Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/9c7bba-3bea-4d94-9b83-29d1724e1000/1/AaujuyNnrFyrFjFdq3PzzXvKLkk.mft
File: AaujuyNnrFyrFjFdq3PzzXvKLkk.mft (raw, json)
Hash identifier: eULDY5zW3HpTTxMy5tuQ9AfNTaJqRj5+VbEqNITSxVY=
Subject key identifier: 94:C2:FD:E4:55:A9:7A:A8:20:72:D4:2D:6E:6E:7B:8C:C6:0B:CE:67
Authority key identifier: 01:AB:A3:BB:23:67:AC:5C:AB:16:31:5D:AB:73:F3:CD:7B:CA:2E:49
Certificate issuer: /CN=01aba3bb2367ac5cab16315dab73f3cd7bca2e49
Certificate serial: 019F8F47701594D306C86B09BBCB7CA1B029
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AaujuyNnrFyrFjFdq3PzzXvKLkk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/9c7bba-3bea-4d94-9b83-29d1724e1000/1/AaujuyNnrFyrFjFdq3PzzXvKLkk.mft
Manifest number: 3A
Signing time: Thu 23 Jul 2026 14:00:51 +0000
Manifest this update: Thu 23 Jul 2026 14:00:51 +0000
Manifest next update: Fri 24 Jul 2026 14:00:51 +0000
Files and hashes: 1: AaujuyNnrFyrFjFdq3PzzXvKLkk.crl (hash: zvwi7Cgxm2Kt0Up+5PZMfDLv3RsdRUFNgsZ+AWEXqt8=)
2: uzHRq9pD7Ls6AftCj3fi7DdjbMw.roa (hash: ged3auXPJFMAebnmqTmgYYjvyK9DQO4ccfv3EORZlw8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/9c7bba-3bea-4d94-9b83-29d1724e1000/1/AaujuyNnrFyrFjFdq3PzzXvKLkk.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/9c7bba-3bea-4d94-9b83-29d1724e1000/1/AaujuyNnrFyrFjFdq3PzzXvKLkk.mft
rsync://rpki.ripe.net/repository/DEFAULT/AaujuyNnrFyrFjFdq3PzzXvKLkk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:47:70:15:94:d3:06:c8:6b:09:bb:cb:7c:a1:b0:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01aba3bb2367ac5cab16315dab73f3cd7bca2e49
Validity
Not Before: Jul 23 14:00:51 2026 GMT
Not After : Jul 24 14:00:51 2026 GMT
Subject: CN=94c2fde455a97aa82072d42d6e6e7b8cc60bce67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:bd:1f:13:0b:b7:85:29:72:c8:83:37:94:ac:
8b:71:55:ab:6c:83:e0:2d:a3:54:b5:f6:5e:4c:24:
0d:2b:69:c1:d1:01:66:33:2b:a9:2b:d4:58:e9:b9:
48:a0:93:67:cb:95:98:bd:50:9a:e2:64:fb:f4:9c:
db:d1:5a:52:96:fa:61:00:65:d3:7d:d4:5e:e7:4e:
44:25:58:35:02:b8:e3:9e:a5:39:a0:d5:45:69:30:
85:8c:4c:ee:ab:4a:7f:0f:4b:e9:d4:51:cd:8e:15:
d7:48:1d:5c:0a:de:6f:03:c2:f3:86:c7:d8:ee:0c:
da:eb:18:8a:49:5b:f0:c2:68:24:52:87:f0:ae:98:
c4:ec:6f:b2:3a:ca:e9:29:08:fc:8f:ba:a9:49:56:
8f:0f:88:a5:e1:bd:01:fd:ec:21:ae:7a:6b:33:a4:
8d:74:83:5e:42:e4:35:30:66:cf:fd:a8:8d:3c:98:
c4:42:63:4a:70:92:c1:59:35:1a:21:78:db:e9:66:
82:3d:6b:e7:c6:e9:13:1d:ab:90:17:49:e6:d9:dd:
6a:1d:bd:3e:87:92:a7:f5:70:08:7f:ad:4f:1b:30:
cd:be:40:e9:28:ac:f7:59:24:b4:04:a2:59:e1:c3:
ec:dd:3a:d4:16:4a:68:0a:dc:e9:e3:ab:1b:55:a4:
47:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:C2:FD:E4:55:A9:7A:A8:20:72:D4:2D:6E:6E:7B:8C:C6:0B:CE:67
X509v3 Authority Key Identifier:
keyid:01:AB:A3:BB:23:67:AC:5C:AB:16:31:5D:AB:73:F3:CD:7B:CA:2E:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AaujuyNnrFyrFjFdq3PzzXvKLkk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/9c7bba-3bea-4d94-9b83-29d1724e1000/1/AaujuyNnrFyrFjFdq3PzzXvKLkk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/9c7bba-3bea-4d94-9b83-29d1724e1000/1/AaujuyNnrFyrFjFdq3PzzXvKLkk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:96:a1:96:b9:17:5a:0c:e4:27:d3:a5:c5:5d:13:97:b1:ea:
10:1b:7a:05:56:41:d2:15:f3:17:9d:f6:f4:51:60:e7:75:0e:
fe:b3:93:56:15:52:c7:82:79:40:a0:73:dd:54:eb:bc:19:be:
75:3f:52:d9:9a:28:3b:90:55:02:72:1d:80:78:e7:25:be:ea:
9c:94:03:fe:d9:8f:65:d0:04:a5:6a:87:33:ef:54:04:6f:cf:
b2:d7:a0:b9:95:76:b7:d7:22:42:e4:1a:b0:79:50:1b:47:89:
14:69:b5:80:bd:9b:c7:b3:92:13:ee:a7:27:0f:66:ec:bf:df:
00:ac:7e:66:1c:3f:ed:5d:30:21:98:75:d4:46:f9:1c:89:ab:
49:07:c8:99:b9:d7:06:14:fe:77:0c:43:66:55:0f:7f:19:cb:
38:47:06:65:7e:b3:a5:68:4a:2e:0a:6a:1a:58:16:1e:b5:8a:
18:fe:62:49:9d:2e:46:bb:88:dc:8b:51:2f:3c:8c:d7:99:be:
08:2d:c8:ce:c0:2a:6e:cc:b4:a4:2e:bd:25:c0:1e:32:1a:b6:
11:dc:33:a5:75:af:0a:4f:1a:84:e1:7f:e6:8e:c1:47:db:86:
e3:12:bf:fe:7b:e8:37:94:9c:1f:18:bc:a6:25:98:e1:04:0d:
d3:cb:5a:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:34:14 2026 by rpki-client