Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/13df90-71bc-40be-824e-2c40d811fd4e/1/AwvpEyEHRDTJ6CDbZhyRymLMsP0.mft
File: AwvpEyEHRDTJ6CDbZhyRymLMsP0.mft (raw, json)
Hash identifier: iYHaiuVFATefHoMVtVCvOrEL7oXlJ0MzZh0RESUSqdE=
Subject key identifier: 53:B1:DD:EC:68:A6:9E:77:D3:7A:9E:1B:E6:0E:E0:10:45:BA:3A:44
Authority key identifier: 03:0B:E9:13:21:07:44:34:C9:E8:20:DB:66:1C:91:CA:62:CC:B0:FD
Certificate issuer: /CN=030be91321074434c9e820db661c91ca62ccb0fd
Certificate serial: 019CAB6BE412CF14A1A802954D5A2EA056E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AwvpEyEHRDTJ6CDbZhyRymLMsP0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/13df90-71bc-40be-824e-2c40d811fd4e/1/AwvpEyEHRDTJ6CDbZhyRymLMsP0.mft
Manifest number: 123E
Signing time: Sun 01 Mar 2026 22:01:40 +0000
Manifest this update: Sun 01 Mar 2026 22:01:40 +0000
Manifest next update: Mon 02 Mar 2026 22:01:40 +0000
Files and hashes: 1: AwvpEyEHRDTJ6CDbZhyRymLMsP0.crl (hash: ZpBti6eTbNLTPYOESdZ8hiZLIilZ2F4j5Oml3R84xns=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/13df90-71bc-40be-824e-2c40d811fd4e/1/AwvpEyEHRDTJ6CDbZhyRymLMsP0.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/13df90-71bc-40be-824e-2c40d811fd4e/1/AwvpEyEHRDTJ6CDbZhyRymLMsP0.mft
rsync://rpki.ripe.net/repository/DEFAULT/AwvpEyEHRDTJ6CDbZhyRymLMsP0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 22:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:e4:12:cf:14:a1:a8:02:95:4d:5a:2e:a0:56:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=030be91321074434c9e820db661c91ca62ccb0fd
Validity
Not Before: Mar 1 22:01:40 2026 GMT
Not After : Mar 2 22:01:40 2026 GMT
Subject: CN=53b1ddec68a69e77d37a9e1be60ee01045ba3a44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:df:20:68:80:c4:20:b9:b7:2d:74:e0:bd:92:
d3:cc:93:a5:c9:6e:c2:c3:b1:b3:07:1b:48:2e:57:
93:6f:7e:b3:3f:a5:cc:e9:cb:b3:63:1c:7c:79:0e:
ad:50:a0:6c:68:b7:ac:96:99:59:16:52:99:8d:21:
35:b2:6c:77:2d:cb:de:48:09:70:4f:3e:f8:64:c6:
b9:bd:17:06:5e:75:4e:18:84:32:35:e9:b2:7d:19:
2f:e0:83:b1:08:f9:e7:6c:96:67:35:3f:19:af:ec:
f6:7e:df:8f:e1:b7:c4:5c:e2:93:6f:ca:d0:bf:5f:
cc:74:ef:07:8a:27:ff:28:bf:97:4e:f8:01:26:37:
39:21:44:97:cd:16:db:1d:c5:ac:16:bd:ed:38:a1:
89:5d:14:1c:e0:92:af:2f:87:77:07:db:3b:cd:df:
26:a9:7c:33:59:b1:3f:7e:cc:bc:a6:b0:f3:c1:f9:
c9:09:66:dd:ca:12:70:f3:88:99:1d:90:c5:65:46:
de:e5:6e:39:d5:d9:34:ca:17:57:ec:24:1e:de:96:
7c:e4:2d:37:a1:ec:f8:37:0e:43:d9:90:e5:4d:8b:
7f:81:67:40:0c:d2:8a:0c:b1:1c:04:8c:d7:65:db:
89:c1:f4:01:e3:3f:42:47:e4:b7:6a:8a:78:81:c5:
df:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:B1:DD:EC:68:A6:9E:77:D3:7A:9E:1B:E6:0E:E0:10:45:BA:3A:44
X509v3 Authority Key Identifier:
