Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/13df90-71bc-40be-824e-2c40d811fd4e/1/AwvpEyEHRDTJ6CDbZhyRymLMsP0.mft
File: AwvpEyEHRDTJ6CDbZhyRymLMsP0.mft (raw, json)
Hash identifier: 5cD0Z7Ny6G+rymve+N48JXzWonnbwo+iKPRHCjWwxzo=
Subject key identifier: A0:8F:0B:68:49:C7:08:E0:3B:6F:F5:B3:C8:C3:25:27:77:F8:B3:FB
Authority key identifier: 03:0B:E9:13:21:07:44:34:C9:E8:20:DB:66:1C:91:CA:62:CC:B0:FD
Certificate issuer: /CN=030be91321074434c9e820db661c91ca62ccb0fd
Certificate serial: 019DA29CC3F9D001C96CE7BF51DA38A4E255
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AwvpEyEHRDTJ6CDbZhyRymLMsP0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/13df90-71bc-40be-824e-2c40d811fd4e/1/AwvpEyEHRDTJ6CDbZhyRymLMsP0.mft
Manifest number: 12BE
Signing time: Sat 18 Apr 2026 22:01:15 +0000
Manifest this update: Sat 18 Apr 2026 22:01:15 +0000
Manifest next update: Sun 19 Apr 2026 22:01:15 +0000
Files and hashes: 1: AwvpEyEHRDTJ6CDbZhyRymLMsP0.crl (hash: U4Ucu0wqBDGEExLfpjgLsHOcuS8h4H4ERsE7B071zdk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/13df90-71bc-40be-824e-2c40d811fd4e/1/AwvpEyEHRDTJ6CDbZhyRymLMsP0.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/13df90-71bc-40be-824e-2c40d811fd4e/1/AwvpEyEHRDTJ6CDbZhyRymLMsP0.mft
rsync://rpki.ripe.net/repository/DEFAULT/AwvpEyEHRDTJ6CDbZhyRymLMsP0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 Apr 2026 22:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a2:9c:c3:f9:d0:01:c9:6c:e7:bf:51:da:38:a4:e2:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=030be91321074434c9e820db661c91ca62ccb0fd
Validity
Not Before: Apr 18 22:01:15 2026 GMT
Not After : Apr 19 22:01:15 2026 GMT
Subject: CN=a08f0b6849c708e03b6ff5b3c8c3252777f8b3fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:3b:eb:77:88:8b:01:27:3f:9f:66:f7:d5:b5:
4c:b9:df:a4:ba:99:b7:08:fc:8d:b3:f7:63:dd:b3:
dd:d5:1a:d9:44:37:a3:0d:ea:9f:48:63:15:57:cb:
da:30:6d:08:6e:a6:72:16:5c:33:5a:47:f4:22:d3:
e6:af:0b:92:b6:6d:a1:3f:ed:5b:68:65:6c:ff:87:
0f:dd:47:93:71:e9:16:c0:5b:2f:63:9d:7b:1b:df:
49:5e:a4:29:83:bc:3d:e4:46:e8:88:7f:8e:62:1f:
ee:09:5c:f4:68:2a:28:08:57:c7:79:43:6b:92:da:
ba:6e:f2:1a:a2:3e:de:5e:ae:ab:4c:0f:6a:0e:8b:
b3:2e:bd:5b:f7:a6:43:a2:01:fd:9d:2c:6d:41:5f:
34:a7:f3:06:8d:83:9b:c5:58:ee:94:a2:7c:ad:02:
93:6a:dc:2c:31:72:2f:9c:4f:38:95:1c:58:ad:d8:
f5:ef:b5:be:79:f6:7b:cf:b9:ae:f8:1f:11:b4:0c:
35:ca:75:6c:46:a4:f1:38:ce:5c:f1:f2:40:65:8e:
f8:ed:09:96:21:d5:c0:b5:26:0a:b4:9e:50:90:dd:
9f:91:22:f8:3e:30:b3:0a:14:53:37:72:e8:b3:4a:
b6:44:f0:f2:69:f8:f1:6e:63:21:eb:34:11:60:98:
76:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:8F:0B:68:49:C7:08:E0:3B:6F:F5:B3:C8:C3:25:27:77:F8:B3:FB
X509v3 Authority Key Identifier:
keyid:03:0B:E9:13:21:07:44:34:C9:E8:20:DB:66:1C:91:CA:62:CC:B0:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AwvpEyEHRDTJ6CDbZhyRymLMsP0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/13df90-71bc-40be-824e-2c40d811fd4e/1/AwvpEyEHRDTJ6CDbZhyRymLMsP0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/13df90-71bc-40be-824e-2c40d811fd4e/1/AwvpEyEHRDTJ6CDbZhyRymLMsP0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:6a:cc:90:99:8f:06:80:3b:f1:ad:ff:f6:96:c4:0d:cc:1e:
23:3b:a8:11:63:e4:36:88:5f:11:ce:1d:39:e9:6e:d9:1d:7c:
97:8a:b0:76:20:84:0c:66:01:c3:57:29:75:bf:05:92:44:e1:
4b:48:8d:fc:de:14:9d:69:c1:f5:16:47:92:1a:11:d2:72:fc:
9e:bb:23:c4:af:16:04:af:97:57:35:01:c6:c7:76:25:e7:72:
30:9d:0c:95:21:52:11:36:9e:93:57:52:49:c0:b3:55:d7:ea:
58:07:88:77:b8:cc:ec:53:e4:7e:d3:75:c9:c3:a4:88:81:17:
e8:6b:cc:74:53:38:66:73:ce:5c:91:2e:a3:1a:a5:fe:b7:87:
e6:e8:bb:98:ad:11:b5:3c:7c:49:9d:93:49:60:0b:e4:04:22:
04:e9:5b:ca:c6:63:fe:d9:75:d2:17:12:d9:ed:5f:41:01:11:
e3:66:5e:47:a8:15:85:6d:67:71:14:e8:f4:3c:46:f5:23:80:
b8:85:73:7a:13:ba:96:d7:cd:9b:00:d1:88:92:2a:eb:b0:9d:
b2:8b:91:44:88:de:28:b4:cc:70:20:1a:3e:78:7c:00:0a:d5:
5f:e0:ab:c8:19:dc:2a:da:9a:7c:c1:27:32:2c:71:8b:c6:75:
0f:a4:dd:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:47:17 2026 by rpki-client