
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/d28729-84ee-4085-b85c-16a2d3e6c994/1/AUqAjM9ZGdBWfcQjTpCj5gzrFkg.mft
File: AUqAjM9ZGdBWfcQjTpCj5gzrFkg.mft (raw, json)
Hash identifier: OYp99+IFysE0uZX33k1B5wWHQ1NJ42Qkfpqg054Ao/s=
Subject key identifier: F0:F3:CA:B5:68:93:8C:1A:30:0C:57:42:F1:65:E6:AD:5B:48:00:F9
Authority key identifier: 01:4A:80:8C:CF:59:19:D0:56:7D:C4:23:4E:90:A3:E6:0C:EB:16:48
Certificate issuer: /CN=014a808ccf5919d0567dc4234e90a3e60ceb1648
Certificate serial: 019CAAC6FB7BA25EF64350AAADE369FBFC4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AUqAjM9ZGdBWfcQjTpCj5gzrFkg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/d28729-84ee-4085-b85c-16a2d3e6c994/1/AUqAjM9ZGdBWfcQjTpCj5gzrFkg.mft
Manifest number: 1727
Signing time: Sun 01 Mar 2026 19:01:33 +0000
Manifest this update: Sun 01 Mar 2026 19:01:33 +0000
Manifest next update: Mon 02 Mar 2026 19:01:33 +0000
Files and hashes: 1: AUqAjM9ZGdBWfcQjTpCj5gzrFkg.crl (hash: GhCKP1oZ5Yo9TSs4Akexvk8nZoDkBpqljx/XgFnO4AY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/d28729-84ee-4085-b85c-16a2d3e6c994/1/AUqAjM9ZGdBWfcQjTpCj5gzrFkg.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/d28729-84ee-4085-b85c-16a2d3e6c994/1/AUqAjM9ZGdBWfcQjTpCj5gzrFkg.mft
rsync://rpki.ripe.net/repository/DEFAULT/AUqAjM9ZGdBWfcQjTpCj5gzrFkg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:fb:7b:a2:5e:f6:43:50:aa:ad:e3:69:fb:fc:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=014a808ccf5919d0567dc4234e90a3e60ceb1648
Validity
Not Before: Mar 1 19:01:33 2026 GMT
Not After : Mar 2 19:01:33 2026 GMT
Subject: CN=f0f3cab568938c1a300c5742f165e6ad5b4800f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:26:69:4a:83:ad:4f:ed:2a:24:ae:c3:be:0e:
e9:96:f2:7d:fd:14:54:0e:13:5d:32:b5:a7:e9:d8:
b3:86:28:b6:d6:ee:46:e0:78:2a:1e:ac:be:90:22:
de:79:ca:38:7b:2d:6d:fc:82:b2:e9:b9:4f:95:91:
f1:b2:7c:55:0d:36:58:6a:15:bf:7e:00:0f:5b:05:
7c:47:4b:ad:f8:86:54:0f:1b:42:28:e0:80:a3:74:
3a:25:eb:59:76:8d:d7:03:05:75:b6:2f:f5:4b:85:
56:33:5f:9e:fe:16:7e:c8:17:c9:ff:48:c4:60:7e:
23:82:f5:2f:56:29:e7:99:ec:2d:04:2b:4d:d9:f3:
85:e1:37:32:e4:12:aa:3f:74:e0:fb:ea:c9:fd:c8:
c4:24:a8:50:14:53:9e:f1:92:d9:21:65:a4:5d:8b:
fa:44:ca:ae:8a:4b:fa:49:96:a8:62:26:45:de:f5:
9b:8a:ec:ca:13:c5:ea:36:9b:21:23:01:fd:13:64:
17:f2:92:d5:bd:27:22:25:11:ed:c3:6a:d8:c8:c6:
33:73:45:9e:ad:37:56:49:c5:6c:29:db:31:fc:84:
b2:09:57:66:e6:14:bd:2e:8a:75:27:66:fe:c3:f9:
f1:24:b1:43:b1:27:d6:51:d8:97:21:1a:02:27:ad:
cd:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:F3:CA:B5:68:93:8C:1A:30:0C:57:42:F1:65:E6:AD:5B:48:00:F9
X509v3 Authority Key Identifier:
keyid:01:4A:80:8C:CF:59:19:D0:56:7D:C4:23:4E:90:A3:E6:0C:EB:16:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AUqAjM9ZGdBWfcQjTpCj5gzrFkg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/d28729-84ee-4085-b85c-16a2d3e6c994/1/AUqAjM9ZGdBWfcQjTpCj5gzrFkg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/d28729-84ee-4085-b85c-16a2d3e6c994/1/AUqAjM9ZGdBWfcQjTpCj5gzrFkg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:8a:69:29:16:2a:62:b0:1b:ed:ac:09:59:3c:ca:88:20:fd:
6a:f8:9c:b1:0a:bf:a0:fc:02:32:ed:85:b1:ef:8e:0f:0b:7c:
38:2e:21:79:73:57:3a:3b:a4:1b:d5:e0:a3:99:ad:27:79:fc:
cf:d8:84:e8:72:48:3f:4a:bd:89:b3:af:ac:f1:64:55:c1:7a:
1e:95:81:d6:46:75:c7:13:a4:bc:56:55:04:75:5a:6a:a2:ff:
dc:8d:ec:7b:e0:45:1f:3b:a4:77:ec:1b:b0:36:fd:04:c8:6a:
54:35:2d:c1:b0:1d:64:1e:c6:ad:dd:f3:0f:51:93:ba:20:fd:
a6:e9:2f:ec:70:9d:10:c9:ca:1b:b4:28:3f:af:b8:e4:24:5c:
45:b2:58:1a:e2:ad:a6:f5:3d:9b:de:c8:80:af:ba:e5:38:b9:
11:1e:9e:ee:3e:db:4c:70:3e:08:22:d1:55:03:83:e7:1c:cc:
18:2b:a5:bc:c9:9a:b3:ac:21:cf:e1:9a:2c:22:65:97:03:34:
7e:d8:53:55:69:6e:78:8d:e0:7d:d3:76:34:f7:86:d9:44:07:
b1:57:85:79:51:e9:7d:5c:29:ad:81:10:6b:d3:39:57:fb:50:
2b:6b:1d:ee:f4:af:ab:78:93:36:7d:c8:31:8e:ec:6e:09:12:
33:86:1b:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:45:06 2026 by rpki-client