Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/1b78cd-d005-492c-9167-1bf868a03538/1/AUjSyoorQ7bK0lsiJlNU_jA5EaA.mft
File: AUjSyoorQ7bK0lsiJlNU_jA5EaA.mft (raw, json)
Hash identifier: IHiM6bmvz5yTyCRWRX9Ho+17LhCU79QMBgeHRZZZQ1Q=
Subject key identifier: 02:CE:B8:66:FF:B1:6F:1B:AF:74:95:07:F5:5B:0E:6A:1F:96:F7:22
Authority key identifier: 01:48:D2:CA:8A:2B:43:B6:CA:D2:5B:22:26:53:54:FE:30:39:11:A0
Certificate issuer: /CN=0148d2ca8a2b43b6cad25b22265354fe303911a0
Certificate serial: 019D29CECF47CF4CF4B04B69B3F26E8CDA49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AUjSyoorQ7bK0lsiJlNU_jA5EaA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/1b78cd-d005-492c-9167-1bf868a03538/1/AUjSyoorQ7bK0lsiJlNU_jA5EaA.mft
Manifest number: 174E
Signing time: Thu 26 Mar 2026 11:01:52 +0000
Manifest this update: Thu 26 Mar 2026 11:01:52 +0000
Manifest next update: Fri 27 Mar 2026 11:01:52 +0000
Files and hashes: 1: 6uyLPr7GcIkDSRR1cBioO7oGEF0.roa (hash: FfvCuloLAdVXrZLuuHrf1reVNj9KC+EjXSXR/em79FA=)
2: AUjSyoorQ7bK0lsiJlNU_jA5EaA.crl (hash: aJYfhOaxlg222J5KQINhevSy93ZUcLxNsqs8xtUmf90=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/1b78cd-d005-492c-9167-1bf868a03538/1/AUjSyoorQ7bK0lsiJlNU_jA5EaA.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/1b78cd-d005-492c-9167-1bf868a03538/1/AUjSyoorQ7bK0lsiJlNU_jA5EaA.mft
rsync://rpki.ripe.net/repository/DEFAULT/AUjSyoorQ7bK0lsiJlNU_jA5EaA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:ce:cf:47:cf:4c:f4:b0:4b:69:b3:f2:6e:8c:da:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0148d2ca8a2b43b6cad25b22265354fe303911a0
Validity
Not Before: Mar 26 11:01:52 2026 GMT
Not After : Mar 27 11:01:52 2026 GMT
Subject: CN=02ceb866ffb16f1baf749507f55b0e6a1f96f722
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:dc:ef:0f:33:96:89:65:0e:42:5e:6c:11:cd:
19:9e:2d:4e:36:1a:b0:bb:95:cd:e9:db:f6:40:08:
3c:01:28:99:9c:e1:bf:f9:70:ef:aa:12:b3:c9:b7:
8c:05:b6:d2:fc:fe:be:82:4c:d9:32:13:b8:b7:52:
b6:66:67:8b:44:d0:ad:1a:82:a1:0c:68:9a:d0:47:
a6:4a:59:04:30:1f:9e:35:e2:20:b9:70:63:b2:04:
ed:a7:f3:6a:9e:d3:3b:f1:e5:92:90:d0:7d:b2:84:
9c:62:c2:bb:0d:a6:f4:14:6c:18:e2:d9:da:c5:4d:
38:dd:f3:8a:f2:61:fa:2f:3f:59:71:83:1b:b4:66:
b4:8c:40:43:64:d7:99:e7:58:37:8b:52:27:d0:de:
8e:d2:06:71:0f:a9:05:78:48:bd:96:cb:5a:fa:48:
87:d4:0d:7f:57:89:3a:eb:41:da:1f:a9:08:92:23:
2d:1c:17:8f:98:50:2c:1c:ee:e8:57:1a:d0:35:4e:
6d:d3:cb:7a:ea:11:cb:b5:24:e7:22:e3:22:3d:bc:
f8:98:dc:58:33:ff:54:d6:6b:20:1b:5b:85:7a:89:
41:a3:e8:8f:99:ef:3d:dd:31:ff:a5:a6:92:83:cb:
39:32:21:9c:38:20:65:b3:72:05:6e:59:b8:e3:c5:
fa:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:CE:B8:66:FF:B1:6F:1B:AF:74:95:07:F5:5B:0E:6A:1F:96:F7:22
X509v3 Authority Key Identifier:
