Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/7983fc-2019-47b3-a6c3-d99c8c25dbc8/1/au3YfPvkKOnEKzDCLhlh9xfx20k.mft
File: au3YfPvkKOnEKzDCLhlh9xfx20k.mft (raw, json)
Hash identifier: s79vGLbUEsINLRsd804h0b9zPfGlh36XycMAwVSE8LU=
Subject key identifier: FC:1D:17:21:CF:8A:BF:C4:6C:2C:51:56:4B:A8:27:FD:8F:EE:AB:9E
Authority key identifier: 6A:ED:D8:7C:FB:E4:28:E9:C4:2B:30:C2:2E:19:61:F7:17:F1:DB:49
Certificate issuer: /CN=6aedd87cfbe428e9c42b30c22e1961f717f1db49
Certificate serial: 019D2AE00A370117F57CE4DBA892B0179B12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/au3YfPvkKOnEKzDCLhlh9xfx20k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/7983fc-2019-47b3-a6c3-d99c8c25dbc8/1/au3YfPvkKOnEKzDCLhlh9xfx20k.mft
Manifest number: A0
Signing time: Thu 26 Mar 2026 16:00:18 +0000
Manifest this update: Thu 26 Mar 2026 16:00:18 +0000
Manifest next update: Fri 27 Mar 2026 16:00:18 +0000
Files and hashes: 1: au3YfPvkKOnEKzDCLhlh9xfx20k.crl (hash: gghXB9353Utvea2QE9i1xM7OMXQiVm1Yms96P+rUzzo=)
2: vWjIW1eikUSm_cPtDhI_f3EodY4.roa (hash: PyLkHRQBEvUL9Bk7Ermj8JEaYKhwlYCHxtYPNjdnGVg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/7983fc-2019-47b3-a6c3-d99c8c25dbc8/1/au3YfPvkKOnEKzDCLhlh9xfx20k.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/7983fc-2019-47b3-a6c3-d99c8c25dbc8/1/au3YfPvkKOnEKzDCLhlh9xfx20k.mft
rsync://rpki.ripe.net/repository/DEFAULT/au3YfPvkKOnEKzDCLhlh9xfx20k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:e0:0a:37:01:17:f5:7c:e4:db:a8:92:b0:17:9b:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6aedd87cfbe428e9c42b30c22e1961f717f1db49
Validity
Not Before: Mar 26 16:00:18 2026 GMT
Not After : Mar 27 16:00:18 2026 GMT
Subject: CN=fc1d1721cf8abfc46c2c51564ba827fd8feeab9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:29:6d:fe:23:3e:fc:86:04:21:eb:39:1f:c1:
a7:50:df:c3:5e:77:e9:d6:a5:84:af:74:9f:b7:26:
8b:86:6c:f7:8c:28:9b:39:4a:23:6b:98:bb:d0:26:
ad:be:14:4b:2e:b3:b5:b9:fc:ae:ff:d1:f6:55:5e:
08:85:e5:42:39:14:b8:2d:1e:86:2b:5c:ce:7d:11:
09:63:d7:10:76:5e:a3:c2:87:72:32:24:73:a6:4a:
3d:35:14:04:06:fb:8e:ce:0e:8a:37:85:07:6c:b0:
63:21:fb:0d:5e:73:9b:5b:95:29:cb:34:b2:9c:02:
2c:f1:bc:a7:d3:ac:79:e5:07:01:c3:12:f1:09:23:
8f:47:94:d5:13:d1:80:c5:6a:f1:44:b9:63:e4:09:
0c:b3:d2:d2:19:d5:b5:12:e9:0a:48:ed:d0:9f:15:
f5:2e:14:ce:56:27:4b:3e:63:77:f6:45:ee:6c:fe:
a2:8c:e2:fe:16:33:7e:9c:3a:fe:43:bf:c6:df:58:
4d:05:41:8c:e6:e7:f8:17:ff:5b:ec:a5:89:d3:7e:
8d:a2:b6:bb:3f:7d:fe:0e:c3:1a:cb:45:e8:55:2e:
1d:20:d0:8f:f6:bc:94:19:7a:7f:f0:f1:d8:42:4c:
3e:52:5b:49:22:b0:67:8f:8c:b1:8f:a3:26:a3:fe:
7d:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:1D:17:21:CF:8A:BF:C4:6C:2C:51:56:4B:A8:27:FD:8F:EE:AB:9E
X509v3 Authority Key Identifier:
