
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/c4e5a0-8219-4ff9-8287-1f4bea23e4c7/1/AWJv_YAOr6M2vfNDFB8D98OTw2Q.mft
File: AWJv_YAOr6M2vfNDFB8D98OTw2Q.mft (raw, json)
Hash identifier: m2TnRoigfMxsSGYYvbjY+paLUWtnjB3CJNJ7YL7g+4Q=
Subject key identifier: 2C:56:70:97:55:4C:00:12:CC:5F:17:EE:FC:0B:C3:09:06:93:AF:CC
Authority key identifier: 01:62:6F:FD:80:0E:AF:A3:36:BD:F3:43:14:1F:03:F7:C3:93:C3:64
Certificate issuer: /CN=01626ffd800eafa336bdf343141f03f7c393c364
Certificate serial: 019CE66D504EF6C96C182D767F0298A82244
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AWJv_YAOr6M2vfNDFB8D98OTw2Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/c4e5a0-8219-4ff9-8287-1f4bea23e4c7/1/AWJv_YAOr6M2vfNDFB8D98OTw2Q.mft
Manifest number: 15A8
Signing time: Fri 13 Mar 2026 09:00:49 +0000
Manifest this update: Fri 13 Mar 2026 09:00:49 +0000
Manifest next update: Sat 14 Mar 2026 09:00:49 +0000
Files and hashes: 1: 0Ila6nByysxmPMkIfb6WYVcnTb0.roa (hash: lMnanUWXHw6aHUoVsi1RbAw8jkgIeDAu7ZezJqSyIEQ=)
2: 1-l_Tvv8bwfQF7A1LSsvfeyqRDJs.roa (hash: LFWWbBQi+75Z1LKfVRLZ5WcspH2mWTQHRkSS/kiDDGA=)
3: 4aGekIs0rj3iGgyg0A0QgxMIJLQ.roa (hash: jSSGAV/hJOLPxPM6CPuHRQ7BVztFWzCWkaisUdui1tg=)
4: AWJv_YAOr6M2vfNDFB8D98OTw2Q.crl (hash: 8+m9v+aA/EIc0YDw4Z6cvWxk32CUQd+F6/B2Qmrh+ZE=)
5: DjqIy3whY0iAK0V4OvhhtvGGxc8.roa (hash: J6ClKo6gWmtX41vPMMEGgdT0yE8BMDFvncNX4O6KPhY=)
6: FsSgrQkr8GXv7PHPNFwr1vaZbP4.roa (hash: zjR1hhmdKGDYMqMZ7wwQ4K8IE1zbHDSW3tiT9XL2pAA=)
7: GEH0KcgFtkEgfOjHGAYLpjaTGlM.roa (hash: pDgheK9VVM6MnVLVYSFwhImHJu+EPJ0spm4cHHYyxB4=)
8: Qq0k4K7fGZnP4f3tLeCmDtkyQ7w.roa (hash: xl3H7Ui7pyYxDCWSICK+n2RNpa4LQr31FnkPCNajMaE=)
9: TpaHwNI0EBaNPhIt_9NPWGX3c9c.roa (hash: 3XHWImydnmO2TAPTSjesjzHF5/P0zYI8CHSB5cj7+6Q=)
10: XbJXKJ_0E0WQxkfv8SQ64kHlpqw.roa (hash: jT8xwpuYth9rIc6SHYbo7yHBo19Prde5zs/tMrFquVw=)
11: _XjBVcAxw5EpqMjyij8I-ToToaQ.roa (hash: +1oHFraLo6Z8PZNhtZgJrurxCoBzuYB7PUKpQ5nbWFQ=)
12: idDB5SsOi3M4d5YPdc4kaYpnsfY.roa (hash: VzSr4liY8PEx5fC0RMBBlkwvYxH1Ole1oxoZXE3bNBo=)
13: kelA1bjmusiDmCW1K47dqweiIW8.roa (hash: bPpEpCtGqf74OwrxtLTkdNIJWgNMPzrtzZREOLihZ2s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/c4e5a0-8219-4ff9-8287-1f4bea23e4c7/1/AWJv_YAOr6M2vfNDFB8D98OTw2Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/c4e5a0-8219-4ff9-8287-1f4bea23e4c7/1/AWJv_YAOr6M2vfNDFB8D98OTw2Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/AWJv_YAOr6M2vfNDFB8D98OTw2Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 09:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e6:6d:50:4e:f6:c9:6c:18:2d:76:7f:02:98:a8:22:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01626ffd800eafa336bdf343141f03f7c393c364
