Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/17aa67-8fe4-4a43-aadd-c4c51fcff497/1/AU97fVHlCBgO5zzt292VXDl3SCI.mft
File: AU97fVHlCBgO5zzt292VXDl3SCI.mft (raw, json)
Hash identifier: hwSd63/YuLzTxvAqbHBhDayPCZeewPnLKjgvc1lWh7Q=
Subject key identifier: E4:EF:F8:26:5E:5B:70:1D:30:59:A9:E0:69:08:1D:76:D7:18:FB:8F
Authority key identifier: 01:4F:7B:7D:51:E5:08:18:0E:E7:3C:ED:DB:DD:95:5C:39:77:48:22
Certificate issuer: /CN=014f7b7d51e508180ee73ceddbdd955c39774822
Certificate serial: 019D2B4E790EE4FB3FE2E854743CE9D3B743
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AU97fVHlCBgO5zzt292VXDl3SCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/17aa67-8fe4-4a43-aadd-c4c51fcff497/1/AU97fVHlCBgO5zzt292VXDl3SCI.mft
Manifest number: 1885
Signing time: Thu 26 Mar 2026 18:00:56 +0000
Manifest this update: Thu 26 Mar 2026 18:00:56 +0000
Manifest next update: Fri 27 Mar 2026 18:00:56 +0000
Files and hashes: 1: AU97fVHlCBgO5zzt292VXDl3SCI.crl (hash: rz04QtS7+1boYvCaEiv6b47mSM/FNjkTFvhd+ewsk2c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/17aa67-8fe4-4a43-aadd-c4c51fcff497/1/AU97fVHlCBgO5zzt292VXDl3SCI.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/17aa67-8fe4-4a43-aadd-c4c51fcff497/1/AU97fVHlCBgO5zzt292VXDl3SCI.mft
rsync://rpki.ripe.net/repository/DEFAULT/AU97fVHlCBgO5zzt292VXDl3SCI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 18:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2b:4e:79:0e:e4:fb:3f:e2:e8:54:74:3c:e9:d3:b7:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=014f7b7d51e508180ee73ceddbdd955c39774822
Validity
Not Before: Mar 26 18:00:56 2026 GMT
Not After : Mar 27 18:00:56 2026 GMT
Subject: CN=e4eff8265e5b701d3059a9e069081d76d718fb8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:c3:e0:69:6c:53:cd:1a:35:b3:25:1a:b0:07:
b0:ca:b5:86:a2:3a:24:6b:a2:81:33:b3:1c:cd:2f:
ae:13:76:7f:7b:d0:53:b7:04:cc:b9:41:9f:f0:73:
c0:e8:dc:99:ca:0f:cf:9a:74:25:d4:83:a0:90:14:
4c:a4:12:26:fd:a0:49:4e:d6:e3:af:1b:65:cd:54:
32:5d:f1:48:a8:3f:d7:cc:22:40:cc:ab:56:d3:e4:
f9:62:81:33:45:dc:93:b8:b6:16:2b:83:0a:70:6d:
49:a9:9a:9d:ac:38:f0:81:1b:a7:a7:83:87:43:96:
e0:0b:94:22:07:b9:df:ce:d4:39:72:e7:9e:3d:cb:
16:ac:43:ce:be:cd:e7:f7:ed:22:03:7b:be:f7:95:
88:bd:73:17:bb:45:38:61:ac:45:46:c7:57:f7:71:
24:91:97:14:11:0a:93:13:69:b2:c9:f2:13:c1:6e:
46:70:bc:65:92:26:29:0a:5c:64:bb:a0:f3:c7:04:
4d:3b:dc:1d:15:52:34:9d:8b:46:45:78:04:88:b8:
9a:3f:a8:43:4a:c0:c3:cf:09:0a:db:6e:03:d8:e2:
45:76:0c:04:94:ae:fb:f6:8b:e8:53:4c:2a:e3:69:
b9:14:b4:73:1a:6c:0c:0c:e6:36:c7:77:ad:1d:f9:
d9:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:EF:F8:26:5E:5B:70:1D:30:59:A9:E0:69:08:1D:76:D7:18:FB:8F
X509v3 Authority Key Identifier:
keyid:01:4F:7B:7D:51:E5:08:18:0E:E7:3C:ED:DB:DD:95:5C:39:77:48:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AU97fVHlCBgO5zzt292VXDl3SCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/17aa67-8fe4-4a43-aadd-c4c51fcff497/1/AU97fVHlCBgO5zzt292VXDl3SCI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/17aa67-8fe4-4a43-aadd-c4c51fcff497/1/AU97fVHlCBgO5zzt292VXDl3SCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:65:45:27:d8:2b:f6:8a:ab:cc:b6:f9:b1:0d:92:27:f6:71:
db:43:77:9a:60:6f:68:ca:8e:1f:ab:06:bf:75:ac:1b:33:ff:
72:92:31:d5:c5:63:85:59:80:97:73:f0:cd:c1:fb:e7:3c:dc:
2d:26:67:2c:d6:dc:f3:98:cb:5a:8c:4d:98:98:22:9f:a8:3d:
f8:cc:d4:4b:3d:aa:66:e0:e2:6a:01:79:cb:3b:b7:bc:4f:50:
14:3b:9a:9b:38:a3:13:fe:18:43:df:be:24:12:14:cc:63:93:
e5:15:87:7a:f2:f2:00:00:35:b0:88:fa:4c:a1:9d:3f:83:67:
7a:d3:ef:96:fa:cb:33:f4:16:0d:34:0a:1a:d1:a8:d8:0c:12:
df:9d:0f:15:f2:f0:15:c5:ac:18:7f:39:13:40:82:a7:b0:16:
e3:a3:41:10:20:15:fa:42:cf:c1:2c:c6:20:b6:18:8e:0e:b5:
69:fb:e4:c3:b1:52:c3:b1:86:c2:fc:9a:87:e5:7c:7f:ea:ad:
e8:a9:e3:07:fb:27:a1:b8:bc:ee:3b:06:95:9b:23:d8:f8:85:
5f:29:38:38:45:fc:7f:7e:d3:24:0d:b2:14:45:66:5b:5c:27:
ff:ab:37:b9:f5:d1:f2:57:45:d4:2c:13:eb:9b:7e:cd:53:34:
50:13:dd:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 03:29:00 2026 by rpki-client