Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/7983fc-2019-47b3-a6c3-d99c8c25dbc8/1/au3YfPvkKOnEKzDCLhlh9xfx20k.mft
File: au3YfPvkKOnEKzDCLhlh9xfx20k.mft (raw, json)
Hash identifier: rGHHFJCWNTiGCYoMK55gV3ZD+yZ82PjL4WZeg12saYo=
Subject key identifier: AB:D0:34:CE:63:1C:7B:AA:CC:49:2C:EB:28:61:D2:26:0F:7F:07:A0
Authority key identifier: 6A:ED:D8:7C:FB:E4:28:E9:C4:2B:30:C2:2E:19:61:F7:17:F1:DB:49
Certificate issuer: /CN=6aedd87cfbe428e9c42b30c22e1961f717f1db49
Certificate serial: 019DA48AE9C48F230CD32BA96043B8EAFEC9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/au3YfPvkKOnEKzDCLhlh9xfx20k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/7983fc-2019-47b3-a6c3-d99c8c25dbc8/1/au3YfPvkKOnEKzDCLhlh9xfx20k.mft
Manifest number: DF
Signing time: Sun 19 Apr 2026 07:01:00 +0000
Manifest this update: Sun 19 Apr 2026 07:01:00 +0000
Manifest next update: Mon 20 Apr 2026 07:01:00 +0000
Files and hashes: 1: au3YfPvkKOnEKzDCLhlh9xfx20k.crl (hash: g2F6rBtLUpMAP2U9dnmJJuKvUS4ND4wncAot8uHsDGE=)
2: vWjIW1eikUSm_cPtDhI_f3EodY4.roa (hash: PyLkHRQBEvUL9Bk7Ermj8JEaYKhwlYCHxtYPNjdnGVg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/7983fc-2019-47b3-a6c3-d99c8c25dbc8/1/au3YfPvkKOnEKzDCLhlh9xfx20k.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/7983fc-2019-47b3-a6c3-d99c8c25dbc8/1/au3YfPvkKOnEKzDCLhlh9xfx20k.mft
rsync://rpki.ripe.net/repository/DEFAULT/au3YfPvkKOnEKzDCLhlh9xfx20k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 04:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:8a:e9:c4:8f:23:0c:d3:2b:a9:60:43:b8:ea:fe:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6aedd87cfbe428e9c42b30c22e1961f717f1db49
Validity
Not Before: Apr 19 07:01:00 2026 GMT
Not After : Apr 20 07:01:00 2026 GMT
Subject: CN=abd034ce631c7baacc492ceb2861d2260f7f07a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:9d:b5:aa:a2:c6:86:0d:d8:0b:77:5d:c4:88:
40:b2:6f:3f:0f:75:cb:f0:73:07:d2:0f:13:8a:31:
65:e7:31:99:17:93:84:58:a0:36:7d:2d:6a:9a:33:
ba:e8:c8:9f:1b:98:58:23:0d:bf:90:3d:99:c9:c6:
71:45:8c:6d:fc:88:42:e4:2f:53:4e:1a:47:3f:ac:
e6:c6:53:ef:b1:cb:8d:8d:2e:6e:30:66:d3:d8:96:
a1:20:83:b9:87:ee:cd:ab:a9:e8:64:9c:30:88:be:
be:03:c6:8a:77:75:88:8c:d2:e2:27:7b:ce:8d:c9:
57:12:c3:c2:f6:73:18:8a:65:98:5f:38:5c:5c:eb:
43:dd:31:1b:e1:b3:16:27:d7:b7:ae:90:c1:e6:6a:
09:1a:27:9a:8d:5f:ac:68:f7:2d:14:03:8c:d9:68:
b4:19:68:53:54:00:18:a7:08:87:8d:1a:d5:b5:e6:
b1:ea:36:4e:76:b0:2a:16:bf:7f:68:6f:a4:f8:49:
b0:c3:87:e8:1f:42:a3:79:08:f0:25:db:1a:c2:6a:
ac:fc:53:e4:26:16:9d:72:4d:36:a0:29:f5:f8:6e:
d1:89:56:91:b2:95:18:c8:82:a7:17:a9:0d:a8:29:
41:bf:63:76:b1:82:0e:05:34:c4:af:06:4d:e1:20:
62:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:D0:34:CE:63:1C:7B:AA:CC:49:2C:EB:28:61:D2:26:0F:7F:07:A0
X509v3 Authority Key Identifier:
