Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/85/b59baf-113e-460b-93e7-338a98a1d9cb/1/_AUWm-THSVJnJZffED7rG0e7aKM.mft
File: _AUWm-THSVJnJZffED7rG0e7aKM.mft (raw, json)
Hash identifier: jqf+c90YUjEeTClmc2UPubNRW/iVDl4D7NdRhJj1ci4=
Subject key identifier: 3E:84:D1:E8:83:27:17:11:F3:03:4D:F0:CA:0D:A7:FB:FE:42:C8:89
Authority key identifier: FC:05:16:9B:E4:C7:49:52:67:25:97:DF:10:3E:EB:1B:47:BB:68:A3
Certificate issuer: /CN=fc05169be4c74952672597df103eeb1b47bb68a3
Certificate serial: 01A0CDED05ECB24FB0CE2297885CDCA6A377
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_AUWm-THSVJnJZffED7rG0e7aKM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/b59baf-113e-460b-93e7-338a98a1d9cb/1/_AUWm-THSVJnJZffED7rG0e7aKM.mft
Manifest number: 19E9
Signing time: Wed 23 Sep 2026 11:00:57 +0000
Manifest this update: Wed 23 Sep 2026 11:00:57 +0000
Manifest next update: Thu 24 Sep 2026 11:00:57 +0000
Files and hashes: 1: DN6ibs0Loqd_NOxwUKm9cSPY9FY.roa (hash: ly/1jnGi4XaTvL79PLWpmLP/HTUBejKbIP2HPKBANGI=)
2: Zf7DrK8VgTcUBYLpDP6TFzvtYb4.asa (hash: zQXIIEVa+4GIr6adcdZrybN+3Q6Rn0+pi8q/LwSjWvw=)
3: _AUWm-THSVJnJZffED7rG0e7aKM.crl (hash: 56rERvaBo3HZJpLFQKj/2+ycLerpqbVwtoTMjCMsQH4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/b59baf-113e-460b-93e7-338a98a1d9cb/1/_AUWm-THSVJnJZffED7rG0e7aKM.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/b59baf-113e-460b-93e7-338a98a1d9cb/1/_AUWm-THSVJnJZffED7rG0e7aKM.mft
rsync://rpki.ripe.net/repository/DEFAULT/_AUWm-THSVJnJZffED7rG0e7aKM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 11:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cd:ed:05:ec:b2:4f:b0:ce:22:97:88:5c:dc:a6:a3:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc05169be4c74952672597df103eeb1b47bb68a3
Validity
Not Before: Sep 23 11:00:57 2026 GMT
Not After : Sep 24 11:00:57 2026 GMT
Subject: CN=3e84d1e883271711f3034df0ca0da7fbfe42c889
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:9a:b9:4c:57:cb:47:94:18:e4:c7:c1:b5:37:
c5:6a:96:c9:8a:71:7d:49:95:17:ba:ad:99:d2:39:
29:c0:c4:6e:8f:79:00:0f:cf:c7:d7:84:fe:40:4a:
94:ba:eb:b2:92:b3:0f:d8:b6:28:09:58:5e:78:10:
3c:f1:63:48:b4:22:b5:7b:52:2c:0b:13:a6:01:c6:
14:57:07:9e:da:41:af:82:dd:07:7e:68:b5:b0:2b:
16:6d:b5:92:01:1a:ba:f4:99:d4:87:1c:e7:bd:e9:
6b:f6:da:b8:ac:d4:fe:65:38:0d:5b:86:f8:05:c7:
60:d2:73:7f:0c:b8:ca:31:52:19:52:00:34:d0:35:
f4:9c:12:53:a7:5a:bc:d1:1a:61:3c:a1:89:23:4e:
bf:5d:39:e1:1a:8c:a4:6e:15:33:53:0a:81:90:23:
d0:b5:e6:5e:9d:c0:e2:c1:59:af:06:b4:31:99:e9:
a2:ad:29:a7:b4:4a:09:4b:7b:20:1f:ea:f6:87:a9:
88:a1:6b:c2:5d:6b:d8:9c:9e:87:cc:f6:ad:f4:7b:
e0:cd:46:50:c2:36:59:a9:6e:33:de:53:f9:25:8e:
58:a8:82:79:01:2b:20:79:e0:4c:00:ec:92:4b:e8:
6f:96:7d:86:ef:f1:71:ec:80:c5:9a:d8:1f:ac:14:
a8:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:84:D1:E8:83:27:17:11:F3:03:4D:F0:CA:0D:A7:FB:FE:42:C8:89
X509v3 Authority Key Identifier:
keyid:FC:05:16:9B:E4:C7:49:52:67:25:97:DF:10:3E:EB:1B:47:BB:68:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_AUWm-THSVJnJZffED7rG0e7aKM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/b59baf-113e-460b-93e7-338a98a1d9cb/1/_AUWm-THSVJnJZffED7rG0e7aKM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/b59baf-113e-460b-93e7-338a98a1d9cb/1/_AUWm-THSVJnJZffED7rG0e7aKM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:b1:03:c7:88:dc:c3:e1:61:8b:b1:15:a8:66:90:9b:10:ad:
21:af:e6:ce:86:5e:e4:f5:e6:4e:be:e9:3e:82:95:14:26:33:
94:ab:a8:8f:27:d1:58:29:34:d2:bd:2d:ac:08:75:13:df:58:
b7:77:ea:23:ed:93:79:2b:03:09:c1:0c:78:7c:97:3f:4f:d2:
7a:a5:66:a4:d4:6a:9d:03:e2:4d:4e:cb:a2:9d:81:61:5d:1c:
cf:69:59:a9:df:83:b4:e0:af:50:2b:a2:84:c8:e2:ce:29:86:
9f:a2:5c:d4:cf:3e:b8:66:bb:8a:eb:64:b1:22:5e:d3:cc:dc:
99:90:eb:55:6d:e3:31:72:a1:d5:4a:aa:12:35:c2:45:d5:a4:
0d:5d:61:7a:fb:85:4b:a7:fb:4d:fc:8c:16:8c:01:9e:58:5b:
d7:bb:71:dc:5a:42:a7:93:48:3c:70:e1:87:e0:29:5c:69:cb:
00:db:a3:b1:38:c4:fd:72:a6:d0:48:a7:e4:bf:07:74:a7:d8:
dd:6e:c5:39:28:94:02:97:7b:10:ae:91:31:77:fb:78:e6:a5:
25:aa:02:6f:a6:7b:ba:ca:f1:33:e0:8f:90:5b:08:61:4a:6f:
6f:fc:40:f9:7a:84:86:6f:5e:ae:80:17:b3:e3:db:2d:94:24:
d4:2d:83:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 17:32:48 2026 by rpki-client