Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/c26458-fda8-4f0a-957a-7756438544ca/1/AwsA5gdFAuZTg5H-qxg1goGjJ5s.mft
File: AwsA5gdFAuZTg5H-qxg1goGjJ5s.mft (raw, json)
Hash identifier: 4DiDuwagTDNDhlZIOd+0Sjkg7IITZqtcrt1R4bTqRUc=
Subject key identifier: 49:3E:42:13:B6:1B:2D:BB:FF:4B:93:04:D2:8C:F3:C2:EC:B9:FD:8E
Authority key identifier: 03:0B:00:E6:07:45:02:E6:53:83:91:FE:AB:18:35:82:81:A3:27:9B
Certificate issuer: /CN=030b00e6074502e6538391feab18358281a3279b
Certificate serial: 019D39409749ABB8281551F130A34F11359C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AwsA5gdFAuZTg5H-qxg1goGjJ5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/c26458-fda8-4f0a-957a-7756438544ca/1/AwsA5gdFAuZTg5H-qxg1goGjJ5s.mft
Manifest number: 0468
Signing time: Sun 29 Mar 2026 11:00:27 +0000
Manifest this update: Sun 29 Mar 2026 11:00:27 +0000
Manifest next update: Mon 30 Mar 2026 11:00:27 +0000
Files and hashes: 1: AwsA5gdFAuZTg5H-qxg1goGjJ5s.crl (hash: X+uU+seoRTcpcK0NpATPjr3N7mt0wiVeUvXGkbGlXcI=)
2: CmiC5mJyQYGGKAJggm-od_rF7aY.roa (hash: VDuSSA+oUsQz/2iqadrnhGgyrgM5bD5FatxlCOVAvTw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/c26458-fda8-4f0a-957a-7756438544ca/1/AwsA5gdFAuZTg5H-qxg1goGjJ5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/c26458-fda8-4f0a-957a-7756438544ca/1/AwsA5gdFAuZTg5H-qxg1goGjJ5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/AwsA5gdFAuZTg5H-qxg1goGjJ5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:40:97:49:ab:b8:28:15:51:f1:30:a3:4f:11:35:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=030b00e6074502e6538391feab18358281a3279b
Validity
Not Before: Mar 29 11:00:27 2026 GMT
Not After : Mar 30 11:00:27 2026 GMT
Subject: CN=493e4213b61b2dbbff4b9304d28cf3c2ecb9fd8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:34:ad:c7:73:02:3a:61:4c:51:91:9f:0e:2e:
c7:36:30:39:bc:f9:29:d1:91:a7:6b:b4:48:f1:d7:
4a:e5:57:d7:63:bf:d9:6c:71:c2:c6:12:67:f3:d3:
8f:07:c0:ba:aa:07:f6:b1:f0:2a:47:34:5c:53:d1:
1a:e9:a0:e2:1f:a2:5e:f3:7e:9a:b9:c2:31:3f:b9:
b2:bf:bb:ce:57:f7:12:81:ac:99:6f:50:fc:a3:b1:
65:45:04:a3:72:12:da:1f:f1:d3:93:c7:d5:8f:84:
68:67:1f:9b:65:af:31:97:a6:33:38:9a:b8:e5:80:
ca:f7:65:b8:eb:dc:18:bb:e0:e0:f8:a6:b1:33:f5:
32:7c:b6:8f:ff:47:3a:ce:45:bc:0f:fe:fb:fe:a9:
7e:cb:15:0b:6c:68:c9:c6:b7:b4:46:5b:60:29:72:
19:cd:45:b4:c1:ab:04:65:ab:42:99:80:c3:83:1b:
5f:05:57:32:a6:51:7b:5c:91:27:2e:16:0a:98:ca:
ec:26:da:b3:ac:78:62:a5:0c:eb:a1:e0:aa:1e:84:
3f:fb:a8:de:4a:63:0d:71:db:4b:a8:b9:b6:f8:f4:
a2:67:a6:34:6f:81:a4:4b:43:40:84:a5:24:0e:11:
56:d3:0b:d8:cc:35:47:59:23:31:36:a6:02:34:e9:
75:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:3E:42:13:B6:1B:2D:BB:FF:4B:93:04:D2:8C:F3:C2:EC:B9:FD:8E
X509v3 Authority Key Identifier:
keyid:03:0B:00:E6:07:45:02:E6:53:83:91:FE:AB:18:35:82:81:A3:27:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AwsA5gdFAuZTg5H-qxg1goGjJ5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/c26458-fda8-4f0a-957a-7756438544ca/1/AwsA5gdFAuZTg5H-qxg1goGjJ5s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/c26458-fda8-4f0a-957a-7756438544ca/1/AwsA5gdFAuZTg5H-qxg1goGjJ5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:f1:7b:55:e4:2b:ea:61:f9:04:6f:b2:2e:bb:e9:b3:98:8f:
a2:7d:96:72:33:f5:d2:d1:43:c6:21:8f:8b:1e:08:9d:0e:da:
ba:66:97:4f:79:56:e6:8d:eb:ce:cd:71:a5:21:38:10:7e:ab:
f8:01:98:79:fc:b0:a9:40:72:08:a4:3d:dc:84:1d:ef:09:62:
10:15:b8:55:07:37:4b:58:18:56:d5:fc:2c:d3:6e:93:ae:0f:
7a:48:2c:64:51:6a:f6:03:f2:10:9d:9f:22:4c:ec:f0:4f:4a:
b1:53:dd:4d:73:73:cc:c7:d0:b9:4a:4b:53:e3:68:87:5c:f3:
e9:e1:e3:b3:36:4d:b9:8c:75:fb:14:9e:2f:49:2a:47:33:42:
12:cb:83:e2:f6:ff:69:4b:d2:ad:04:bc:c3:53:e3:16:1e:1b:
00:47:82:d2:1f:b0:e3:6c:16:a5:e3:cd:33:30:46:98:9c:68:
00:b2:b1:10:85:63:6f:91:48:85:39:66:8a:9a:59:69:e7:b0:
7a:47:14:8a:bd:f8:1c:95:e9:8f:0d:43:5a:6e:82:fd:ed:94:
cb:30:9b:4f:4e:86:51:86:ec:69:ba:dd:b2:30:a0:ff:47:7f:
18:15:73:1e:f6:b4:84:1f:33:84:57:be:0d:17:b2:06:24:9d:
bb:84:97:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:27:33 2026 by rpki-client