Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/1b78cd-d005-492c-9167-1bf868a03538/1/AUjSyoorQ7bK0lsiJlNU_jA5EaA.mft
File: AUjSyoorQ7bK0lsiJlNU_jA5EaA.mft (raw, json)
Hash identifier: HHQb8+r318BRHtVozMqZBexDR35AHHu/ofxNbh769RY=
Subject key identifier: BD:07:5C:1E:AE:67:C4:FC:6A:B9:57:C2:3D:A9:D4:A9:9D:9C:81:F9
Authority key identifier: 01:48:D2:CA:8A:2B:43:B6:CA:D2:5B:22:26:53:54:FE:30:39:11:A0
Certificate issuer: /CN=0148d2ca8a2b43b6cad25b22265354fe303911a0
Certificate serial: 019CAC46D2F72520C654424C3EF11EEE934C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AUjSyoorQ7bK0lsiJlNU_jA5EaA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/1b78cd-d005-492c-9167-1bf868a03538/1/AUjSyoorQ7bK0lsiJlNU_jA5EaA.mft
Manifest number: 170D
Signing time: Mon 02 Mar 2026 02:00:48 +0000
Manifest this update: Mon 02 Mar 2026 02:00:48 +0000
Manifest next update: Tue 03 Mar 2026 02:00:48 +0000
Files and hashes: 1: 6uyLPr7GcIkDSRR1cBioO7oGEF0.roa (hash: FfvCuloLAdVXrZLuuHrf1reVNj9KC+EjXSXR/em79FA=)
2: AUjSyoorQ7bK0lsiJlNU_jA5EaA.crl (hash: GyctDl8yg29+AxbYUVsKwe+DdQFhVj+N4vfI6DX+i+g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/1b78cd-d005-492c-9167-1bf868a03538/1/AUjSyoorQ7bK0lsiJlNU_jA5EaA.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/1b78cd-d005-492c-9167-1bf868a03538/1/AUjSyoorQ7bK0lsiJlNU_jA5EaA.mft
rsync://rpki.ripe.net/repository/DEFAULT/AUjSyoorQ7bK0lsiJlNU_jA5EaA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:46:d2:f7:25:20:c6:54:42:4c:3e:f1:1e:ee:93:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0148d2ca8a2b43b6cad25b22265354fe303911a0
Validity
Not Before: Mar 2 02:00:48 2026 GMT
Not After : Mar 3 02:00:48 2026 GMT
Subject: CN=bd075c1eae67c4fc6ab957c23da9d4a99d9c81f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:ac:e0:82:cf:6a:bb:02:7d:74:e9:2d:61:fa:
ca:34:cd:46:0c:fd:7a:4f:84:ec:b2:12:d6:2a:8c:
23:e8:52:4e:53:2a:37:04:85:1a:e3:b5:4a:43:7d:
d2:db:3e:d1:c6:7d:83:9c:ce:90:73:61:a3:78:12:
15:af:9e:21:85:65:3b:d3:fd:6b:f7:46:52:d2:d9:
19:ad:29:e9:ac:f9:b9:49:15:a6:85:b6:21:9d:9a:
30:ee:6a:62:bd:5c:76:40:93:22:32:a3:ae:c6:4f:
1e:f7:9d:38:f8:7f:81:3b:29:46:b4:86:89:f4:fc:
5f:a1:aa:8a:b8:72:d4:b9:1d:10:d1:21:be:bb:c0:
0b:1f:43:40:7a:98:c9:dc:38:8f:05:bd:08:50:85:
e0:b5:64:94:c6:e0:f6:08:03:ab:f5:4c:23:5e:9b:
8a:34:be:55:80:3b:d1:5c:04:86:72:f1:d4:e2:cf:
95:6d:b3:45:56:2a:80:f3:55:02:7e:62:11:e7:56:
44:c0:03:22:fd:7a:4d:ef:29:0b:45:6a:d2:c8:46:
89:30:58:32:6e:95:2f:93:50:c7:0c:6f:72:1b:dd:
f6:81:78:3f:bc:56:01:91:3b:89:25:33:b8:1f:e0:
6d:b8:f4:c0:44:76:71:3a:b5:dd:bd:41:8a:61:38:
11:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:07:5C:1E:AE:67:C4:FC:6A:B9:57:C2:3D:A9:D4:A9:9D:9C:81:F9
X509v3 Authority Key Identifier:
keyid:01:48:D2:CA:8A:2B:43:B6:CA:D2:5B:22:26:53:54:FE:30:39:11:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AUjSyoorQ7bK0lsiJlNU_jA5EaA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/1b78cd-d005-492c-9167-1bf868a03538/1/AUjSyoorQ7bK0lsiJlNU_jA5EaA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/1b78cd-d005-492c-9167-1bf868a03538/1/AUjSyoorQ7bK0lsiJlNU_jA5EaA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:5d:e0:f9:d6:8b:55:24:b2:b4:ae:e4:a2:18:c3:66:7d:5b:
f5:a7:34:1a:e5:f1:f1:7d:13:1c:e0:b9:7a:84:c5:79:fa:1f:
b2:74:4b:f0:21:23:ed:6f:b9:12:dc:4d:da:7e:d9:7f:0a:76:
f0:29:d1:1b:4a:3d:60:d6:ab:18:85:eb:10:39:03:9c:b2:db:
50:bb:c4:a8:ff:48:22:05:19:d3:dd:2d:8b:80:36:61:31:b6:
0d:93:0a:9e:75:b5:03:e7:7d:55:b6:5e:a8:03:ea:f9:ce:ce:
56:1d:ae:52:18:4d:05:bd:e1:0f:6e:46:aa:3a:b0:4c:be:10:
bf:61:09:ce:23:fc:37:8e:2f:47:51:4b:0e:1d:47:1f:85:11:
10:f8:04:88:a4:69:bf:d6:b5:4b:4c:4a:31:cb:fe:be:b2:b1:
d0:a8:f1:3c:42:e1:c8:4e:19:b0:de:60:88:3c:b5:4e:e4:a1:
be:e0:f6:21:43:cf:00:90:94:06:69:53:4e:ea:74:63:cb:56:
6b:f4:70:2a:d6:a8:f2:46:24:fe:64:ab:60:de:4d:95:e8:3c:
62:d1:9c:db:5c:4e:90:da:a7:7a:27:9e:ac:ef:3d:9e:c3:a5:
bf:e7:9e:23:c7:59:84:68:0b:a8:2a:f8:60:83:8f:cc:a3:40:
7d:a6:e0:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:33:56 2026 by rpki-client