Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e5/c4e5a0-8219-4ff9-8287-1f4bea23e4c7/1/AWJv_YAOr6M2vfNDFB8D98OTw2Q.mft
File: AWJv_YAOr6M2vfNDFB8D98OTw2Q.mft (raw, json)
Hash identifier: O6yNC3u8pPLstvzmwYgWf4/YgGi+zGv7i5kQox3s2J4=
Subject key identifier: 84:45:30:A2:B0:7E:74:A2:04:4F:4E:4C:06:60:5E:C5:F6:9B:F0:69
Authority key identifier: 01:62:6F:FD:80:0E:AF:A3:36:BD:F3:43:14:1F:03:F7:C3:93:C3:64
Certificate issuer: /CN=01626ffd800eafa336bdf343141f03f7c393c364
Certificate serial: 01A0C4451272E2319AF60815532331F4370E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AWJv_YAOr6M2vfNDFB8D98OTw2Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/c4e5a0-8219-4ff9-8287-1f4bea23e4c7/1/AWJv_YAOr6M2vfNDFB8D98OTw2Q.mft
Manifest number: 17B1
Signing time: Mon 21 Sep 2026 14:00:56 +0000
Manifest this update: Mon 21 Sep 2026 14:00:56 +0000
Manifest next update: Tue 22 Sep 2026 14:00:56 +0000
Files and hashes: 1: AWJv_YAOr6M2vfNDFB8D98OTw2Q.crl (hash: 3DtRzWP7n2DsNez7xaZTSQjECAPm7PjIdoFnMya+9d4=)
2: TpaHwNI0EBaNPhIt_9NPWGX3c9c.roa (hash: 3XHWImydnmO2TAPTSjesjzHF5/P0zYI8CHSB5cj7+6Q=)
3: gcKttUPnL7_MZu78p1qx04xMHao.roa (hash: JA+o2fQOyII+vUUMO/Aoxd319klDX/s3T2jaF6Dy8TQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/c4e5a0-8219-4ff9-8287-1f4bea23e4c7/1/AWJv_YAOr6M2vfNDFB8D98OTw2Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/c4e5a0-8219-4ff9-8287-1f4bea23e4c7/1/AWJv_YAOr6M2vfNDFB8D98OTw2Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/AWJv_YAOr6M2vfNDFB8D98OTw2Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:45:12:72:e2:31:9a:f6:08:15:53:23:31:f4:37:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01626ffd800eafa336bdf343141f03f7c393c364
Validity
Not Before: Sep 21 14:00:56 2026 GMT
Not After : Sep 22 14:00:56 2026 GMT
Subject: CN=844530a2b07e74a2044f4e4c06605ec5f69bf069
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:25:43:1b:b6:13:66:70:35:73:0f:24:62:c0:
c6:e2:38:d9:8f:a9:47:40:6c:e8:ad:64:5a:81:e2:
48:08:a9:df:6c:71:37:5b:30:1a:be:16:84:de:4f:
93:5e:d0:29:74:61:91:fc:38:1a:6d:82:65:d8:46:
69:2f:f4:10:dc:a8:3a:98:c1:5c:8b:d8:8f:05:a9:
cb:f8:3c:a5:03:43:68:93:5e:92:e2:21:d3:b8:05:
63:5d:fc:70:50:69:36:8a:dd:6b:b0:a2:ba:a1:51:
0c:84:d8:7a:80:84:ee:81:9b:f6:41:56:b2:7b:74:
5e:d9:0d:30:fa:d3:98:40:68:cb:31:bb:66:da:b7:
9b:c7:0c:20:a1:f9:08:fb:df:06:df:2e:2f:13:fc:
e7:58:b0:cf:a5:e4:61:57:d0:b4:c8:68:cf:98:f9:
8c:b0:6e:c5:df:14:51:53:02:10:53:9a:0d:bc:51:
71:53:35:43:6e:86:f2:84:9e:15:40:30:3f:b8:3b:
2c:67:ca:64:87:85:67:0d:77:a0:3b:52:ac:12:f5:
c6:ba:fc:4b:99:7e:c0:88:bb:62:eb:22:26:ba:0c:
3e:96:01:56:51:b4:50:d8:d0:8a:57:ae:be:49:18:
05:6e:a7:9b:4b:9d:b7:50:2c:c0:11:19:0e:3b:e2:
6e:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:45:30:A2:B0:7E:74:A2:04:4F:4E:4C:06:60:5E:C5:F6:9B:F0:69
X509v3 Authority Key Identifier:
keyid:01:62:6F:FD:80:0E:AF:A3:36:BD:F3:43:14:1F:03:F7:C3:93:C3:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AWJv_YAOr6M2vfNDFB8D98OTw2Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/c4e5a0-8219-4ff9-8287-1f4bea23e4c7/1/AWJv_YAOr6M2vfNDFB8D98OTw2Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/c4e5a0-8219-4ff9-8287-1f4bea23e4c7/1/AWJv_YAOr6M2vfNDFB8D98OTw2Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:b3:61:58:c6:9e:2c:ec:5a:4e:99:d9:99:ae:60:51:fc:4c:
ea:a2:9b:f7:be:44:0c:39:d8:57:11:93:bb:fb:53:f8:69:d0:
42:ef:28:67:59:11:18:42:20:f1:0e:cf:45:66:7e:8d:d8:e5:
75:e1:5d:77:cf:79:3c:4b:68:24:aa:d2:a9:46:fa:89:f3:bc:
2a:cd:33:3a:04:cb:bc:04:bd:8f:f9:b1:67:34:f4:8f:84:3c:
1d:4b:58:53:fc:2a:89:98:9e:92:43:5c:7b:35:ac:f4:80:4c:
9d:84:b9:1d:df:ed:8e:76:7f:5c:ad:43:b7:2a:a5:71:f9:b9:
e9:37:eb:68:4c:ae:05:5f:92:0a:f0:c1:b6:84:04:04:9e:84:
7b:cb:39:14:57:b5:2c:06:32:0c:10:93:0b:aa:5b:e5:90:bd:
4b:b9:b5:8c:41:b5:a1:d9:3e:4b:e4:f0:d3:3c:c6:06:26:62:
c3:ef:20:a6:46:9f:04:4d:f8:fa:78:91:8a:fc:c6:90:34:5d:
1b:37:6e:5c:50:7b:85:e8:57:65:87:13:9d:2b:ed:e3:a3:9b:
f5:ce:3b:96:83:75:fb:cf:4d:85:cc:b8:db:0e:3e:50:38:7d:
67:e4:f6:23:49:06:aa:e6:81:f7:9f:d0:40:18:e8:09:ba:19:
49:ae:d6:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 22:16:01 2026 by rpki-client