Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/00/5c2868-3a27-4df4-8f00-fdd23b43c52e/1/AwkPrDzELxmXRVoS5kMGRjfGncM.mft
File: AwkPrDzELxmXRVoS5kMGRjfGncM.mft (raw, json)
Hash identifier: Lhd2z3errujiS03JUAnlaAd6vNcqNERj2yHE3x9//fU=
Subject key identifier: EC:6D:F0:51:31:83:8B:D6:24:5F:0C:A4:20:16:A3:AC:1B:DC:8D:F3
Authority key identifier: 03:09:0F:AC:3C:C4:2F:19:97:45:5A:12:E6:43:06:46:37:C6:9D:C3
Certificate issuer: /CN=03090fac3cc42f1997455a12e643064637c69dc3
Certificate serial: 01A0C93459C4D631F7F6F534AA0D2DD2C49E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AwkPrDzELxmXRVoS5kMGRjfGncM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/5c2868-3a27-4df4-8f00-fdd23b43c52e/1/AwkPrDzELxmXRVoS5kMGRjfGncM.mft
Manifest number: 0FA4
Signing time: Tue 22 Sep 2026 13:00:46 +0000
Manifest this update: Tue 22 Sep 2026 13:00:46 +0000
Manifest next update: Wed 23 Sep 2026 13:00:46 +0000
Files and hashes: 1: AwkPrDzELxmXRVoS5kMGRjfGncM.crl (hash: 1Oo+nMUeVkPUbOIQ5972wPOrd3XByuX46JlhIDIyu40=)
2: OoyL6bjrpv7zlvqenv5ZgNB0gGE.roa (hash: Tm9hWa2oiDIAZqLLnYyHl8n9xWir4VblcdnhJ8WlcHo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/5c2868-3a27-4df4-8f00-fdd23b43c52e/1/AwkPrDzELxmXRVoS5kMGRjfGncM.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/5c2868-3a27-4df4-8f00-fdd23b43c52e/1/AwkPrDzELxmXRVoS5kMGRjfGncM.mft
rsync://rpki.ripe.net/repository/DEFAULT/AwkPrDzELxmXRVoS5kMGRjfGncM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 13:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c9:34:59:c4:d6:31:f7:f6:f5:34:aa:0d:2d:d2:c4:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03090fac3cc42f1997455a12e643064637c69dc3
Validity
Not Before: Sep 22 13:00:46 2026 GMT
Not After : Sep 23 13:00:46 2026 GMT
Subject: CN=ec6df05131838bd6245f0ca42016a3ac1bdc8df3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:72:6d:4d:92:73:7f:98:51:bd:a9:33:41:3a:
da:eb:ef:47:d4:bd:20:d7:40:7c:97:35:79:49:1d:
6f:d8:f7:44:89:da:e7:a3:1d:2e:3b:ff:09:55:95:
af:c6:e9:45:03:e9:bf:cb:e9:a8:08:93:8a:ad:0f:
13:7f:98:75:7f:50:2e:96:31:49:f5:f9:8d:9e:4e:
4d:de:c1:c0:7e:0e:d6:8a:8d:a2:5f:be:cd:1d:bf:
62:da:ea:bb:8c:b6:14:e7:1b:7d:f9:6d:dc:f2:79:
41:54:1d:75:91:cd:18:b9:d9:88:3e:7f:45:54:84:
ff:a7:06:94:e8:d9:17:a1:46:7b:bb:a0:c0:43:2e:
39:65:d9:39:f8:12:99:84:30:4a:9d:b5:22:33:61:
5d:6c:55:9d:55:e5:03:e7:64:13:56:17:ed:ed:93:
fa:a7:bc:f0:08:81:28:c2:60:d1:ca:94:6f:9d:00:
1e:8b:f9:97:48:34:b5:7a:66:81:16:fb:82:99:66:
a2:36:e1:00:73:45:5b:60:e7:4a:52:15:38:91:7a:
ca:93:64:cc:60:9d:bc:ea:00:e9:b2:42:b7:b6:63:
3f:8e:f2:2f:02:3f:a2:b3:be:0c:c0:60:08:c7:b3:
8c:95:a2:81:df:3f:57:4a:23:dc:5e:e7:04:53:db:
b7:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:6D:F0:51:31:83:8B:D6:24:5F:0C:A4:20:16:A3:AC:1B:DC:8D:F3
X509v3 Authority Key Identifier:
keyid:03:09:0F:AC:3C:C4:2F:19:97:45:5A:12:E6:43:06:46:37:C6:9D:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AwkPrDzELxmXRVoS5kMGRjfGncM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/5c2868-3a27-4df4-8f00-fdd23b43c52e/1/AwkPrDzELxmXRVoS5kMGRjfGncM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/5c2868-3a27-4df4-8f00-fdd23b43c52e/1/AwkPrDzELxmXRVoS5kMGRjfGncM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:4c:2d:79:06:cd:b5:86:53:07:fc:76:d3:53:e5:c8:45:fe:
1a:7e:14:f8:35:10:59:4b:56:cc:ff:a8:8c:d0:c3:fc:89:a9:
7f:8c:8c:40:f5:cf:e1:be:d0:86:3d:54:81:90:01:bb:02:0d:
56:53:32:e9:f2:76:f7:7a:c1:63:80:68:a6:50:27:77:ac:28:
25:9d:d9:9f:b0:20:b0:af:d9:d0:7c:ee:66:4a:a0:01:e0:ac:
a3:da:8c:0c:62:4d:6e:c1:dc:0a:b5:64:e0:5f:c3:96:89:e9:
af:30:3f:76:a4:64:0e:2c:18:91:d8:25:49:a7:77:d1:f7:35:
bd:74:74:51:7d:d0:12:6c:ef:d3:96:82:e9:37:21:17:88:d6:
8c:da:ab:4e:94:ef:27:4a:83:34:4e:11:b6:c5:b0:47:1f:5c:
df:2c:9f:f8:e9:80:20:bc:94:5b:2d:ec:a1:b0:c9:93:17:7f:
05:35:a6:ae:31:c9:6b:25:4d:4e:c7:57:41:4c:96:96:8d:99:
67:ea:b9:f9:a9:64:36:0b:5e:ad:38:55:e6:ad:34:94:c3:7b:
a0:a9:b0:25:72:4f:eb:f0:e4:fd:7b:1d:40:b8:e5:bb:51:a2:
c9:5d:50:96:de:9a:c3:e3:59:f0:2b:95:3d:f0:1d:81:a6:8b:
9c:94:a9:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 17:42:01 2026 by rpki-client