Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/af/2e5c22-3036-4d75-b4b5-854695db9289/1/AWtxVR3aNr6-50NSGHGZW0qwgr0.mft
File: AWtxVR3aNr6-50NSGHGZW0qwgr0.mft (raw, json)
Hash identifier: H/D+C7iGek59D2eU22xQqfL3teqbDHG4dpGOFuz3CTQ=
Subject key identifier: CA:E8:2A:39:BB:A6:EC:1C:97:76:FE:B1:B8:0D:57:DF:D5:D3:CA:45
Authority key identifier: 01:6B:71:55:1D:DA:36:BE:BE:E7:43:52:18:71:99:5B:4A:B0:82:BD
Certificate issuer: /CN=016b71551dda36bebee743521871995b4ab082bd
Certificate serial: 01A0404E51F4BD970BCC40F7DF608DEC2B63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AWtxVR3aNr6-50NSGHGZW0qwgr0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/2e5c22-3036-4d75-b4b5-854695db9289/1/AWtxVR3aNr6-50NSGHGZW0qwgr0.mft
Manifest number: 0161
Signing time: Wed 26 Aug 2026 23:01:09 +0000
Manifest this update: Wed 26 Aug 2026 23:01:09 +0000
Manifest next update: Thu 27 Aug 2026 23:01:09 +0000
Files and hashes: 1: AWtxVR3aNr6-50NSGHGZW0qwgr0.crl (hash: O5dz92tFMKEr1RRkc7sebg2gYzQ8ijINRSDDI92q5gE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/2e5c22-3036-4d75-b4b5-854695db9289/1/AWtxVR3aNr6-50NSGHGZW0qwgr0.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/2e5c22-3036-4d75-b4b5-854695db9289/1/AWtxVR3aNr6-50NSGHGZW0qwgr0.mft
rsync://rpki.ripe.net/repository/DEFAULT/AWtxVR3aNr6-50NSGHGZW0qwgr0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:40:4e:51:f4:bd:97:0b:cc:40:f7:df:60:8d:ec:2b:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=016b71551dda36bebee743521871995b4ab082bd
Validity
Not Before: Aug 26 23:01:09 2026 GMT
Not After : Aug 27 23:01:09 2026 GMT
Subject: CN=cae82a39bba6ec1c9776feb1b80d57dfd5d3ca45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:c9:c4:45:b7:33:da:78:19:08:39:7b:bb:7e:
5d:0d:45:38:70:1b:5a:b4:ec:be:30:cb:61:96:8b:
25:df:33:c2:07:43:d1:ad:e4:fa:07:ad:6b:35:c1:
ea:e9:c8:a7:95:bf:ff:40:2a:a1:3c:68:e5:6d:b7:
74:20:b9:91:04:27:49:b4:97:a9:3c:6d:02:e4:d3:
15:52:bd:d1:62:d5:34:71:1b:6b:91:f7:c3:71:d5:
63:d0:9b:7c:e5:1d:81:65:75:eb:02:3c:43:44:41:
13:e4:5d:54:91:39:b0:f2:1c:fc:02:f8:41:2c:4b:
1d:13:d3:9d:5c:70:09:7f:87:22:34:f3:f7:5e:a3:
d1:28:4e:e7:a7:e0:a9:92:45:6d:df:db:51:b6:b0:
7b:a0:5f:67:0c:01:8c:5a:82:66:8e:94:cb:b2:6a:
a7:5d:31:14:e1:cd:c7:ef:d2:31:7d:61:be:d2:85:
c8:d1:e6:f4:03:dc:70:ed:70:a7:f5:dc:bc:65:ff:
d4:c5:5d:33:0c:34:f1:1e:d3:71:4d:59:42:4b:e8:
1f:3c:cd:fb:7b:b0:63:85:03:cb:70:b6:19:dd:28:
e0:80:ff:65:1c:01:45:50:bc:d5:ff:7f:d1:c1:f4:
ed:66:cf:de:e4:53:cd:5a:09:af:ad:93:e9:79:b3:
ec:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:E8:2A:39:BB:A6:EC:1C:97:76:FE:B1:B8:0D:57:DF:D5:D3:CA:45
X509v3 Authority Key Identifier:
