Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/afae93-e79f-499f-9203-0fe8bd6556d5/1/auug8jdBINVPpbzcKp0kUUFy6m0.mft
File: auug8jdBINVPpbzcKp0kUUFy6m0.mft (raw, json)
Hash identifier: S3vIYGZsVLUbNLmouh0OSIlAVZOVrg/ArH9javHLGOY=
Subject key identifier: 14:3C:E1:7C:C2:53:DF:3B:C1:D0:93:E5:25:2A:47:CC:B5:B8:D6:B6
Authority key identifier: 6A:EB:A0:F2:37:41:20:D5:4F:A5:BC:DC:2A:9D:24:51:41:72:EA:6D
Certificate issuer: /CN=6aeba0f2374120d54fa5bcdc2a9d24514172ea6d
Certificate serial: 019CAD904D668C6A1F9B7D25A376F7C8E3C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/auug8jdBINVPpbzcKp0kUUFy6m0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/afae93-e79f-499f-9203-0fe8bd6556d5/1/auug8jdBINVPpbzcKp0kUUFy6m0.mft
Manifest number: 12FC
Signing time: Mon 02 Mar 2026 08:00:41 +0000
Manifest this update: Mon 02 Mar 2026 08:00:41 +0000
Manifest next update: Tue 03 Mar 2026 08:00:41 +0000
Files and hashes: 1: Z1_Ilgkk_eYWGCinn6n7Y5F65JQ.roa (hash: +YFS73ucb1Xy4jgZbgT/uSrdoIXa/AoEr1GGjusXbmc=)
2: auug8jdBINVPpbzcKp0kUUFy6m0.crl (hash: zFnGENdtvghsqF1twmjxcykt8cxNp0zcR+LqMvLFVt4=)
3: n4Sn0nJNxJqIJRlgKy_q_tmfw-U.roa (hash: vxSCI94X5gLK34ETwzNqc8WiUEXZwqWPkOKd99kM8vc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/afae93-e79f-499f-9203-0fe8bd6556d5/1/auug8jdBINVPpbzcKp0kUUFy6m0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/afae93-e79f-499f-9203-0fe8bd6556d5/1/auug8jdBINVPpbzcKp0kUUFy6m0.mft
rsync://rpki.ripe.net/repository/DEFAULT/auug8jdBINVPpbzcKp0kUUFy6m0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:90:4d:66:8c:6a:1f:9b:7d:25:a3:76:f7:c8:e3:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6aeba0f2374120d54fa5bcdc2a9d24514172ea6d
Validity
Not Before: Mar 2 08:00:41 2026 GMT
Not After : Mar 3 08:00:41 2026 GMT
Subject: CN=143ce17cc253df3bc1d093e5252a47ccb5b8d6b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:76:a5:68:14:55:5c:1a:8c:b5:e4:63:be:06:
41:6e:ec:98:bd:be:b5:dc:97:ff:20:68:d5:fc:89:
80:a5:48:e3:e0:5e:dc:12:03:f1:8d:f0:52:80:17:
31:d7:e7:08:86:91:b1:02:c1:e3:8a:b2:4f:28:72:
9c:52:be:7a:e6:5d:46:98:68:d7:23:50:75:ba:a2:
52:de:67:60:5c:93:23:8c:fa:55:49:38:11:6e:09:
c2:ab:c3:22:f0:cc:78:f0:68:2b:57:93:2d:21:5f:
ff:9d:77:b9:75:cd:8b:3c:11:d1:ef:05:54:a1:12:
5d:3a:33:46:f9:48:f4:cc:4e:bf:7c:47:ba:d8:85:
60:c5:ea:20:22:8e:c2:f1:e0:c4:75:0b:53:c5:46:
97:f6:e8:a7:b3:7c:a4:60:26:40:81:a5:87:ef:31:
a9:20:49:2e:2d:db:23:3d:50:70:67:07:82:50:48:
28:98:0b:fb:6d:38:91:52:e2:be:7c:a6:40:1c:fe:
74:d2:22:0a:2d:7b:94:c9:c9:ea:31:80:08:dd:3c:
ae:a8:90:d1:ad:85:7b:64:69:ac:03:06:23:33:da:
01:d0:f2:23:b3:dc:99:e7:b5:af:66:40:85:16:e7:
33:04:20:1e:5c:90:74:89:5f:9e:f1:3d:92:b4:e1:
3e:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:3C:E1:7C:C2:53:DF:3B:C1:D0:93:E5:25:2A:47:CC:B5:B8:D6:B6
X509v3 Authority Key Identifier:
keyid:6A:EB:A0:F2:37:41:20:D5:4F:A5:BC:DC:2A:9D:24:51:41:72:EA:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/auug8jdBINVPpbzcKp0kUUFy6m0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/afae93-e79f-499f-9203-0fe8bd6556d5/1/auug8jdBINVPpbzcKp0kUUFy6m0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/afae93-e79f-499f-9203-0fe8bd6556d5/1/auug8jdBINVPpbzcKp0kUUFy6m0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:d5:80:a5:01:07:6c:65:f1:15:56:cd:4b:4c:8c:d4:df:6d:
58:51:14:7f:74:7e:9f:57:a5:b5:5d:34:82:56:bd:b3:ad:37:
23:fe:c2:38:03:7a:57:af:2b:19:e9:1a:7d:17:ff:aa:b3:16:
e2:fa:2f:03:11:37:16:d6:ae:50:37:26:67:94:99:3f:9a:1d:
4c:30:b6:8b:98:22:2b:d0:eb:60:73:e8:c6:49:a3:49:d8:9b:
84:dd:e5:ff:71:5d:4e:54:ca:44:50:91:53:bb:fb:d6:85:34:
a5:9b:ee:73:03:c2:6f:dd:34:4d:97:bc:6c:b2:ab:ce:9e:ca:
aa:02:da:02:46:49:0f:a5:8e:63:1b:78:65:60:8b:a3:9a:fb:
4b:cb:40:e9:07:b4:69:09:63:67:3c:79:04:35:b1:0e:7f:eb:
c7:a4:9b:20:12:74:69:3f:7b:34:c6:06:90:86:d8:58:fa:4c:
e3:cf:ed:14:99:03:93:8c:6c:ec:5c:ac:b7:1e:a9:58:48:ee:
95:aa:22:7b:90:70:b0:6a:1b:4e:e4:24:f1:fe:34:34:07:ab:
86:e7:01:5c:c1:11:4d:66:93:41:62:77:d9:97:3a:3e:f3:1d:
da:57:a7:a2:a2:e9:ba:df:3d:15:ab:29:29:86:af:b5:5d:95:
1f:5a:9d:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:39:04 2026 by rpki-client