Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/afae93-e79f-499f-9203-0fe8bd6556d5/1/auug8jdBINVPpbzcKp0kUUFy6m0.mft
File: auug8jdBINVPpbzcKp0kUUFy6m0.mft (raw, json)
Hash identifier: mZifpxeoitExVozyPDqK3YhxYuIcm2VYmef3NSam59I=
Subject key identifier: 20:9F:9D:C9:9E:2B:D9:E9:ED:55:C6:C3:F5:29:40:2E:DE:BD:E8:D4
Authority key identifier: 6A:EB:A0:F2:37:41:20:D5:4F:A5:BC:DC:2A:9D:24:51:41:72:EA:6D
Certificate issuer: /CN=6aeba0f2374120d54fa5bcdc2a9d24514172ea6d
Certificate serial: 019D29291A26B2BE93BCBAF2A52C1284F774
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/auug8jdBINVPpbzcKp0kUUFy6m0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/afae93-e79f-499f-9203-0fe8bd6556d5/1/auug8jdBINVPpbzcKp0kUUFy6m0.mft
Manifest number: 133C
Signing time: Thu 26 Mar 2026 08:00:52 +0000
Manifest this update: Thu 26 Mar 2026 08:00:52 +0000
Manifest next update: Fri 27 Mar 2026 08:00:52 +0000
Files and hashes: 1: Z1_Ilgkk_eYWGCinn6n7Y5F65JQ.roa (hash: +YFS73ucb1Xy4jgZbgT/uSrdoIXa/AoEr1GGjusXbmc=)
2: auug8jdBINVPpbzcKp0kUUFy6m0.crl (hash: P5zkMlQfJCCflspkA+d7AEGVNMCNKhp/PXwCkRgP58g=)
3: n4Sn0nJNxJqIJRlgKy_q_tmfw-U.roa (hash: vxSCI94X5gLK34ETwzNqc8WiUEXZwqWPkOKd99kM8vc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/afae93-e79f-499f-9203-0fe8bd6556d5/1/auug8jdBINVPpbzcKp0kUUFy6m0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/afae93-e79f-499f-9203-0fe8bd6556d5/1/auug8jdBINVPpbzcKp0kUUFy6m0.mft
rsync://rpki.ripe.net/repository/DEFAULT/auug8jdBINVPpbzcKp0kUUFy6m0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:29:1a:26:b2:be:93:bc:ba:f2:a5:2c:12:84:f7:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6aeba0f2374120d54fa5bcdc2a9d24514172ea6d
Validity
Not Before: Mar 26 08:00:52 2026 GMT
Not After : Mar 27 08:00:52 2026 GMT
Subject: CN=209f9dc99e2bd9e9ed55c6c3f529402edebde8d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:18:77:57:e9:42:bf:02:6e:f4:03:94:9a:38:
8f:6e:d5:18:3e:77:5a:fc:f3:3f:f9:df:86:48:3b:
e8:1f:2d:9f:0d:18:7e:18:db:0f:3d:1a:b1:74:59:
6b:be:11:28:2d:72:6b:02:28:ba:33:a8:a9:86:8b:
2b:cf:d0:5f:6d:c7:36:a5:e9:34:8c:70:f9:55:fb:
09:70:89:14:29:fb:f0:31:a2:1c:f5:74:08:fd:13:
e6:6d:d9:2e:81:e3:ef:eb:0e:fc:c4:84:e0:a3:52:
b6:9b:da:7f:10:b9:5f:f6:25:e7:13:1f:67:50:40:
f5:92:d8:07:49:bf:b8:53:7d:9a:ee:cc:2f:77:f1:
b3:ee:7b:48:64:db:ee:9e:01:4d:2d:55:45:91:e0:
26:e7:d2:58:82:4d:0c:d4:6c:b9:22:64:e6:e9:ea:
de:14:59:57:0f:db:3f:fc:da:2f:90:c3:c3:ce:59:
32:00:8a:a0:8d:d1:98:85:68:be:b4:36:d1:32:43:
c4:02:e0:e0:29:76:cb:7e:45:69:33:6c:e2:1e:b7:
bb:a3:e2:b1:74:c0:ec:f3:dd:bd:45:6f:dd:04:19:
fa:12:5a:e3:dd:5c:f6:6b:e3:1d:88:99:dd:6c:c0:
f5:4e:f7:1d:62:95:39:a0:8f:51:33:ea:bb:8b:b4:
d1:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:9F:9D:C9:9E:2B:D9:E9:ED:55:C6:C3:F5:29:40:2E:DE:BD:E8:D4
X509v3 Authority Key Identifier:
keyid:6A:EB:A0:F2:37:41:20:D5:4F:A5:BC:DC:2A:9D:24:51:41:72:EA:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/auug8jdBINVPpbzcKp0kUUFy6m0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/afae93-e79f-499f-9203-0fe8bd6556d5/1/auug8jdBINVPpbzcKp0kUUFy6m0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/afae93-e79f-499f-9203-0fe8bd6556d5/1/auug8jdBINVPpbzcKp0kUUFy6m0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:21:d4:2b:8e:50:0c:14:86:15:ba:2c:d6:b5:1e:01:18:dc:
a8:3a:99:5b:3b:d5:6e:e5:0d:b3:b9:56:7c:62:06:70:66:c8:
35:3d:47:65:31:33:bc:82:28:74:99:f5:d3:63:08:28:7d:7d:
96:ea:30:87:a5:60:5b:14:54:8a:c1:d7:69:f1:99:d9:8c:0d:
b6:26:83:db:30:11:14:a2:93:e5:5f:39:8b:5f:06:8f:60:2f:
0a:ef:74:29:42:60:f5:6c:0e:76:d0:b0:b7:d8:27:85:0a:c7:
a4:7b:74:c4:86:a4:87:81:35:2a:23:10:84:18:bc:9b:2d:c4:
05:0f:2b:ff:a7:33:51:6a:80:3c:ce:e2:ab:60:65:d8:1c:de:
ba:fc:b2:f4:d2:c1:44:3a:71:cf:8f:12:dd:83:32:7e:c5:85:
cf:c0:23:b4:7e:3e:1d:a4:05:86:24:68:a2:b5:95:a2:e2:6f:
84:68:50:23:16:79:cb:cd:60:d3:62:28:1e:0c:5f:c4:88:12:
1c:c6:01:17:33:f7:02:9e:4e:b8:5c:59:b8:c4:90:e7:9f:4c:
96:54:c9:fd:c3:9c:61:98:24:40:38:33:77:67:30:6b:ab:71:
cc:b4:70:68:67:51:ff:71:39:6c:aa:ec:05:68:8e:2f:b7:a2:
8c:3c:3f:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:17:02 2026 by rpki-client