
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/85a9ff-f5c2-4361-901e-038d24071a8a/1/auSqdx_QpXjqOqxLTT7IPYlGRj0.mft
File: auSqdx_QpXjqOqxLTT7IPYlGRj0.mft (raw, json)
Hash identifier: TfawtZtzmny2rMsAkBzy9wXQAKIlag12JdkWDOIXalA=
Subject key identifier: 11:1F:E6:F1:E5:7E:67:F2:81:52:38:DC:E8:CD:B6:B9:96:9A:07:15
Authority key identifier: 6A:E4:AA:77:1F:D0:A5:78:EA:3A:AC:4B:4D:3E:C8:3D:89:46:46:3D
Certificate issuer: /CN=6ae4aa771fd0a578ea3aac4b4d3ec83d8946463d
Certificate serial: 019D273AB7E7E78FD654CF55C9214086E649
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/auSqdx_QpXjqOqxLTT7IPYlGRj0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/85a9ff-f5c2-4361-901e-038d24071a8a/1/auSqdx_QpXjqOqxLTT7IPYlGRj0.mft
Manifest number: CC
Signing time: Wed 25 Mar 2026 23:00:52 +0000
Manifest this update: Wed 25 Mar 2026 23:00:52 +0000
Manifest next update: Thu 26 Mar 2026 23:00:52 +0000
Files and hashes: 1: GDQQ0FqYT9AvbB4OzpV_W08txF4.roa (hash: +7D1/7LzTXBfcdD4Y5uzQNgYSY1go2hv/v2LnVgCR1Y=)
2: auSqdx_QpXjqOqxLTT7IPYlGRj0.crl (hash: fgCRiOoqshohpSrg2zHS1IW/OSwPUXWFTZiqjqUsS08=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/85a9ff-f5c2-4361-901e-038d24071a8a/1/auSqdx_QpXjqOqxLTT7IPYlGRj0.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/85a9ff-f5c2-4361-901e-038d24071a8a/1/auSqdx_QpXjqOqxLTT7IPYlGRj0.mft
rsync://rpki.ripe.net/repository/DEFAULT/auSqdx_QpXjqOqxLTT7IPYlGRj0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3a:b7:e7:e7:8f:d6:54:cf:55:c9:21:40:86:e6:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ae4aa771fd0a578ea3aac4b4d3ec83d8946463d
Validity
Not Before: Mar 25 23:00:52 2026 GMT
Not After : Mar 26 23:00:52 2026 GMT
Subject: CN=111fe6f1e57e67f2815238dce8cdb6b9969a0715
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:69:b1:6d:43:3f:4c:b6:0e:8d:19:d5:c4:b1:
6a:13:5c:4b:8f:b8:5f:36:1c:d2:77:94:9e:26:06:
39:83:7c:0c:e2:02:a0:cd:ad:d0:cb:97:5a:f9:f3:
a6:92:e8:7b:9c:5c:a9:9f:bb:82:8c:fc:5b:1a:02:
d0:3c:c8:20:95:bf:25:3e:75:51:80:98:60:ef:52:
d4:07:5e:f4:15:16:f8:ee:5e:3d:ed:b9:51:f4:c6:
af:6f:7f:af:83:39:77:43:3c:8e:ba:e9:dc:d0:ed:
9e:5a:b5:d4:d5:1e:a1:20:f5:f6:3f:3a:2b:99:b9:
8c:47:2f:88:1a:85:4e:13:9b:d3:a9:fc:09:db:98:
c0:b8:b4:f8:a0:38:0f:65:fa:e9:d5:76:cd:53:05:
45:64:a6:0c:a5:4a:d5:1c:06:66:4c:a9:71:44:d0:
69:67:88:d3:9a:cd:98:de:2b:72:e2:69:1d:7c:4a:
ea:ad:96:d0:f5:85:7b:ba:5c:82:3a:2c:9e:13:c4:
78:f3:95:3a:4c:fd:20:04:a3:19:c1:93:e9:83:b4:
bc:2c:7b:5b:63:b3:f6:3e:83:77:4d:19:79:5d:0f:
88:47:67:4d:61:e7:33:e6:e4:9a:8d:7b:80:14:9d:
e2:8e:9b:79:89:4b:25:bb:33:cf:04:2f:17:b2:e0:
95:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:1F:E6:F1:E5:7E:67:F2:81:52:38:DC:E8:CD:B6:B9:96:9A:07:15
X509v3 Authority Key Identifier:
keyid:6A:E4:AA:77:1F:D0:A5:78:EA:3A:AC:4B:4D:3E:C8:3D:89:46:46:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/auSqdx_QpXjqOqxLTT7IPYlGRj0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/85a9ff-f5c2-4361-901e-038d24071a8a/1/auSqdx_QpXjqOqxLTT7IPYlGRj0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/85a9ff-f5c2-4361-901e-038d24071a8a/1/auSqdx_QpXjqOqxLTT7IPYlGRj0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:4c:93:5e:a8:5b:78:e7:eb:49:3a:79:1e:eb:0e:0f:c0:57:
cf:6e:2c:e3:5f:98:95:d6:53:4b:63:e5:02:dd:a1:53:d3:bf:
d8:39:bf:60:49:03:ee:55:31:a7:11:02:c8:81:a0:e8:14:69:
63:79:6b:92:f4:48:21:ef:32:60:42:15:53:30:b4:35:40:c6:
17:c1:ed:e7:f3:1c:8c:f9:71:9a:2f:16:0e:90:4d:e2:02:8f:
de:68:46:d1:76:bb:03:b1:c9:95:59:84:9f:fc:e0:84:bf:44:
52:cb:45:fb:db:28:67:c9:1f:07:47:ce:a4:3a:fc:b2:cd:a5:
96:32:ed:f4:5e:68:0b:e8:d0:81:c3:00:1d:3e:f8:dd:34:a0:
29:d2:4e:65:f4:57:46:80:38:5e:e2:e7:85:9c:4b:a8:6d:a1:
dd:69:a7:5e:72:a3:12:a0:7d:33:df:2e:08:3f:c4:54:a9:21:
1c:b0:10:bc:50:77:8c:3a:6c:b5:cd:45:55:9c:7a:2d:e4:de:
2b:34:e0:b6:66:25:92:b2:42:24:95:a5:46:66:4e:5e:cc:20:
b5:7b:08:df:8d:d5:4b:44:9c:6c:a5:d3:30:8c:c2:83:3f:15:
00:36:71:0d:e6:3d:d9:44:41:09:34:4e:d9:28:51:5a:ce:13:
1a:2a:cd:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:21:28 2026 by rpki-client