Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/17aa67-8fe4-4a43-aadd-c4c51fcff497/1/AU97fVHlCBgO5zzt292VXDl3SCI.mft
File: AU97fVHlCBgO5zzt292VXDl3SCI.mft (raw, json)
Hash identifier: bb+uMfz6xyC6cAEy9L3jEcu6aeKw3nxU+PKA2yhN33w=
Subject key identifier: 66:56:41:26:9C:40:50:C1:0B:16:7A:24:E7:80:CA:36:79:95:AE:2D
Authority key identifier: 01:4F:7B:7D:51:E5:08:18:0E:E7:3C:ED:DB:DD:95:5C:39:77:48:22
Certificate issuer: /CN=014f7b7d51e508180ee73ceddbdd955c39774822
Certificate serial: 019CABD9C36BC675FFDE9655F4A94FE04C7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AU97fVHlCBgO5zzt292VXDl3SCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/17aa67-8fe4-4a43-aadd-c4c51fcff497/1/AU97fVHlCBgO5zzt292VXDl3SCI.mft
Manifest number: 1843
Signing time: Mon 02 Mar 2026 00:01:40 +0000
Manifest this update: Mon 02 Mar 2026 00:01:40 +0000
Manifest next update: Tue 03 Mar 2026 00:01:40 +0000
Files and hashes: 1: AU97fVHlCBgO5zzt292VXDl3SCI.crl (hash: me1N8xjQto+WVho+znR9bgG7m4fZaJLeVoowK0jl5B4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/17aa67-8fe4-4a43-aadd-c4c51fcff497/1/AU97fVHlCBgO5zzt292VXDl3SCI.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/17aa67-8fe4-4a43-aadd-c4c51fcff497/1/AU97fVHlCBgO5zzt292VXDl3SCI.mft
rsync://rpki.ripe.net/repository/DEFAULT/AU97fVHlCBgO5zzt292VXDl3SCI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:c3:6b:c6:75:ff:de:96:55:f4:a9:4f:e0:4c:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=014f7b7d51e508180ee73ceddbdd955c39774822
Validity
Not Before: Mar 2 00:01:40 2026 GMT
Not After : Mar 3 00:01:40 2026 GMT
Subject: CN=665641269c4050c10b167a24e780ca367995ae2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:7c:9b:0f:22:35:e3:7e:1d:fc:7e:5f:af:4c:
b5:4d:62:d8:c8:80:b4:ca:f8:ec:b3:1a:c9:8c:57:
30:30:b0:30:61:0f:24:49:e5:ab:a1:b4:30:b7:e0:
42:14:a8:65:a7:32:c7:c8:2f:8e:3a:01:ab:ea:8d:
b6:ed:e5:7a:9e:03:39:5c:3f:51:01:15:f0:6d:31:
c8:d5:c8:42:89:35:7f:77:4e:50:4e:b4:f2:79:8b:
fb:7f:7b:2f:6d:17:14:38:7d:ff:05:96:14:b2:8e:
3d:6d:59:39:b1:24:50:d4:b5:6b:55:1d:be:61:c2:
e7:fa:5f:84:12:ac:6b:ab:86:7e:2d:a5:d5:67:90:
50:65:07:43:cf:cc:75:9f:16:68:7f:38:6f:62:12:
27:31:ad:eb:8d:8c:96:6f:88:ab:e5:31:05:5d:a5:
b4:11:24:11:58:1e:d8:6f:eb:03:29:dd:80:bf:ba:
9a:08:45:58:82:c1:45:39:6c:e8:0a:b9:bc:b3:12:
4b:eb:f3:09:bc:86:75:4c:7d:a9:e6:92:0a:0f:bd:
3d:b4:63:20:0b:26:21:64:05:15:c3:40:26:e4:11:
2d:be:e7:9c:cc:0e:0e:fc:55:8c:0e:cf:da:78:94:
62:ba:44:ee:d0:e1:32:c8:39:66:34:63:d7:79:30:
27:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:56:41:26:9C:40:50:C1:0B:16:7A:24:E7:80:CA:36:79:95:AE:2D
X509v3 Authority Key Identifier:
keyid:01:4F:7B:7D:51:E5:08:18:0E:E7:3C:ED:DB:DD:95:5C:39:77:48:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AU97fVHlCBgO5zzt292VXDl3SCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/17aa67-8fe4-4a43-aadd-c4c51fcff497/1/AU97fVHlCBgO5zzt292VXDl3SCI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/17aa67-8fe4-4a43-aadd-c4c51fcff497/1/AU97fVHlCBgO5zzt292VXDl3SCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:d6:02:4c:e7:65:0f:32:8b:f1:49:e5:5e:98:14:96:18:a8:
50:10:c4:1d:04:b2:86:85:45:17:bb:9f:21:25:d4:6f:95:7c:
60:6b:ca:09:d7:c4:8c:d2:57:05:f1:88:1a:07:92:fb:3e:20:
e8:34:f4:20:26:76:3d:16:19:64:a6:85:81:9c:ca:8a:31:b7:
48:7e:c4:a7:21:e1:70:4e:5a:8c:4b:d1:99:2e:d1:26:f3:84:
e8:b8:1f:77:52:16:6a:9e:05:3b:25:60:31:38:e9:2b:84:1d:
85:02:ba:55:e2:86:b8:0a:49:cc:de:2d:0f:85:30:15:58:00:
2b:76:7e:ad:87:2e:36:0a:1c:84:ed:d4:b8:95:e0:3d:fe:da:
aa:da:05:75:a4:f4:2c:40:55:cc:25:3d:7d:c6:1d:af:0e:68:
54:e8:3f:f7:9d:d0:77:37:1c:e1:08:ce:b8:39:02:4e:22:a7:
ec:2d:d8:42:50:f1:7b:d3:22:27:ed:0e:01:ad:0c:83:2a:90:
47:f9:f9:fd:7a:fe:4c:ce:a1:ae:fe:c0:3f:af:0d:6a:39:5c:
3a:65:01:a2:85:45:db:2e:88:aa:55:27:8f:e7:b3:c5:9b:68:
01:ec:b0:a2:e0:ca:29:fe:2e:2f:23:1d:04:c5:12:7c:df:e0:
cb:18:65:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:55:58 2026 by rpki-client