Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/f2553c-9bd6-49ae-9bed-1576c6f589c9/1/AWRUygmetS5VVg9dCeh-cxYa5zg.mft
File: AWRUygmetS5VVg9dCeh-cxYa5zg.mft (raw, json)
Hash identifier: cxaQ7Nz9kJDkQA03LqBombuSEQc9RRAyyMK9v8g/Glg=
Subject key identifier: 90:45:79:16:40:E6:05:CA:DC:80:AA:EE:69:5A:C2:3C:88:FF:B1:E4
Authority key identifier: 01:64:54:CA:09:9E:B5:2E:55:56:0F:5D:09:E8:7E:73:16:1A:E7:38
Certificate issuer: /CN=016454ca099eb52e55560f5d09e87e73161ae738
Certificate serial: 019D3A1C5B5417F1F79CBFDBF806D1E1D403
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AWRUygmetS5VVg9dCeh-cxYa5zg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/f2553c-9bd6-49ae-9bed-1576c6f589c9/1/AWRUygmetS5VVg9dCeh-cxYa5zg.mft
Manifest number: 0BAE
Signing time: Sun 29 Mar 2026 15:00:30 +0000
Manifest this update: Sun 29 Mar 2026 15:00:30 +0000
Manifest next update: Mon 30 Mar 2026 15:00:30 +0000
Files and hashes: 1: AWRUygmetS5VVg9dCeh-cxYa5zg.crl (hash: WX4vYKer5aeFV3B3gI0w3lxn0qZFLk2T2bO9Xcvsgsc=)
2: K6q6EsM1CavuOYyARfp1XcUUEVQ.roa (hash: Xi5EDv6jv4B5PT+szJmGPSgtZ1Lgdt1o2yppeSgzgSY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/f2553c-9bd6-49ae-9bed-1576c6f589c9/1/AWRUygmetS5VVg9dCeh-cxYa5zg.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/f2553c-9bd6-49ae-9bed-1576c6f589c9/1/AWRUygmetS5VVg9dCeh-cxYa5zg.mft
rsync://rpki.ripe.net/repository/DEFAULT/AWRUygmetS5VVg9dCeh-cxYa5zg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:1c:5b:54:17:f1:f7:9c:bf:db:f8:06:d1:e1:d4:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=016454ca099eb52e55560f5d09e87e73161ae738
Validity
Not Before: Mar 29 15:00:30 2026 GMT
Not After : Mar 30 15:00:30 2026 GMT
Subject: CN=9045791640e605cadc80aaee695ac23c88ffb1e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:18:75:de:41:08:b9:27:68:3d:8c:e0:12:49:
c9:e9:ea:30:8d:69:ee:6a:25:a0:f7:7c:ba:f1:af:
03:da:8d:77:be:ac:47:b3:97:8d:27:c7:53:90:ad:
89:46:67:26:95:23:ae:ec:68:f8:bb:a7:2a:a5:80:
e2:f4:30:16:a1:3d:ca:60:44:39:be:4d:08:c8:41:
67:e7:69:33:9c:46:3a:30:21:d4:77:f0:76:31:36:
77:ff:3d:f7:49:30:1a:c9:99:a9:2d:83:73:f4:87:
a1:77:4d:68:92:b9:24:f4:9d:e5:1d:95:42:2a:5e:
d4:08:c9:b1:19:ad:06:97:73:fe:4e:a1:7d:41:b9:
a9:8a:e0:55:39:04:70:40:05:5a:2c:29:c6:08:10:
09:4f:08:60:98:11:bb:3e:91:3c:0d:65:87:6a:73:
39:e2:d8:b0:06:4e:0c:58:8d:1c:ee:0a:db:9e:ff:
21:e3:f9:d8:b4:d5:99:8d:13:da:2c:8b:c8:81:c9:
65:b7:13:38:72:1f:4d:6c:7d:9f:d3:d2:74:7a:a7:
57:6b:e5:8c:b4:70:91:64:e1:6a:e9:03:54:81:6b:
24:e0:a6:83:44:90:c6:fe:fc:21:9e:a2:0d:99:68:
41:34:12:4f:ce:b5:b3:11:6e:0c:3c:55:bb:0c:24:
f1:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:45:79:16:40:E6:05:CA:DC:80:AA:EE:69:5A:C2:3C:88:FF:B1:E4
X509v3 Authority Key Identifier:
keyid:01:64:54:CA:09:9E:B5:2E:55:56:0F:5D:09:E8:7E:73:16:1A:E7:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AWRUygmetS5VVg9dCeh-cxYa5zg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/f2553c-9bd6-49ae-9bed-1576c6f589c9/1/AWRUygmetS5VVg9dCeh-cxYa5zg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/f2553c-9bd6-49ae-9bed-1576c6f589c9/1/AWRUygmetS5VVg9dCeh-cxYa5zg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:a0:63:e1:f5:c3:aa:d9:d0:83:a2:36:ab:24:2e:0a:a3:8c:
db:75:b0:15:98:20:bb:64:56:ea:e1:4c:f6:e7:a5:17:16:8f:
89:2a:63:b8:31:98:e5:a9:a6:66:76:07:71:58:a8:c8:b0:02:
23:b7:f0:64:59:9d:35:47:eb:37:91:6d:6a:f8:8a:9a:3a:ca:
04:11:ca:1b:66:e3:9f:df:ff:e0:18:57:ab:ca:ba:1d:40:fd:
bd:84:79:13:15:0d:8d:13:62:ec:c9:0d:1d:77:59:91:12:11:
f7:2b:98:8a:b8:ff:34:d4:69:cd:b3:f2:fd:cb:49:9e:d4:6a:
32:a2:9c:cb:c4:00:8d:fe:23:a1:91:f9:dc:18:74:00:e7:86:
b0:c5:12:f8:38:b9:92:00:72:29:d9:65:94:e7:fe:8d:d5:42:
61:e5:b4:f4:73:32:dc:e8:c6:3a:cb:bf:e0:9e:59:da:8c:86:
98:31:e7:75:db:41:7e:f9:89:16:a0:31:3b:94:5b:51:f2:e0:
bd:75:a6:bc:71:a5:cf:06:d8:05:01:ec:35:04:e5:c7:d8:e1:
f9:2e:8b:84:a2:2e:c9:71:5a:a7:88:41:ac:19:22:65:91:99:
fb:00:9f:6e:f0:7e:61:6f:02:9d:57:63:39:2f:c3:b0:2c:30:
8d:10:3b:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:02:03 2026 by rpki-client