keyid:01:48:D2:CA:8A:2B:43:B6:CA:D2:5B:22:26:53:54:FE:30:39:11:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AUjSyoorQ7bK0lsiJlNU_jA5EaA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/1b78cd-d005-492c-9167-1bf868a03538/1/AUjSyoorQ7bK0lsiJlNU_jA5EaA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/1b78cd-d005-492c-9167-1bf868a03538/1/AUjSyoorQ7bK0lsiJlNU_jA5EaA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:1f:73:18:0b:a1:d5:df:6c:2d:07:5e:e9:0b:5b:fa:50:df:
81:07:c1:3b:70:ba:86:8d:d9:a7:c3:ef:91:c7:bd:b1:6d:ca:
f4:6a:b6:32:c5:95:2d:70:c3:6c:f0:66:2a:5a:30:f0:3d:ca:
b4:a9:07:09:0c:25:93:f2:b1:f9:05:44:05:04:07:08:42:cc:
58:91:a6:ce:d1:eb:c0:e3:bc:c7:e9:e3:13:34:3b:21:02:0f:
a7:78:4d:f6:3c:51:24:d0:81:ac:45:ba:6b:a7:cb:7b:71:3d:
1d:bb:25:be:0a:e2:2b:ec:9a:6e:6e:1b:30:49:a7:ac:89:9a:
24:ed:74:15:e1:40:37:98:4f:48:e6:1f:a9:97:2b:d0:01:3c:
cb:e2:c5:14:6c:06:77:34:7c:81:12:86:78:1c:aa:d5:54:64:
61:7a:08:0c:bb:fb:6f:d5:f5:b0:09:ca:01:3d:bc:34:51:1d:
7e:5e:d4:97:bf:e7:e6:4e:60:43:bd:ce:c9:bc:d4:2a:66:ca:
30:3b:84:06:74:72:2f:06:e1:ce:89:c3:76:5d:ce:2a:b6:23:
b8:eb:cc:e1:36:80:0d:d5:a4:f9:aa:eb:a1:b5:3c:0f:ba:0d:
79:f5:c6:98:19:60:1d:f3:df:94:59:83:e2:9a:4b:09:ed:f7:
53:6e:01:5f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0pzs9Hz0z0sEtps/JujNpJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAxNDhkMmNhOGEyYjQzYjZjYWQyNWIyMjI2NTM1NGZlMzAz
OTExYTAwHhcNMjYwMzI2MTEwMTUyWhcNMjYwMzI3MTEwMTUyWjAzMTEwLwYDVQQD
EygwMmNlYjg2NmZmYjE2ZjFiYWY3NDk1MDdmNTViMGU2YTFmOTZmNzIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk9zvDzOWiWUOQl5sEc0Zni1ONhqw
u5XN6dv2QAg8ASiZnOG/+XDvqhKzybeMBbbS/P6+gkzZMhO4t1K2ZmeLRNCtGoKh
DGia0EemSlkEMB+eNeIguXBjsgTtp/NqntM78eWSkNB9soScYsK7Dab0FGwY4tna
xU043fOK8mH6Lz9ZcYMbtGa0jEBDZNeZ51g3i1In0N6O0gZxD6kFeEi9lsta+kiH
1A1/V4k660HaH6kIkiMtHBePmFAsHO7oVxrQNU5t08t66hHLtSTnIuMiPbz4mNxY
M/9U1msgG1uFeolBo+iPme893TH/paaSg8s5MiGcOCBls3IFblm448X6oQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFALOuGb/sW8br3SVB/VbDmoflvciMB8GA1UdIwQY
MBaAFAFI0sqKK0O2ytJbIiZTVP4wORGgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQVVqU3lvb3JRN2JLMGxzaUpsTlVfakE1RWFBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny8xYjc4Y2QtZDAwNS00OTJjLTkxNjct
MWJmODY4YTAzNTM4LzEvQVVqU3lvb3JRN2JLMGxzaUpsTlVfakE1RWFBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ny8xYjc4Y2QtZDAwNS00OTJjLTkxNjctMWJmODY4YTAzNTM4
LzEvQVVqU3lvb3JRN2JLMGxzaUpsTlVfakE1RWFBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvB9zGAuh
1d9sLQde6Qtb+lDfgQfBO3C6ho3Zp8Pvkce9sW3K9Gq2MsWVLXDDbPBmKlow8D3K
tKkHCQwlk/Kx+QVEBQQHCELMWJGmztHrwOO8x+njEzQ7IQIPp3hN9jxRJNCBrEW6
a6fLe3E9HbslvgriK+yabm4bMEmnrImaJO10FeFAN5hPSOYfqZcr0AE8y+LFFGwG
dzR8gRKGeByq1VRkYXoIDLv7b9X1sAnKAT28NFEdfl7Ul7/n5k5gQ73OybzUKmbK
MDuEBnRyLwbhzonDdl3OKrYjuOvM4TaADdWk+arrobU8D7oNefXGmBlgHfPflFmD
4ppLCe33U24BXw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 15:20:03 2026 by rpki-client