Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/d28729-84ee-4085-b85c-16a2d3e6c994/1/AUqAjM9ZGdBWfcQjTpCj5gzrFkg.mft
File: AUqAjM9ZGdBWfcQjTpCj5gzrFkg.mft (raw, json)
Hash identifier: kbgDCGNxWQXTggF/tsGd9CAIrrdxcax0+nhO4q7R510=
Subject key identifier: 08:DB:39:A4:FB:50:E3:A6:94:1E:6E:DF:D2:87:55:19:44:99:2B:11
Authority key identifier: 01:4A:80:8C:CF:59:19:D0:56:7D:C4:23:4E:90:A3:E6:0C:EB:16:48
Certificate issuer: /CN=014a808ccf5919d0567dc4234e90a3e60ceb1648
Certificate serial: 019D265F83B2B7B72D4F4A2BACCF6DFEF899
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AUqAjM9ZGdBWfcQjTpCj5gzrFkg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/d28729-84ee-4085-b85c-16a2d3e6c994/1/AUqAjM9ZGdBWfcQjTpCj5gzrFkg.mft
Manifest number: 1767
Signing time: Wed 25 Mar 2026 19:01:26 +0000
Manifest this update: Wed 25 Mar 2026 19:01:26 +0000
Manifest next update: Thu 26 Mar 2026 19:01:26 +0000
Files and hashes: 1: AUqAjM9ZGdBWfcQjTpCj5gzrFkg.crl (hash: L7EJd1OBHuZN6FIzZ5Fj9KSuGU1AwgDW8j3uMpuS7B8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/d28729-84ee-4085-b85c-16a2d3e6c994/1/AUqAjM9ZGdBWfcQjTpCj5gzrFkg.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/d28729-84ee-4085-b85c-16a2d3e6c994/1/AUqAjM9ZGdBWfcQjTpCj5gzrFkg.mft
rsync://rpki.ripe.net/repository/DEFAULT/AUqAjM9ZGdBWfcQjTpCj5gzrFkg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:83:b2:b7:b7:2d:4f:4a:2b:ac:cf:6d:fe:f8:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=014a808ccf5919d0567dc4234e90a3e60ceb1648
Validity
Not Before: Mar 25 19:01:26 2026 GMT
Not After : Mar 26 19:01:26 2026 GMT
Subject: CN=08db39a4fb50e3a6941e6edfd287551944992b11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:9e:eb:71:74:18:77:04:68:95:f4:6d:96:53:
96:03:1b:b0:85:70:06:57:be:5b:38:01:9a:cc:f4:
77:04:a2:71:36:0f:e5:e2:4a:7d:d8:3d:4c:49:c4:
d4:99:08:af:08:c6:32:24:65:2c:9f:28:2c:b9:96:
52:aa:c8:bc:33:33:6a:ee:b5:ba:c7:25:29:9e:92:
49:91:67:fa:70:f7:f3:df:49:6d:99:84:f0:86:dc:
e9:50:f4:8a:d9:a0:bb:d8:c9:75:a4:8c:33:04:e6:
7e:93:51:f3:e1:2b:b0:b0:84:87:a6:97:bb:d2:f2:
9f:f6:38:3a:6d:42:8b:bc:93:6d:49:dd:b6:da:0a:
c0:32:9b:1a:52:bf:fc:3d:04:39:8a:e7:34:8b:14:
18:a4:ee:c2:a4:b6:37:16:19:da:a0:29:ce:62:ef:
cb:b3:78:88:8e:3e:c9:2e:95:ca:d8:c3:76:2c:3d:
6b:8a:73:dd:7b:73:59:32:2c:a4:3d:87:ce:fb:aa:
9a:e1:07:16:3e:07:aa:11:0b:7a:23:ea:c2:54:55:
e2:81:56:d0:2a:66:41:15:20:df:01:fc:19:02:83:
c4:f2:2d:9a:3d:de:0d:96:c7:ec:33:d9:5c:21:26:
60:27:8f:ae:a2:7d:05:53:cf:81:98:40:55:39:c0:
41:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:DB:39:A4:FB:50:E3:A6:94:1E:6E:DF:D2:87:55:19:44:99:2B:11
X509v3 Authority Key Identifier:
keyid:01:4A:80:8C:CF:59:19:D0:56:7D:C4:23:4E:90:A3:E6:0C:EB:16:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AUqAjM9ZGdBWfcQjTpCj5gzrFkg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/d28729-84ee-4085-b85c-16a2d3e6c994/1/AUqAjM9ZGdBWfcQjTpCj5gzrFkg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/d28729-84ee-4085-b85c-16a2d3e6c994/1/AUqAjM9ZGdBWfcQjTpCj5gzrFkg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:61:f5:d2:5a:24:c0:47:1f:59:30:32:7c:9f:5e:4e:51:53:
3b:a8:d2:ef:41:9d:b2:d8:5e:fa:6b:c0:a4:b1:29:14:43:5e:
84:bb:15:63:dd:4e:6b:66:e8:d1:48:b7:9a:07:48:36:2f:da:
06:32:d2:ee:42:99:4f:3a:29:af:59:2c:89:46:4b:6f:d0:06:
69:0c:f1:5e:f8:98:e4:bb:42:c1:b8:78:52:92:bf:ee:b2:2d:
69:20:9a:dc:4a:33:03:33:4e:0b:4e:63:b7:23:00:1f:b1:c4:
a2:30:2d:2b:56:55:e1:7a:cb:9e:d0:77:fe:98:47:e8:ea:15:
e7:f2:b8:b1:35:7d:84:0f:8a:86:64:7d:4e:ec:a7:da:91:b9:
1e:fb:56:9e:8c:8c:ee:9e:81:49:d1:69:e4:49:39:cc:06:e4:
36:e2:e4:8e:64:47:b2:e5:3a:c3:44:03:1b:22:ed:71:de:fb:
5e:35:87:fb:6a:3a:7b:43:90:53:2f:8e:ff:96:33:e6:e6:f9:
83:2f:e1:b4:08:e8:dd:ce:bb:f8:f3:50:b6:7b:d9:da:50:35:
81:cb:22:da:22:09:96:fa:a0:79:3e:7c:56:70:a8:be:fe:00:
5a:ca:1e:ff:d8:54:40:af:7d:17:56:e9:3c:4c:6b:32:17:86:
17:33:98:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:36:47 2026 by rpki-client