Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c4/f2553c-9bd6-49ae-9bed-1576c6f589c9/1/AWRUygmetS5VVg9dCeh-cxYa5zg.mft
File: AWRUygmetS5VVg9dCeh-cxYa5zg.mft (raw, json)
Hash identifier: pOMQwCZoFdsKScoR7UdHJkGp8+RpODIMrAfCxq/EDis=
Subject key identifier: 4C:CF:E2:FE:63:DC:32:D1:71:22:6E:3D:D8:84:E0:7F:06:42:90:B4
Authority key identifier: 01:64:54:CA:09:9E:B5:2E:55:56:0F:5D:09:E8:7E:73:16:1A:E7:38
Certificate issuer: /CN=016454ca099eb52e55560f5d09e87e73161ae738
Certificate serial: 01A105B7E2CC77C81301AF7E062976361B9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AWRUygmetS5VVg9dCeh-cxYa5zg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/f2553c-9bd6-49ae-9bed-1576c6f589c9/1/AWRUygmetS5VVg9dCeh-cxYa5zg.mft
Manifest number: 0DA6
Signing time: Sun 04 Oct 2026 07:01:39 +0000
Manifest this update: Sun 04 Oct 2026 07:01:39 +0000
Manifest next update: Mon 05 Oct 2026 07:01:39 +0000
Files and hashes: 1: AWRUygmetS5VVg9dCeh-cxYa5zg.crl (hash: 3r+m7/0Gx1KKkO1Ax8i0QMjE5tCVmRdkin3wlXxq9wE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/f2553c-9bd6-49ae-9bed-1576c6f589c9/1/AWRUygmetS5VVg9dCeh-cxYa5zg.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/f2553c-9bd6-49ae-9bed-1576c6f589c9/1/AWRUygmetS5VVg9dCeh-cxYa5zg.mft
rsync://rpki.ripe.net/repository/DEFAULT/AWRUygmetS5VVg9dCeh-cxYa5zg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 00:44:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:05:b7:e2:cc:77:c8:13:01:af:7e:06:29:76:36:1b:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=016454ca099eb52e55560f5d09e87e73161ae738
Validity
Not Before: Oct 4 07:01:39 2026 GMT
Not After : Oct 5 07:01:39 2026 GMT
Subject: CN=4ccfe2fe63dc32d171226e3dd884e07f064290b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:00:24:a6:66:7c:4e:7f:1d:a0:b8:4c:8a:bb:
07:c3:46:ba:34:3d:fe:6b:7b:22:4d:5b:2d:f7:51:
ab:c6:17:ed:e3:1e:82:e0:7b:78:99:1d:df:76:ab:
54:6b:96:d2:07:d6:ec:a8:9a:39:4e:68:8c:dd:e9:
b8:d4:2a:90:29:8a:8c:f7:3f:a2:d6:91:f7:ed:61:
aa:9a:62:42:f8:c9:6a:61:03:d9:af:5b:f9:ed:63:
a2:52:23:35:a4:c3:f9:18:6d:4b:10:5b:e7:98:02:
50:8f:df:16:ae:15:6b:84:03:eb:a6:d9:5e:f3:4e:
db:22:6d:9a:a6:39:4f:51:ec:4d:63:45:d5:a0:d2:
70:05:5f:ba:4f:7a:e8:27:46:1d:55:90:67:93:fb:
f1:9e:ec:51:fa:af:4d:18:c5:f7:c2:09:69:51:21:
7e:3b:51:95:b3:2e:35:30:4c:9a:22:80:28:29:82:
29:49:a4:a7:7e:8c:98:78:15:8e:22:09:56:a5:a1:
c9:d0:87:d0:24:fe:5f:d7:17:5e:15:e8:20:0e:e8:
60:f5:d5:82:c2:50:3c:90:21:4b:12:b8:5e:d9:1c:
a4:ec:65:f5:3a:f1:6a:f0:97:25:a8:20:f7:81:e6:
d0:25:c1:16:b0:ad:90:d8:e2:e0:5e:35:27:72:c8:
84:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:CF:E2:FE:63:DC:32:D1:71:22:6E:3D:D8:84:E0:7F:06:42:90:B4
X509v3 Authority Key Identifier:
keyid:01:64:54:CA:09:9E:B5:2E:55:56:0F:5D:09:E8:7E:73:16:1A:E7:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AWRUygmetS5VVg9dCeh-cxYa5zg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/f2553c-9bd6-49ae-9bed-1576c6f589c9/1/AWRUygmetS5VVg9dCeh-cxYa5zg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/f2553c-9bd6-49ae-9bed-1576c6f589c9/1/AWRUygmetS5VVg9dCeh-cxYa5zg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:5f:d3:a1:99:a8:46:9e:49:47:ff:47:58:ad:f1:ba:25:f6:
bf:ea:21:4c:b9:3c:ec:c9:ac:d8:cc:6a:e3:33:c0:21:03:27:
b5:62:bf:39:6d:b6:dc:11:76:c1:41:f3:3f:a5:18:66:74:7f:
70:d4:3d:29:9d:05:a5:99:e6:77:b6:25:8b:30:f0:42:80:71:
d5:48:2d:d1:24:92:f5:7c:1c:b8:ab:f0:4d:56:af:9d:f3:5f:
d4:41:fa:70:11:26:c9:ce:3b:45:13:78:24:ab:ab:69:6d:27:
ef:d3:22:c9:43:f9:77:e1:db:c3:b2:c2:80:55:cd:a8:9d:e1:
8e:ce:5c:25:2e:78:ae:b9:ce:2a:1d:7c:bc:12:4a:5f:51:31:
2f:ea:12:a7:a0:49:eb:29:bd:8a:7f:04:f8:a7:e2:3e:65:e2:
15:95:d0:90:ba:e6:ec:d1:fa:9e:3b:6f:34:61:ff:a5:1b:d2:
6f:d1:89:04:9f:2b:41:a5:cb:d2:b9:89:5c:f2:51:71:34:73:
6c:a2:7b:99:51:4f:6c:6e:e5:b5:c5:bf:d4:b2:5d:17:8e:8a:
8d:76:2a:35:3d:a0:16:0f:71:00:27:3d:70:47:f7:d9:04:4e:
05:5f:00:b5:c0:c4:5b:73:d6:aa:8f:d9:47:75:92:b7:7b:e5:
54:04:7f:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 10:22:43 2026 by rpki-client