Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e0/419865-916e-4b24-893d-6fa730180772/1/AURLjJMub2XrHJyZmhreW9iskRY.mft
File: AURLjJMub2XrHJyZmhreW9iskRY.mft (raw, json)
Hash identifier: 8K2zoF+X+AFeEB+fh+7AYbXsnJXx7Yrr9mDp3J9fqgk=
Subject key identifier: 9F:B7:90:F6:CC:0D:61:BC:6C:8B:27:09:23:82:DF:B7:1F:44:19:90
Authority key identifier: 01:44:4B:8C:93:2E:6F:65:EB:1C:9C:99:9A:1A:DE:5B:D8:AC:91:16
Certificate issuer: /CN=01444b8c932e6f65eb1c9c999a1ade5bd8ac9116
Certificate serial: 01A0DC4DFCFE626DC90FE4228525FDDAC956
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AURLjJMub2XrHJyZmhreW9iskRY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/419865-916e-4b24-893d-6fa730180772/1/AURLjJMub2XrHJyZmhreW9iskRY.mft
Manifest number: 0156
Signing time: Sat 26 Sep 2026 06:01:33 +0000
Manifest this update: Sat 26 Sep 2026 06:01:33 +0000
Manifest next update: Sun 27 Sep 2026 06:01:33 +0000
Files and hashes: 1: AURLjJMub2XrHJyZmhreW9iskRY.crl (hash: serlMybtXRbRHwGUL/BtzaR4v85mlXgn1sauGY1NKiQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/419865-916e-4b24-893d-6fa730180772/1/AURLjJMub2XrHJyZmhreW9iskRY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/419865-916e-4b24-893d-6fa730180772/1/AURLjJMub2XrHJyZmhreW9iskRY.mft
rsync://rpki.ripe.net/repository/DEFAULT/AURLjJMub2XrHJyZmhreW9iskRY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 02:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dc:4d:fc:fe:62:6d:c9:0f:e4:22:85:25:fd:da:c9:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01444b8c932e6f65eb1c9c999a1ade5bd8ac9116
Validity
Not Before: Sep 26 06:01:33 2026 GMT
Not After : Sep 27 06:01:33 2026 GMT
Subject: CN=9fb790f6cc0d61bc6c8b27092382dfb71f441990
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:4e:5c:0b:83:1f:5f:96:7f:08:13:10:60:0d:
97:94:69:5a:4d:15:51:32:db:10:2f:03:bb:80:45:
0b:bc:43:3b:6a:bb:61:ef:75:f8:c6:e1:e6:cf:1d:
03:ca:ba:f3:4a:34:56:5a:8c:8d:db:7b:76:40:2c:
68:32:c5:6a:03:4f:db:de:4c:15:23:e6:ab:55:3b:
a0:69:fb:49:83:82:0c:69:50:0f:ee:65:95:be:a9:
ec:57:4b:73:11:ea:65:e4:88:65:3f:a0:71:37:95:
9e:0d:70:3e:a6:9e:c5:a8:70:24:2b:40:47:df:12:
72:31:95:0b:19:33:83:a1:10:53:bd:18:26:c9:e5:
7f:cd:7e:09:76:24:91:b9:26:49:00:b1:e4:06:af:
c2:9b:2c:ee:05:e8:17:e9:7a:30:8f:a3:79:89:2b:
ef:59:dd:bd:04:92:b9:49:37:72:09:c9:8b:c6:57:
c0:be:16:05:28:54:fc:f1:1b:76:26:04:f6:87:02:
3e:00:bd:c2:75:c6:2a:4e:ec:a4:ef:cc:22:af:8a:
9a:9b:11:90:87:8a:1b:f8:25:46:e8:de:fa:6e:56:
6e:8a:f5:3d:67:0b:3c:0d:54:40:c0:e2:c2:95:74:
3e:ef:91:90:1f:7f:a0:b8:ba:da:fc:6f:74:47:0a:
20:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:B7:90:F6:CC:0D:61:BC:6C:8B:27:09:23:82:DF:B7:1F:44:19:90
X509v3 Authority Key Identifier:
keyid:01:44:4B:8C:93:2E:6F:65:EB:1C:9C:99:9A:1A:DE:5B:D8:AC:91:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AURLjJMub2XrHJyZmhreW9iskRY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/419865-916e-4b24-893d-6fa730180772/1/AURLjJMub2XrHJyZmhreW9iskRY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/419865-916e-4b24-893d-6fa730180772/1/AURLjJMub2XrHJyZmhreW9iskRY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:68:34:86:64:a9:02:e7:88:7d:7b:69:fe:51:01:05:57:37:
ce:d4:e4:1d:dd:5e:ef:5e:43:7c:9d:ad:f2:fc:a9:02:b6:63:
1b:a3:64:1a:0f:91:15:87:bc:76:29:22:af:4e:f2:94:44:ff:
c4:85:b7:91:e1:c1:d8:44:b4:26:26:48:89:06:bc:96:c7:6f:
8f:32:5f:fe:30:88:35:3a:fe:8e:c6:68:31:20:1d:24:67:f4:
b6:60:47:d9:bf:61:54:58:54:b3:aa:3c:c3:73:09:fb:6b:c8:
1a:71:e1:a8:35:3c:2f:5d:78:6c:d7:71:f2:4c:ec:30:2e:e6:
fd:ed:c9:1b:48:ab:26:3b:ff:68:b3:88:fd:0f:51:d9:9d:be:
02:ef:b5:cf:5b:63:f4:ab:10:b7:75:30:00:87:13:e1:0b:01:
d7:9a:92:b3:7b:da:0a:db:29:2a:94:70:37:cd:70:b5:9c:b3:
73:f2:96:19:ee:b6:ca:82:29:4a:56:a5:b0:14:e6:06:b8:d7:
56:81:ae:8d:c4:ac:74:bf:1e:34:c7:d0:db:0d:db:43:ff:32:
a5:c7:46:35:f5:1b:fe:98:96:76:15:5e:09:ce:c0:72:cf:7d:
33:7c:19:79:25:9d:c4:56:cf:d9:77:69:75:4f:37:f3:a3:ac:
75:9c:af:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 12:12:34 2026 by rpki-client