Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/e1a37d-868e-46bb-a7c8-9d2d9f6eee93/1/AUcceelkLK72p0N_H3TFR4rlISk.mft
File: AUcceelkLK72p0N_H3TFR4rlISk.mft (raw, json)
Hash identifier: TK9dQW0Tzz3VIRIettdouVSMqbd4qw5vndbHySZ7Q00=
Subject key identifier: DD:8F:55:12:CD:64:C4:71:21:E8:37:15:B4:FA:39:AE:D0:67:5F:B6
Authority key identifier: 01:47:1C:79:E9:64:2C:AE:F6:A7:43:7F:1F:74:C5:47:8A:E5:21:29
Certificate issuer: /CN=01471c79e9642caef6a7437f1f74c5478ae52129
Certificate serial: 019F916C99AEB8F943D262D681E06A24CD83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AUcceelkLK72p0N_H3TFR4rlISk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/e1a37d-868e-46bb-a7c8-9d2d9f6eee93/1/AUcceelkLK72p0N_H3TFR4rlISk.mft
Manifest number: 19C7
Signing time: Fri 24 Jul 2026 00:00:41 +0000
Manifest this update: Fri 24 Jul 2026 00:00:41 +0000
Manifest next update: Sat 25 Jul 2026 00:00:41 +0000
Files and hashes: 1: AUcceelkLK72p0N_H3TFR4rlISk.crl (hash: sz7pGKKW3S3WyW3gOdckGHLUWl/xFD/XdurPEoFe1tQ=)
2: gyKjgff4xPWR_xT3GYAWWCaM6V8.roa (hash: ACevHK+TApBdgqAMhe+oNyBWSjnTVbZ12xWe5OgMvkk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/e1a37d-868e-46bb-a7c8-9d2d9f6eee93/1/AUcceelkLK72p0N_H3TFR4rlISk.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/e1a37d-868e-46bb-a7c8-9d2d9f6eee93/1/AUcceelkLK72p0N_H3TFR4rlISk.mft
rsync://rpki.ripe.net/repository/DEFAULT/AUcceelkLK72p0N_H3TFR4rlISk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:6c:99:ae:b8:f9:43:d2:62:d6:81:e0:6a:24:cd:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01471c79e9642caef6a7437f1f74c5478ae52129
Validity
Not Before: Jul 24 00:00:41 2026 GMT
Not After : Jul 25 00:00:41 2026 GMT
Subject: CN=dd8f5512cd64c47121e83715b4fa39aed0675fb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:87:92:a7:7b:90:4d:9e:11:be:7b:83:d5:db:
5b:58:9d:98:62:3e:b7:a6:79:5b:dd:d0:05:81:7c:
d5:f7:ce:d6:89:5c:e6:53:d0:6a:c6:f9:b3:e5:93:
3a:21:ec:72:70:b1:a4:87:82:15:47:9f:19:f9:b3:
af:d7:88:5b:a0:61:f9:47:f6:50:5e:df:de:53:52:
ea:c3:50:69:65:c1:1a:7f:75:8f:f9:fd:65:f5:10:
d9:ed:41:fe:28:49:96:e6:6f:58:d7:31:b5:1d:70:
8c:23:52:48:27:cd:f3:fb:74:9e:1f:7c:39:27:e5:
9b:d9:61:ca:32:f5:8d:d4:2e:1f:02:78:ec:5a:7c:
ea:57:f0:87:cf:42:1b:9a:8c:92:fc:10:7c:36:d3:
5d:2c:41:7a:39:de:bc:93:3c:2d:9c:aa:bb:07:39:
bd:d3:f2:70:60:13:c2:f2:64:91:76:99:72:5e:9e:
23:3e:ed:93:e7:8a:3e:3c:55:10:97:95:cc:c1:64:
dd:88:dd:ba:69:d6:be:56:8a:b9:a9:8c:a9:6f:c8:
42:e6:7a:df:17:d2:b6:1c:5c:3b:fa:24:a3:68:8d:
30:3b:c0:2a:dd:e6:a5:87:d2:b4:b0:1f:87:1a:b3:
35:83:44:0b:26:32:f3:88:74:0e:cd:b5:9f:01:e6:
09:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:8F:55:12:CD:64:C4:71:21:E8:37:15:B4:FA:39:AE:D0:67:5F:B6
X509v3 Authority Key Identifier:
keyid:01:47:1C:79:E9:64:2C:AE:F6:A7:43:7F:1F:74:C5:47:8A:E5:21:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AUcceelkLK72p0N_H3TFR4rlISk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/e1a37d-868e-46bb-a7c8-9d2d9f6eee93/1/AUcceelkLK72p0N_H3TFR4rlISk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/e1a37d-868e-46bb-a7c8-9d2d9f6eee93/1/AUcceelkLK72p0N_H3TFR4rlISk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:12:f1:61:4f:06:7f:3b:f0:ca:05:07:e3:7a:f5:9f:f1:d7:
1c:e9:e1:81:ee:fa:31:46:3e:e8:ea:2c:1d:ef:2c:6e:12:17:
74:71:ae:bb:a7:d3:99:ef:03:bc:a6:5d:f0:6c:a3:8c:f4:86:
b4:ad:90:75:40:d4:81:8d:9a:44:2c:b9:94:f2:83:4e:1e:66:
94:99:d0:ac:b7:49:95:2e:be:58:65:64:ce:5a:d1:4a:a5:c5:
3a:19:ef:b0:6d:51:08:57:3c:52:ff:05:e3:d6:b2:0e:00:68:
3e:b0:03:92:da:27:18:32:18:a9:43:e8:4e:a7:82:84:3a:ff:
e9:ba:6e:58:e6:ac:78:e9:da:3d:e6:ae:2e:76:d8:5f:71:e3:
b0:e4:e6:a8:df:c6:48:87:c1:af:4c:ad:1d:08:ce:f3:04:4b:
d7:92:78:35:9e:7a:90:b1:76:31:81:af:65:c6:f6:dd:44:99:
f6:2d:c1:32:cd:8d:41:b6:20:c9:a9:eb:78:f1:8b:d8:b6:2b:
7b:b8:51:44:59:a1:56:c1:0c:5e:68:c8:8a:1e:57:ae:41:93:
30:24:e2:6a:fb:37:14:40:b1:10:03:c8:dc:73:11:04:ca:04:
ab:76:21:bc:c1:27:80:5f:58:d2:49:12:17:7c:ec:48:3d:04:
a9:1a:10:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:52:22 2026 by rpki-client