Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/1240eb-bab4-45ad-9387-516f11acb3ae/1/4auG-AxLsqxW5B7HokauKWnY01g.mft
File: 4auG-AxLsqxW5B7HokauKWnY01g.mft (raw, json)
Hash identifier: CaukwAprOWxljr1McnEa7EVz2/SjCqcx6q1IZ+WnAOk=
Subject key identifier: 71:B2:F9:08:9C:5D:CF:33:DA:5E:4B:AE:1C:FA:41:D8:9C:70:C5:EA
Authority key identifier: E1:AB:86:F8:0C:4B:B2:AC:56:E4:1E:C7:A2:46:AE:29:69:D8:D3:58
Certificate issuer: /CN=e1ab86f80c4bb2ac56e41ec7a246ae2969d8d358
Certificate serial: 019CAE6C541CF9D92B20F022289C3603F4A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4auG-AxLsqxW5B7HokauKWnY01g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/1240eb-bab4-45ad-9387-516f11acb3ae/1/4auG-AxLsqxW5B7HokauKWnY01g.mft
Manifest number: 0811
Signing time: Mon 02 Mar 2026 12:01:00 +0000
Manifest this update: Mon 02 Mar 2026 12:01:00 +0000
Manifest next update: Tue 03 Mar 2026 12:01:00 +0000
Files and hashes: 1: 4auG-AxLsqxW5B7HokauKWnY01g.crl (hash: A9P0VGETdI+W97Zzj6iCN6lu1dEcp3lEicCScmvZiDU=)
2: KNOVXoGQsdCxPsZM3zKJ6uFmptI.roa (hash: UiYbuT4DjmIashb94arKXLuitUGRN2TvoEQlDnO6RSk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/1240eb-bab4-45ad-9387-516f11acb3ae/1/4auG-AxLsqxW5B7HokauKWnY01g.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/1240eb-bab4-45ad-9387-516f11acb3ae/1/4auG-AxLsqxW5B7HokauKWnY01g.mft
rsync://rpki.ripe.net/repository/DEFAULT/4auG-AxLsqxW5B7HokauKWnY01g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:6c:54:1c:f9:d9:2b:20:f0:22:28:9c:36:03:f4:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1ab86f80c4bb2ac56e41ec7a246ae2969d8d358
Validity
Not Before: Mar 2 12:01:00 2026 GMT
Not After : Mar 3 12:01:00 2026 GMT
Subject: CN=71b2f9089c5dcf33da5e4bae1cfa41d89c70c5ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:e7:29:5d:bc:b3:52:a7:07:e8:42:86:d4:6e:
94:14:8c:b0:56:00:2e:32:50:e4:f5:a2:4b:7f:9f:
0a:34:df:53:2a:1b:9b:fd:0d:13:b7:5e:ac:c2:ef:
ce:6e:b1:73:2e:68:ce:a3:f7:55:b4:9e:97:fa:5d:
e9:63:6f:12:fe:3e:db:55:da:ac:07:5e:12:66:1a:
1c:17:7f:d6:33:9d:78:f0:92:06:92:b3:35:20:cf:
52:33:e0:52:62:11:bc:f0:96:ef:a8:07:80:e5:dc:
8b:79:3c:b1:ad:fd:c7:3a:18:09:2d:62:8a:76:20:
dc:62:3e:93:4e:38:2c:6f:7c:46:ba:3f:3f:ff:aa:
38:ff:6b:ff:72:55:d7:a5:0c:bb:0f:fa:e8:42:82:
63:71:b8:83:9c:3d:ec:e0:b7:ec:89:e6:f8:72:6b:
f9:73:5c:4c:f9:be:bd:ac:72:35:ec:00:1f:8b:5c:
66:3b:48:36:73:7f:72:dd:ab:84:ca:9c:5e:53:57:
c3:88:0f:2f:aa:0d:52:d3:66:32:ed:aa:21:9f:5c:
6c:fc:9b:18:fb:85:9a:04:94:ff:47:89:33:58:dd:
98:5a:f4:96:f1:46:31:9c:d4:66:c4:95:28:27:62:
f9:82:48:88:16:52:77:bf:e3:8d:5b:78:43:22:2b:
7c:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:B2:F9:08:9C:5D:CF:33:DA:5E:4B:AE:1C:FA:41:D8:9C:70:C5:EA
X509v3 Authority Key Identifier:
keyid:E1:AB:86:F8:0C:4B:B2:AC:56:E4:1E:C7:A2:46:AE:29:69:D8:D3:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4auG-AxLsqxW5B7HokauKWnY01g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/1240eb-bab4-45ad-9387-516f11acb3ae/1/4auG-AxLsqxW5B7HokauKWnY01g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/1240eb-bab4-45ad-9387-516f11acb3ae/1/4auG-AxLsqxW5B7HokauKWnY01g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:ac:fb:ea:6d:44:7e:13:7d:6e:73:2a:2d:0e:70:f3:60:de:
47:b7:b8:41:4c:f8:74:63:b3:07:13:dc:1f:e3:3d:10:74:9e:
16:e7:21:6a:36:d8:37:91:53:a9:a7:f8:fe:84:cb:0b:39:90:
9a:1c:18:0a:da:e1:f3:e7:56:a0:34:25:3f:ba:19:dd:fc:be:
87:c8:c2:6b:bb:19:1b:f5:5f:46:58:6a:10:55:d6:b7:0a:e6:
5a:36:1d:a0:04:76:e1:19:6c:a8:ba:15:78:78:aa:c4:28:53:
a6:e0:c3:2c:a3:56:d4:c1:45:93:8b:37:90:c1:41:6b:fb:3b:
2a:6e:50:c5:1c:66:04:fa:57:38:5d:d8:c6:a6:73:3f:43:28:
13:35:3a:63:51:94:5a:80:d3:6d:1d:b6:c3:31:7d:c4:87:e3:
8b:11:17:f4:9c:a2:5f:0c:2b:37:ff:a3:4d:4f:1a:ee:6e:0d:
56:d3:de:5f:ae:d9:4a:54:f2:2c:76:41:ff:e7:f8:92:3a:62:
b6:e5:0a:74:85:80:c3:82:0e:e5:b9:c1:cb:9c:10:b1:28:1c:
53:22:94:35:b3:a6:62:7e:d5:99:4f:bd:61:e3:b5:07:2c:d0:
42:67:86:14:55:23:a0:4a:9b:60:ce:58:96:02:79:36:6e:46:
d8:37:68:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:44:26 2026 by rpki-client