keyid:01:6B:71:55:1D:DA:36:BE:BE:E7:43:52:18:71:99:5B:4A:B0:82:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AWtxVR3aNr6-50NSGHGZW0qwgr0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/2e5c22-3036-4d75-b4b5-854695db9289/1/AWtxVR3aNr6-50NSGHGZW0qwgr0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/2e5c22-3036-4d75-b4b5-854695db9289/1/AWtxVR3aNr6-50NSGHGZW0qwgr0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:d9:bf:e2:f3:90:2f:64:e7:3c:5e:51:31:b0:ba:30:82:5a:
6d:4f:3b:a7:f3:4e:6b:57:f1:8e:96:1e:e4:8a:b8:d6:9f:94:
d0:9b:f3:c0:83:e8:34:39:98:5d:1b:ed:c9:5c:b9:31:c3:e9:
86:ab:e7:c3:34:44:a3:ed:18:88:94:13:e0:b5:23:91:e3:75:
f2:73:0d:e0:d1:4e:25:4d:5d:18:a9:04:04:d6:fc:03:aa:ff:
43:67:8a:84:88:5c:b1:3d:38:96:6a:ad:c4:84:b4:d4:b6:3c:
be:4b:bb:13:8b:8b:3e:c2:c2:12:01:d2:dc:df:7f:a0:30:27:
66:52:05:11:93:43:77:3d:88:5e:21:b9:f7:1b:35:15:01:05:
46:22:d5:46:7a:d0:e2:fd:31:f9:95:db:64:ef:d6:42:c4:3e:
b1:b9:02:2a:7d:be:60:53:1e:cd:b3:56:c2:b0:a1:1c:c5:39:
84:82:2c:bd:b5:48:3f:fa:c3:18:80:e8:8d:d0:d4:eb:da:04:
d7:7b:17:7d:4b:ee:44:c4:be:bf:25:5b:4c:e0:74:ed:44:28:
53:cc:66:3b:cc:6f:f1:49:39:9e:aa:cf:46:55:1b:31:43:96:
28:af:a7:86:0f:f7:0b:07:cb:b3:29:71:21:8b:93:73:a6:69:
4f:56:4b:6a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaBATlH0vZcLzED332CN7CtjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAxNmI3MTU1MWRkYTM2YmViZWU3NDM1MjE4NzE5OTViNGFi
MDgyYmQwHhcNMjYwODI2MjMwMTA5WhcNMjYwODI3MjMwMTA5WjAzMTEwLwYDVQQD
EyhjYWU4MmEzOWJiYTZlYzFjOTc3NmZlYjFiODBkNTdkZmQ1ZDNjYTQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtcnERbcz2ngZCDl7u35dDUU4cBta
tOy+MMthlosl3zPCB0PRreT6B61rNcHq6cinlb//QCqhPGjlbbd0ILmRBCdJtJep
PG0C5NMVUr3RYtU0cRtrkffDcdVj0Jt85R2BZXXrAjxDREET5F1UkTmw8hz8AvhB
LEsdE9OdXHAJf4ciNPP3XqPRKE7np+CpkkVt39tRtrB7oF9nDAGMWoJmjpTLsmqn
XTEU4c3H79IxfWG+0oXI0eb0A9xw7XCn9dy8Zf/UxV0zDDTxHtNxTVlCS+gfPM37
e7BjhQPLcLYZ3SjggP9lHAFFULzV/3/RwfTtZs/e5FPNWgmvrZPpebPspwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMroKjm7puwcl3b+sbgNV9/V08pFMB8GA1UdIwQY
MBaAFAFrcVUd2ja+vudDUhhxmVtKsIK9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQVd0eFZSM2FOcjYtNTBOU0dIR1pXMHF3Z3IwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi8yZTVjMjItMzAzNi00ZDc1LWI0YjUt
ODU0Njk1ZGI5Mjg5LzEvQVd0eFZSM2FOcjYtNTBOU0dIR1pXMHF3Z3IwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZi8yZTVjMjItMzAzNi00ZDc1LWI0YjUtODU0Njk1ZGI5Mjg5
LzEvQVd0eFZSM2FOcjYtNTBOU0dIR1pXMHF3Z3IwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAStm/4vOQ
L2TnPF5RMbC6MIJabU87p/NOa1fxjpYe5Iq41p+U0JvzwIPoNDmYXRvtyVy5McPp
hqvnwzREo+0YiJQT4LUjkeN18nMN4NFOJU1dGKkEBNb8A6r/Q2eKhIhcsT04lmqt
xIS01LY8vku7E4uLPsLCEgHS3N9/oDAnZlIFEZNDdz2IXiG59xs1FQEFRiLVRnrQ
4v0x+ZXbZO/WQsQ+sbkCKn2+YFMezbNWwrChHMU5hIIsvbVIP/rDGIDojdDU69oE
13sXfUvuRMS+vyVbTOB07UQoU8xmO8xv8Uk5nqrPRlUbMUOWKK+nhg/3CwfLsylx
IYuTc6ZpT1ZLag==
-----END CERTIFICATE-----
Generated at Thu Aug 27 06:47:34 2026 by rpki-client