Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/34b791-ffd5-49f0-8718-49b75c18349a/1/au27xW2vhfo_OHxgUtxy1dchO_c.mft
File: au27xW2vhfo_OHxgUtxy1dchO_c.mft (raw, json)
Hash identifier: Qh61hndtcf7vH1GfVpsxATXjH/vbp2tVi5xz94P+T4g=
Subject key identifier: 69:CD:89:3B:16:A5:F9:1D:64:02:D0:2C:FA:94:C8:30:4D:18:DD:54
Authority key identifier: 6A:ED:BB:C5:6D:AF:85:FA:3F:38:7C:60:52:DC:72:D5:D7:21:3B:F7
Certificate issuer: /CN=6aedbbc56daf85fa3f387c6052dc72d5d7213bf7
Certificate serial: 019CAE352E9F27009AEB55570E52A2282452
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/au27xW2vhfo_OHxgUtxy1dchO_c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/34b791-ffd5-49f0-8718-49b75c18349a/1/au27xW2vhfo_OHxgUtxy1dchO_c.mft
Manifest number: 02C2
Signing time: Mon 02 Mar 2026 11:00:46 +0000
Manifest this update: Mon 02 Mar 2026 11:00:46 +0000
Manifest next update: Tue 03 Mar 2026 11:00:46 +0000
Files and hashes: 1: Vd4ynB66sCEtEXPuV_O3x4PgW4A.roa (hash: 4UTBj4Zh6vSwwX6L/YeCbJsNnwD0s0UfjFqN/ZdD3NU=)
2: au27xW2vhfo_OHxgUtxy1dchO_c.crl (hash: DQps3gln1DKtpzgaR6Ovhd4wixdCYw2QFuWLFGRKYcA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/34b791-ffd5-49f0-8718-49b75c18349a/1/au27xW2vhfo_OHxgUtxy1dchO_c.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/34b791-ffd5-49f0-8718-49b75c18349a/1/au27xW2vhfo_OHxgUtxy1dchO_c.mft
rsync://rpki.ripe.net/repository/DEFAULT/au27xW2vhfo_OHxgUtxy1dchO_c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 11:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:35:2e:9f:27:00:9a:eb:55:57:0e:52:a2:28:24:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6aedbbc56daf85fa3f387c6052dc72d5d7213bf7
Validity
Not Before: Mar 2 11:00:46 2026 GMT
Not After : Mar 3 11:00:46 2026 GMT
Subject: CN=69cd893b16a5f91d6402d02cfa94c8304d18dd54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:30:ab:99:74:0c:0b:8f:c7:79:0a:d5:41:9f:
37:35:37:88:b1:4f:1c:80:cd:d9:ed:35:97:60:ca:
e7:64:5e:4a:de:36:16:39:3a:6c:97:98:42:bd:63:
14:4c:64:c7:de:a0:ad:86:7b:9d:05:37:0f:b9:66:
ce:8f:31:86:52:3e:28:91:ae:05:0a:98:c8:e0:bc:
2e:fb:6f:4f:d3:b6:06:84:4b:52:b7:34:cc:4f:98:
dd:7b:87:34:db:91:2f:da:7d:d1:49:8d:ce:90:dd:
17:a9:7f:b1:da:b0:5e:27:c4:15:8e:90:c3:30:61:
42:82:54:94:7b:dc:cd:2f:8b:a2:c9:44:f2:10:be:
40:ad:b8:04:da:d5:0c:0c:4f:e6:23:5c:b9:b3:93:
23:9b:0e:fb:79:ee:30:8b:da:25:0d:3c:4b:c8:61:
5b:a5:3c:7a:1f:95:10:1e:31:33:c5:55:e1:50:cd:
82:06:f8:17:1a:da:b3:dc:7d:26:29:9c:66:42:fb:
81:3a:ce:f2:88:17:a2:ed:18:c2:10:1b:ea:5e:f7:
3a:02:07:fb:17:37:ab:9a:b5:84:f4:b1:c1:22:f9:
66:a5:5a:52:50:96:6c:01:9f:8f:9b:78:db:4f:18:
2a:58:21:17:7f:13:fa:d4:10:02:4f:9f:91:c7:07:
6e:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:CD:89:3B:16:A5:F9:1D:64:02:D0:2C:FA:94:C8:30:4D:18:DD:54
X509v3 Authority Key Identifier:
keyid:6A:ED:BB:C5:6D:AF:85:FA:3F:38:7C:60:52:DC:72:D5:D7:21:3B:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/au27xW2vhfo_OHxgUtxy1dchO_c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/34b791-ffd5-49f0-8718-49b75c18349a/1/au27xW2vhfo_OHxgUtxy1dchO_c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/34b791-ffd5-49f0-8718-49b75c18349a/1/au27xW2vhfo_OHxgUtxy1dchO_c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:43:38:59:9b:4f:c0:f4:a8:b1:51:cf:34:25:69:c5:fb:c8:
e4:9b:ce:53:97:ab:07:1a:87:b6:f3:fc:80:cb:ad:ed:bf:a6:
45:83:2f:c6:9f:24:23:2f:78:db:4e:16:f2:03:8d:d1:2c:e6:
fd:64:e4:fe:53:5c:89:39:53:60:e2:1d:a0:e9:ee:67:4c:7d:
b1:03:2c:06:26:f6:3d:87:72:d7:68:f5:e6:68:76:a3:ae:a0:
16:c6:33:a2:68:b0:e1:06:9a:51:c2:a7:3f:22:b8:af:94:e7:
ad:b9:c8:61:07:f2:07:8b:7b:c2:83:94:1c:0e:69:db:cf:34:
27:24:44:d6:f9:df:13:06:3c:43:35:2e:89:26:de:3c:c4:b7:
5e:d3:04:9b:fc:50:71:80:2f:a4:ab:05:00:ca:36:18:a3:6b:
0e:18:c0:48:f4:d3:7a:60:2b:b5:d6:5f:38:02:c6:d5:05:39:
41:af:bc:0e:e3:fd:ea:80:d1:54:99:06:26:89:4e:b7:e8:99:
54:92:47:f3:44:62:72:43:86:f1:9f:b3:bb:b0:8f:5c:c3:19:
6b:9c:ec:02:f5:49:7c:5d:33:2f:56:62:e9:a1:77:96:dc:e6:
61:35:f8:0c:58:b7:91:0a:76:a3:4a:7e:d1:40:fb:ad:10:c7:
17:25:31:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:55:15 2026 by rpki-client