keyid:6A:ED:D8:7C:FB:E4:28:E9:C4:2B:30:C2:2E:19:61:F7:17:F1:DB:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/au3YfPvkKOnEKzDCLhlh9xfx20k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/7983fc-2019-47b3-a6c3-d99c8c25dbc8/1/au3YfPvkKOnEKzDCLhlh9xfx20k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/7983fc-2019-47b3-a6c3-d99c8c25dbc8/1/au3YfPvkKOnEKzDCLhlh9xfx20k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:8f:7b:a1:e9:07:a1:fd:b0:a2:76:f9:11:bb:18:8b:61:65:
2c:44:55:3d:d4:ab:c7:9b:af:e4:cb:6d:04:26:63:eb:c2:3a:
fb:71:96:92:73:68:ce:16:29:94:70:c3:6a:d2:73:ed:b8:72:
d3:7b:27:36:14:87:1b:7a:cc:06:b9:aa:09:1a:91:65:91:48:
56:43:d0:77:58:56:e6:9b:5f:2c:fd:f5:15:56:a0:4b:3d:19:
66:29:5b:6a:a2:58:03:be:87:b3:52:0f:d9:fd:96:b1:9c:86:
db:1c:ca:7f:42:5c:59:ee:3c:65:28:9c:ba:26:74:c7:86:db:
bf:0c:fd:ff:0c:03:4a:38:57:02:a0:bc:7a:3e:99:76:d6:5a:
06:f7:b5:5b:a9:dd:e8:5a:1e:39:2e:29:6e:5a:32:58:19:0b:
74:94:1e:b2:67:ee:84:5e:2c:b7:f1:e6:3c:29:8b:50:93:eb:
4d:56:0b:4e:c1:8f:4f:05:40:f4:49:5e:1b:29:03:d8:5b:1f:
8f:72:ba:c4:1f:86:cb:ac:2e:49:8d:3b:0a:b6:b5:2d:ad:29:
69:7f:ee:88:78:77:8f:99:1b:06:03:1e:11:1e:d8:e2:0b:5d:
ae:28:a6:74:34:e5:58:b1:b4:58:08:42:0c:db:5c:7a:c1:00:
6e:34:ea:a5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0q4Ao3ARf1fOTbqJKwF5sSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZhZWRkODdjZmJlNDI4ZTljNDJiMzBjMjJlMTk2MWY3MTdm
MWRiNDkwHhcNMjYwMzI2MTYwMDE4WhcNMjYwMzI3MTYwMDE4WjAzMTEwLwYDVQQD
EyhmYzFkMTcyMWNmOGFiZmM0NmMyYzUxNTY0YmE4MjdmZDhmZWVhYjllMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqSlt/iM+/IYEIes5H8GnUN/DXnfp
1qWEr3SftyaLhmz3jCibOUoja5i70CatvhRLLrO1ufyu/9H2VV4IheVCORS4LR6G
K1zOfREJY9cQdl6jwodyMiRzpko9NRQEBvuOzg6KN4UHbLBjIfsNXnObW5UpyzSy
nAIs8byn06x55QcBwxLxCSOPR5TVE9GAxWrxRLlj5AkMs9LSGdW1EukKSO3QnxX1
LhTOVidLPmN39kXubP6ijOL+FjN+nDr+Q7/G31hNBUGM5uf4F/9b7KWJ036Nora7
P33+DsMay0XoVS4dINCP9ryUGXp/8PHYQkw+UltJIrBnj4yxj6Mmo/59yQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPwdFyHPir/EbCxRVkuoJ/2P7queMB8GA1UdIwQY
MBaAFGrt2Hz75CjpxCswwi4ZYfcX8dtJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYXUzWWZQdmtLT25FS3pEQ0xobGg5eGZ4MjBrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS83OTgzZmMtMjAxOS00N2IzLWE2YzMt
ZDk5YzhjMjVkYmM4LzEvYXUzWWZQdmtLT25FS3pEQ0xobGg5eGZ4MjBrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZS83OTgzZmMtMjAxOS00N2IzLWE2YzMtZDk5YzhjMjVkYmM4
LzEvYXUzWWZQdmtLT25FS3pEQ0xobGg5eGZ4MjBrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALo97oekH
of2wonb5EbsYi2FlLERVPdSrx5uv5MttBCZj68I6+3GWknNozhYplHDDatJz7bhy
03snNhSHG3rMBrmqCRqRZZFIVkPQd1hW5ptfLP31FVagSz0ZZilbaqJYA76Hs1IP
2f2WsZyG2xzKf0JcWe48ZSicuiZ0x4bbvwz9/wwDSjhXAqC8ej6ZdtZaBve1W6nd
6FoeOS4pbloyWBkLdJQesmfuhF4st/HmPCmLUJPrTVYLTsGPTwVA9EleGykD2Fsf
j3K6xB+Gy6wuSY07Cra1La0paX/uiHh3j5kbBgMeER7Y4gtdriimdDTlWLG0WAhC
DNtcesEAbjTqpQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 23:14:35 2026 by rpki-client