Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/af4ef8-ed07-4acd-a42f-c96c2ce859e5/1/AW5eMfqHFqqlThj83P7T_JTbkLU.mft
File: AW5eMfqHFqqlThj83P7T_JTbkLU.mft (raw, json)
Hash identifier: UV5KiTQIDSAuZHGu/3QTM5yaePRXm6Qlkx8W4whbpt4=
Subject key identifier: 3B:6E:14:AF:1A:84:F9:DA:4B:FF:4E:14:35:E7:A5:4F:D3:8D:E2:74
Authority key identifier: 01:6E:5E:31:FA:87:16:AA:A5:4E:18:FC:DC:FE:D3:FC:94:DB:90:B5
Certificate issuer: /CN=016e5e31fa8716aaa54e18fcdcfed3fc94db90b5
Certificate serial: 019D3909EB142E3F6BE9AB0FA8C77CBE83E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AW5eMfqHFqqlThj83P7T_JTbkLU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/af4ef8-ed07-4acd-a42f-c96c2ce859e5/1/AW5eMfqHFqqlThj83P7T_JTbkLU.mft
Manifest number: 1893
Signing time: Sun 29 Mar 2026 10:00:44 +0000
Manifest this update: Sun 29 Mar 2026 10:00:44 +0000
Manifest next update: Mon 30 Mar 2026 10:00:44 +0000
Files and hashes: 1: AW5eMfqHFqqlThj83P7T_JTbkLU.crl (hash: 3izrraLkSHOcO8xZ5IuWWTAvIGjT7Glm7bzzzaZywK8=)
2: VIwi371Ilu32-PFrptGj4IRsgO0.roa (hash: GJeobJzmQ47MTxxCaSTphRwACX/qnxopY4ODc2q66rk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/af4ef8-ed07-4acd-a42f-c96c2ce859e5/1/AW5eMfqHFqqlThj83P7T_JTbkLU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/af4ef8-ed07-4acd-a42f-c96c2ce859e5/1/AW5eMfqHFqqlThj83P7T_JTbkLU.mft
rsync://rpki.ripe.net/repository/DEFAULT/AW5eMfqHFqqlThj83P7T_JTbkLU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:09:eb:14:2e:3f:6b:e9:ab:0f:a8:c7:7c:be:83:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=016e5e31fa8716aaa54e18fcdcfed3fc94db90b5
Validity
Not Before: Mar 29 10:00:44 2026 GMT
Not After : Mar 30 10:00:44 2026 GMT
Subject: CN=3b6e14af1a84f9da4bff4e1435e7a54fd38de274
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:ce:9c:43:3d:11:ce:38:cd:31:05:67:a1:d9:
ed:a9:bf:be:17:5f:5d:2f:e4:ba:36:9a:ca:a0:5d:
22:d9:db:7f:26:cc:6e:9d:e0:1d:40:c9:90:9e:c0:
7d:c2:7f:9a:1c:c7:fa:32:b9:dd:d6:ad:50:f4:ad:
fa:2d:81:83:d5:eb:9f:61:9d:ba:02:6a:3d:d1:15:
00:ea:74:55:a5:db:2d:02:66:a2:cd:c7:16:ea:3f:
bb:2e:f5:b1:1e:e2:fb:4c:20:da:aa:1f:bd:64:b8:
5a:6d:a5:d2:da:ab:bd:b0:46:0d:57:db:0a:c3:41:
87:56:58:f4:8b:82:69:d8:c7:23:de:dd:11:34:5c:
32:15:b3:60:6b:12:ed:08:90:ee:96:23:c2:6a:02:
af:2e:2e:c0:46:6d:3c:54:20:69:f7:28:72:80:d4:
5c:27:a4:18:99:b4:d5:f3:bf:66:df:3e:ff:59:08:
d6:4a:b3:a4:c8:e7:ff:84:50:51:7f:ee:ec:33:40:
40:43:c8:45:29:2c:b5:0d:41:23:1d:e3:c4:92:d3:
ba:ad:a2:13:8c:1f:e9:7e:79:2c:9a:28:70:33:d6:
87:21:c4:c6:71:6c:3b:f0:da:10:17:9f:d8:c6:a0:
35:91:f1:e3:26:43:73:99:be:08:0b:95:5d:81:ac:
da:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:6E:14:AF:1A:84:F9:DA:4B:FF:4E:14:35:E7:A5:4F:D3:8D:E2:74
X509v3 Authority Key Identifier:
keyid:01:6E:5E:31:FA:87:16:AA:A5:4E:18:FC:DC:FE:D3:FC:94:DB:90:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AW5eMfqHFqqlThj83P7T_JTbkLU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/af4ef8-ed07-4acd-a42f-c96c2ce859e5/1/AW5eMfqHFqqlThj83P7T_JTbkLU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/af4ef8-ed07-4acd-a42f-c96c2ce859e5/1/AW5eMfqHFqqlThj83P7T_JTbkLU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:1e:a7:5c:d6:d0:49:ed:a0:46:90:4f:53:6e:d3:06:a0:45:
5e:09:89:4b:8c:2b:e4:a9:c1:2f:29:c3:da:73:68:2f:34:a6:
b3:4a:11:42:36:ff:7e:04:63:93:80:4e:07:9d:0b:2f:9e:99:
69:e3:71:dc:c6:e6:ad:7d:fe:c1:4a:a0:34:4f:2c:5e:b3:d0:
cf:21:dc:ef:d7:f0:e7:f5:73:1d:93:c3:9e:14:b0:fa:06:bc:
19:5c:2b:c3:31:42:de:2d:b0:3c:52:40:fe:14:3d:a0:ad:d6:
2b:fd:73:1e:59:4d:79:cc:59:4a:43:41:22:bf:38:58:f5:a5:
0e:5c:c8:a2:29:d3:5b:d9:47:61:75:18:c1:fd:50:58:fc:41:
4f:22:74:44:f1:f4:eb:0b:5a:93:54:37:ee:bb:4e:73:9c:d1:
cb:be:3b:78:ed:49:e7:33:d4:74:bc:ac:66:47:22:ce:56:67:
19:16:83:ed:03:24:e8:1c:8f:24:32:51:e0:f9:5c:ad:1f:83:
a9:80:75:74:fb:e9:54:4e:f1:64:19:1c:76:85:bd:f6:34:f9:
b9:60:74:de:36:d8:cc:5c:e3:72:df:2b:62:ea:38:8f:c2:a3:
f2:ca:01:eb:8a:0b:ea:c3:a1:8d:62:70:ec:4a:8d:e1:01:16:
99:ee:a1:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:29:53 2026 by rpki-client