Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2b/d28729-84ee-4085-b85c-16a2d3e6c994/1/AUqAjM9ZGdBWfcQjTpCj5gzrFkg.mft
File: AUqAjM9ZGdBWfcQjTpCj5gzrFkg.mft (raw, json)
Hash identifier: LVmtikOfnO2ksO43WwRKRM85RberOC0iMBktVTDp0uU=
Subject key identifier: 97:FD:50:FD:81:BB:AF:31:F7:9A:FF:73:20:0E:12:B5:6A:2C:FA:D6
Authority key identifier: 01:4A:80:8C:CF:59:19:D0:56:7D:C4:23:4E:90:A3:E6:0C:EB:16:48
Certificate issuer: /CN=014a808ccf5919d0567dc4234e90a3e60ceb1648
Certificate serial: 01A0D6B9779A81E0F4A4EC74674FA60BE50E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AUqAjM9ZGdBWfcQjTpCj5gzrFkg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/d28729-84ee-4085-b85c-16a2d3e6c994/1/AUqAjM9ZGdBWfcQjTpCj5gzrFkg.mft
Manifest number: 1950
Signing time: Fri 25 Sep 2026 04:01:13 +0000
Manifest this update: Fri 25 Sep 2026 04:01:13 +0000
Manifest next update: Sat 26 Sep 2026 04:01:13 +0000
Files and hashes: 1: AUqAjM9ZGdBWfcQjTpCj5gzrFkg.crl (hash: 59htxgTo09O3zmzvTw4UVmsp6AOx2vRNsuNgZiqvUiI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/d28729-84ee-4085-b85c-16a2d3e6c994/1/AUqAjM9ZGdBWfcQjTpCj5gzrFkg.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/d28729-84ee-4085-b85c-16a2d3e6c994/1/AUqAjM9ZGdBWfcQjTpCj5gzrFkg.mft
rsync://rpki.ripe.net/repository/DEFAULT/AUqAjM9ZGdBWfcQjTpCj5gzrFkg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 04:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d6:b9:77:9a:81:e0:f4:a4:ec:74:67:4f:a6:0b:e5:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=014a808ccf5919d0567dc4234e90a3e60ceb1648
Validity
Not Before: Sep 25 04:01:13 2026 GMT
Not After : Sep 26 04:01:13 2026 GMT
Subject: CN=97fd50fd81bbaf31f79aff73200e12b56a2cfad6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:e5:98:7a:18:3c:bd:4e:76:d8:40:10:81:99:
3d:33:0e:7f:7a:28:ef:94:55:09:98:79:94:58:c2:
9d:5b:f2:52:53:0d:e6:35:1a:2c:35:b0:b0:6a:24:
9d:0c:f4:a6:3d:11:99:3e:df:d1:4d:ea:a8:83:a0:
43:8d:f2:11:38:69:3f:72:24:f0:80:e0:35:1d:1d:
ab:24:70:c1:72:85:d5:91:17:e1:be:3d:f1:34:db:
e2:92:24:87:1a:e2:1d:9f:ad:41:f8:4c:33:d0:e2:
a4:19:5b:68:63:9b:2a:36:be:ba:00:91:7f:ee:aa:
7b:7e:a4:b6:ff:54:73:70:f7:6b:67:b5:9f:90:a6:
cc:50:6d:30:9a:1a:ac:8f:8c:ac:c5:c4:b2:ed:18:
d7:64:83:1b:42:35:80:35:ec:69:5d:4e:ad:5a:f6:
ee:a6:5a:76:60:7b:65:82:27:fb:7a:9e:31:9f:80:
2f:35:47:f6:21:9c:9e:06:d0:24:0b:56:34:61:7a:
d0:5e:1f:db:18:5c:56:25:d0:fd:5e:5f:b8:99:10:
28:af:10:9a:43:bf:98:44:45:e4:f4:b0:fc:e2:2e:
f2:90:5d:96:95:1c:f6:8c:95:a4:cb:07:ea:5d:2e:
a0:a2:31:c5:18:7a:42:01:14:9d:d2:8d:ba:c3:25:
8b:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:FD:50:FD:81:BB:AF:31:F7:9A:FF:73:20:0E:12:B5:6A:2C:FA:D6
X509v3 Authority Key Identifier:
keyid:01:4A:80:8C:CF:59:19:D0:56:7D:C4:23:4E:90:A3:E6:0C:EB:16:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AUqAjM9ZGdBWfcQjTpCj5gzrFkg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/d28729-84ee-4085-b85c-16a2d3e6c994/1/AUqAjM9ZGdBWfcQjTpCj5gzrFkg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/d28729-84ee-4085-b85c-16a2d3e6c994/1/AUqAjM9ZGdBWfcQjTpCj5gzrFkg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:de:f5:7a:39:eb:9c:4e:37:ab:05:42:fe:88:31:23:47:ab:
3d:1c:df:83:20:8c:37:a6:2c:cd:05:11:38:13:31:b3:52:0e:
4a:2a:80:4e:f1:9d:da:df:37:78:8b:5a:42:d2:2f:c4:60:28:
d8:5e:7a:40:4f:17:e6:23:e2:20:ec:c8:ea:3b:d6:d2:c9:70:
e8:4f:a7:d5:fb:9a:f0:c8:66:52:d2:91:fa:c6:ac:50:1a:87:
fd:14:2a:fa:fd:35:7c:ac:77:d5:19:63:4d:1a:ce:ad:68:29:
ff:d0:2f:ba:97:10:c3:ad:9f:df:22:7b:63:61:2d:e1:37:95:
fa:c7:a7:64:a0:9f:59:93:7b:78:1b:0a:03:1f:6e:79:fa:8a:
c0:5f:90:9b:dc:67:d0:0b:fa:72:7d:c4:a5:f3:64:2a:18:48:
c0:83:12:0c:6e:e1:7c:75:91:98:d9:65:51:5e:df:8d:89:a0:
e7:86:18:9f:11:69:a5:03:12:4a:88:71:1c:92:16:43:6d:8b:
b5:c1:e2:40:0c:92:6f:3e:bc:48:ed:d3:fb:41:e1:dc:8a:1e:
d9:5a:66:d7:5a:98:e4:16:00:11:b9:31:47:d0:ec:ef:57:1e:
7c:61:e4:2c:b7:28:b7:33:12:84:c8:15:c8:bc:61:11:dd:82:
8d:b7:e9:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 16:21:41 2026 by rpki-client