keyid:03:0B:E9:13:21:07:44:34:C9:E8:20:DB:66:1C:91:CA:62:CC:B0:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AwvpEyEHRDTJ6CDbZhyRymLMsP0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/13df90-71bc-40be-824e-2c40d811fd4e/1/AwvpEyEHRDTJ6CDbZhyRymLMsP0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/13df90-71bc-40be-824e-2c40d811fd4e/1/AwvpEyEHRDTJ6CDbZhyRymLMsP0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:da:9b:b4:fe:9e:fb:b6:e5:06:3a:49:ae:7b:43:06:cc:b1:
cf:30:b5:3b:09:29:f6:75:67:f1:b8:05:67:c7:f7:f9:bb:4a:
b8:95:c1:86:40:6b:a4:68:99:3d:c0:fd:cb:21:8a:67:38:55:
bd:65:c5:e2:bb:9c:6b:3f:2c:27:bf:7f:23:64:f1:f0:07:6d:
b1:10:31:cf:01:63:cc:49:43:b8:3a:ba:3b:1d:e6:ff:6d:58:
da:2c:23:0c:26:da:ef:6d:94:f4:c5:2d:fa:af:3a:21:c5:3e:
35:4d:0d:8a:de:2a:ff:73:24:ac:2f:bf:3c:31:35:b8:12:43:
3a:ba:ec:b1:45:c5:dc:a1:1e:a4:69:fc:0a:6e:f1:b4:bc:bb:
d2:92:a7:68:c1:33:6a:63:e6:e2:35:24:09:3d:57:ea:cf:65:
2a:bd:94:ac:86:d6:88:6d:b6:05:f7:f9:14:b5:9f:d1:5e:68:
3d:27:f2:dd:38:e3:3d:cd:12:38:83:1c:f9:97:60:0e:dd:1c:
61:8e:1c:74:6f:f4:46:12:2e:8e:c8:fa:0a:f6:f4:9b:92:94:
2f:f9:9a:42:df:19:fc:91:95:29:64:c5:d7:90:27:b0:79:4e:
92:72:53:5e:e6:d3:06:a3:54:f6:ec:86:1d:ba:2b:13:23:0e:
52:c3:2e:be
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyra+QSzxShqAKVTVouoFbkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAzMGJlOTEzMjEwNzQ0MzRjOWU4MjBkYjY2MWM5MWNhNjJj
Y2IwZmQwHhcNMjYwMzAxMjIwMTQwWhcNMjYwMzAyMjIwMTQwWjAzMTEwLwYDVQQD
Eyg1M2IxZGRlYzY4YTY5ZTc3ZDM3YTllMWJlNjBlZTAxMDQ1YmEzYTQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvN8gaIDEILm3LXTgvZLTzJOlyW7C
w7GzBxtILleTb36zP6XM6cuzYxx8eQ6tUKBsaLeslplZFlKZjSE1smx3LcveSAlw
Tz74ZMa5vRcGXnVOGIQyNemyfRkv4IOxCPnnbJZnNT8Zr+z2ft+P4bfEXOKTb8rQ
v1/MdO8Hiif/KL+XTvgBJjc5IUSXzRbbHcWsFr3tOKGJXRQc4JKvL4d3B9s7zd8m
qXwzWbE/fsy8prDzwfnJCWbdyhJw84iZHZDFZUbe5W451dk0yhdX7CQe3pZ85C03
oez4Nw5D2ZDlTYt/gWdADNKKDLEcBIzXZduJwfQB4z9CR+S3aop4gcXf1QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFOx3exopp5303qeG+YO4BBFujpEMB8GA1UdIwQY
MBaAFAML6RMhB0Q0yegg22YckcpizLD9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQXd2cEV5RUhSRFRKNkNEYlpoeVJ5bUxNc1AwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC8xM2RmOTAtNzFiYy00MGJlLTgyNGUt
MmM0MGQ4MTFmZDRlLzEvQXd2cEV5RUhSRFRKNkNEYlpoeVJ5bUxNc1AwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNC8xM2RmOTAtNzFiYy00MGJlLTgyNGUtMmM0MGQ4MTFmZDRl
LzEvQXd2cEV5RUhSRFRKNkNEYlpoeVJ5bUxNc1AwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASNqbtP6e
+7blBjpJrntDBsyxzzC1Owkp9nVn8bgFZ8f3+btKuJXBhkBrpGiZPcD9yyGKZzhV
vWXF4rucaz8sJ79/I2Tx8AdtsRAxzwFjzElDuDq6Ox3m/21Y2iwjDCba722U9MUt
+q86IcU+NU0Nit4q/3MkrC+/PDE1uBJDOrrssUXF3KEepGn8Cm7xtLy70pKnaMEz
amPm4jUkCT1X6s9lKr2UrIbWiG22Bff5FLWf0V5oPSfy3TjjPc0SOIMc+ZdgDt0c
YY4cdG/0RhIujsj6Cvb0m5KUL/maQt8Z/JGVKWTF15AnsHlOknJTXubTBqNU9uyG
HborEyMOUsMuvg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 05:34:47 2026 by rpki-client