Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2b/d28729-84ee-4085-b85c-16a2d3e6c994/1/AUqAjM9ZGdBWfcQjTpCj5gzrFkg.mft
File: AUqAjM9ZGdBWfcQjTpCj5gzrFkg.mft (raw, json)
Hash identifier: MmOQGW1Oy/BVhgd8UkcESq8CN0Puma995rbMjILcFGo=
Subject key identifier: AA:6C:61:FB:9A:9C:B9:C2:62:90:56:AC:91:F5:1A:F6:90:AD:87:67
Authority key identifier: 01:4A:80:8C:CF:59:19:D0:56:7D:C4:23:4E:90:A3:E6:0C:EB:16:48
Certificate issuer: /CN=014a808ccf5919d0567dc4234e90a3e60ceb1648
Certificate serial: 01A0C368A4F71A02A392EB676BB6398A3DDC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AUqAjM9ZGdBWfcQjTpCj5gzrFkg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/d28729-84ee-4085-b85c-16a2d3e6c994/1/AUqAjM9ZGdBWfcQjTpCj5gzrFkg.mft
Manifest number: 1946
Signing time: Mon 21 Sep 2026 10:00:09 +0000
Manifest this update: Mon 21 Sep 2026 10:00:09 +0000
Manifest next update: Tue 22 Sep 2026 10:00:09 +0000
Files and hashes: 1: AUqAjM9ZGdBWfcQjTpCj5gzrFkg.crl (hash: uQ6Ivp6+iMMBv8pFs5z+h0JNC/5RvogRq8u8re/jpz0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/d28729-84ee-4085-b85c-16a2d3e6c994/1/AUqAjM9ZGdBWfcQjTpCj5gzrFkg.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/d28729-84ee-4085-b85c-16a2d3e6c994/1/AUqAjM9ZGdBWfcQjTpCj5gzrFkg.mft
rsync://rpki.ripe.net/repository/DEFAULT/AUqAjM9ZGdBWfcQjTpCj5gzrFkg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 08:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c3:68:a4:f7:1a:02:a3:92:eb:67:6b:b6:39:8a:3d:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=014a808ccf5919d0567dc4234e90a3e60ceb1648
Validity
Not Before: Sep 21 10:00:09 2026 GMT
Not After : Sep 22 10:00:09 2026 GMT
Subject: CN=aa6c61fb9a9cb9c2629056ac91f51af690ad8767
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:ff:f8:b5:72:e3:6f:ef:48:90:3f:4c:12:e9:
e3:d6:d1:59:a3:ab:c2:c7:51:5d:85:52:a6:f1:ac:
7a:c9:72:f3:34:26:be:58:4d:45:6e:6d:f8:96:06:
a7:80:2c:9d:6a:74:75:78:41:96:d6:4b:89:d1:08:
34:1d:2e:6b:01:7b:61:6c:6b:10:f1:91:ae:3c:0e:
50:48:e4:d0:fe:cd:d7:0c:66:e0:7e:1b:50:23:0c:
a6:ee:91:d6:76:b6:7b:b3:21:41:b2:48:e7:fd:b8:
01:47:05:e9:05:3b:b1:73:88:33:77:97:2a:3e:5c:
14:cb:f9:29:5b:05:95:18:f6:bf:e2:c8:89:b7:21:
60:f5:45:dd:ee:bd:52:47:08:c7:e1:7d:7b:fc:37:
c9:60:e1:cb:ff:09:dd:84:fc:5e:98:c0:db:4c:22:
c5:64:8a:59:2d:5f:68:27:c7:8a:69:9d:3a:e5:cc:
e5:85:3d:c5:36:00:b2:02:2e:4d:3a:d1:5a:ba:83:
45:af:ce:07:2a:23:e6:58:cd:79:6b:cd:b5:1f:2f:
2c:86:31:49:1e:f7:53:60:5d:ca:1c:19:7b:f5:22:
41:7e:f6:6f:26:0d:22:25:cf:26:5a:d0:6e:13:ad:
1f:b6:16:2f:14:d4:88:2d:18:ac:87:ff:30:c8:96:
46:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:6C:61:FB:9A:9C:B9:C2:62:90:56:AC:91:F5:1A:F6:90:AD:87:67
X509v3 Authority Key Identifier:
keyid:01:4A:80:8C:CF:59:19:D0:56:7D:C4:23:4E:90:A3:E6:0C:EB:16:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AUqAjM9ZGdBWfcQjTpCj5gzrFkg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/d28729-84ee-4085-b85c-16a2d3e6c994/1/AUqAjM9ZGdBWfcQjTpCj5gzrFkg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/d28729-84ee-4085-b85c-16a2d3e6c994/1/AUqAjM9ZGdBWfcQjTpCj5gzrFkg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:37:9a:b4:66:b9:1a:ea:67:b4:2d:1b:fa:db:24:7b:2e:25:
a6:47:6a:6c:da:c8:e5:06:bc:72:27:43:16:f2:53:9c:db:1f:
ea:a2:f9:3f:a7:9d:0b:23:62:dd:4f:39:f2:bb:17:17:9f:8c:
a6:aa:2c:a8:af:cb:41:af:eb:d0:fe:ca:f0:4e:ae:81:a9:1c:
f7:ec:27:62:1c:df:a7:5c:d0:79:aa:06:4d:22:2a:b5:40:c9:
4f:57:eb:84:22:5b:ee:dd:5e:cf:3a:c9:c8:fe:f9:1e:0a:36:
84:26:5b:ed:e9:fc:10:7b:d9:d0:cf:80:9a:56:57:f9:5f:63:
b3:eb:f2:df:75:74:f9:41:9e:ae:e8:35:55:73:4d:df:75:85:
ca:49:ff:12:58:d5:ed:93:9d:bc:69:c8:17:26:ee:b7:20:67:
6f:4e:0d:5d:f5:49:fd:5c:f0:c1:69:65:c4:5a:ae:f9:7f:d5:
8d:ad:6b:79:61:c8:32:c0:51:fc:cc:8a:77:2c:30:97:60:7f:
84:0f:cc:a4:36:9c:7f:1e:3b:93:82:1c:e0:58:77:b5:f2:63:
2a:fe:b8:1f:7a:b4:ee:a5:a8:44:4c:9a:3a:69:60:1c:a8:6b:
25:e4:33:d1:fc:1a:d3:3e:a2:10:80:88:b2:4a:54:be:ee:6d:
e7:34:46:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 14:55:32 2026 by rpki-client