Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/d28729-84ee-4085-b85c-16a2d3e6c994/1/AUqAjM9ZGdBWfcQjTpCj5gzrFkg.mft
File: AUqAjM9ZGdBWfcQjTpCj5gzrFkg.mft (raw, json)
Hash identifier: fKfcCmlevfwykBCgQE423E690pUIoqHtznga/OyEbv0=
Subject key identifier: 8F:C3:8B:E8:F1:1A:91:50:98:AB:94:AB:BD:75:59:55:22:37:2E:E0
Authority key identifier: 01:4A:80:8C:CF:59:19:D0:56:7D:C4:23:4E:90:A3:E6:0C:EB:16:48
Certificate issuer: /CN=014a808ccf5919d0567dc4234e90a3e60ceb1648
Certificate serial: 019D9A3EFA33F1D3197712B4B93CD1069000
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AUqAjM9ZGdBWfcQjTpCj5gzrFkg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/d28729-84ee-4085-b85c-16a2d3e6c994/1/AUqAjM9ZGdBWfcQjTpCj5gzrFkg.mft
Manifest number: 17A3
Signing time: Fri 17 Apr 2026 07:01:51 +0000
Manifest this update: Fri 17 Apr 2026 07:01:51 +0000
Manifest next update: Sat 18 Apr 2026 07:01:51 +0000
Files and hashes: 1: AUqAjM9ZGdBWfcQjTpCj5gzrFkg.crl (hash: OxU2UpEddd0jyq072HUB1OQtjREc+8XPS2bdKDN2Dys=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/d28729-84ee-4085-b85c-16a2d3e6c994/1/AUqAjM9ZGdBWfcQjTpCj5gzrFkg.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/d28729-84ee-4085-b85c-16a2d3e6c994/1/AUqAjM9ZGdBWfcQjTpCj5gzrFkg.mft
rsync://rpki.ripe.net/repository/DEFAULT/AUqAjM9ZGdBWfcQjTpCj5gzrFkg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3e:fa:33:f1:d3:19:77:12:b4:b9:3c:d1:06:90:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=014a808ccf5919d0567dc4234e90a3e60ceb1648
Validity
Not Before: Apr 17 07:01:51 2026 GMT
Not After : Apr 18 07:01:51 2026 GMT
Subject: CN=8fc38be8f11a915098ab94abbd75595522372ee0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:25:e0:d4:ed:cc:af:7a:21:2f:df:18:f5:4b:
18:f9:73:99:30:06:50:12:22:51:84:95:25:ee:7b:
8d:6f:20:b4:10:f3:b5:2f:89:ad:af:6d:e9:f5:01:
ce:e7:f3:20:bf:99:13:3d:25:db:e1:d4:03:a7:4d:
b8:2f:d8:b7:b8:5d:1c:98:6d:71:72:14:92:2e:a2:
a0:30:13:b5:22:d8:d3:42:9f:32:61:c1:66:6e:20:
db:7a:67:8e:b9:7b:a1:d1:6f:e2:c3:48:bb:30:8d:
91:5a:00:de:2f:05:7f:63:f7:80:7f:6a:b7:51:8d:
a0:66:2c:9a:42:07:b2:0d:59:49:bb:b2:42:f5:9a:
bd:48:d5:b5:45:19:98:bf:62:ae:a2:f7:92:e8:c9:
ee:eb:92:79:9b:6c:8b:24:4f:cf:4c:b6:96:87:bc:
bf:ea:ef:85:a0:a7:55:46:67:59:6d:1c:fb:e0:50:
ea:10:2f:a6:e6:84:44:64:8e:2f:51:6f:67:53:92:
11:bb:9f:3a:f9:be:d6:5c:e0:b4:2e:34:ae:2c:c8:
f0:98:18:a5:86:c5:59:9b:d0:35:ae:28:1b:7b:ad:
a3:00:fc:9d:d9:af:a1:71:8c:50:db:e8:53:17:09:
79:2f:af:0a:78:a4:62:db:7d:d3:88:0d:3a:ea:6f:
65:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:C3:8B:E8:F1:1A:91:50:98:AB:94:AB:BD:75:59:55:22:37:2E:E0
X509v3 Authority Key Identifier:
