Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/35b4c5-297b-420c-822a-169e537a890c/1/AwSWBHN8eL0k27Jeszb0pBbmRfY.mft
File: AwSWBHN8eL0k27Jeszb0pBbmRfY.mft (raw, json)
Hash identifier: ZwptHftwvWiSAz749SNGPPg8uS4ZeoHFjH6qsl8/IaU=
Subject key identifier: 5D:C8:92:19:DB:1D:F3:3D:35:4D:0E:B5:B9:20:6F:CC:18:ED:9B:6E
Authority key identifier: 03:04:96:04:73:7C:78:BD:24:DB:B2:5E:B3:36:F4:A4:16:E6:45:F6
Certificate issuer: /CN=03049604737c78bd24dbb25eb336f4a416e645f6
Certificate serial: 019CAA5833944F0506D09F98B90528F60DF1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AwSWBHN8eL0k27Jeszb0pBbmRfY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/35b4c5-297b-420c-822a-169e537a890c/1/AwSWBHN8eL0k27Jeszb0pBbmRfY.mft
Manifest number: 05FE
Signing time: Sun 01 Mar 2026 17:00:32 +0000
Manifest this update: Sun 01 Mar 2026 17:00:32 +0000
Manifest next update: Mon 02 Mar 2026 17:00:32 +0000
Files and hashes: 1: 0N508Xe1lkHiB3GV4gBTEAMYSg0.roa (hash: 9ysDCSkav8KkWk0caqcKxtu4CxhKYt/csAkRzD0sTbY=)
2: AwSWBHN8eL0k27Jeszb0pBbmRfY.crl (hash: DMB7HlZ2ukvY1lD0/IWXWYNbgwC1dzZO66do/4tNZCg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/35b4c5-297b-420c-822a-169e537a890c/1/AwSWBHN8eL0k27Jeszb0pBbmRfY.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/35b4c5-297b-420c-822a-169e537a890c/1/AwSWBHN8eL0k27Jeszb0pBbmRfY.mft
rsync://rpki.ripe.net/repository/DEFAULT/AwSWBHN8eL0k27Jeszb0pBbmRfY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 17:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:33:94:4f:05:06:d0:9f:98:b9:05:28:f6:0d:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03049604737c78bd24dbb25eb336f4a416e645f6
Validity
Not Before: Mar 1 17:00:32 2026 GMT
Not After : Mar 2 17:00:32 2026 GMT
Subject: CN=5dc89219db1df33d354d0eb5b9206fcc18ed9b6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:89:68:d0:29:16:2d:d3:14:bc:53:50:f0:01:
36:99:d0:ae:1a:82:e9:c7:4a:1b:5f:05:e2:1c:da:
91:93:96:26:62:aa:7a:00:86:38:29:2a:89:ca:48:
08:eb:ab:86:85:90:50:d9:4d:f5:2e:76:96:3b:80:
fb:29:2f:35:5a:9e:34:8e:d4:d2:4e:91:a6:98:f5:
9c:6e:11:91:01:a3:8d:29:3a:84:d1:95:7a:88:5c:
aa:e8:8d:fc:77:ff:0b:96:47:48:8b:47:02:32:20:
af:e9:5b:db:1d:3b:dc:71:92:62:ce:48:96:2d:3b:
30:63:a9:a1:f8:ab:0a:7a:82:17:73:ae:6f:fb:81:
ad:5b:59:54:4a:9b:25:4f:f2:76:a0:59:a0:10:88:
03:ca:38:01:3b:db:c7:8b:95:a8:c5:0b:2b:0d:b2:
a9:20:17:70:c3:dd:35:58:27:5e:37:be:06:c8:c1:
e5:8e:76:be:c7:02:72:cd:18:ff:42:56:d2:f6:51:
d5:88:10:2f:3a:e2:18:44:8a:ca:08:ca:7f:3e:04:
df:78:95:9d:b2:bc:89:d6:1b:99:a6:8a:0f:5d:de:
07:a4:03:2c:32:1e:5c:44:89:37:ae:63:db:e0:0d:
50:ae:28:1a:a7:47:47:e7:88:4d:4c:4b:d9:21:39:
17:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:C8:92:19:DB:1D:F3:3D:35:4D:0E:B5:B9:20:6F:CC:18:ED:9B:6E
X509v3 Authority Key Identifier:
keyid:03:04:96:04:73:7C:78:BD:24:DB:B2:5E:B3:36:F4:A4:16:E6:45:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AwSWBHN8eL0k27Jeszb0pBbmRfY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/35b4c5-297b-420c-822a-169e537a890c/1/AwSWBHN8eL0k27Jeszb0pBbmRfY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/35b4c5-297b-420c-822a-169e537a890c/1/AwSWBHN8eL0k27Jeszb0pBbmRfY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:8d:76:5b:c8:27:6a:39:01:83:33:1f:ef:72:d0:c0:fc:d0:
66:92:36:b7:c2:a4:de:3e:f6:ba:ed:3f:d4:c9:c4:84:7d:90:
11:90:b0:79:cc:61:45:4d:7c:42:2a:a7:16:94:a4:8f:c1:fe:
94:48:ad:ba:39:9b:7f:a6:b2:a4:29:14:7b:91:24:30:7c:18:
db:c2:c1:53:15:20:76:3a:23:6e:d8:ed:cf:47:ba:43:7b:bf:
f2:28:a0:4b:b0:cd:67:1d:40:72:09:cc:22:96:e1:dc:64:c1:
86:d0:a9:dd:3a:be:c2:5c:bc:f1:84:13:d6:89:60:83:4a:df:
61:79:26:cf:bd:3c:47:be:39:60:62:76:db:be:bf:d9:fc:2a:
f7:b1:6c:2e:84:8b:42:ed:fc:7c:23:fb:7f:dc:7c:cf:d4:70:
9a:f2:f7:e4:0f:df:85:f1:0f:c7:3c:be:24:e8:6f:d9:f5:74:
72:8c:d5:29:18:81:a1:9a:8e:eb:62:7a:e5:62:06:14:64:d5:
61:52:e6:8a:a0:4b:4c:a4:d4:63:0b:ff:fb:39:0d:01:5c:53:
04:90:d1:fa:2e:a2:d9:98:e4:f8:e4:fe:b3:1a:68:a3:15:70:
e7:8e:49:ec:f1:e1:a3:f5:7a:5e:8f:f2:e5:46:b1:88:d3:a3:
cb:5d:ad:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:33:14 2026 by rpki-client