Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/e1a37d-868e-46bb-a7c8-9d2d9f6eee93/1/AUcceelkLK72p0N_H3TFR4rlISk.mft
File: AUcceelkLK72p0N_H3TFR4rlISk.mft (raw, json)
Hash identifier: h++8IrLcc5bRkusNBliUoE4JrwAes/nUc0qjAJbJCiU=
Subject key identifier: 1C:85:C7:9F:3E:45:DD:74:B6:11:96:08:AB:12:F2:98:43:28:93:BE
Authority key identifier: 01:47:1C:79:E9:64:2C:AE:F6:A7:43:7F:1F:74:C5:47:8A:E5:21:29
Certificate issuer: /CN=01471c79e9642caef6a7437f1f74c5478ae52129
Certificate serial: 019D2583520F4444C487811D4BFD7D69555E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AUcceelkLK72p0N_H3TFR4rlISk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/e1a37d-868e-46bb-a7c8-9d2d9f6eee93/1/AUcceelkLK72p0N_H3TFR4rlISk.mft
Manifest number: 1886
Signing time: Wed 25 Mar 2026 15:00:56 +0000
Manifest this update: Wed 25 Mar 2026 15:00:56 +0000
Manifest next update: Thu 26 Mar 2026 15:00:56 +0000
Files and hashes: 1: AUcceelkLK72p0N_H3TFR4rlISk.crl (hash: dE5tuDTdYsc1S/koQ7kyhvf9Gp6RH84zbpL6sW6b6m8=)
2: gyKjgff4xPWR_xT3GYAWWCaM6V8.roa (hash: ACevHK+TApBdgqAMhe+oNyBWSjnTVbZ12xWe5OgMvkk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/e1a37d-868e-46bb-a7c8-9d2d9f6eee93/1/AUcceelkLK72p0N_H3TFR4rlISk.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/e1a37d-868e-46bb-a7c8-9d2d9f6eee93/1/AUcceelkLK72p0N_H3TFR4rlISk.mft
rsync://rpki.ripe.net/repository/DEFAULT/AUcceelkLK72p0N_H3TFR4rlISk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:83:52:0f:44:44:c4:87:81:1d:4b:fd:7d:69:55:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01471c79e9642caef6a7437f1f74c5478ae52129
Validity
Not Before: Mar 25 15:00:56 2026 GMT
Not After : Mar 26 15:00:56 2026 GMT
Subject: CN=1c85c79f3e45dd74b6119608ab12f298432893be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:c2:f4:cb:f3:de:1f:ec:01:89:b1:76:0a:bf:
80:86:1a:d6:7d:46:75:f5:e5:c7:d8:eb:ee:93:76:
1a:07:3e:50:f3:3f:82:f0:a4:90:c3:e1:35:8f:86:
36:c5:1f:cd:db:fe:00:04:d7:df:31:e4:d9:bf:b0:
05:93:67:2e:98:9c:e7:e4:89:3e:91:83:7a:ef:23:
df:c9:82:33:47:6a:b1:ec:95:cb:3b:6d:12:5c:88:
b9:93:ce:1e:61:b7:f9:42:33:66:19:29:1e:32:a5:
70:ed:01:63:46:38:dc:10:64:6e:df:da:43:ea:cd:
c8:e6:ba:d2:a9:45:48:db:26:de:b3:02:7a:7e:52:
69:6f:82:81:f7:83:13:d6:d5:68:de:d5:b7:ea:2b:
54:d8:3b:c6:ae:79:03:c6:ab:f5:11:5f:31:75:dc:
19:c5:f0:16:c9:4f:45:9d:bf:d7:47:a8:e7:fd:02:
d5:7f:2e:31:48:a2:16:9f:00:be:ea:f5:40:68:3a:
47:a3:a9:30:66:48:88:de:0e:fb:8f:86:3b:f5:18:
fa:ac:03:d9:7c:0e:fc:23:e8:0b:e1:c8:71:f6:06:
2e:82:12:c0:55:6d:89:97:95:f9:a6:49:81:f5:6b:
dc:50:aa:19:1a:49:28:6e:f9:94:03:61:ac:67:b8:
23:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:85:C7:9F:3E:45:DD:74:B6:11:96:08:AB:12:F2:98:43:28:93:BE
X509v3 Authority Key Identifier:
keyid:01:47:1C:79:E9:64:2C:AE:F6:A7:43:7F:1F:74:C5:47:8A:E5:21:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AUcceelkLK72p0N_H3TFR4rlISk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/e1a37d-868e-46bb-a7c8-9d2d9f6eee93/1/AUcceelkLK72p0N_H3TFR4rlISk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/e1a37d-868e-46bb-a7c8-9d2d9f6eee93/1/AUcceelkLK72p0N_H3TFR4rlISk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:ec:4c:d2:a7:25:e9:63:ce:8b:5e:ef:f3:74:f3:bc:4b:81:
ff:96:1f:44:d1:60:f0:e1:29:3d:e2:55:88:a4:7f:24:c2:da:
46:37:e3:01:9b:cd:96:7f:c5:18:a3:6e:83:4c:61:bc:86:8c:
d7:96:05:89:b0:e9:02:46:58:cc:b8:ea:93:d5:3e:73:95:29:
04:91:51:6f:41:e3:e2:81:f6:bc:71:fb:e0:ee:ad:c9:58:36:
04:1c:22:86:20:ec:72:60:a4:8d:ab:be:b3:47:94:81:54:3b:
57:39:d4:9b:54:61:2e:59:3c:5d:e9:ea:54:cd:9d:d0:1f:d3:
7c:f3:2a:e3:40:1b:42:09:0b:ff:5c:00:6b:80:67:e7:3c:00:
30:b8:80:a0:35:65:37:68:3f:81:62:03:2e:6b:fa:39:b5:ee:
af:9a:6f:15:7b:f3:f3:5d:a5:c7:83:25:58:e5:6e:fd:fc:45:
a8:3d:ac:32:a7:b2:8a:e2:c5:65:e8:dd:a0:25:b4:b6:11:69:
e8:b5:05:ee:3a:22:62:7b:90:1e:56:e0:a7:ee:43:ba:fa:02:
7e:a6:83:c1:39:97:2c:74:5d:c1:3e:27:b0:41:6e:74:e7:31:
9c:9a:e1:b3:99:66:9b:6f:df:f1:70:2f:57:a2:4f:86:26:e3:
98:15:af:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:20:16 2026 by rpki-client