Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ec/af4ef8-ed07-4acd-a42f-c96c2ce859e5/1/AW5eMfqHFqqlThj83P7T_JTbkLU.mft
File: AW5eMfqHFqqlThj83P7T_JTbkLU.mft (raw, json)
Hash identifier: gKTXpv8icI5O9/81zMy/3W1ZpuA/lCCQqYSfAUrqPyo=
Subject key identifier: 6E:8A:01:7E:3D:CF:8E:D3:C8:22:B9:F4:35:D1:04:DC:8C:00:7F:49
Authority key identifier: 01:6E:5E:31:FA:87:16:AA:A5:4E:18:FC:DC:FE:D3:FC:94:DB:90:B5
Certificate issuer: /CN=016e5e31fa8716aaa54e18fcdcfed3fc94db90b5
Certificate serial: 01A1C1AF40BAF7F846C202AA0B2DE8361BC4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AW5eMfqHFqqlThj83P7T_JTbkLU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/af4ef8-ed07-4acd-a42f-c96c2ce859e5/1/AW5eMfqHFqqlThj83P7T_JTbkLU.mft
Manifest number: 1AEC
Signing time: Mon 09 Nov 2026 19:00:50 +0000
Manifest this update: Mon 09 Nov 2026 19:00:50 +0000
Manifest next update: Tue 10 Nov 2026 19:00:50 +0000
Files and hashes: 1: AW5eMfqHFqqlThj83P7T_JTbkLU.crl (hash: XPutJXMV4MJl0kqAf7UI/OjsZzCT1UJnc3yQ6eDy56M=)
2: VIwi371Ilu32-PFrptGj4IRsgO0.roa (hash: GJeobJzmQ47MTxxCaSTphRwACX/qnxopY4ODc2q66rk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/af4ef8-ed07-4acd-a42f-c96c2ce859e5/1/AW5eMfqHFqqlThj83P7T_JTbkLU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/af4ef8-ed07-4acd-a42f-c96c2ce859e5/1/AW5eMfqHFqqlThj83P7T_JTbkLU.mft
rsync://rpki.ripe.net/repository/DEFAULT/AW5eMfqHFqqlThj83P7T_JTbkLU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Nov 2026 19:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:c1:af:40:ba:f7:f8:46:c2:02:aa:0b:2d:e8:36:1b:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=016e5e31fa8716aaa54e18fcdcfed3fc94db90b5
Validity
Not Before: Nov 9 19:00:50 2026 GMT
Not After : Nov 10 19:00:50 2026 GMT
Subject: CN=6e8a017e3dcf8ed3c822b9f435d104dc8c007f49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:5c:b3:6a:af:c6:4a:f0:24:e6:8f:3b:a4:96:
a8:54:08:ac:8d:00:97:22:65:64:78:dd:14:09:db:
6f:4c:94:df:2e:37:b8:72:93:37:5f:9e:61:5a:d6:
b8:94:54:d0:27:ff:c4:a1:d3:47:9d:27:ac:ba:20:
40:ab:9d:2d:81:9a:91:59:5f:d3:1b:57:48:41:1a:
c6:33:c3:21:9b:07:a8:5f:f8:de:63:bd:68:e0:e5:
f1:ef:b5:e8:fb:17:30:81:ac:b4:c2:d8:9c:44:af:
45:b5:c2:2b:cf:29:93:0e:28:f6:83:ae:c0:5a:ad:
cb:1e:41:10:6d:ac:2d:e6:0a:56:27:8a:5f:98:10:
d8:11:02:a5:05:96:b7:89:f6:6c:c3:b3:c9:b2:a3:
15:e4:80:f5:11:4b:ce:7b:56:e4:b0:65:dd:c7:1a:
c3:4c:40:4b:28:4b:f0:22:0f:c3:dd:f6:63:e2:86:
dc:f9:90:66:ca:d9:d9:81:fc:9a:67:3b:3b:0d:21:
c7:72:e0:8e:71:cc:50:57:95:34:77:65:16:87:a1:
57:53:c4:28:82:44:20:5d:e9:40:a5:87:ad:98:98:
bf:b8:60:6d:1e:50:3c:92:f7:e6:60:08:ac:61:85:
13:3c:4a:06:a4:8a:2b:6a:70:c0:5e:45:65:8f:e1:
e2:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:8A:01:7E:3D:CF:8E:D3:C8:22:B9:F4:35:D1:04:DC:8C:00:7F:49
X509v3 Authority Key Identifier:
keyid:01:6E:5E:31:FA:87:16:AA:A5:4E:18:FC:DC:FE:D3:FC:94:DB:90:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AW5eMfqHFqqlThj83P7T_JTbkLU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/af4ef8-ed07-4acd-a42f-c96c2ce859e5/1/AW5eMfqHFqqlThj83P7T_JTbkLU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/af4ef8-ed07-4acd-a42f-c96c2ce859e5/1/AW5eMfqHFqqlThj83P7T_JTbkLU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:8b:02:69:95:88:37:bb:0a:c2:0e:bd:be:74:10:0f:3f:f2:
04:08:6e:77:a7:b0:9e:ee:62:62:15:9d:48:bc:ce:b1:3d:4e:
5c:0b:ad:db:65:7d:68:53:5c:6c:cf:1b:d3:67:84:6b:0d:5d:
fd:eb:d2:8d:78:19:f0:67:89:da:5e:c1:e1:ab:e0:fb:1b:04:
50:dc:7f:ec:98:9a:46:b8:32:12:df:81:b1:9e:43:54:97:8b:
7a:5f:2b:c7:cf:80:ef:4c:d8:07:97:f1:18:10:f5:70:ad:16:
95:b7:52:3c:8d:c9:44:60:3f:ef:2e:af:b4:3b:b7:49:05:5d:
5a:7e:ef:e0:a8:29:f2:dd:45:2e:f7:e6:6a:e4:89:f6:b8:54:
3a:0d:df:25:cc:30:70:9b:68:2d:f4:9a:34:c8:34:ae:92:6e:
4b:01:99:29:12:2b:1f:bd:c0:9d:dd:98:4d:5b:05:bb:57:18:
25:6f:2d:b3:dd:0f:e9:71:f8:91:34:f3:6b:4a:e4:3a:0f:8a:
7c:ae:a8:ee:1d:e5:b9:bb:23:f8:c0:26:fa:76:bc:a9:73:7c:
5a:c9:19:ab:ee:e3:1f:2f:8c:e1:a9:91:fd:00:7d:1e:4d:40:
29:ff:c3:4a:b5:a1:1e:9f:e0:cd:e0:06:e0:91:eb:80:9d:be:
e5:66:67:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 10 03:21:09 2026 by rpki-client