
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/f2553c-9bd6-49ae-9bed-1576c6f589c9/1/AWRUygmetS5VVg9dCeh-cxYa5zg.mft
File: AWRUygmetS5VVg9dCeh-cxYa5zg.mft (raw, json)
Hash identifier: md54qA+/WLYH0adaLqk3nbxaB5D9C1Yo2nP4HiUFTlE=
Subject key identifier: 7B:C8:46:27:A9:27:06:80:D9:1D:58:01:0A:C4:A0:E8:DB:B9:2F:91
Authority key identifier: 01:64:54:CA:09:9E:B5:2E:55:56:0F:5D:09:E8:7E:73:16:1A:E7:38
Certificate issuer: /CN=016454ca099eb52e55560f5d09e87e73161ae738
Certificate serial: 019CAD2250C1313355C9344A9264C7122BBC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AWRUygmetS5VVg9dCeh-cxYa5zg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/f2553c-9bd6-49ae-9bed-1576c6f589c9/1/AWRUygmetS5VVg9dCeh-cxYa5zg.mft
Manifest number: 0B65
Signing time: Mon 02 Mar 2026 06:00:33 +0000
Manifest this update: Mon 02 Mar 2026 06:00:33 +0000
Manifest next update: Tue 03 Mar 2026 06:00:33 +0000
Files and hashes: 1: AWRUygmetS5VVg9dCeh-cxYa5zg.crl (hash: HTiWi/aUPzEmLY7Uklq/m7+Y+YMliw7htRZ9164TS0U=)
2: K6q6EsM1CavuOYyARfp1XcUUEVQ.roa (hash: Xi5EDv6jv4B5PT+szJmGPSgtZ1Lgdt1o2yppeSgzgSY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/f2553c-9bd6-49ae-9bed-1576c6f589c9/1/AWRUygmetS5VVg9dCeh-cxYa5zg.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/f2553c-9bd6-49ae-9bed-1576c6f589c9/1/AWRUygmetS5VVg9dCeh-cxYa5zg.mft
rsync://rpki.ripe.net/repository/DEFAULT/AWRUygmetS5VVg9dCeh-cxYa5zg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:22:50:c1:31:33:55:c9:34:4a:92:64:c7:12:2b:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=016454ca099eb52e55560f5d09e87e73161ae738
Validity
Not Before: Mar 2 06:00:33 2026 GMT
Not After : Mar 3 06:00:33 2026 GMT
Subject: CN=7bc84627a9270680d91d58010ac4a0e8dbb92f91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:72:68:d9:de:f1:13:84:9c:80:14:64:1f:88:
1d:e1:a2:21:7e:4d:23:53:dd:b0:87:1c:78:81:c1:
2f:74:6c:34:a3:78:44:36:e6:5a:b5:3d:23:d2:d0:
00:96:ad:bc:74:75:21:72:40:bf:ca:91:dc:9c:8b:
0a:71:c4:08:42:ee:ee:3a:e7:ac:bd:2c:1e:ae:eb:
f0:24:4e:d4:97:33:e2:79:3e:d7:d6:62:c0:2e:72:
1b:58:27:1e:5f:4a:90:bf:14:56:74:12:a3:f7:37:
d4:da:7e:32:24:76:53:6d:05:8f:c1:80:4d:a4:e5:
34:04:bb:37:33:51:a8:90:63:2b:49:67:54:19:33:
4a:e8:64:6c:e7:bd:84:27:b4:df:56:4a:d5:8e:51:
10:1e:3b:7c:a4:48:68:fb:4d:0d:19:cd:da:1b:55:
e7:7e:8b:7c:e1:55:03:46:e3:2d:02:0e:16:bc:d4:
a3:76:62:d7:53:52:e5:5a:00:d9:5c:7c:a6:fe:20:
d2:28:9a:8f:e1:c4:5a:0c:4f:4b:cd:16:80:96:d5:
89:e0:4c:a4:5d:3a:1b:e5:91:a4:c6:60:32:50:7b:
3c:71:03:c5:ee:cb:c8:e5:d9:3d:52:b6:25:3f:ef:
b0:6c:d2:a6:83:4a:7a:b2:83:07:49:ce:c2:02:96:
7c:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:C8:46:27:A9:27:06:80:D9:1D:58:01:0A:C4:A0:E8:DB:B9:2F:91
X509v3 Authority Key Identifier:
keyid:01:64:54:CA:09:9E:B5:2E:55:56:0F:5D:09:E8:7E:73:16:1A:E7:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AWRUygmetS5VVg9dCeh-cxYa5zg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/f2553c-9bd6-49ae-9bed-1576c6f589c9/1/AWRUygmetS5VVg9dCeh-cxYa5zg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/f2553c-9bd6-49ae-9bed-1576c6f589c9/1/AWRUygmetS5VVg9dCeh-cxYa5zg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:a6:f7:fb:08:f1:63:23:ce:c1:c2:c2:9e:1f:7a:8b:69:db:
99:b7:46:d6:3f:90:dd:d6:43:f1:a6:b8:22:51:6a:38:40:87:
76:a6:1f:99:1b:35:4f:da:23:08:20:06:38:e7:6a:09:97:13:
a2:95:db:f6:9f:22:e2:75:8e:44:55:f5:4f:42:33:b2:0b:a2:
78:66:c9:18:42:bc:cc:9b:22:01:84:40:32:24:8b:fc:8b:f1:
03:42:5f:79:3a:07:be:8a:40:ca:e0:af:2d:82:b8:24:3f:df:
56:a3:e0:b7:88:0c:e3:57:1c:53:87:10:d4:97:79:9f:0c:1a:
3f:52:ff:dd:bb:14:04:d6:39:6b:aa:2a:cf:5a:54:2b:70:1e:
1e:cc:90:2c:e8:b7:d6:2f:b5:a2:73:57:b0:2c:62:31:67:76:
e8:c1:54:3a:03:4c:70:cd:ef:43:3d:22:70:0c:e4:27:fa:6e:
28:a4:29:89:2f:6b:0d:a7:d6:89:64:82:a4:86:63:01:5e:72:
de:75:47:29:74:d5:4c:6f:9b:b8:82:3b:87:dd:90:c4:18:96:
3b:d0:a0:fa:e1:64:dd:c3:38:93:11:b7:91:ec:1d:61:a3:75:
03:59:b0:3c:7a:88:3b:60:12:70:af:a6:8a:9d:96:a2:fb:1b:
23:65:9c:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:52:46 2026 by rpki-client