Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/1240eb-bab4-45ad-9387-516f11acb3ae/1/4auG-AxLsqxW5B7HokauKWnY01g.mft
File: 4auG-AxLsqxW5B7HokauKWnY01g.mft (raw, json)
Hash identifier: DyhWqjDJA5F5zP3Q252hzH8XgLgMVWBhRq7yWHey+w8=
Subject key identifier: 8B:39:50:3F:86:5E:1E:A7:E7:37:01:20:71:17:52:1C:61:F5:7F:15
Authority key identifier: E1:AB:86:F8:0C:4B:B2:AC:56:E4:1E:C7:A2:46:AE:29:69:D8:D3:58
Certificate issuer: /CN=e1ab86f80c4bb2ac56e41ec7a246ae2969d8d358
Certificate serial: 019D2A047ED0DF8062E85CDCAEE6479767F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4auG-AxLsqxW5B7HokauKWnY01g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/1240eb-bab4-45ad-9387-516f11acb3ae/1/4auG-AxLsqxW5B7HokauKWnY01g.mft
Manifest number: 0851
Signing time: Thu 26 Mar 2026 12:00:30 +0000
Manifest this update: Thu 26 Mar 2026 12:00:30 +0000
Manifest next update: Fri 27 Mar 2026 12:00:30 +0000
Files and hashes: 1: 4auG-AxLsqxW5B7HokauKWnY01g.crl (hash: Ul0dV/Q4/lUVy/eeOeoaHB+m1Lt2jRdQOSaDDrjcYtg=)
2: KNOVXoGQsdCxPsZM3zKJ6uFmptI.roa (hash: UiYbuT4DjmIashb94arKXLuitUGRN2TvoEQlDnO6RSk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/1240eb-bab4-45ad-9387-516f11acb3ae/1/4auG-AxLsqxW5B7HokauKWnY01g.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/1240eb-bab4-45ad-9387-516f11acb3ae/1/4auG-AxLsqxW5B7HokauKWnY01g.mft
rsync://rpki.ripe.net/repository/DEFAULT/4auG-AxLsqxW5B7HokauKWnY01g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 12:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:04:7e:d0:df:80:62:e8:5c:dc:ae:e6:47:97:67:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1ab86f80c4bb2ac56e41ec7a246ae2969d8d358
Validity
Not Before: Mar 26 12:00:30 2026 GMT
Not After : Mar 27 12:00:30 2026 GMT
Subject: CN=8b39503f865e1ea7e73701207117521c61f57f15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:d0:83:2f:4b:6e:c1:bc:26:fc:4b:52:91:42:
9c:9d:97:5e:b5:0d:d8:f1:2a:4f:3c:6c:19:dd:19:
97:ed:ec:d8:12:05:86:19:8f:1c:37:fb:90:fe:5e:
34:74:fc:44:bf:52:6e:b6:5c:41:66:85:c6:56:0e:
64:77:68:9c:4e:13:bd:f4:0d:ec:e9:24:ff:0f:b7:
d1:05:3b:d7:60:64:af:3a:57:3d:27:b0:5c:a0:12:
ff:38:01:89:7b:ac:42:23:2b:0f:f8:f1:04:87:97:
c6:b0:4f:70:f7:b8:74:38:a7:59:d5:0e:d0:e2:32:
a7:ac:db:be:e1:77:c9:f7:a5:24:bb:ea:f6:ee:f4:
87:8f:24:12:ca:ad:1f:d1:0b:71:f2:84:5a:df:df:
59:52:99:04:29:8c:45:15:f8:5f:3c:e2:3c:2e:28:
94:f7:50:05:00:88:f5:ad:5b:d6:ea:6f:98:bc:3a:
73:21:f7:33:a7:47:6f:f4:0a:2b:08:03:08:72:49:
c7:90:23:5c:53:ee:ac:26:9c:1c:16:d3:88:67:dd:
fe:04:a3:84:d3:0e:ce:5f:08:f9:f1:90:60:f5:40:
1b:d6:75:55:b9:56:9f:b8:2b:71:3c:ce:ab:6a:03:
4f:ea:8c:dd:ce:9f:aa:a2:4a:cc:37:27:90:ef:d6:
53:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:39:50:3F:86:5E:1E:A7:E7:37:01:20:71:17:52:1C:61:F5:7F:15
X509v3 Authority Key Identifier:
keyid:E1:AB:86:F8:0C:4B:B2:AC:56:E4:1E:C7:A2:46:AE:29:69:D8:D3:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4auG-AxLsqxW5B7HokauKWnY01g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/1240eb-bab4-45ad-9387-516f11acb3ae/1/4auG-AxLsqxW5B7HokauKWnY01g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/1240eb-bab4-45ad-9387-516f11acb3ae/1/4auG-AxLsqxW5B7HokauKWnY01g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d4:f6:ac:57:0c:c2:4c:59:08:70:96:cf:77:31:1d:58:7a:ec:
b3:67:53:97:88:d7:41:33:9b:90:df:6e:ce:af:bc:ea:07:86:
ba:aa:8d:a5:ef:1c:44:9c:59:75:ca:07:9c:41:89:9f:95:a4:
38:22:c4:ee:81:f8:ed:3b:c5:89:e9:9e:f2:b3:b6:48:37:10:
9c:03:4f:da:7e:4b:43:b0:fc:79:32:9b:8b:11:f4:7f:2a:a7:
7c:79:de:a8:ae:09:a9:24:8a:6a:9b:97:57:7f:90:52:ac:73:
ca:4c:08:0f:90:b6:53:a0:a9:bf:7d:bb:fb:bd:c9:68:c9:bc:
d1:bc:06:32:63:f0:22:19:aa:a1:e1:0b:89:bf:40:f3:87:9c:
ed:85:3e:42:aa:87:a0:9d:90:1e:66:da:b1:a8:98:00:fd:cf:
11:16:2f:ff:9a:a9:4a:dd:c5:10:8a:c2:9f:a8:33:f0:81:cb:
00:e4:44:fa:e7:a8:09:14:ef:94:31:15:a2:4c:5e:7c:f3:8f:
30:5c:38:85:cd:44:56:3f:61:d9:4e:78:ba:b0:33:42:8f:bf:
df:14:17:4e:73:56:0b:17:c6:f9:44:18:3b:c4:11:ba:5e:9b:
eb:b5:f1:55:da:31:b1:c5:0a:4a:99:e5:94:9d:6f:ba:93:77:
a0:68:6c:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:12:39 2026 by rpki-client