Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/6a4e57-fbe3-4bc2-b8a5-dc8fcc6bdaaa/1/pAwa1Ue5Pr9lXFgEON-lrkJ8ZRE.mft
File: pAwa1Ue5Pr9lXFgEON-lrkJ8ZRE.mft (raw, json)
Hash identifier: 3bOLLiHkZQiM0YrR1HkZulMs72Lk3kwGFUFp/bqo1QM=
Subject key identifier: 50:D5:DD:9C:F9:21:BF:1F:22:2D:01:BB:63:3F:D3:F7:9A:10:5C:E7
Authority key identifier: A4:0C:1A:D5:47:B9:3E:BF:65:5C:58:04:38:DF:A5:AE:42:7C:65:11
Certificate issuer: /CN=a40c1ad547b93ebf655c580438dfa5ae427c6511
Certificate serial: 019D3A53B034D8A0C28AE5CA7832E8F479C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pAwa1Ue5Pr9lXFgEON-lrkJ8ZRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/6a4e57-fbe3-4bc2-b8a5-dc8fcc6bdaaa/1/pAwa1Ue5Pr9lXFgEON-lrkJ8ZRE.mft
Manifest number: 0EDF
Signing time: Sun 29 Mar 2026 16:00:56 +0000
Manifest this update: Sun 29 Mar 2026 16:00:56 +0000
Manifest next update: Mon 30 Mar 2026 16:00:56 +0000
Files and hashes: 1: _lqYoZCtbgCjPqgBQS1sChiV3po.roa (hash: DngSWjpo0gMX1VJjUcfS5UeVdo84wIcXiRvQtRs7PEI=)
2: pAwa1Ue5Pr9lXFgEON-lrkJ8ZRE.crl (hash: fLn7c8w3Fn+Q6eioh5I3fd8KtC4hHM+lFpe2kX724xY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/6a4e57-fbe3-4bc2-b8a5-dc8fcc6bdaaa/1/pAwa1Ue5Pr9lXFgEON-lrkJ8ZRE.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/6a4e57-fbe3-4bc2-b8a5-dc8fcc6bdaaa/1/pAwa1Ue5Pr9lXFgEON-lrkJ8ZRE.mft
rsync://rpki.ripe.net/repository/DEFAULT/pAwa1Ue5Pr9lXFgEON-lrkJ8ZRE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 16:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:53:b0:34:d8:a0:c2:8a:e5:ca:78:32:e8:f4:79:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a40c1ad547b93ebf655c580438dfa5ae427c6511
Validity
Not Before: Mar 29 16:00:56 2026 GMT
Not After : Mar 30 16:00:56 2026 GMT
Subject: CN=50d5dd9cf921bf1f222d01bb633fd3f79a105ce7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:be:73:2f:da:1e:c5:73:c4:46:55:b5:8e:5f:
0e:36:a7:f4:4d:98:29:d7:18:50:46:45:b4:ad:df:
88:0e:33:ec:a9:e8:1e:79:1c:6c:08:db:e0:29:82:
c9:63:78:b3:6f:cb:3f:7a:d4:2b:ba:21:aa:72:db:
76:d8:9a:10:12:cc:05:03:6c:b7:ae:3d:d7:97:d1:
e9:51:64:b1:66:6f:10:28:29:84:d9:3f:05:f4:8b:
7b:a5:82:0f:cc:b5:8f:cb:4d:79:c8:b3:ab:53:53:
49:09:a1:71:9b:76:cc:54:3b:38:64:f6:86:9a:3a:
8f:95:cf:4d:6b:39:83:f6:7e:e8:40:b5:f3:1c:89:
3a:e8:c7:e0:54:2a:11:10:5f:71:54:9d:ea:5d:00:
1d:24:cb:02:8f:32:39:c4:79:d6:f1:77:1d:2f:25:
6e:64:37:38:4a:b0:3c:a3:71:22:6e:3d:ed:53:5b:
f3:a0:0e:80:0c:ac:ae:ae:c4:b7:91:46:18:69:f9:
4c:a4:9c:a9:6a:f3:9b:ef:c5:75:11:af:2a:66:13:
33:c7:e8:f8:ac:3e:76:04:1e:57:37:99:e9:1c:bd:
99:7c:36:64:aa:b1:73:8d:95:d3:e0:74:0c:71:e5:
c9:9c:47:92:72:ff:db:da:90:52:b8:df:4a:bd:6b:
60:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:D5:DD:9C:F9:21:BF:1F:22:2D:01:BB:63:3F:D3:F7:9A:10:5C:E7
X509v3 Authority Key Identifier:
keyid:A4:0C:1A:D5:47:B9:3E:BF:65:5C:58:04:38:DF:A5:AE:42:7C:65:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pAwa1Ue5Pr9lXFgEON-lrkJ8ZRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/6a4e57-fbe3-4bc2-b8a5-dc8fcc6bdaaa/1/pAwa1Ue5Pr9lXFgEON-lrkJ8ZRE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/6a4e57-fbe3-4bc2-b8a5-dc8fcc6bdaaa/1/pAwa1Ue5Pr9lXFgEON-lrkJ8ZRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:8b:15:80:16:b4:ca:9b:09:96:e5:b1:94:9d:56:12:f9:2b:
e5:50:2c:bb:93:19:2e:40:fd:1f:92:84:4b:a9:21:16:08:9e:
38:fe:27:42:2a:c2:c2:7a:c8:c5:ea:c5:55:a0:24:2f:aa:f9:
f0:e5:40:0c:c8:3a:71:c3:8f:bf:e0:06:12:7b:34:c8:8f:8c:
e6:6e:27:08:e0:e0:6a:a7:0e:4b:28:32:b9:af:3d:b0:d5:e4:
59:0a:e5:4b:ba:3f:5b:c3:7e:44:a4:10:ac:fa:a7:82:a5:e5:
c1:1b:bc:27:97:7e:f6:76:c2:fa:4a:f9:bd:ec:23:80:e3:d9:
09:ae:a8:40:4d:0c:c7:57:bd:1e:c7:b2:e4:b5:bd:14:1c:5b:
c1:a9:db:70:77:96:08:89:af:11:74:88:95:2e:6d:2c:ee:7d:
82:1c:31:9b:f4:d1:54:c9:bd:ec:03:11:82:bd:f2:bd:53:cd:
d1:c0:1c:d8:23:20:74:70:be:df:4e:34:ab:70:2d:60:55:29:
de:29:5c:7b:6f:fa:88:c0:8b:85:26:7c:de:e6:ca:ff:bd:26:
b6:a0:3f:42:0d:a9:f1:c8:01:9f:74:30:d5:2b:23:f1:14:8b:
af:1e:dc:00:f6:67:9f:4c:63:09:1a:07:f2:ae:bf:93:da:dd:
f3:87:1f:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:53:52 2026 by rpki-client