Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4e/7983fc-2019-47b3-a6c3-d99c8c25dbc8/1/au3YfPvkKOnEKzDCLhlh9xfx20k.mft
File: au3YfPvkKOnEKzDCLhlh9xfx20k.mft (raw, json)
Hash identifier: DepbeCa27x96xzpCPACcYBKyDSTebLnvPP5YJjCj9I0=
Subject key identifier: 3A:8D:85:E5:B0:38:0C:24:A5:CE:C4:41:B2:FA:63:20:E5:14:56:26
Authority key identifier: 6A:ED:D8:7C:FB:E4:28:E9:C4:2B:30:C2:2E:19:61:F7:17:F1:DB:49
Certificate issuer: /CN=6aedd87cfbe428e9c42b30c22e1961f717f1db49
Certificate serial: 01A0C40DBE38E77F4A9C88C0813B64CB7F4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/au3YfPvkKOnEKzDCLhlh9xfx20k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/7983fc-2019-47b3-a6c3-d99c8c25dbc8/1/au3YfPvkKOnEKzDCLhlh9xfx20k.mft
Manifest number: 027D
Signing time: Mon 21 Sep 2026 13:00:29 +0000
Manifest this update: Mon 21 Sep 2026 13:00:29 +0000
Manifest next update: Tue 22 Sep 2026 13:00:29 +0000
Files and hashes: 1: au3YfPvkKOnEKzDCLhlh9xfx20k.crl (hash: vJGI+kD/HZJc+UuzF80/+f6Ff8mIMH7fk523cBVT+1Q=)
2: vWjIW1eikUSm_cPtDhI_f3EodY4.roa (hash: PyLkHRQBEvUL9Bk7Ermj8JEaYKhwlYCHxtYPNjdnGVg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/7983fc-2019-47b3-a6c3-d99c8c25dbc8/1/au3YfPvkKOnEKzDCLhlh9xfx20k.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/7983fc-2019-47b3-a6c3-d99c8c25dbc8/1/au3YfPvkKOnEKzDCLhlh9xfx20k.mft
rsync://rpki.ripe.net/repository/DEFAULT/au3YfPvkKOnEKzDCLhlh9xfx20k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 13:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:0d:be:38:e7:7f:4a:9c:88:c0:81:3b:64:cb:7f:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6aedd87cfbe428e9c42b30c22e1961f717f1db49
Validity
Not Before: Sep 21 13:00:29 2026 GMT
Not After : Sep 22 13:00:29 2026 GMT
Subject: CN=3a8d85e5b0380c24a5cec441b2fa6320e5145626
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:50:0f:67:39:d5:47:0a:7b:82:40:b9:f6:39:
31:aa:6d:c7:ab:cf:39:86:70:26:fd:06:2b:9a:c3:
10:ea:86:7a:8c:32:78:0a:a1:e5:5a:e0:19:ca:f3:
30:89:c0:68:06:bd:6d:f6:04:3b:ae:1c:c1:6b:bc:
52:8c:f0:42:ce:8c:22:8e:c5:6d:a0:b7:6b:38:18:
da:e6:e0:e5:6f:7f:a8:6b:15:f8:7c:c6:57:0f:af:
99:b7:03:31:64:1f:92:d7:d5:0b:c8:f6:c7:0c:a1:
a4:a0:dc:ca:8d:a7:ce:8a:2b:68:02:db:5f:a6:01:
82:d4:54:f1:59:bc:de:c5:07:46:a5:d7:07:90:44:
54:13:3c:84:99:80:34:ea:d3:9f:8a:04:f0:40:52:
4b:78:be:b2:ea:7c:38:45:54:4f:75:28:9d:54:17:
cd:81:ac:18:c8:80:c9:84:59:1f:ee:f2:a5:6b:c1:
4d:2c:17:d6:79:eb:d8:7c:d5:4d:d6:f4:5f:37:22:
7c:a7:01:40:a5:52:d4:0c:2b:a7:3c:aa:c1:8b:b1:
23:57:d1:93:ce:59:97:d0:03:f8:ec:25:46:21:27:
35:4d:7e:00:4b:76:cc:ae:2d:d7:c5:63:75:81:9e:
05:ed:d5:5f:fc:67:37:13:a0:f4:b7:33:8e:f7:67:
9e:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:8D:85:E5:B0:38:0C:24:A5:CE:C4:41:B2:FA:63:20:E5:14:56:26
X509v3 Authority Key Identifier:
keyid:6A:ED:D8:7C:FB:E4:28:E9:C4:2B:30:C2:2E:19:61:F7:17:F1:DB:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/au3YfPvkKOnEKzDCLhlh9xfx20k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/7983fc-2019-47b3-a6c3-d99c8c25dbc8/1/au3YfPvkKOnEKzDCLhlh9xfx20k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/7983fc-2019-47b3-a6c3-d99c8c25dbc8/1/au3YfPvkKOnEKzDCLhlh9xfx20k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:fc:93:21:86:5f:3c:41:6c:16:6f:54:62:5d:71:d6:ef:54:
a3:f2:83:f1:d2:6e:79:8d:c1:4a:22:80:64:24:30:c3:ae:89:
0c:66:75:d6:73:a0:a9:00:49:4b:6a:e0:49:9e:2e:c1:53:4a:
8a:6d:1c:f3:9a:3a:97:b6:ba:63:67:ff:2c:3b:13:d7:36:b2:
93:09:bd:a6:bd:34:1b:dd:e1:2f:42:7a:27:44:96:fe:50:ae:
46:01:90:10:24:2b:9e:33:60:e6:7e:80:ca:3f:1e:19:5f:3a:
9f:dc:d3:03:56:d4:36:04:9b:a8:86:03:d7:fe:6b:c4:57:7c:
2b:ba:3d:32:29:a4:66:ca:6c:13:f5:f7:b3:a0:90:cf:a2:62:
08:fc:1d:c4:c5:f5:bc:18:9d:35:8b:10:15:26:34:9e:93:c4:
55:92:42:6e:b0:9e:11:1f:a0:bf:ea:ab:8c:51:27:31:57:70:
9e:d4:19:e3:09:b2:c9:eb:7f:43:04:90:fb:2b:74:ba:21:4a:
fd:d5:b8:a3:4a:f6:1b:06:8c:6c:44:01:66:6c:2d:29:b4:60:
2b:be:ad:b0:71:b0:de:44:df:24:74:47:da:b1:ea:23:c0:8a:
2a:31:54:6c:9c:79:24:a3:f4:22:23:bb:3c:97:8a:e9:33:42:
70:31:74:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 17:30:51 2026 by rpki-client