Validity
Not Before: Mar 13 09:00:49 2026 GMT
Not After : Mar 14 09:00:49 2026 GMT
Subject: CN=2c567097554c0012cc5f17eefc0bc3090693afcc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:89:c9:a9:db:ac:d4:ca:64:2c:a6:97:31:7c:
d1:cf:0f:be:15:3b:8b:73:86:01:21:03:63:f5:8d:
ad:33:7d:4a:91:f4:7c:1e:3d:e8:bc:34:18:b8:89:
25:f5:ec:04:de:6a:ec:70:fb:79:81:3a:83:03:82:
4d:85:99:e3:95:b2:63:34:8c:5e:a8:53:0b:23:3f:
0b:0e:06:3e:d1:f0:53:bb:b8:fc:72:48:19:01:82:
f4:c8:70:8a:2e:33:bb:a4:b9:ae:c2:de:87:f6:34:
d7:94:91:4d:5b:5e:14:23:56:9d:88:7a:9e:be:80:
7b:ab:93:0b:31:57:a4:1d:c3:fa:c5:cc:de:c6:6c:
6f:68:ae:23:87:c3:5b:81:48:30:0d:01:c2:3e:84:
7a:4f:64:34:b7:47:2d:3c:b8:32:4f:74:21:cb:71:
30:16:f5:89:a0:23:8a:e1:04:7e:a8:f9:82:e5:b9:
bf:8e:1d:84:08:17:82:03:0b:e5:9f:c7:c8:b8:1e:
e6:02:46:24:4a:79:3e:f8:b6:56:02:98:fa:a5:d9:
a3:4b:43:af:b3:98:c8:24:e3:00:1a:f6:ee:ca:75:
65:6c:8a:38:c8:3a:89:47:58:c9:60:00:f9:4d:9f:
53:33:01:f4:02:aa:75:5f:39:ca:e9:d5:8e:bd:fe:
0c:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:56:70:97:55:4C:00:12:CC:5F:17:EE:FC:0B:C3:09:06:93:AF:CC
X509v3 Authority Key Identifier:
keyid:01:62:6F:FD:80:0E:AF:A3:36:BD:F3:43:14:1F:03:F7:C3:93:C3:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AWJv_YAOr6M2vfNDFB8D98OTw2Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/c4e5a0-8219-4ff9-8287-1f4bea23e4c7/1/AWJv_YAOr6M2vfNDFB8D98OTw2Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/c4e5a0-8219-4ff9-8287-1f4bea23e4c7/1/AWJv_YAOr6M2vfNDFB8D98OTw2Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:83:82:71:15:e9:7d:eb:cc:8d:f1:a6:ba:7b:d1:3c:e0:c2:
fc:05:08:54:8a:71:1c:a5:24:2d:4d:ec:c8:2d:32:96:dc:56:
43:3d:e3:1f:f3:6c:f7:e6:27:23:38:46:74:7e:5b:00:84:02:
86:47:d2:0c:b6:cb:74:de:95:46:83:49:62:f1:40:85:27:50:
63:4f:c8:69:47:d4:65:5a:8b:09:c3:0e:95:7c:ee:dc:28:90:
4d:7f:18:ad:eb:3a:18:d3:b1:df:27:ee:ca:55:11:74:d0:6a:
9b:8f:00:13:c4:16:51:85:8a:c4:b9:bb:7c:f1:2e:f8:18:2d:
23:24:db:a3:b1:18:df:7f:73:5e:07:2f:5e:2c:cd:56:94:be:
fd:48:6d:07:16:7a:b1:48:ec:44:dc:10:47:cb:48:8e:9c:df:
1e:1f:3e:9e:57:3a:95:76:54:46:3f:5b:7b:6d:56:62:78:91:
97:e9:03:b8:87:b1:e3:ac:39:aa:5a:67:dd:6b:e6:80:e2:8f:
a8:ba:a5:cb:a9:7e:f7:54:7e:b0:86:02:24:35:27:19:b7:2a:
18:94:2e:15:ad:2b:26:3e:84:b1:d8:d4:6f:a5:f4:0a:bc:63:
d6:c2:e4:bf:1e:f2:1e:b2:31:27:5e:ca:a6:5d:1f:73:4a:a8:
70:3d:26:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 13:45:45 2026 by rpki-client