Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/7983fc-2019-47b3-a6c3-d99c8c25dbc8/1/au3YfPvkKOnEKzDCLhlh9xfx20k.mft
File: au3YfPvkKOnEKzDCLhlh9xfx20k.mft (raw, json)
Hash identifier: 3wyO5zIc8qz2yCKaLg/FEahxyzSeXDN9uMZgkOr8vow=
Subject key identifier: FA:C2:80:39:A1:8B:EB:39:45:A7:DB:F6:0F:F2:C6:BB:55:1B:4C:B4
Authority key identifier: 6A:ED:D8:7C:FB:E4:28:E9:C4:2B:30:C2:2E:19:61:F7:17:F1:DB:49
Certificate issuer: /CN=6aedd87cfbe428e9c42b30c22e1961f717f1db49
Certificate serial: 019ED3BDA46061F13EC49C76A9B0B8D12B11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/au3YfPvkKOnEKzDCLhlh9xfx20k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/7983fc-2019-47b3-a6c3-d99c8c25dbc8/1/au3YfPvkKOnEKzDCLhlh9xfx20k.mft
Manifest number: 017C
Signing time: Wed 17 Jun 2026 04:01:21 +0000
Manifest this update: Wed 17 Jun 2026 04:01:21 +0000
Manifest next update: Thu 18 Jun 2026 04:01:21 +0000
Files and hashes: 1: au3YfPvkKOnEKzDCLhlh9xfx20k.crl (hash: hpglmqksHccFezYdl+/1vF1w9V0ZIFoXrNzKIi534zc=)
2: vWjIW1eikUSm_cPtDhI_f3EodY4.roa (hash: PyLkHRQBEvUL9Bk7Ermj8JEaYKhwlYCHxtYPNjdnGVg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/7983fc-2019-47b3-a6c3-d99c8c25dbc8/1/au3YfPvkKOnEKzDCLhlh9xfx20k.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/7983fc-2019-47b3-a6c3-d99c8c25dbc8/1/au3YfPvkKOnEKzDCLhlh9xfx20k.mft
rsync://rpki.ripe.net/repository/DEFAULT/au3YfPvkKOnEKzDCLhlh9xfx20k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 18 Jun 2026 04:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:d3:bd:a4:60:61:f1:3e:c4:9c:76:a9:b0:b8:d1:2b:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6aedd87cfbe428e9c42b30c22e1961f717f1db49
Validity
Not Before: Jun 17 04:01:21 2026 GMT
Not After : Jun 18 04:01:21 2026 GMT
Subject: CN=fac28039a18beb3945a7dbf60ff2c6bb551b4cb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:43:d0:25:17:96:64:19:3e:bf:99:90:4b:4e:
2e:a3:7c:4d:33:93:26:6e:1c:e3:1b:58:e1:87:a8:
6e:c4:f4:33:ff:ea:ef:35:47:42:b0:ca:03:9c:8f:
12:0a:3c:04:19:6f:94:b8:52:4b:42:e4:6b:52:62:
a3:b1:c0:50:06:a2:59:d3:62:bc:8a:bc:b9:6e:57:
df:b1:0f:aa:b6:50:bf:7a:6f:88:83:e8:82:95:07:
54:7c:d8:10:e4:f6:55:ef:2d:d7:9e:d7:11:d1:93:
2b:1d:3c:d1:65:66:86:d1:be:7a:a0:98:6c:7b:7c:
dc:23:dd:9c:dd:dd:5c:43:e9:ce:60:57:ba:5c:d6:
84:fa:52:9b:22:e3:92:37:58:26:d2:c1:f3:77:51:
bc:cc:92:7a:86:f3:40:0f:e2:e3:b1:54:0e:d8:57:
c2:1c:b9:7f:9d:13:64:ba:50:ed:20:b5:be:2c:39:
27:10:9d:c6:58:67:26:2c:0d:c6:4d:e8:13:1d:84:
1c:33:4f:6e:6b:c9:9a:69:d0:78:61:aa:3a:9a:48:
f0:4c:a0:b9:99:9b:17:c1:48:2d:ea:34:aa:41:de:
65:0b:f6:49:3b:eb:21:ba:5e:63:86:0f:00:d0:12:
ea:21:38:32:7f:33:49:c2:27:ed:b9:3f:9f:c9:d4:
dd:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:C2:80:39:A1:8B:EB:39:45:A7:DB:F6:0F:F2:C6:BB:55:1B:4C:B4
X509v3 Authority Key Identifier:
keyid:6A:ED:D8:7C:FB:E4:28:E9:C4:2B:30:C2:2E:19:61:F7:17:F1:DB:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/au3YfPvkKOnEKzDCLhlh9xfx20k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/7983fc-2019-47b3-a6c3-d99c8c25dbc8/1/au3YfPvkKOnEKzDCLhlh9xfx20k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/7983fc-2019-47b3-a6c3-d99c8c25dbc8/1/au3YfPvkKOnEKzDCLhlh9xfx20k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:48:53:ed:87:7c:e6:eb:d9:e0:55:fb:16:5c:95:75:74:6f:
9f:d7:ae:50:9d:a1:90:30:03:9f:a8:be:cf:03:cb:02:8e:f5:
29:cc:3a:67:bd:2b:4a:de:38:32:4d:de:ff:4a:2c:be:eb:6f:
5c:05:30:88:e6:f1:75:53:7e:49:60:bf:a6:9d:94:45:a1:78:
dc:8d:4d:e8:6a:85:e8:60:c1:e7:ef:c5:91:0d:1e:02:f3:5d:
fd:13:de:d5:22:81:ba:eb:eb:65:56:7f:a7:61:9b:61:8c:05:
63:43:a6:97:e1:df:f0:5a:96:43:2f:d0:d5:8c:7e:9b:f1:ec:
6f:c8:a4:db:c8:81:d0:40:a2:3a:94:13:c4:d5:c9:83:64:c6:
36:c8:18:d3:7f:77:f5:05:a2:0a:3f:66:15:8d:58:37:4b:a8:
f1:63:90:4a:0b:45:3e:c5:2f:c9:78:7e:4e:b3:9e:1a:09:64:
67:01:31:6f:3d:c1:ab:fd:3e:af:5d:58:38:5b:d2:f0:08:07:
be:05:d2:dd:d1:01:b5:54:05:7f:e5:cf:07:31:49:3d:44:f6:
2c:e3:aa:8b:ad:be:ce:f8:71:82:b4:42:8d:9c:67:6e:21:e8:
45:34:20:fa:88:b1:87:96:18:2a:d5:fe:c4:ac:0d:51:47:3e:
0f:b8:07:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 11:19:40 2026 by rpki-client