Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/71/bd60d7-96fd-4128-8b8b-d7e287d86fce/1/AuXuP9sWlTVBnnlO6MgT2Sk1gco.mft
File: AuXuP9sWlTVBnnlO6MgT2Sk1gco.mft (raw, json)
Hash identifier: ngRm/xzY/FobcueLqTnwEnRR5Hwd7QI1Teh84mZv8KA=
Subject key identifier: 2F:81:DE:71:1E:8B:3C:6A:38:BE:8F:0A:39:34:A3:6B:F7:8B:79:6D
Authority key identifier: 02:E5:EE:3F:DB:16:95:35:41:9E:79:4E:E8:C8:13:D9:29:35:81:CA
Certificate issuer: /CN=02e5ee3fdb169535419e794ee8c813d9293581ca
Certificate serial: 01A0DACD6FD4933F089757D2280405D57C5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AuXuP9sWlTVBnnlO6MgT2Sk1gco.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/bd60d7-96fd-4128-8b8b-d7e287d86fce/1/AuXuP9sWlTVBnnlO6MgT2Sk1gco.mft
Manifest number: 0290
Signing time: Fri 25 Sep 2026 23:01:31 +0000
Manifest this update: Fri 25 Sep 2026 23:01:31 +0000
Manifest next update: Sat 26 Sep 2026 23:01:31 +0000
Files and hashes: 1: AuXuP9sWlTVBnnlO6MgT2Sk1gco.crl (hash: 3suSAr3kHkLPcJxPPMr6XkgBm2YBIU1FqcmAk0T7B/M=)
2: PSP80WvoeTaK8qKEzf5_rBtjRiA.roa (hash: LuMRxihjGgulFR1nfBGt4wCkEt33UifqQX3zhBk0Gig=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/bd60d7-96fd-4128-8b8b-d7e287d86fce/1/AuXuP9sWlTVBnnlO6MgT2Sk1gco.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/bd60d7-96fd-4128-8b8b-d7e287d86fce/1/AuXuP9sWlTVBnnlO6MgT2Sk1gco.mft
rsync://rpki.ripe.net/repository/DEFAULT/AuXuP9sWlTVBnnlO6MgT2Sk1gco.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 23:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:da:cd:6f:d4:93:3f:08:97:57:d2:28:04:05:d5:7c:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02e5ee3fdb169535419e794ee8c813d9293581ca
Validity
Not Before: Sep 25 23:01:31 2026 GMT
Not After : Sep 26 23:01:31 2026 GMT
Subject: CN=2f81de711e8b3c6a38be8f0a3934a36bf78b796d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:cb:62:e7:ba:00:84:29:49:e9:46:7b:86:f8:
73:3c:80:13:07:8e:90:c6:11:4a:3e:0e:04:46:a8:
03:f6:e7:32:a1:44:d5:92:08:92:d5:ba:24:2f:59:
4a:1b:56:8b:04:37:11:c7:55:ae:53:2d:da:e6:95:
09:17:a3:14:36:b5:1f:81:89:5f:21:2b:29:e4:b8:
3d:a1:9c:25:f0:6e:49:a5:6a:5a:4f:a5:de:4c:83:
9b:0b:4d:4e:29:13:65:4a:8f:03:a8:23:19:94:b2:
d4:a0:a0:6f:37:ef:fd:a1:3d:92:71:de:72:56:dc:
9a:26:e7:2d:a1:4a:3f:34:5b:70:b4:67:eb:89:c5:
8a:85:de:9b:14:ef:da:a9:d1:f9:6e:1b:f4:a4:bc:
68:9c:2d:9c:ff:89:e3:98:eb:d1:c2:a8:c0:06:5b:
52:6d:32:6b:20:8f:9e:1a:c3:19:12:76:a5:b1:8f:
97:df:19:8e:6d:18:36:ca:50:3f:7d:5e:2e:04:13:
b6:d4:af:2d:56:82:11:c0:9f:36:aa:ad:67:43:d7:
4e:a1:c3:fb:d1:32:40:6e:b9:92:13:01:89:6d:4e:
45:b7:48:6a:b1:76:c1:77:9e:28:c8:dc:1d:d0:de:
19:ae:3b:8b:fa:ae:67:d6:66:b2:dd:c6:cf:0e:f4:
e7:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:81:DE:71:1E:8B:3C:6A:38:BE:8F:0A:39:34:A3:6B:F7:8B:79:6D
X509v3 Authority Key Identifier:
keyid:02:E5:EE:3F:DB:16:95:35:41:9E:79:4E:E8:C8:13:D9:29:35:81:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AuXuP9sWlTVBnnlO6MgT2Sk1gco.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/bd60d7-96fd-4128-8b8b-d7e287d86fce/1/AuXuP9sWlTVBnnlO6MgT2Sk1gco.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/bd60d7-96fd-4128-8b8b-d7e287d86fce/1/AuXuP9sWlTVBnnlO6MgT2Sk1gco.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:11:cf:a0:68:23:61:60:a1:f5:f6:30:22:dc:2e:68:0f:61:
39:a0:89:29:a0:ed:50:2f:e2:08:67:7d:c1:1d:76:2c:67:40:
38:bc:c2:55:d5:89:31:c8:68:8e:5c:5d:1c:fa:b3:b6:0b:fb:
6b:ac:47:13:f7:f0:9c:f4:75:20:31:ba:2e:87:9a:95:48:4b:
4d:50:ac:6e:ec:41:cd:bf:af:7d:9f:b2:c3:af:d8:c3:e4:50:
2b:39:1d:5d:8a:d1:fa:e9:a3:6a:59:66:ba:2d:39:90:64:3d:
c1:f1:cb:df:3c:cc:cc:57:47:0c:04:53:7b:b3:9a:cc:5e:12:
7e:55:e4:c4:84:67:4c:97:b9:cb:88:c6:ac:33:e2:19:9a:f1:
67:32:ba:93:5d:9a:31:63:5b:5f:56:e6:dc:e7:81:bb:75:ec:
e8:60:24:d1:fd:61:16:c5:a1:52:03:41:df:2a:b4:14:2a:9a:
10:78:05:56:0b:55:7e:c3:f3:3d:77:53:1e:64:6a:c5:31:30:
b2:83:f8:d6:e2:cb:f3:ef:1e:d2:d3:4f:39:16:63:78:aa:be:
60:1f:67:0b:0e:37:4e:2a:e0:27:f6:de:4e:e1:b4:62:77:eb:
bf:8f:2f:dc:c9:21:b4:09:eb:94:e4:31:ca:30:f1:0d:62:8d:
32:5b:56:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 09:27:10 2026 by rpki-client