Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/e5e379-656d-4622-a7bc-ea26e746a0ad/1/AUa0KfjElhH8_qHvoaUbnA7dtuc.mft
File: AUa0KfjElhH8_qHvoaUbnA7dtuc.mft (raw, json)
Hash identifier: ZP5x/5olnFaTzbzCYe/JBPtcOCw+QT/13ufKW/5AVMY=
Subject key identifier: D8:9D:44:18:02:85:AE:68:DB:81:ED:3B:BD:FB:23:8A:47:A8:55:9C
Authority key identifier: 01:46:B4:29:F8:C4:96:11:FC:FE:A1:EF:A1:A5:1B:9C:0E:DD:B6:E7
Certificate issuer: /CN=0146b429f8c49611fcfea1efa1a51b9c0eddb6e7
Certificate serial: 019CAB6B3D0D1FF776ACD7479560CE329FF3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AUa0KfjElhH8_qHvoaUbnA7dtuc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/e5e379-656d-4622-a7bc-ea26e746a0ad/1/AUa0KfjElhH8_qHvoaUbnA7dtuc.mft
Manifest number: 16DA
Signing time: Sun 01 Mar 2026 22:00:57 +0000
Manifest this update: Sun 01 Mar 2026 22:00:57 +0000
Manifest next update: Mon 02 Mar 2026 22:00:57 +0000
Files and hashes: 1: AUa0KfjElhH8_qHvoaUbnA7dtuc.crl (hash: mj5PXD/4A/72BzmGWpNpM3zvE+cJ0D0uKFsIXZPpfK0=)
2: NxuqhMt3VzaBAaaFWGDiuWFgX_M.roa (hash: F2a9W3aDlKDuDbu3k14edUZBWtASv604tOPuHCHuAUU=)
3: RzgUn9eg8y2k66eYHCNlwa8pwvg.roa (hash: OcpgiZ4MXGUv2QGrVDNPAXMaeOzLbUHWGEXGkutCgDg=)
4: X7PjzMppd_dLozdN0D11F0z07vQ.roa (hash: psScHcjJlgs5hgoPO3e9N+tN+WLH5h3LFD7hHGpCwcE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/e5e379-656d-4622-a7bc-ea26e746a0ad/1/AUa0KfjElhH8_qHvoaUbnA7dtuc.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/e5e379-656d-4622-a7bc-ea26e746a0ad/1/AUa0KfjElhH8_qHvoaUbnA7dtuc.mft
rsync://rpki.ripe.net/repository/DEFAULT/AUa0KfjElhH8_qHvoaUbnA7dtuc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:3d:0d:1f:f7:76:ac:d7:47:95:60:ce:32:9f:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0146b429f8c49611fcfea1efa1a51b9c0eddb6e7
Validity
Not Before: Mar 1 22:00:57 2026 GMT
Not After : Mar 2 22:00:57 2026 GMT
Subject: CN=d89d44180285ae68db81ed3bbdfb238a47a8559c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:f8:9a:19:a2:39:0c:51:2c:a6:c9:36:7a:65:
d7:5b:50:fe:05:7c:ef:ae:e5:7b:76:45:10:b1:a6:
5c:5d:74:12:ec:0e:c7:02:6e:d5:46:73:db:12:50:
91:d4:78:9d:b2:41:01:20:1e:b0:d7:52:d5:53:72:
65:af:8a:f5:06:cb:58:f0:2c:ae:52:15:d7:91:ae:
cd:b4:79:98:4a:61:01:8c:bb:8b:5f:3a:1d:bc:78:
67:21:0c:18:d3:83:76:fe:7e:b1:04:bc:b4:40:e9:
47:63:3f:70:37:ef:f1:e9:d9:6d:55:f2:a2:bc:79:
53:fd:79:dc:6b:2a:a3:f4:72:da:c0:da:66:0e:c5:
c6:a1:00:6f:d1:3a:66:94:90:db:d5:65:7e:1f:32:
f0:f3:bc:24:e9:45:57:84:59:8b:96:42:8e:e6:5a:
c3:31:22:99:41:fe:e2:76:bd:57:c9:58:4d:6f:0a:
60:7e:82:db:9a:15:52:79:86:02:c2:b2:13:b7:29:
47:e7:8b:d4:d0:92:2e:dd:72:b1:17:0a:76:d4:16:
52:d6:3e:4f:20:99:a5:3f:f3:13:70:9e:ac:ff:90:
15:c3:90:c0:e6:1e:29:79:6e:7c:2c:75:26:7b:b0:
83:56:48:04:bf:6f:98:8b:dc:ed:23:c0:4e:77:53:
13:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:9D:44:18:02:85:AE:68:DB:81:ED:3B:BD:FB:23:8A:47:A8:55:9C
X509v3 Authority Key Identifier:
keyid:01:46:B4:29:F8:C4:96:11:FC:FE:A1:EF:A1:A5:1B:9C:0E:DD:B6:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AUa0KfjElhH8_qHvoaUbnA7dtuc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/e5e379-656d-4622-a7bc-ea26e746a0ad/1/AUa0KfjElhH8_qHvoaUbnA7dtuc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/e5e379-656d-4622-a7bc-ea26e746a0ad/1/AUa0KfjElhH8_qHvoaUbnA7dtuc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:25:a3:74:a2:b0:7a:bf:22:4f:b4:41:f0:64:d3:11:5f:2b:
b8:84:6c:26:0b:52:d6:98:fd:c6:60:9c:0e:22:a7:19:8d:2b:
d8:e6:4c:b0:48:56:87:67:36:ad:a9:1d:55:76:b0:7a:da:4e:
ab:85:60:a2:87:e7:0e:cb:57:18:79:f2:51:c1:13:cb:ba:fd:
fd:86:d0:02:ee:88:06:a8:33:cf:c4:df:ab:6c:8e:91:07:6a:
09:e5:20:be:66:f7:9c:3c:4a:11:9b:88:2d:51:71:e0:b5:d6:
95:ce:d4:eb:71:d0:36:1c:32:fc:fa:47:09:9f:9e:74:38:b4:
b2:4a:eb:4d:5e:58:85:69:0b:23:03:43:71:4c:f4:c8:fa:04:
84:f6:fb:e9:5e:6e:d9:be:46:8c:1b:80:d7:b9:ea:cd:3c:76:
ce:2e:f2:57:63:d4:c3:6c:90:fc:ac:b3:50:cf:fc:d4:9c:61:
2e:55:c2:eb:27:2f:cb:28:0f:e5:dd:f6:36:d2:69:e1:85:89:
fa:3f:84:a8:99:0c:d3:8e:42:3a:49:fa:90:e1:2c:df:23:2a:
4f:5f:af:71:bb:01:e8:94:64:aa:b4:27:62:f2:12:48:97:4e:
36:48:89:e8:00:81:8f:73:d4:88:71:0f:a2:29:65:98:ff:74:
5c:17:e1:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:23:21 2026 by rpki-client