Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/68/c26458-fda8-4f0a-957a-7756438544ca/1/AwsA5gdFAuZTg5H-qxg1goGjJ5s.mft
File: AwsA5gdFAuZTg5H-qxg1goGjJ5s.mft (raw, json)
Hash identifier: 8QM07SYNHKn5dlGb1HETJCH9vVegJp1ckeaq+ZZH3gc=
Subject key identifier: C5:03:D1:B0:71:66:DC:57:C6:82:E1:77:C8:66:2E:4C:08:27:89:F3
Authority key identifier: 03:0B:00:E6:07:45:02:E6:53:83:91:FE:AB:18:35:82:81:A3:27:9B
Certificate issuer: /CN=030b00e6074502e6538391feab18358281a3279b
Certificate serial: 01A1822C0B4E6541BC2CDD9387C5DBED0EA9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AwsA5gdFAuZTg5H-qxg1goGjJ5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/c26458-fda8-4f0a-957a-7756438544ca/1/AwsA5gdFAuZTg5H-qxg1goGjJ5s.mft
Manifest number: 06A0
Signing time: Wed 28 Oct 2026 11:01:26 +0000
Manifest this update: Wed 28 Oct 2026 11:01:26 +0000
Manifest next update: Thu 29 Oct 2026 11:01:26 +0000
Files and hashes: 1: AwsA5gdFAuZTg5H-qxg1goGjJ5s.crl (hash: NlR93fmMndp29+/wffFAbTmhngGJeGO1cQj6Or/2n1Q=)
2: CmiC5mJyQYGGKAJggm-od_rF7aY.roa (hash: VDuSSA+oUsQz/2iqadrnhGgyrgM5bD5FatxlCOVAvTw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/c26458-fda8-4f0a-957a-7756438544ca/1/AwsA5gdFAuZTg5H-qxg1goGjJ5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/c26458-fda8-4f0a-957a-7756438544ca/1/AwsA5gdFAuZTg5H-qxg1goGjJ5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/AwsA5gdFAuZTg5H-qxg1goGjJ5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 07:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:82:2c:0b:4e:65:41:bc:2c:dd:93:87:c5:db:ed:0e:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=030b00e6074502e6538391feab18358281a3279b
Validity
Not Before: Oct 28 11:01:26 2026 GMT
Not After : Oct 29 11:01:26 2026 GMT
Subject: CN=c503d1b07166dc57c682e177c8662e4c082789f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:e4:46:31:d7:1c:5c:3f:1d:be:f1:c8:84:30:
1d:9b:0f:7b:d2:69:be:91:52:e4:bf:2e:7e:a7:86:
85:05:21:06:5a:71:65:82:7f:92:c4:61:4e:4c:3b:
1f:c4:66:88:e4:b9:0b:56:ef:ed:4f:80:50:e4:ff:
81:52:52:9a:c2:53:d0:ed:04:d8:79:fe:ca:96:db:
f0:a0:6b:0c:e4:7b:0a:0c:2a:76:33:b8:86:d0:36:
31:0d:8f:77:4b:bc:c0:17:fa:2c:03:c3:60:d9:42:
2e:61:f0:d7:f0:24:bc:a9:bf:61:b9:07:50:c6:9b:
a4:be:98:b9:b5:32:bf:b5:93:5c:09:40:2b:20:fa:
e7:21:34:1d:80:31:22:ee:28:c8:63:e6:57:d8:3b:
49:23:ef:d1:56:f1:c0:b9:63:a9:4b:9a:f7:43:3e:
98:a5:65:91:99:cb:38:d6:da:1d:b1:c4:c4:73:3f:
13:9f:d1:db:d9:ed:2d:8e:36:0d:2c:e6:5a:b6:ae:
b6:e9:8d:52:f7:28:2f:d9:22:26:69:b8:7e:52:5a:
25:80:33:99:cc:3a:17:e6:74:ad:40:42:8a:67:d0:
10:87:d3:89:83:f2:ca:5b:61:a0:af:3d:fc:ab:e9:
ed:25:73:f6:2c:7d:1f:c5:49:a4:fd:8e:e0:87:e2:
6e:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:03:D1:B0:71:66:DC:57:C6:82:E1:77:C8:66:2E:4C:08:27:89:F3
X509v3 Authority Key Identifier:
keyid:03:0B:00:E6:07:45:02:E6:53:83:91:FE:AB:18:35:82:81:A3:27:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AwsA5gdFAuZTg5H-qxg1goGjJ5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/c26458-fda8-4f0a-957a-7756438544ca/1/AwsA5gdFAuZTg5H-qxg1goGjJ5s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/c26458-fda8-4f0a-957a-7756438544ca/1/AwsA5gdFAuZTg5H-qxg1goGjJ5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:02:9a:ff:8f:59:68:72:dd:fc:61:dc:40:e3:49:67:fa:46:
6a:4a:5c:5b:6a:7b:96:af:8f:fe:c8:3d:80:5b:dd:21:f3:17:
0f:78:53:13:d3:80:32:c0:c3:a7:4c:33:32:e9:88:6b:81:c2:
61:bd:68:dc:76:08:83:4e:ac:34:dd:9b:c5:c4:3b:47:f5:cb:
7e:3c:5c:a0:42:38:0d:0c:f6:31:9c:b7:71:9a:8c:06:fd:0b:
64:5b:53:2a:2f:46:01:1c:79:07:77:ad:fc:d4:5f:c4:e9:ea:
0f:c5:53:ec:c2:7c:bf:56:c0:ef:c0:84:e1:9b:62:91:98:ea:
84:c3:75:1a:07:5c:6f:d7:cb:0a:89:34:bd:a2:78:50:49:20:
d6:44:02:4b:47:6a:64:d6:32:16:6c:00:b4:1a:ac:dd:20:2a:
aa:de:78:69:0a:f4:0b:26:5b:d5:33:63:46:70:49:07:9a:7b:
67:ff:ac:0b:59:62:b3:fa:86:5f:5a:fb:27:04:5a:b1:bf:7e:
59:5b:d4:69:50:13:4c:13:2a:5d:ff:26:90:f9:2c:2f:39:19:
bb:a9:cc:45:94:4f:c7:41:f7:83:22:86:cc:80:88:91:75:d4:
15:fa:31:c6:66:43:de:08:86:00:9c:ca:74:07:85:1b:12:e8:
5c:41:72:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 13:04:05 2026 by rpki-client