Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c2/9c7bba-3bea-4d94-9b83-29d1724e1000/1/AaujuyNnrFyrFjFdq3PzzXvKLkk.mft
File: AaujuyNnrFyrFjFdq3PzzXvKLkk.mft (raw, json)
Hash identifier: zyQ05ejka26xhYeZtmtB3wVG78gSb1m76nr7ZR8+M1A=
Subject key identifier: D5:B4:11:17:8C:98:A4:BD:A8:94:BD:45:1B:40:E6:E8:06:9C:C5:4F
Authority key identifier: 01:AB:A3:BB:23:67:AC:5C:AB:16:31:5D:AB:73:F3:CD:7B:CA:2E:49
Certificate issuer: /CN=01aba3bb2367ac5cab16315dab73f3cd7bca2e49
Certificate serial: 01A0D7968E052346E208F6A4402EFF92A8C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AaujuyNnrFyrFjFdq3PzzXvKLkk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/9c7bba-3bea-4d94-9b83-29d1724e1000/1/AaujuyNnrFyrFjFdq3PzzXvKLkk.mft
Manifest number: E4
Signing time: Fri 25 Sep 2026 08:02:43 +0000
Manifest this update: Fri 25 Sep 2026 08:02:43 +0000
Manifest next update: Sat 26 Sep 2026 08:02:43 +0000
Files and hashes: 1: AaujuyNnrFyrFjFdq3PzzXvKLkk.crl (hash: qemTsrhsXjEu4LuWlea9qamcnUX92Eqs2eQZU6nckqE=)
2: uzHRq9pD7Ls6AftCj3fi7DdjbMw.roa (hash: ged3auXPJFMAebnmqTmgYYjvyK9DQO4ccfv3EORZlw8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/9c7bba-3bea-4d94-9b83-29d1724e1000/1/AaujuyNnrFyrFjFdq3PzzXvKLkk.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/9c7bba-3bea-4d94-9b83-29d1724e1000/1/AaujuyNnrFyrFjFdq3PzzXvKLkk.mft
rsync://rpki.ripe.net/repository/DEFAULT/AaujuyNnrFyrFjFdq3PzzXvKLkk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 08:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d7:96:8e:05:23:46:e2:08:f6:a4:40:2e:ff:92:a8:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01aba3bb2367ac5cab16315dab73f3cd7bca2e49
Validity
Not Before: Sep 25 08:02:43 2026 GMT
Not After : Sep 26 08:02:43 2026 GMT
Subject: CN=d5b411178c98a4bda894bd451b40e6e8069cc54f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:36:9a:e8:0b:51:74:cf:cc:04:76:82:5f:a3:
1a:67:1a:35:e8:fd:57:80:e8:cf:b9:f7:ec:d3:81:
c0:93:fb:be:bf:b9:cb:29:9a:c7:16:81:d6:f7:65:
2b:79:7b:95:33:a6:4f:25:c1:07:15:f9:43:1a:47:
08:40:93:6f:37:37:5a:b6:69:ea:21:4b:b5:ae:06:
68:43:c8:aa:20:dc:0c:a1:37:fe:91:c6:70:38:20:
4e:22:15:49:22:84:37:f3:d8:13:49:b9:13:64:cd:
16:53:75:7c:fd:71:d7:9c:0e:bc:f5:26:f3:95:94:
21:fb:26:35:c7:37:b3:aa:9f:0f:7d:b0:b2:d2:f0:
b8:51:d8:eb:9a:a0:2a:1d:19:27:8f:a2:67:d8:ff:
a9:ad:15:49:33:69:64:85:97:f5:67:fd:92:1f:7d:
10:18:3d:ef:06:f9:37:a7:ec:b0:ab:27:0f:58:43:
df:ca:58:65:d8:75:b2:72:ae:4e:a6:90:65:ab:c9:
3e:5b:ec:76:17:a6:f3:95:48:95:ff:4b:2a:90:a6:
61:94:35:28:67:80:af:54:15:4a:ef:93:4d:9b:05:
f0:37:a6:3e:56:90:c8:62:a6:a1:12:4e:05:a1:c6:
28:45:67:e2:52:d6:98:1f:9f:37:f7:05:9b:4a:e3:
04:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:B4:11:17:8C:98:A4:BD:A8:94:BD:45:1B:40:E6:E8:06:9C:C5:4F
X509v3 Authority Key Identifier:
keyid:01:AB:A3:BB:23:67:AC:5C:AB:16:31:5D:AB:73:F3:CD:7B:CA:2E:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AaujuyNnrFyrFjFdq3PzzXvKLkk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/9c7bba-3bea-4d94-9b83-29d1724e1000/1/AaujuyNnrFyrFjFdq3PzzXvKLkk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/9c7bba-3bea-4d94-9b83-29d1724e1000/1/AaujuyNnrFyrFjFdq3PzzXvKLkk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:33:74:48:e6:8a:a7:7a:22:59:9c:0e:9e:f3:8f:ac:6f:3d:
d4:f8:89:d8:35:c1:de:43:6a:f0:42:ba:f7:d9:a4:a6:de:81:
0a:f8:71:6b:ed:17:d1:6b:ec:85:7b:dc:9e:87:f0:aa:76:4b:
4d:f0:2a:7e:2c:37:68:c2:5f:f0:5f:ee:55:2b:25:99:56:fa:
39:db:b6:c5:dd:41:45:f5:d1:57:b9:23:21:47:78:fe:c6:a6:
95:1b:77:76:3a:84:f1:e6:d4:e3:de:d0:7d:38:60:c7:83:04:
a0:53:57:b3:bd:d7:fe:e4:43:37:cd:9d:ee:1f:ab:05:6b:a1:
52:a5:d8:48:00:ea:37:5b:1c:0a:a3:71:19:bf:0b:1c:b8:36:
97:1d:fd:64:33:b4:51:c6:d8:4f:d5:ad:d2:cf:f0:58:e9:13:
3b:4f:21:8c:da:65:8a:81:bf:9a:74:3b:21:e7:40:8d:51:8e:
a2:6c:1e:99:c7:d3:a5:75:a8:30:43:bd:dd:51:85:f2:76:9a:
91:0a:08:45:5c:b5:c1:de:27:cf:8f:15:89:02:9f:56:1d:84:
be:9e:cf:91:d2:7a:31:11:cc:0b:ce:c8:64:04:fc:a5:4b:d7:
4b:de:2f:b0:f9:ae:95:93:0d:49:65:50:0a:db:26:59:e1:3c:
b5:89:1f:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 20:21:06 2026 by rpki-client