Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/e5e379-656d-4622-a7bc-ea26e746a0ad/1/AUa0KfjElhH8_qHvoaUbnA7dtuc.mft
File: AUa0KfjElhH8_qHvoaUbnA7dtuc.mft (raw, json)
Hash identifier: ry4k3Pzdvpf2MmzCAdPf1HAuWfLoD/XBZTOGJcyxXuc=
Subject key identifier: 3F:50:7B:F6:71:C6:49:70:73:85:E2:53:60:3C:42:D9:1C:F0:83:BF
Authority key identifier: 01:46:B4:29:F8:C4:96:11:FC:FE:A1:EF:A1:A5:1B:9C:0E:DD:B6:E7
Certificate issuer: /CN=0146b429f8c49611fcfea1efa1a51b9c0eddb6e7
Certificate serial: 019D270421D7E13E7CAACE464DF99E01D694
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AUa0KfjElhH8_qHvoaUbnA7dtuc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/e5e379-656d-4622-a7bc-ea26e746a0ad/1/AUa0KfjElhH8_qHvoaUbnA7dtuc.mft
Manifest number: 171A
Signing time: Wed 25 Mar 2026 22:01:15 +0000
Manifest this update: Wed 25 Mar 2026 22:01:15 +0000
Manifest next update: Thu 26 Mar 2026 22:01:15 +0000
Files and hashes: 1: AUa0KfjElhH8_qHvoaUbnA7dtuc.crl (hash: goFrX2QyCSpEWzoqfYjRQYVhgXnlL+PMg0flWjy8b7A=)
2: NxuqhMt3VzaBAaaFWGDiuWFgX_M.roa (hash: F2a9W3aDlKDuDbu3k14edUZBWtASv604tOPuHCHuAUU=)
3: RzgUn9eg8y2k66eYHCNlwa8pwvg.roa (hash: OcpgiZ4MXGUv2QGrVDNPAXMaeOzLbUHWGEXGkutCgDg=)
4: X7PjzMppd_dLozdN0D11F0z07vQ.roa (hash: psScHcjJlgs5hgoPO3e9N+tN+WLH5h3LFD7hHGpCwcE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/e5e379-656d-4622-a7bc-ea26e746a0ad/1/AUa0KfjElhH8_qHvoaUbnA7dtuc.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/e5e379-656d-4622-a7bc-ea26e746a0ad/1/AUa0KfjElhH8_qHvoaUbnA7dtuc.mft
rsync://rpki.ripe.net/repository/DEFAULT/AUa0KfjElhH8_qHvoaUbnA7dtuc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:21:d7:e1:3e:7c:aa:ce:46:4d:f9:9e:01:d6:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0146b429f8c49611fcfea1efa1a51b9c0eddb6e7
Validity
Not Before: Mar 25 22:01:15 2026 GMT
Not After : Mar 26 22:01:15 2026 GMT
Subject: CN=3f507bf671c649707385e253603c42d91cf083bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:cc:f5:3a:ce:04:92:2b:fd:15:4e:9d:77:67:
88:8d:35:ac:4a:17:1e:57:a1:1f:0b:8f:b4:31:00:
2f:2c:af:20:a5:ef:f9:a3:e0:91:7e:a7:2b:18:c7:
25:af:72:86:97:8c:fe:ab:2d:27:ec:7d:f0:34:f6:
ee:d5:dd:c8:b3:d8:d7:81:60:ce:12:a8:72:65:62:
98:85:5e:1a:7d:0a:2e:77:55:06:af:cb:bb:2b:a4:
16:b1:df:07:e4:69:5e:40:5e:d1:22:d5:71:8e:49:
29:25:28:e5:2c:90:73:1c:db:a2:5f:38:31:85:af:
a1:99:89:ac:5f:3d:10:99:78:1f:99:59:10:bf:e6:
12:c2:84:89:40:7d:0a:e6:1d:71:d6:97:a8:bb:03:
03:0c:46:6e:30:24:5c:e1:cc:0b:bd:97:0b:6e:ba:
ad:c6:7e:b9:87:11:62:b4:3f:79:3e:39:ef:0c:1d:
b4:ae:27:90:ee:a5:2f:73:d7:a4:7d:ff:71:21:97:
47:03:5f:c0:94:35:cf:ed:79:f9:59:37:3a:ee:d3:
fe:c4:ec:b7:0c:94:ff:d9:a3:46:8e:90:9e:7a:f5:
85:3b:b0:87:8d:f5:1f:1f:b6:f7:5c:0d:74:58:91:
6f:b6:5c:c6:41:3e:06:42:8e:9c:da:05:47:f6:80:
5a:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:50:7B:F6:71:C6:49:70:73:85:E2:53:60:3C:42:D9:1C:F0:83:BF
X509v3 Authority Key Identifier:
keyid:01:46:B4:29:F8:C4:96:11:FC:FE:A1:EF:A1:A5:1B:9C:0E:DD:B6:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AUa0KfjElhH8_qHvoaUbnA7dtuc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/e5e379-656d-4622-a7bc-ea26e746a0ad/1/AUa0KfjElhH8_qHvoaUbnA7dtuc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/e5e379-656d-4622-a7bc-ea26e746a0ad/1/AUa0KfjElhH8_qHvoaUbnA7dtuc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:99:17:cd:df:b0:87:30:8e:61:fa:1c:e2:e9:33:33:f8:8f:
ae:3c:ff:0f:0f:da:d7:cc:54:27:47:ca:b4:ad:df:03:d4:79:
1a:84:2c:17:e4:76:5f:0d:f7:b4:fa:3e:6d:44:14:9e:5d:3e:
68:d0:ee:57:c4:99:c6:47:68:04:a4:38:d2:39:7e:2d:5b:fd:
4b:3d:f2:c5:0f:fe:fb:b2:b8:66:08:b2:61:d3:23:a4:64:71:
53:4d:b0:bb:90:e4:79:50:c1:a3:8e:15:36:9c:74:90:f5:ba:
3d:ae:e8:b0:d9:9d:5c:49:b2:9a:c2:37:9e:3f:a9:3c:b5:e9:
5e:11:af:ae:c6:bb:99:5e:6c:7c:de:2d:01:c5:13:5f:f3:aa:
c0:33:67:d4:31:d4:f0:2a:38:b8:0b:69:75:a9:67:fc:c7:a9:
84:6d:6b:3f:31:f2:85:e9:13:7d:01:97:34:6b:05:83:8f:81:
50:93:4d:83:12:b1:96:47:58:22:22:47:a1:9f:40:d8:2d:63:
6d:fa:ee:e8:6e:ad:a5:c0:65:81:50:aa:2b:12:a4:9e:c8:ef:
d9:8f:66:ce:56:4d:23:5c:c5:d7:a4:43:ed:1b:92:05:98:1d:
88:2b:03:ad:9a:fb:d5:ab:f0:d5:37:a7:2a:2c:7f:b3:52:20:
d4:8f:2a:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:09:26 2026 by rpki-client