Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/da/de66a0-a148-4eac-a264-164d4b236ae6/1/AW5k-UAi6UrdFYDuA5HhG2e_pVo.mft
File: AW5k-UAi6UrdFYDuA5HhG2e_pVo.mft (raw, json)
Hash identifier: oAJxEyUavTlBepvwGdgJtV3tz0wSU3vy+VEGRplDH+E=
Subject key identifier: D5:6E:BA:17:BD:6A:7D:24:52:4A:67:B1:82:2F:3A:05:5B:3B:27:22
Authority key identifier: 01:6E:64:F9:40:22:E9:4A:DD:15:80:EE:03:91:E1:1B:67:BF:A5:5A
Certificate issuer: /CN=016e64f94022e94add1580ee0391e11b67bfa55a
Certificate serial: 01A040850DFD51151F22738FA4B00F32A731
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AW5k-UAi6UrdFYDuA5HhG2e_pVo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/de66a0-a148-4eac-a264-164d4b236ae6/1/AW5k-UAi6UrdFYDuA5HhG2e_pVo.mft
Manifest number: 010E
Signing time: Thu 27 Aug 2026 00:00:56 +0000
Manifest this update: Thu 27 Aug 2026 00:00:56 +0000
Manifest next update: Fri 28 Aug 2026 00:00:56 +0000
Files and hashes: 1: AW5k-UAi6UrdFYDuA5HhG2e_pVo.crl (hash: urMHnHZXnIp0POETKqaM+gchwaCtsjalFdz/CNh0e30=)
2: JSbL4a4S2OSMlezz2eB_WGFeLoM.roa (hash: JWOr6A62VPGr8Z3wejaGhvp4bUBldEfEf/frsYKtaLw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/de66a0-a148-4eac-a264-164d4b236ae6/1/AW5k-UAi6UrdFYDuA5HhG2e_pVo.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/de66a0-a148-4eac-a264-164d4b236ae6/1/AW5k-UAi6UrdFYDuA5HhG2e_pVo.mft
rsync://rpki.ripe.net/repository/DEFAULT/AW5k-UAi6UrdFYDuA5HhG2e_pVo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 20:12:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:40:85:0d:fd:51:15:1f:22:73:8f:a4:b0:0f:32:a7:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=016e64f94022e94add1580ee0391e11b67bfa55a
Validity
Not Before: Aug 27 00:00:56 2026 GMT
Not After : Aug 28 00:00:56 2026 GMT
Subject: CN=d56eba17bd6a7d24524a67b1822f3a055b3b2722
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:eb:ed:0c:33:63:b7:c3:36:fa:96:27:29:51:
b9:76:96:89:f9:81:a9:1e:04:36:5f:16:e9:9e:3a:
25:b6:b4:b9:0a:10:23:bf:6e:ba:74:d6:a3:63:42:
14:e5:6b:83:6e:8a:d0:2f:00:d1:d4:36:d7:23:ca:
d3:b3:ea:dd:8e:de:54:ab:00:f9:2b:48:3e:35:9f:
80:cf:06:94:d3:1d:34:da:b8:f6:b8:f4:55:56:58:
a1:4b:5a:c3:a1:58:95:f6:47:80:1b:c9:dc:2d:53:
66:4a:64:35:90:a8:62:96:f8:cf:74:4a:c3:9a:d1:
c6:73:a9:2c:86:4f:23:f6:c8:86:40:82:10:55:0a:
46:57:a3:bc:4a:db:74:a8:cf:2d:e0:5b:0c:2e:5c:
fa:7f:3f:3a:4a:1b:ef:61:c7:dc:10:f1:8a:05:3d:
a6:dd:75:2f:cf:ba:43:50:77:44:f7:a6:c8:82:54:
2d:03:98:5d:b3:e2:df:12:ef:00:b9:df:e6:34:df:
08:8d:26:90:6a:92:2d:d5:34:3e:6b:bb:7e:1d:ff:
30:a4:af:45:c6:8c:65:10:f1:60:d0:fd:8e:a3:82:
93:07:5c:dc:b1:f6:7b:d1:71:55:09:73:70:e6:76:
19:75:13:8d:f4:e8:69:62:ab:05:dc:10:38:1f:cb:
bc:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:6E:BA:17:BD:6A:7D:24:52:4A:67:B1:82:2F:3A:05:5B:3B:27:22
X509v3 Authority Key Identifier:
keyid:01:6E:64:F9:40:22:E9:4A:DD:15:80:EE:03:91:E1:1B:67:BF:A5:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AW5k-UAi6UrdFYDuA5HhG2e_pVo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/de66a0-a148-4eac-a264-164d4b236ae6/1/AW5k-UAi6UrdFYDuA5HhG2e_pVo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/de66a0-a148-4eac-a264-164d4b236ae6/1/AW5k-UAi6UrdFYDuA5HhG2e_pVo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:2e:53:96:db:47:4a:eb:2c:4b:70:d0:c5:c5:ce:31:c0:1e:
87:fc:f1:84:5d:29:27:80:fc:6e:e3:a2:19:64:24:d9:d1:90:
d0:e8:4d:45:87:f3:fb:b3:33:a9:a5:77:22:db:3e:00:3c:25:
ec:db:67:74:b3:76:cb:40:87:9f:88:68:85:ee:9a:bf:d7:2a:
1a:88:17:09:26:23:47:f3:5d:bd:6b:8e:2f:60:ff:2c:f1:cc:
d7:66:f5:bf:75:8f:f2:6b:77:24:5b:40:19:65:7a:ec:16:b4:
5d:19:b5:fc:10:02:0a:d7:9c:73:05:9c:45:fd:49:63:71:9c:
83:a6:e5:4d:9d:74:bc:7a:89:70:22:2c:bc:ff:e3:1d:e4:c4:
82:55:fc:c7:95:42:50:27:71:bb:bf:1f:8a:17:6d:1c:46:3a:
be:64:9b:3c:81:cd:8c:c7:cc:c8:3c:65:62:84:db:cb:c6:06:
cb:64:b3:f1:8f:b4:c2:88:b8:7a:1f:02:66:6a:38:ae:10:cb:
51:c2:9c:98:9f:13:25:ff:0b:95:79:69:86:98:34:f0:46:6a:
5d:61:9c:56:5f:04:ce:7a:a3:1f:77:b3:80:c3:bf:46:8b:72:
97:53:c2:30:5b:de:4e:92:c8:b2:59:a1:70:bf:b8:97:30:09:
b5:c7:33:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 04:49:58 2026 by rpki-client