Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/f2553c-9bd6-49ae-9bed-1576c6f589c9/1/AWRUygmetS5VVg9dCeh-cxYa5zg.mft
File: AWRUygmetS5VVg9dCeh-cxYa5zg.mft (raw, json)
Hash identifier: 9yTHNSxky8ulMmG7v924Li987FkyP6VTf3J8BUySw34=
Subject key identifier: 57:1F:4F:88:47:33:BC:6E:BB:27:D1:20:77:3A:47:FD:42:23:68:F1
Authority key identifier: 01:64:54:CA:09:9E:B5:2E:55:56:0F:5D:09:E8:7E:73:16:1A:E7:38
Certificate issuer: /CN=016454ca099eb52e55560f5d09e87e73161ae738
Certificate serial: 019FA82BB359225F432629372BFE7CBD485F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AWRUygmetS5VVg9dCeh-cxYa5zg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/f2553c-9bd6-49ae-9bed-1576c6f589c9/1/AWRUygmetS5VVg9dCeh-cxYa5zg.mft
Manifest number: 0CF1
Signing time: Tue 28 Jul 2026 10:01:03 +0000
Manifest this update: Tue 28 Jul 2026 10:01:03 +0000
Manifest next update: Wed 29 Jul 2026 10:01:03 +0000
Files and hashes: 1: AWRUygmetS5VVg9dCeh-cxYa5zg.crl (hash: 8J9gxOx0p4gOCA4cxsHP9v92k6i/nJEzdeUwnRNbzeE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/f2553c-9bd6-49ae-9bed-1576c6f589c9/1/AWRUygmetS5VVg9dCeh-cxYa5zg.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/f2553c-9bd6-49ae-9bed-1576c6f589c9/1/AWRUygmetS5VVg9dCeh-cxYa5zg.mft
rsync://rpki.ripe.net/repository/DEFAULT/AWRUygmetS5VVg9dCeh-cxYa5zg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 10:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:2b:b3:59:22:5f:43:26:29:37:2b:fe:7c:bd:48:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=016454ca099eb52e55560f5d09e87e73161ae738
Validity
Not Before: Jul 28 10:01:03 2026 GMT
Not After : Jul 29 10:01:03 2026 GMT
Subject: CN=571f4f884733bc6ebb27d120773a47fd422368f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:6a:31:7d:b1:9c:4a:35:91:58:4d:20:45:af:
43:63:64:5c:a7:d6:cb:94:e2:ea:92:5f:3e:c2:88:
7a:90:7f:7e:19:ca:f3:10:e6:b5:18:43:80:0c:9b:
24:28:ae:65:19:ad:50:e9:d0:a2:0e:dc:4b:8d:52:
ca:11:84:e8:40:db:9a:81:de:5f:6a:e2:d2:63:13:
5a:63:13:6a:c6:39:6b:3b:2b:aa:9e:48:54:51:c4:
0a:03:eb:af:30:a2:d4:13:ae:df:bb:9f:ba:71:55:
bb:e0:52:f4:fa:3b:61:37:aa:de:b3:13:be:63:6e:
a3:93:73:77:84:97:93:dc:50:99:ff:05:47:e9:a0:
87:b5:78:9a:7f:12:af:e4:29:ce:61:50:fe:95:b9:
f0:80:b0:5b:db:75:81:5d:34:0a:54:85:47:3d:eb:
56:e3:35:50:ad:a6:a0:76:be:26:82:4d:be:f2:e7:
50:59:b3:fd:93:11:4c:35:e9:79:bd:89:a8:43:ef:
1f:74:99:5a:0a:12:66:6b:a7:f3:d7:f5:11:5e:2e:
06:5d:c1:03:95:ac:6f:13:48:79:a1:c3:79:96:37:
f6:e5:e1:ab:36:2f:8c:f4:3d:e1:6d:c3:5e:ca:84:
cd:4d:70:d7:c4:da:73:e8:92:7a:11:76:0c:5e:b5:
c0:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:1F:4F:88:47:33:BC:6E:BB:27:D1:20:77:3A:47:FD:42:23:68:F1
X509v3 Authority Key Identifier:
keyid:01:64:54:CA:09:9E:B5:2E:55:56:0F:5D:09:E8:7E:73:16:1A:E7:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AWRUygmetS5VVg9dCeh-cxYa5zg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/f2553c-9bd6-49ae-9bed-1576c6f589c9/1/AWRUygmetS5VVg9dCeh-cxYa5zg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/f2553c-9bd6-49ae-9bed-1576c6f589c9/1/AWRUygmetS5VVg9dCeh-cxYa5zg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d8:33:68:f2:a8:98:66:f8:00:1a:6d:86:83:26:dc:c3:42:c8:
19:34:e7:7d:89:b7:40:80:e7:65:6f:fa:67:0a:47:43:61:f2:
99:a4:83:de:83:af:e0:a8:3a:00:e9:37:6f:41:5e:07:49:35:
5f:04:7f:e4:24:a2:27:55:59:16:58:cd:f3:c3:96:d4:ae:a9:
d8:5b:6d:da:8f:68:a0:4a:22:31:32:e6:18:e0:28:82:be:77:
9d:9b:06:ae:eb:a0:63:6c:48:50:5b:7c:48:db:95:67:7d:aa:
cc:0d:5c:15:f4:85:60:be:84:99:ed:f4:78:1a:d8:6e:35:d1:
4a:2a:1c:2b:f3:e4:d6:74:fa:1d:18:9d:8b:0c:bb:75:bf:1f:
d6:b7:fe:46:23:b7:5a:63:95:42:ef:cd:4c:91:8b:70:2b:67:
a0:a0:4a:c8:87:96:51:6e:be:3a:ff:0c:e6:24:ab:ef:3d:f3:
3d:bf:1f:05:b6:ff:8c:fe:06:c2:8f:b7:a6:11:d9:19:71:be:
15:8a:35:8a:8a:c3:16:ef:78:7f:33:87:51:d8:89:4a:29:1b:
91:7a:26:ea:00:09:d1:52:7b:46:b3:4e:c5:3b:16:ef:5d:cc:
ab:7a:04:8a:9b:b6:94:1f:87:64:a3:09:7f:bc:19:38:29:69:
24:7c:01:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:56:20 2026 by rpki-client