84:2c:f2:83:bf:29:a6:c2:0f:dd:ee:19:c2:e3:2d:27:bd:36:
e7:f5:28:af:b7:79:ac:bd:92:af:3f:58:56:13:47:dc:d5:e8:
e6:c1:86:34:2e:02:f8:49:86:56:31:ef:b7:34:95:e5:a1:ca:
12:01:66:3e:98:77:94:09:ad:bb:ba:aa:b0:81:cd:f7:67:db:
8c:5b:46:0e:38:81:14:11:e6:97:a3:4d:78:94:7c:5e:a3:82:
99:73:59:5a:ab:7a:07:ee:36:7e:be:2a:2e:0f:22:ed:98:ad:
aa:0a:b3:c0:92:ce:e4:12:a2:0c:d3:9e:98:11:1a:79:2f:64:
d4:40:5c:59
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05QYta3Omdb1xmgqVZJyMSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAzMDQ5NjA0NzM3Yzc4YmQyNGRiYjI1ZWIzMzZmNGE0MTZl
NjQ1ZjYwHhcNMjYwMzI5MTEwMTI5WhcNMjYwMzMwMTEwMTI5WjAzMTEwLwYDVQQD
EygyOTc2MDQ3MDJlNjliM2ZmMDNkOTY4MzI1YzY5N2MyNDFhOWQzZDRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAskFjP+RYc0OyXMk69HB6j5cEGpKe
0TKH2WAjaZMCZnLZF4xGmDraow4JkV8Sl0ToIDrbXBKX9cFdjrkUzOomF9kuOacw
ecAK6pnBQsjL+Jpry5Vgz1kfQ/DenBhQWMof/pbTpYVEOR6nsT9J/gh6ErCljgO8
5MHpFYaHL5/5nGyCH07N44dHoluDS8Ch7x+q1GpoVH8DfshQ4CJ+MVlt5idP50xH
xdMHwsKoCPyNghDTrVbveZMowc+v9aVqKd5EoXRolFG8sv0OfFPEbyT1I8YQsw5O
PuloeMLuI9lKVyVvVdV2ysJCGRkZeWs8dx+iZgP9clrcmjeTfbh6P1nuzwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCl2BHAuabP/A9loMlxpfCQanT1MMB8GA1UdIwQY
MBaAFAMElgRzfHi9JNuyXrM29KQW5kX2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQXdTV0JITjhlTDBrMjdKZXN6YjBwQmJtUmZZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS8zNWI0YzUtMjk3Yi00MjBjLTgyMmEt
MTY5ZTUzN2E4OTBjLzEvQXdTV0JITjhlTDBrMjdKZXN6YjBwQmJtUmZZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNS8zNWI0YzUtMjk3Yi00MjBjLTgyMmEtMTY5ZTUzN2E4OTBj
LzEvQXdTV0JITjhlTDBrMjdKZXN6YjBwQmJtUmZZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARKC+jDEd
k5ZaPHoqIerJUkvutcUAUx5vSMSPreQv1k0XWlW6p0iI7YSmYLjYv5bsZvqkh/N8
vTBiLT/WAl8V+ig+wmfPoqN3WB/RCPIg9KIHlQ1jzrqOe8Z5RzzRiDnKnF9oIBDI
XGJ3vD3UYIlzT/1yeWfVDOpCYiAU4HkyhCzyg78ppsIP3e4ZwuMtJ7025/Uor7d5
rL2Srz9YVhNH3NXo5sGGNC4C+EmGVjHvtzSV5aHKEgFmPph3lAmtu7qqsIHN92fb
jFtGDjiBFBHml6NNeJR8XqOCmXNZWqt6B+42fr4qLg8i7ZitqgqzwJLO5BKiDNOe
mBEaeS9k1EBcWQ==
-----END CERTIFICATE-----
Generated at Sun Mar 29 16:26:05 2026 by rpki-client