Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/c26458-fda8-4f0a-957a-7756438544ca/1/AwsA5gdFAuZTg5H-qxg1goGjJ5s.mft
File: AwsA5gdFAuZTg5H-qxg1goGjJ5s.mft (raw, json)
Hash identifier: H+BVyT20FnAjSSOj17Hs05470ABSm4mBQg6iINmmaXY=
Subject key identifier: 46:2C:71:BA:52:67:3C:73:62:91:9D:4F:F6:08:E5:BE:50:68:CC:E7
Authority key identifier: 03:0B:00:E6:07:45:02:E6:53:83:91:FE:AB:18:35:82:81:A3:27:9B
Certificate issuer: /CN=030b00e6074502e6538391feab18358281a3279b
Certificate serial: 019CAE34FE2C9897D805FDD41F5A09108E3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AwsA5gdFAuZTg5H-qxg1goGjJ5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/c26458-fda8-4f0a-957a-7756438544ca/1/AwsA5gdFAuZTg5H-qxg1goGjJ5s.mft
Manifest number: 0420
Signing time: Mon 02 Mar 2026 11:00:34 +0000
Manifest this update: Mon 02 Mar 2026 11:00:34 +0000
Manifest next update: Tue 03 Mar 2026 11:00:34 +0000
Files and hashes: 1: AwsA5gdFAuZTg5H-qxg1goGjJ5s.crl (hash: 93bey1oAB6fHaD3+WyuEeFyTfd2DwQLbgqfz1I0J/k0=)
2: CmiC5mJyQYGGKAJggm-od_rF7aY.roa (hash: VDuSSA+oUsQz/2iqadrnhGgyrgM5bD5FatxlCOVAvTw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/c26458-fda8-4f0a-957a-7756438544ca/1/AwsA5gdFAuZTg5H-qxg1goGjJ5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/c26458-fda8-4f0a-957a-7756438544ca/1/AwsA5gdFAuZTg5H-qxg1goGjJ5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/AwsA5gdFAuZTg5H-qxg1goGjJ5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 11:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:34:fe:2c:98:97:d8:05:fd:d4:1f:5a:09:10:8e:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=030b00e6074502e6538391feab18358281a3279b
Validity
Not Before: Mar 2 11:00:34 2026 GMT
Not After : Mar 3 11:00:34 2026 GMT
Subject: CN=462c71ba52673c7362919d4ff608e5be5068cce7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:65:42:e1:0d:bd:f3:4a:56:10:bc:43:2f:85:
81:08:64:11:7c:6a:b9:60:d8:df:c4:9e:3f:ec:ab:
b0:de:6f:78:fe:f8:7c:f5:e1:13:54:b4:60:e5:08:
61:b2:2a:ad:6e:ed:cf:fb:e7:62:32:21:5d:62:68:
be:41:52:29:22:56:67:36:5d:97:d8:47:6e:a5:2c:
38:93:9a:78:ef:94:1c:0b:0e:38:ee:75:ea:e1:c4:
23:c2:73:b9:ae:41:50:29:23:89:69:61:8b:00:eb:
e3:89:b9:a9:7d:42:ac:ba:bd:55:e5:4c:1e:73:e6:
ec:0b:3a:c3:a8:fe:45:14:4b:9f:84:31:72:af:d7:
58:bf:5f:0d:7e:2c:63:de:d2:40:2f:8c:24:50:78:
95:46:f0:47:d9:6c:1e:b2:c9:af:83:b7:60:47:c2:
66:13:fd:c7:6e:ad:12:33:63:ff:57:0c:67:31:ae:
75:ed:55:cb:dc:d7:0a:30:71:ef:2a:32:2c:87:78:
ff:f4:cb:d0:59:a1:84:50:4c:13:84:96:51:42:4c:
94:5a:ff:ef:5b:a3:45:ac:46:b3:80:23:59:18:61:
ec:c9:f0:98:44:ca:dc:1b:06:b9:34:ac:82:86:80:
42:f0:ce:38:f4:58:c6:53:ff:4c:09:70:bc:40:11:
29:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:2C:71:BA:52:67:3C:73:62:91:9D:4F:F6:08:E5:BE:50:68:CC:E7
X509v3 Authority Key Identifier:
keyid:03:0B:00:E6:07:45:02:E6:53:83:91:FE:AB:18:35:82:81:A3:27:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AwsA5gdFAuZTg5H-qxg1goGjJ5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/c26458-fda8-4f0a-957a-7756438544ca/1/AwsA5gdFAuZTg5H-qxg1goGjJ5s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/c26458-fda8-4f0a-957a-7756438544ca/1/AwsA5gdFAuZTg5H-qxg1goGjJ5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:df:1c:76:25:d1:b2:88:2e:8e:e4:ad:77:af:86:01:ff:4e:
2e:4a:9a:6e:54:2e:30:b0:b1:27:05:5c:e6:f1:ae:59:8a:da:
ad:0d:b5:ec:05:0f:ef:55:a1:0a:50:5e:61:ac:fb:e4:da:e9:
ec:21:fe:e1:5c:a9:ee:16:a9:e7:62:e6:12:23:08:dc:96:40:
42:f3:95:8b:5b:16:42:8f:40:eb:ed:a0:23:c7:2e:ef:33:89:
00:83:31:b3:a3:c1:3f:3c:09:5f:6d:8d:54:ac:14:09:0b:90:
ec:ce:d6:7c:ad:32:4a:6d:93:f6:98:e3:49:fc:d5:6f:22:aa:
18:92:c8:c8:52:ca:c5:5a:ec:9f:a3:f8:9e:d8:0c:c0:db:37:
15:fb:bd:9a:23:f3:21:1f:1f:d8:75:2e:6c:54:5b:67:65:e8:
28:67:72:66:85:d8:c3:39:a2:69:14:1c:d4:a5:9f:e0:e4:2c:
83:4c:c1:a1:f7:47:45:f3:14:9c:a9:aa:87:d3:6c:dd:41:29:
08:c5:c9:08:5c:1d:2c:d6:5f:bd:ef:46:b9:08:65:11:b6:91:
50:6b:d1:dd:12:62:73:c6:da:00:f1:50:b3:ec:d6:11:ae:6b:
48:83:7b:a0:1e:ba:ed:4a:34:6a:30:a0:ec:92:3f:bf:20:c8:
8e:1e:12:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 19:45:26 2026 by rpki-client