Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c4/f2553c-9bd6-49ae-9bed-1576c6f589c9/1/AWRUygmetS5VVg9dCeh-cxYa5zg.mft
File: AWRUygmetS5VVg9dCeh-cxYa5zg.mft (raw, json)
Hash identifier: hAVMW+yFaPCZMwj9riSqVxRXWLKoh9Z6xwUU4uWKqGw=
Subject key identifier: C0:57:8F:94:25:46:19:AF:D1:52:8E:3E:ED:78:BF:21:12:30:99:AD
Authority key identifier: 01:64:54:CA:09:9E:B5:2E:55:56:0F:5D:09:E8:7E:73:16:1A:E7:38
Certificate issuer: /CN=016454ca099eb52e55560f5d09e87e73161ae738
Certificate serial: 01A13FA78349DC1293DF31684797BCB1A9A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AWRUygmetS5VVg9dCeh-cxYa5zg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/f2553c-9bd6-49ae-9bed-1576c6f589c9/1/AWRUygmetS5VVg9dCeh-cxYa5zg.mft
Manifest number: 0DC4
Signing time: Thu 15 Oct 2026 13:01:44 +0000
Manifest this update: Thu 15 Oct 2026 13:01:44 +0000
Manifest next update: Fri 16 Oct 2026 13:01:44 +0000
Files and hashes: 1: AWRUygmetS5VVg9dCeh-cxYa5zg.crl (hash: nrNJ0e4Qpm7alfpjE3vgpamm4fMU9B+EAAWTxPK+DqY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/f2553c-9bd6-49ae-9bed-1576c6f589c9/1/AWRUygmetS5VVg9dCeh-cxYa5zg.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/f2553c-9bd6-49ae-9bed-1576c6f589c9/1/AWRUygmetS5VVg9dCeh-cxYa5zg.mft
rsync://rpki.ripe.net/repository/DEFAULT/AWRUygmetS5VVg9dCeh-cxYa5zg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 13:01:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3f:a7:83:49:dc:12:93:df:31:68:47:97:bc:b1:a9:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=016454ca099eb52e55560f5d09e87e73161ae738
Validity
Not Before: Oct 15 13:01:44 2026 GMT
Not After : Oct 16 13:01:44 2026 GMT
Subject: CN=c0578f94254619afd1528e3eed78bf21123099ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:b7:32:c0:83:f2:4e:df:b5:3b:f5:2f:96:5f:
7a:73:9f:51:a1:4a:15:56:02:ff:25:62:07:06:6c:
28:75:5e:a4:50:bb:1a:af:90:d5:2d:16:03:83:d4:
08:a2:10:ae:5c:94:dc:c9:34:78:a9:1c:3e:ce:d7:
cc:97:78:45:11:e9:e2:ed:b1:60:09:09:37:32:39:
b4:62:b8:bc:6c:66:02:bc:ac:8d:af:29:20:a4:12:
35:09:f5:6c:7b:0d:d7:9f:e8:db:8b:de:a3:c8:d9:
44:cb:ca:bc:5c:f6:62:cb:f9:72:e4:fd:36:c3:10:
13:95:17:2f:2c:85:bc:a0:92:4d:f3:ad:cc:5b:58:
02:64:c0:1e:0d:8d:8c:67:48:5a:3b:f9:56:46:3c:
68:a8:eb:d9:a8:b0:23:b3:14:70:2c:2e:13:e7:8e:
dc:e2:54:da:df:a3:e7:e0:f7:09:26:7b:d0:8b:2c:
dc:18:80:ef:77:b2:80:fe:dc:17:8a:de:d3:bb:3c:
ac:19:38:97:3e:90:52:17:fa:7d:07:7e:7e:ce:51:
21:2f:7b:80:73:4e:88:fc:d3:a4:ab:00:29:08:e4:
db:6a:85:1b:9f:f0:3f:ed:3f:27:86:80:0e:3c:3e:
b9:cf:c4:9c:90:04:04:43:64:de:c7:62:b6:f6:3e:
17:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:57:8F:94:25:46:19:AF:D1:52:8E:3E:ED:78:BF:21:12:30:99:AD
X509v3 Authority Key Identifier:
keyid:01:64:54:CA:09:9E:B5:2E:55:56:0F:5D:09:E8:7E:73:16:1A:E7:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AWRUygmetS5VVg9dCeh-cxYa5zg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/f2553c-9bd6-49ae-9bed-1576c6f589c9/1/AWRUygmetS5VVg9dCeh-cxYa5zg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/f2553c-9bd6-49ae-9bed-1576c6f589c9/1/AWRUygmetS5VVg9dCeh-cxYa5zg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:b9:76:60:52:e0:b9:65:5d:2c:07:90:1a:eb:4e:d6:c8:e8:
c9:23:b8:05:b8:01:b3:73:98:b6:d1:d6:eb:49:41:d0:f1:47:
1f:45:03:96:1e:78:06:f1:45:b3:83:84:f8:3f:30:0b:0a:06:
1e:24:f2:63:59:67:82:4a:be:db:01:d8:13:b1:b5:e1:70:12:
7e:c6:22:d7:a1:c3:5a:e4:4f:70:ec:e5:a5:3e:95:da:60:65:
46:5d:b7:1c:28:c7:1e:59:05:93:ce:5a:c7:f3:49:e3:bf:10:
55:66:de:44:10:34:d2:2a:fd:79:95:f6:10:99:34:95:45:95:
d1:05:a8:71:43:0b:a7:bd:87:ba:32:c3:a4:d4:e2:75:ea:a7:
dc:dd:aa:c6:c7:01:0c:32:f1:6b:d7:29:ab:56:aa:70:98:e9:
72:6c:2a:cb:71:d8:c6:ba:58:64:80:e3:b0:9c:34:05:ab:cc:
f4:8f:23:95:30:93:ec:ad:8e:03:be:8a:3d:ee:bc:1e:d7:75:
86:9a:c7:82:2f:8c:3b:a5:4a:51:e9:e5:7a:ad:e9:a2:1a:5f:
04:56:06:8a:c4:0c:27:3a:18:c5:4b:20:af:7c:13:1c:af:13:
7c:6e:f6:01:34:79:2d:34:b1:d7:c2:20:f0:f6:fc:15:50:8d:
f0:30:23:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 20:58:09 2026 by rpki-client