Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/8702e7-4bf1-407e-bafe-fad21ff29e2b/1/04AuqPnOgCtXu7q3jjCXk3_6EcQ.mft
File: 04AuqPnOgCtXu7q3jjCXk3_6EcQ.mft (raw, json)
Hash identifier: EHt0J3Os5g9EarnXjhSNNDjAt1yfvqt1qrEMCSqcshE=
Subject key identifier: C3:74:FF:CD:B9:02:A6:93:76:9D:5D:2C:63:C0:56:E2:6F:CE:B6:C4
Authority key identifier: D3:80:2E:A8:F9:CE:80:2B:57:BB:BA:B7:8E:30:97:93:7F:FA:11:C4
Certificate issuer: /CN=d3802ea8f9ce802b57bbbab78e3097937ffa11c4
Certificate serial: 019D322BC3E40BF9AF6D09E3676524E65A4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/04AuqPnOgCtXu7q3jjCXk3_6EcQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/8702e7-4bf1-407e-bafe-fad21ff29e2b/1/04AuqPnOgCtXu7q3jjCXk3_6EcQ.mft
Manifest number: 058C
Signing time: Sat 28 Mar 2026 02:00:22 +0000
Manifest this update: Sat 28 Mar 2026 02:00:22 +0000
Manifest next update: Sun 29 Mar 2026 02:00:22 +0000
Files and hashes: 1: 04AuqPnOgCtXu7q3jjCXk3_6EcQ.crl (hash: 9ulAslhzJBeQGd7CrNvwa2o5/smkSJfygG1Omb4xl3M=)
2: WJ8RC-1511gAcgP7V2qvF3pMn2U.roa (hash: dIBhT1tAUbW7t5HBxfGi3Z3u9jhu8zIjbsn+nKs3E9Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/8702e7-4bf1-407e-bafe-fad21ff29e2b/1/04AuqPnOgCtXu7q3jjCXk3_6EcQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/8702e7-4bf1-407e-bafe-fad21ff29e2b/1/04AuqPnOgCtXu7q3jjCXk3_6EcQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/04AuqPnOgCtXu7q3jjCXk3_6EcQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 02:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:32:2b:c3:e4:0b:f9:af:6d:09:e3:67:65:24:e6:5a:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3802ea8f9ce802b57bbbab78e3097937ffa11c4
Validity
Not Before: Mar 28 02:00:22 2026 GMT
Not After : Mar 29 02:00:22 2026 GMT
Subject: CN=c374ffcdb902a693769d5d2c63c056e26fceb6c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:1c:09:52:33:ed:9d:cd:89:bd:50:19:a7:75:
76:c3:f4:96:9b:8b:af:90:2a:1e:fc:16:5b:27:06:
f1:dc:7f:f7:28:b0:eb:13:bc:b5:51:3e:6c:47:4c:
02:f3:bf:e5:5e:60:8b:15:55:7c:fe:8e:7a:a7:6e:
d8:f0:f6:5f:e1:ae:d3:c0:7e:3f:36:4e:18:3a:4c:
0b:5a:d3:2a:bc:72:d4:38:8a:c4:26:fe:49:7e:8c:
b7:69:b8:7e:a4:21:96:7b:78:26:54:cf:f4:15:f9:
15:a3:2c:49:a8:27:7a:65:ee:33:d1:16:54:08:ab:
cc:c5:48:ea:fe:e2:81:9a:9c:25:7e:a9:c4:83:85:
b2:e8:a6:48:f6:7d:db:95:26:c3:6f:d1:cd:35:90:
51:b4:84:12:b2:31:44:7b:d8:e1:96:29:b6:27:a3:
2a:c0:e0:3a:d5:e4:09:5d:9f:10:e7:8f:f1:48:c4:
8a:24:3e:a1:3e:e2:11:3e:8c:f9:53:e2:13:6e:20:
37:18:64:d8:b0:30:5a:82:a2:04:2e:8d:aa:6e:7e:
9c:2f:03:a4:1e:50:f6:d0:08:2d:2b:c0:50:fa:7d:
0e:dd:a0:3a:dc:fc:fd:96:69:0a:22:68:60:31:90:
9a:39:55:4c:70:73:b3:d0:22:f0:da:05:88:4f:af:
8e:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:74:FF:CD:B9:02:A6:93:76:9D:5D:2C:63:C0:56:E2:6F:CE:B6:C4
X509v3 Authority Key Identifier:
keyid:D3:80:2E:A8:F9:CE:80:2B:57:BB:BA:B7:8E:30:97:93:7F:FA:11:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/04AuqPnOgCtXu7q3jjCXk3_6EcQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/8702e7-4bf1-407e-bafe-fad21ff29e2b/1/04AuqPnOgCtXu7q3jjCXk3_6EcQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/8702e7-4bf1-407e-bafe-fad21ff29e2b/1/04AuqPnOgCtXu7q3jjCXk3_6EcQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:52:33:d0:88:ea:ef:32:f6:75:47:cd:12:ca:63:d5:62:8b:
c7:0c:35:73:1d:c7:76:68:7b:53:7b:d4:8e:13:80:83:2d:c4:
c0:b9:75:16:2c:9f:5d:2f:73:d7:60:bf:91:bc:fa:a6:3f:1c:
d5:a8:bd:11:0b:e0:66:5b:1f:27:c8:20:5e:6b:68:b2:16:37:
44:bb:b6:26:7d:56:8f:92:a1:d3:b6:82:d2:9a:6c:6b:38:9f:
30:9f:f9:b5:bc:f1:51:b4:97:65:10:6f:5f:12:be:7a:c5:49:
cc:c8:d5:8c:fd:53:80:dd:37:65:5d:dd:9a:d2:c1:54:73:b1:
54:52:0a:b7:af:da:3f:b5:1d:44:9b:da:5f:3e:19:4e:9a:0b:
9e:76:e0:e9:16:dd:41:4c:d4:f1:92:84:bb:00:73:8d:6e:73:
d5:63:a0:a6:db:38:9f:2b:73:da:0b:94:58:1f:aa:cd:23:e9:
62:9a:c1:c1:ad:6c:07:a4:e9:bd:e1:2a:46:74:f3:36:20:d4:
14:77:ab:b8:d5:b3:86:7b:5f:e0:7d:23:1d:87:dc:9a:ac:d6:
ab:f2:e6:6f:f9:fd:b5:63:6c:21:a1:f3:46:53:63:00:29:ec:
63:a1:21:e6:48:8a:a7:f5:3b:05:f2:1e:0c:73:ab:56:24:fe:
96:85:f5:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 12:21:03 2026 by rpki-client