keyid:01:4A:80:8C:CF:59:19:D0:56:7D:C4:23:4E:90:A3:E6:0C:EB:16:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AUqAjM9ZGdBWfcQjTpCj5gzrFkg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/d28729-84ee-4085-b85c-16a2d3e6c994/1/AUqAjM9ZGdBWfcQjTpCj5gzrFkg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/d28729-84ee-4085-b85c-16a2d3e6c994/1/AUqAjM9ZGdBWfcQjTpCj5gzrFkg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:2a:c0:5a:76:68:b1:11:a4:07:4f:4d:43:a8:91:ab:c5:b5:
e1:6a:f0:0c:6a:7b:aa:e1:c7:2b:f2:04:bb:a9:48:f0:3b:26:
38:9e:46:50:73:e0:92:e0:6e:89:26:1f:a7:dd:d3:b7:7a:55:
38:3e:1b:59:11:72:f7:97:a3:f3:da:8a:a1:83:7c:56:f7:66:
17:b1:f4:39:fe:8b:c7:9b:ec:1e:e3:e1:aa:ea:9e:60:a7:33:
05:60:ba:df:7c:40:37:3c:2d:31:b4:03:d9:81:4e:5d:2b:65:
62:65:22:20:96:a2:38:98:16:43:c8:69:ce:75:0d:29:f9:1e:
04:ea:77:37:65:e2:72:e6:2b:9c:00:6c:54:9c:5e:53:2a:1a:
54:47:8a:a1:5c:cd:3c:43:04:91:8e:63:76:a9:66:1b:49:73:
b1:26:30:b4:59:d4:a9:d2:a4:4b:b0:4b:74:05:0f:cd:24:00:
56:19:20:f6:0a:81:44:41:59:1a:ae:8f:eb:91:4e:a7:34:5b:
b8:03:8f:b0:eb:8c:3e:da:12:8f:6a:99:74:09:f6:f6:03:70:
86:d1:c4:7e:17:93:da:ef:4d:13:8a:f9:a6:9d:d8:71:08:9e:
37:5f:f3:dc:17:2a:49:55:cb:2a:6a:86:ca:8a:77:68:4b:00:
e9:11:47:f1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2aPvoz8dMZdxK0uTzRBpAAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAxNGE4MDhjY2Y1OTE5ZDA1NjdkYzQyMzRlOTBhM2U2MGNl
YjE2NDgwHhcNMjYwNDE3MDcwMTUxWhcNMjYwNDE4MDcwMTUxWjAzMTEwLwYDVQQD
Eyg4ZmMzOGJlOGYxMWE5MTUwOThhYjk0YWJiZDc1NTk1NTIyMzcyZWUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1yXg1O3Mr3ohL98Y9UsY+XOZMAZQ
EiJRhJUl7nuNbyC0EPO1L4mtr23p9QHO5/Mgv5kTPSXb4dQDp024L9i3uF0cmG1x
chSSLqKgMBO1ItjTQp8yYcFmbiDbemeOuXuh0W/iw0i7MI2RWgDeLwV/Y/eAf2q3
UY2gZiyaQgeyDVlJu7JC9Zq9SNW1RRmYv2KuoveS6Mnu65J5m2yLJE/PTLaWh7y/
6u+FoKdVRmdZbRz74FDqEC+m5oREZI4vUW9nU5IRu586+b7WXOC0LjSuLMjwmBil
hsVZm9A1rigbe62jAPyd2a+hcYxQ2+hTFwl5L68KeKRi233TiA066m9l3QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI/Di+jxGpFQmKuUq711WVUiNy7gMB8GA1UdIwQY
MBaAFAFKgIzPWRnQVn3EI06Qo+YM6xZIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQVVxQWpNOVpHZEJXZmNRalRwQ2o1Z3pyRmtnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi9kMjg3MjktODRlZS00MDg1LWI4NWMt
MTZhMmQzZTZjOTk0LzEvQVVxQWpNOVpHZEJXZmNRalRwQ2o1Z3pyRmtnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYi9kMjg3MjktODRlZS00MDg1LWI4NWMtMTZhMmQzZTZjOTk0
LzEvQVVxQWpNOVpHZEJXZmNRalRwQ2o1Z3pyRmtnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaSrAWnZo
sRGkB09NQ6iRq8W14WrwDGp7quHHK/IEu6lI8DsmOJ5GUHPgkuBuiSYfp93Tt3pV
OD4bWRFy95ej89qKoYN8VvdmF7H0Of6Lx5vsHuPhquqeYKczBWC633xANzwtMbQD
2YFOXStlYmUiIJaiOJgWQ8hpznUNKfkeBOp3N2XicuYrnABsVJxeUyoaVEeKoVzN
PEMEkY5jdqlmG0lzsSYwtFnUqdKkS7BLdAUPzSQAVhkg9gqBREFZGq6P65FOpzRb
uAOPsOuMPtoSj2qZdAn29gNwhtHEfheT2u9NE4r5pp3YcQieN1/z3BcqSVXLKmqG
yop3aEsA6RFH8Q==
-----END CERTIFICATE-----
Generated at Fri Apr 17 11:31:38 2026 by rpki-client