Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/11/b36dbd-55eb-4de4-b6b9-839196345b6d/1/AUI61NYpsvgot58ArEA4jje44lI.mft
File: AUI61NYpsvgot58ArEA4jje44lI.mft (raw, json)
Hash identifier: G3ozHr1/GNNRCKvH8QNQfatAM2N3tP7Q27i/DvgTrUw=
Subject key identifier: AA:22:A3:64:B1:65:26:C7:24:80:EB:19:C2:EF:24:0F:02:A8:E7:4A
Authority key identifier: 01:42:3A:D4:D6:29:B2:F8:28:B7:9F:00:AC:40:38:8E:37:B8:E2:52
Certificate issuer: /CN=01423ad4d629b2f828b79f00ac40388e37b8e252
Certificate serial: 01A0D19322C92DBE2FD115EA2220AE3720F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AUI61NYpsvgot58ArEA4jje44lI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/b36dbd-55eb-4de4-b6b9-839196345b6d/1/AUI61NYpsvgot58ArEA4jje44lI.mft
Manifest number: 16A1
Signing time: Thu 24 Sep 2026 04:01:15 +0000
Manifest this update: Thu 24 Sep 2026 04:01:15 +0000
Manifest next update: Fri 25 Sep 2026 04:01:15 +0000
Files and hashes: 1: AUI61NYpsvgot58ArEA4jje44lI.crl (hash: gjsqFTWUoXQNYz72ddnYOFnHARff2oLXRcCrygNd5gQ=)
2: oko0jjQVhM1g4SJmXa1zHjF9DLY.roa (hash: OdA2/Wk2XJh4HpZKtiKeyh0J3e1XxtYP056tIDnTkI0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/b36dbd-55eb-4de4-b6b9-839196345b6d/1/AUI61NYpsvgot58ArEA4jje44lI.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/b36dbd-55eb-4de4-b6b9-839196345b6d/1/AUI61NYpsvgot58ArEA4jje44lI.mft
rsync://rpki.ripe.net/repository/DEFAULT/AUI61NYpsvgot58ArEA4jje44lI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d1:93:22:c9:2d:be:2f:d1:15:ea:22:20:ae:37:20:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01423ad4d629b2f828b79f00ac40388e37b8e252
Validity
Not Before: Sep 24 04:01:15 2026 GMT
Not After : Sep 25 04:01:15 2026 GMT
Subject: CN=aa22a364b16526c72480eb19c2ef240f02a8e74a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:27:25:3c:67:ff:80:2d:61:bd:05:22:a8:7c:
60:58:fd:8d:ec:ec:f0:26:45:cb:0d:c6:32:11:48:
96:02:99:8c:30:3b:f4:dc:4f:a3:a4:e2:d9:cd:81:
cb:38:b0:bf:88:a7:32:f5:37:37:c8:21:e1:03:e9:
98:e3:52:9a:d4:ce:ac:d6:9a:c9:53:af:40:46:c5:
49:7f:e6:7b:3d:e3:65:2f:6c:20:de:df:d5:62:5a:
25:30:75:7e:f6:d0:ec:94:39:a6:84:2f:cc:43:5d:
6f:c0:fb:b6:63:d1:67:c3:20:bd:c4:e2:bf:f4:a7:
43:12:54:53:39:2b:0c:8e:b8:a7:ad:05:52:5e:ab:
c0:c3:3c:36:c8:bb:61:ab:38:44:b1:dc:8b:c7:1d:
47:5f:02:16:12:e1:15:cb:24:2d:d7:5b:75:64:ad:
3b:60:f7:84:e4:12:79:6f:5e:d8:79:3f:e0:60:63:
e3:9e:58:71:be:5f:52:4e:15:95:17:fd:20:be:f5:
b0:15:98:e6:2d:be:8b:8d:ca:7a:e8:4f:bd:8e:6c:
b4:0c:a4:b9:81:b2:9d:98:d2:d3:ee:4a:53:30:a4:
63:b3:25:c7:0e:1c:5a:32:21:21:22:a6:4f:b5:3f:
62:b6:80:2a:68:c3:4d:f8:2b:3b:3c:68:8a:ab:92:
55:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:22:A3:64:B1:65:26:C7:24:80:EB:19:C2:EF:24:0F:02:A8:E7:4A
X509v3 Authority Key Identifier:
keyid:01:42:3A:D4:D6:29:B2:F8:28:B7:9F:00:AC:40:38:8E:37:B8:E2:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AUI61NYpsvgot58ArEA4jje44lI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b36dbd-55eb-4de4-b6b9-839196345b6d/1/AUI61NYpsvgot58ArEA4jje44lI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b36dbd-55eb-4de4-b6b9-839196345b6d/1/AUI61NYpsvgot58ArEA4jje44lI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:bc:b2:21:ce:d4:63:ac:a7:d6:7c:c5:4a:d9:94:1b:25:df:
21:c6:b9:de:f5:ca:53:70:91:c5:99:50:7c:26:da:82:4c:0f:
62:31:88:41:1b:80:b8:8d:96:ad:e5:77:c7:04:a2:60:e8:c1:
64:53:eb:79:b9:0a:ce:b9:5a:14:37:fb:cb:02:eb:09:6e:ae:
28:9b:79:97:e1:58:ce:6e:04:03:ee:e8:df:5e:a5:25:88:55:
4f:75:a0:9d:68:1f:95:e9:38:f7:b3:21:6b:53:71:a4:ae:09:
b8:c2:79:7b:be:24:4e:10:ff:8f:1c:eb:74:7b:36:33:4a:70:
f0:83:48:ea:7d:e1:c9:00:58:a0:d3:1f:51:49:d4:9e:2e:e5:
f6:e8:11:bc:3a:94:ce:6b:ed:9f:c4:8e:3c:07:f4:32:c4:54:
77:c8:c8:14:f2:fe:22:da:4e:9f:b1:96:ba:a2:89:8a:82:47:
cb:7b:4c:19:65:1c:22:89:e2:27:44:d8:c3:23:db:e8:ec:dc:
5f:f2:0f:74:85:ec:3a:7f:c3:33:4c:a5:d2:ba:aa:00:0f:a1:
bc:10:e5:4b:43:94:dc:02:83:b8:7f:87:b0:97:3b:1c:b1:2f:
54:88:a9:13:d2:19:3e:8d:f2:e5:2e:d1:26:c1:c3:ba:18:fe:
c5:16:73:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 06:59:56 2026 by rpki-client