Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/9b6be2-da44-42fc-81e1-d814fdca5bed/1/Auol41aTKHXAlqAxdVmAQVX2yZ0.mft
File: Auol41aTKHXAlqAxdVmAQVX2yZ0.mft (raw, json)
Hash identifier: 5xBAc/EQuPsjSYIJmwX3Su6sjdRu1LUJyYy3C93jLZc=
Subject key identifier: 49:0D:55:3B:94:1C:07:F5:51:5C:A1:72:95:E8:D7:22:6E:EE:16:04
Authority key identifier: 02:EA:25:E3:56:93:28:75:C0:96:A0:31:75:59:80:41:55:F6:C9:9D
Certificate issuer: /CN=02ea25e356932875c096a0317559804155f6c99d
Certificate serial: 019D27A8C664C1CCF4DD3FB6357DF4CE2CA3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Auol41aTKHXAlqAxdVmAQVX2yZ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/9b6be2-da44-42fc-81e1-d814fdca5bed/1/Auol41aTKHXAlqAxdVmAQVX2yZ0.mft
Manifest number: 1885
Signing time: Thu 26 Mar 2026 01:01:05 +0000
Manifest this update: Thu 26 Mar 2026 01:01:05 +0000
Manifest next update: Fri 27 Mar 2026 01:01:05 +0000
Files and hashes: 1: Auol41aTKHXAlqAxdVmAQVX2yZ0.crl (hash: PrqBU/xjSkIoLBMmp1rGl4tqPrWbeXV2z4Hourec6hk=)
2: DAfU0D6FgxQd5_vEH2Qpid-IR7g.roa (hash: fxIk5AsChzngQysfi5it8JFJ1Q8x41MNpVTTV3uuLiI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/9b6be2-da44-42fc-81e1-d814fdca5bed/1/Auol41aTKHXAlqAxdVmAQVX2yZ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/9b6be2-da44-42fc-81e1-d814fdca5bed/1/Auol41aTKHXAlqAxdVmAQVX2yZ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Auol41aTKHXAlqAxdVmAQVX2yZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a8:c6:64:c1:cc:f4:dd:3f:b6:35:7d:f4:ce:2c:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02ea25e356932875c096a0317559804155f6c99d
Validity
Not Before: Mar 26 01:01:05 2026 GMT
Not After : Mar 27 01:01:05 2026 GMT
Subject: CN=490d553b941c07f5515ca17295e8d7226eee1604
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:17:77:69:2e:88:12:ee:4b:ef:f3:47:6f:88:
8c:46:96:ac:ad:5d:03:15:4d:c2:a4:46:5d:47:69:
0b:20:e4:73:d5:39:14:be:55:6e:cd:0e:ca:79:a5:
f4:1e:54:cf:da:8e:7e:5c:f3:6e:1a:67:ef:7b:e6:
b7:d3:c2:5c:58:4e:f6:93:09:f2:b7:4e:62:fe:85:
60:65:82:5c:78:a1:b6:34:00:4f:7d:71:91:80:d2:
c0:16:63:33:9a:6d:71:d2:5c:0d:35:db:48:67:d9:
78:15:73:30:67:ae:b7:ab:d6:bf:7e:27:b8:a2:30:
39:90:f0:86:72:9f:96:6a:01:a3:cd:54:ba:7f:2e:
d3:b9:2d:5e:ae:20:6d:2f:e6:72:0d:df:91:27:a0:
23:4c:3d:ed:ff:1d:09:8a:f0:b8:16:c1:46:b0:5e:
9b:50:4e:36:b9:bf:b0:fa:ce:79:d9:8a:a1:3b:9b:
c0:a9:e9:ed:be:38:b7:ca:37:9f:ee:71:65:1f:a0:
b7:8d:11:bc:68:9d:b0:73:d5:dc:da:a1:dd:dc:4e:
78:f2:5e:21:85:4e:44:0d:bd:21:66:38:12:09:7d:
31:9f:1b:95:c4:f3:97:84:91:ff:a3:a7:a0:ee:83:
ff:ab:5d:f9:1c:7e:01:35:82:a5:b2:a8:d2:ad:cc:
0f:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:0D:55:3B:94:1C:07:F5:51:5C:A1:72:95:E8:D7:22:6E:EE:16:04
X509v3 Authority Key Identifier:
keyid:02:EA:25:E3:56:93:28:75:C0:96:A0:31:75:59:80:41:55:F6:C9:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Auol41aTKHXAlqAxdVmAQVX2yZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/9b6be2-da44-42fc-81e1-d814fdca5bed/1/Auol41aTKHXAlqAxdVmAQVX2yZ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/9b6be2-da44-42fc-81e1-d814fdca5bed/1/Auol41aTKHXAlqAxdVmAQVX2yZ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:76:ca:dd:b9:72:5a:3f:d4:83:a1:41:68:24:98:f0:15:6e:
95:49:f9:9c:45:24:60:2e:bb:01:55:7b:0a:54:d1:2a:69:1b:
74:bd:2e:36:6b:63:82:b9:e6:ab:60:11:69:74:2c:6e:68:d7:
1a:cb:33:01:e5:39:eb:ee:56:6c:c4:ea:79:9d:d6:07:bc:c3:
3a:25:d7:e6:db:5b:d9:67:2b:b0:fd:2a:9a:5a:f3:2f:02:71:
e7:8b:93:46:48:e1:01:f6:d5:0d:ef:3f:79:c9:db:bd:c1:cc:
9b:07:b4:e0:f5:31:d2:29:c3:0f:7a:5c:ec:10:e3:86:4b:bd:
fc:cb:00:8d:a6:87:75:04:e1:68:26:0c:b3:59:23:d3:66:51:
84:52:39:dc:f6:3f:41:71:b0:01:eb:a2:3a:ba:c0:cd:d0:09:
5a:9d:1e:51:85:b5:31:05:f1:14:7b:10:07:4a:5d:68:1f:79:
4e:4b:3a:49:de:c6:a3:b5:8d:f6:4d:2f:5e:ec:94:91:34:9e:
22:4b:d0:36:28:31:56:cc:47:23:5e:13:dd:87:28:f9:48:4e:
3a:ff:a1:68:7f:48:fb:73:30:ab:bb:32:d3:36:8c:fb:1c:2d:
8f:d5:a1:94:c5:7a:79:5c:07:2f:24:86:08:0e:10:b8:04:b0:
89:ce:3b:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:27:05 2026 by rpki-client