keyid:6A:ED:D8:7C:FB:E4:28:E9:C4:2B:30:C2:2E:19:61:F7:17:F1:DB:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/au3YfPvkKOnEKzDCLhlh9xfx20k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/7983fc-2019-47b3-a6c3-d99c8c25dbc8/1/au3YfPvkKOnEKzDCLhlh9xfx20k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/7983fc-2019-47b3-a6c3-d99c8c25dbc8/1/au3YfPvkKOnEKzDCLhlh9xfx20k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:95:3a:08:b1:57:79:28:59:58:f5:67:9b:6d:b5:dd:ab:1c:
76:46:4c:3f:96:e6:1b:1c:fd:49:27:e5:b0:fb:db:08:22:34:
cb:92:8c:89:f2:f1:53:23:23:7f:b3:09:c0:1d:30:5c:4b:14:
28:13:cf:6e:0f:bf:7f:83:06:f9:15:03:f4:4a:48:cb:f4:cc:
20:fc:49:b5:d3:c2:3e:26:c4:53:60:01:45:dd:9c:cd:2a:e5:
3e:65:f9:70:f2:d7:43:ee:36:8d:6a:eb:37:08:9c:a5:ec:79:
ce:14:ac:e8:03:1a:19:1f:fc:1a:5a:1d:e3:d5:ed:fd:05:f2:
18:4b:ce:5f:f1:bf:e4:bb:1f:29:fb:3f:69:60:5a:6e:9c:01:
eb:d7:1c:7e:a3:c2:b8:a4:65:68:13:6a:f6:5d:f8:ef:b2:21:
0b:02:21:52:91:92:f1:36:eb:42:c7:9d:23:f7:82:b3:5a:7f:
d5:0f:15:44:02:ad:fd:34:06:b8:ec:f3:fd:2d:ea:5f:94:ce:
2a:47:86:e5:50:f9:05:e4:ef:18:78:f3:02:5c:04:1a:74:43:
60:cf:50:32:48:af:17:6e:7c:68:88:01:ee:d6:30:48:5e:19:
7c:1a:f5:9b:74:77:62:40:f5:6d:2a:7d:0b:5a:02:d3:00:c2:
33:eb:f1:a8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2kiunEjyMM0yupYEO46v7JMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZhZWRkODdjZmJlNDI4ZTljNDJiMzBjMjJlMTk2MWY3MTdm
MWRiNDkwHhcNMjYwNDE5MDcwMTAwWhcNMjYwNDIwMDcwMTAwWjAzMTEwLwYDVQQD
EyhhYmQwMzRjZTYzMWM3YmFhY2M0OTJjZWIyODYxZDIyNjBmN2YwN2EwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnJ21qqLGhg3YC3ddxIhAsm8/D3XL
8HMH0g8TijFl5zGZF5OEWKA2fS1qmjO66MifG5hYIw2/kD2ZycZxRYxt/IhC5C9T
ThpHP6zmxlPvscuNjS5uMGbT2JahIIO5h+7Nq6noZJwwiL6+A8aKd3WIjNLiJ3vO
jclXEsPC9nMYimWYXzhcXOtD3TEb4bMWJ9e3rpDB5moJGieajV+saPctFAOM2Wi0
GWhTVAAYpwiHjRrVteax6jZOdrAqFr9/aG+k+Emww4foH0KjeQjwJdsawmqs/FPk
Jhadck02oCn1+G7RiVaRspUYyIKnF6kNqClBv2N2sYIOBTTErwZN4SBilwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKvQNM5jHHuqzEks6yhh0iYPfwegMB8GA1UdIwQY
MBaAFGrt2Hz75CjpxCswwi4ZYfcX8dtJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYXUzWWZQdmtLT25FS3pEQ0xobGg5eGZ4MjBrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS83OTgzZmMtMjAxOS00N2IzLWE2YzMt
ZDk5YzhjMjVkYmM4LzEvYXUzWWZQdmtLT25FS3pEQ0xobGg5eGZ4MjBrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZS83OTgzZmMtMjAxOS00N2IzLWE2YzMtZDk5YzhjMjVkYmM4
LzEvYXUzWWZQdmtLT25FS3pEQ0xobGg5eGZ4MjBrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApZU6CLFX
eShZWPVnm2213ascdkZMP5bmGxz9SSflsPvbCCI0y5KMifLxUyMjf7MJwB0wXEsU
KBPPbg+/f4MG+RUD9EpIy/TMIPxJtdPCPibEU2ABRd2czSrlPmX5cPLXQ+42jWrr
Nwicpex5zhSs6AMaGR/8Glod49Xt/QXyGEvOX/G/5LsfKfs/aWBabpwB69ccfqPC
uKRlaBNq9l3477IhCwIhUpGS8TbrQsedI/eCs1p/1Q8VRAKt/TQGuOzz/S3qX5TO
KkeG5VD5BeTvGHjzAlwEGnRDYM9QMkivF258aIgB7tYwSF4ZfBr1m3R3YkD1bSp9
C1oC0wDCM+vxqA==
-----END CERTIFICATE-----
Generated at Sun Apr 19 12:38:44 2026 by rpki-client