Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/34b791-ffd5-49f0-8718-49b75c18349a/1/au27xW2vhfo_OHxgUtxy1dchO_c.mft
File: au27xW2vhfo_OHxgUtxy1dchO_c.mft (raw, json)
Hash identifier: UDpWAfumWIHQM6wppR9QQ0+w5qj2N0BV0opajm+4/GM=
Subject key identifier: F9:3A:FF:C2:F9:F2:63:33:2F:47:D6:A1:97:D6:49:32:24:01:D5:AF
Authority key identifier: 6A:ED:BB:C5:6D:AF:85:FA:3F:38:7C:60:52:DC:72:D5:D7:21:3B:F7
Certificate issuer: /CN=6aedbbc56daf85fa3f387c6052dc72d5d7213bf7
Certificate serial: 019D29CE25EF6DDB2B9DB982FB78BED6846F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/au27xW2vhfo_OHxgUtxy1dchO_c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/34b791-ffd5-49f0-8718-49b75c18349a/1/au27xW2vhfo_OHxgUtxy1dchO_c.mft
Manifest number: 0302
Signing time: Thu 26 Mar 2026 11:01:09 +0000
Manifest this update: Thu 26 Mar 2026 11:01:09 +0000
Manifest next update: Fri 27 Mar 2026 11:01:09 +0000
Files and hashes: 1: Vd4ynB66sCEtEXPuV_O3x4PgW4A.roa (hash: 4UTBj4Zh6vSwwX6L/YeCbJsNnwD0s0UfjFqN/ZdD3NU=)
2: au27xW2vhfo_OHxgUtxy1dchO_c.crl (hash: dG8bTMCx1TCjJ3Rju+OJa11l8Zm0xjdCWRaxBW7Q9xI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/34b791-ffd5-49f0-8718-49b75c18349a/1/au27xW2vhfo_OHxgUtxy1dchO_c.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/34b791-ffd5-49f0-8718-49b75c18349a/1/au27xW2vhfo_OHxgUtxy1dchO_c.mft
rsync://rpki.ripe.net/repository/DEFAULT/au27xW2vhfo_OHxgUtxy1dchO_c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:ce:25:ef:6d:db:2b:9d:b9:82:fb:78:be:d6:84:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6aedbbc56daf85fa3f387c6052dc72d5d7213bf7
Validity
Not Before: Mar 26 11:01:09 2026 GMT
Not After : Mar 27 11:01:09 2026 GMT
Subject: CN=f93affc2f9f263332f47d6a197d649322401d5af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:f8:fa:67:28:07:8a:87:d9:2f:4e:69:a2:53:
56:ca:19:7c:04:4f:78:fb:57:29:21:bd:5f:81:62:
26:f9:58:d3:d8:4a:88:7e:36:6d:c4:a1:f2:bd:12:
e0:98:6c:aa:6a:ad:37:15:01:83:84:8e:7d:51:7d:
cd:e7:b1:a1:bf:6c:c7:3c:a9:29:a3:b7:1c:50:25:
99:a7:a9:a3:7c:48:f0:d0:ce:59:bf:80:26:35:6f:
65:38:4b:74:73:9e:ed:db:3e:29:7b:92:62:73:5d:
cd:b6:67:b1:f5:ba:af:51:60:55:ec:3f:dd:e0:b4:
d8:bc:f2:37:a1:04:b9:93:74:d7:d7:97:06:f5:d9:
fe:09:1a:bd:c1:35:3b:94:06:b5:a5:63:24:a8:7f:
fe:9d:2d:a3:ac:0e:a4:93:10:b0:79:ec:66:b6:f9:
c5:34:d7:be:f5:30:ce:c6:23:00:d5:28:5b:67:3f:
2f:b1:2a:00:9e:42:6a:10:25:40:51:50:0a:3f:90:
eb:98:78:19:01:ff:34:41:ec:2c:56:fb:ac:5c:af:
75:f6:f4:8a:7a:cf:33:3d:7f:5d:98:a4:14:3c:2a:
f4:48:db:bf:eb:cd:a6:b1:11:f7:a5:51:bf:ec:b2:
5a:61:c5:9c:2a:1b:c7:df:ad:fc:ad:99:48:1b:4f:
da:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:3A:FF:C2:F9:F2:63:33:2F:47:D6:A1:97:D6:49:32:24:01:D5:AF
X509v3 Authority Key Identifier:
keyid:6A:ED:BB:C5:6D:AF:85:FA:3F:38:7C:60:52:DC:72:D5:D7:21:3B:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/au27xW2vhfo_OHxgUtxy1dchO_c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/34b791-ffd5-49f0-8718-49b75c18349a/1/au27xW2vhfo_OHxgUtxy1dchO_c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/34b791-ffd5-49f0-8718-49b75c18349a/1/au27xW2vhfo_OHxgUtxy1dchO_c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e4:1c:5a:b4:e0:2c:d0:dc:fa:f1:f1:93:32:95:c1:d9:ca:29:
c6:fa:6f:cd:bf:cb:96:0b:b0:69:6b:48:ff:6f:8a:3a:90:d4:
70:a7:5a:6b:08:79:60:df:ff:33:e6:da:91:14:ed:68:05:d5:
76:2a:6b:47:2a:5a:dd:52:d0:cb:a5:09:53:b7:6e:71:36:22:
96:4a:0c:0a:ca:3c:78:d5:a5:73:71:2a:e4:a9:20:d2:e6:73:
33:61:92:80:7d:b1:4b:d2:10:bf:26:63:9b:39:8e:27:f7:02:
f5:2f:43:c9:16:d9:e8:d6:9e:cf:a2:c0:8e:cf:63:97:72:66:
4d:3a:79:96:7e:b6:30:a2:79:a2:c1:79:c1:7b:e0:ba:07:21:
7d:69:b2:74:ed:1a:dc:37:15:0c:5b:da:02:88:6f:de:67:0d:
04:a4:39:21:0e:91:a3:37:52:1c:7e:6b:40:93:93:27:c2:70:
32:c1:3d:6b:5d:17:b9:55:3c:c7:af:b6:64:03:6b:22:56:5f:
0b:b6:08:a8:8a:aa:97:71:8f:70:71:43:fc:5c:49:b7:87:5a:
13:3f:65:31:3b:7e:b6:c2:82:fb:ab:5d:6b:2a:dd:21:b1:71:
13:fe:9d:d3:89:83:90:82:3f:ac:5a:31:3f:14:b7:12:b1:bc:
50:14:7c:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:07:29 2026 by rpki-client