Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/d28729-84ee-4085-b85c-16a2d3e6c994/1/AUqAjM9ZGdBWfcQjTpCj5gzrFkg.mft
File: AUqAjM9ZGdBWfcQjTpCj5gzrFkg.mft (raw, json)
Hash identifier: Oa5i5+Yt7tz0TJ/6gHp5/stUr8OAKiJHr9gSPBDwnyA=
Subject key identifier: DD:5B:55:72:E7:66:42:AD:A3:DB:EE:11:7F:54:1C:66:00:9C:DD:9D
Authority key identifier: 01:4A:80:8C:CF:59:19:D0:56:7D:C4:23:4E:90:A3:E6:0C:EB:16:48
Certificate issuer: /CN=014a808ccf5919d0567dc4234e90a3e60ceb1648
Certificate serial: 019E1D9081B817C6E8E9BF508BE8EB0EFA38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AUqAjM9ZGdBWfcQjTpCj5gzrFkg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/d28729-84ee-4085-b85c-16a2d3e6c994/1/AUqAjM9ZGdBWfcQjTpCj5gzrFkg.mft
Manifest number: 17E7
Signing time: Tue 12 May 2026 19:01:09 +0000
Manifest this update: Tue 12 May 2026 19:01:09 +0000
Manifest next update: Wed 13 May 2026 19:01:09 +0000
Files and hashes: 1: AUqAjM9ZGdBWfcQjTpCj5gzrFkg.crl (hash: 7UYyalxCW+ijKO7Q2VNqKlkGUsY2/VHp8mCmoDOC/YQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/d28729-84ee-4085-b85c-16a2d3e6c994/1/AUqAjM9ZGdBWfcQjTpCj5gzrFkg.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/d28729-84ee-4085-b85c-16a2d3e6c994/1/AUqAjM9ZGdBWfcQjTpCj5gzrFkg.mft
rsync://rpki.ripe.net/repository/DEFAULT/AUqAjM9ZGdBWfcQjTpCj5gzrFkg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:90:81:b8:17:c6:e8:e9:bf:50:8b:e8:eb:0e:fa:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=014a808ccf5919d0567dc4234e90a3e60ceb1648
Validity
Not Before: May 12 19:01:09 2026 GMT
Not After : May 13 19:01:09 2026 GMT
Subject: CN=dd5b5572e76642ada3dbee117f541c66009cdd9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:1e:24:62:83:63:19:6c:f5:62:8f:be:b6:86:
4e:69:07:96:6b:5a:a1:37:eb:bb:a1:e3:ad:ce:bc:
eb:e4:2f:2a:56:c3:f9:66:09:cd:cf:64:47:be:ae:
26:b3:96:eb:13:1e:43:5c:95:99:1d:84:01:9b:60:
5f:bf:b0:06:a6:d7:66:d1:bb:bc:ee:35:0c:9f:31:
b8:fc:f7:a0:36:01:ce:e2:ef:5c:ba:8c:e6:25:6b:
46:af:25:05:0f:23:78:d3:02:52:6d:5a:e5:db:79:
d7:f4:b4:30:3e:1e:7e:9b:27:13:80:d3:bc:a7:66:
5e:c0:3c:d9:27:87:ce:bc:4f:e6:20:78:d8:42:d2:
c4:e6:e5:91:87:d7:60:70:38:4a:95:8c:c6:23:44:
77:bf:fa:cb:c5:cc:59:61:58:12:1a:0e:0d:47:e2:
ad:0b:7b:53:3b:e5:01:00:96:55:b3:c9:4a:eb:58:
c1:f8:35:0b:82:13:b4:eb:6c:93:a3:ef:58:b5:ac:
14:b6:c6:1e:34:9c:b5:f2:90:11:36:82:4d:1a:1b:
c4:ec:72:ad:2f:56:91:9a:4e:49:6b:a0:8f:39:5a:
69:21:47:67:77:be:46:62:97:25:fe:16:45:63:31:
a0:3b:3b:62:2b:be:c8:bc:d5:07:5a:66:11:7c:c1:
ca:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:5B:55:72:E7:66:42:AD:A3:DB:EE:11:7F:54:1C:66:00:9C:DD:9D
X509v3 Authority Key Identifier:
keyid:01:4A:80:8C:CF:59:19:D0:56:7D:C4:23:4E:90:A3:E6:0C:EB:16:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AUqAjM9ZGdBWfcQjTpCj5gzrFkg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/d28729-84ee-4085-b85c-16a2d3e6c994/1/AUqAjM9ZGdBWfcQjTpCj5gzrFkg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/d28729-84ee-4085-b85c-16a2d3e6c994/1/AUqAjM9ZGdBWfcQjTpCj5gzrFkg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:3a:c8:a4:2f:1f:16:d7:57:4e:c8:06:bc:f7:62:0f:bb:00:
6d:95:47:b7:60:a0:32:da:72:d6:fd:58:e3:38:b8:75:ef:c9:
01:16:ed:cb:9e:0f:a9:80:d8:3d:ec:ea:2f:71:71:40:5d:89:
be:53:45:67:1f:aa:72:f1:d8:e4:9c:a6:60:e9:c3:fa:3b:e3:
2d:6f:e2:bc:b2:c7:f7:74:33:a7:36:17:70:b6:0c:30:84:6a:
5a:40:6a:9b:2e:f0:4e:7d:31:20:c0:08:77:8b:66:d9:74:08:
16:fa:af:5e:36:50:ff:98:5a:1d:8a:83:e0:50:4a:2a:d5:5b:
79:7c:a6:4d:b7:b9:d9:fd:ce:16:11:4f:2d:f9:f8:ff:58:35:
6e:bf:7f:c1:ec:e7:fd:97:a0:42:e0:74:72:96:0e:f7:8c:23:
58:09:c1:5a:a4:aa:40:80:7c:37:12:5c:83:6f:e0:c1:ea:16:
09:ee:6c:26:c2:85:a9:a3:96:55:15:cf:84:00:7c:f5:08:a2:
a9:70:aa:96:b5:de:7a:1b:08:a5:a6:fd:72:5e:fa:5d:65:3d:
58:bb:c0:8a:a5:d7:32:f2:4f:77:12:2a:12:25:66:5b:df:b1:
dc:06:27:87:0a:07:d8:96:49:40:f3:83:e4:e6:85:f1:ae:48:
0a:a4:bd:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:14:39 2026 by rpki-client