Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/b36dbd-55eb-4de4-b6b9-839196345b6d/1/AUI61NYpsvgot58ArEA4jje44lI.mft
File: AUI61NYpsvgot58ArEA4jje44lI.mft (raw, json)
Hash identifier: eaWWISE7XSLh6DvJgTaS7hKQH+l77CKhtPnLTP1glrU=
Subject key identifier: 9D:D0:0A:43:C1:18:70:B8:55:8C:06:84:C3:90:EB:A8:37:93:5C:8D
Authority key identifier: 01:42:3A:D4:D6:29:B2:F8:28:B7:9F:00:AC:40:38:8E:37:B8:E2:52
Certificate issuer: /CN=01423ad4d629b2f828b79f00ac40388e37b8e252
Certificate serial: 019D3865C8BDCA0C7D90B787090096D18EA3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AUI61NYpsvgot58ArEA4jje44lI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/b36dbd-55eb-4de4-b6b9-839196345b6d/1/AUI61NYpsvgot58ArEA4jje44lI.mft
Manifest number: 14C4
Signing time: Sun 29 Mar 2026 07:01:27 +0000
Manifest this update: Sun 29 Mar 2026 07:01:27 +0000
Manifest next update: Mon 30 Mar 2026 07:01:27 +0000
Files and hashes: 1: AUI61NYpsvgot58ArEA4jje44lI.crl (hash: OWre0ixrHcuOMaWkMDpv1ow0u8Y8feh2w4kcp6Hr8SA=)
2: oko0jjQVhM1g4SJmXa1zHjF9DLY.roa (hash: OdA2/Wk2XJh4HpZKtiKeyh0J3e1XxtYP056tIDnTkI0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/b36dbd-55eb-4de4-b6b9-839196345b6d/1/AUI61NYpsvgot58ArEA4jje44lI.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/b36dbd-55eb-4de4-b6b9-839196345b6d/1/AUI61NYpsvgot58ArEA4jje44lI.mft
rsync://rpki.ripe.net/repository/DEFAULT/AUI61NYpsvgot58ArEA4jje44lI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:c8:bd:ca:0c:7d:90:b7:87:09:00:96:d1:8e:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01423ad4d629b2f828b79f00ac40388e37b8e252
Validity
Not Before: Mar 29 07:01:27 2026 GMT
Not After : Mar 30 07:01:27 2026 GMT
Subject: CN=9dd00a43c11870b8558c0684c390eba837935c8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:c5:77:63:2b:97:e6:45:aa:6a:9f:79:fb:4a:
a3:ea:f1:24:07:8d:b8:7f:70:09:61:78:d7:e3:32:
1e:59:d9:4e:4c:0e:e8:f7:fe:db:47:11:85:3c:8a:
c4:ba:c3:13:c2:b0:4d:f6:b7:28:eb:4a:49:74:7f:
c0:8a:00:7c:03:8f:f3:20:78:33:8f:b2:0b:98:3f:
80:d0:fc:8e:d5:99:77:2a:22:57:03:c5:3c:24:5b:
c0:19:4b:d3:3e:57:d3:13:49:c6:b4:27:c5:71:c6:
06:8d:9f:d2:de:b9:64:00:29:3a:d7:6e:80:c1:69:
ca:48:d1:23:5c:63:90:36:c8:fe:d7:0b:16:8a:db:
5f:e8:c3:d3:f6:4d:98:0b:69:e9:e8:f9:7a:79:7d:
0b:a0:ab:a6:09:2c:dd:aa:5a:81:f8:37:a3:5b:fe:
47:01:5d:a7:4a:39:1a:46:53:1b:36:75:a9:96:e5:
84:94:36:20:24:99:cc:76:56:41:f4:b8:41:1a:b6:
a4:eb:e2:53:9b:c3:ab:1b:bc:fb:d1:5c:29:a3:98:
79:ca:18:6d:c9:3e:ca:89:fe:f8:85:a1:47:e0:f4:
8e:e8:f1:04:6a:be:eb:94:9d:c1:d0:76:7e:f5:00:
b3:28:a9:96:37:2c:c8:83:43:e8:21:5b:c0:b2:d4:
18:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:D0:0A:43:C1:18:70:B8:55:8C:06:84:C3:90:EB:A8:37:93:5C:8D
X509v3 Authority Key Identifier:
keyid:01:42:3A:D4:D6:29:B2:F8:28:B7:9F:00:AC:40:38:8E:37:B8:E2:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AUI61NYpsvgot58ArEA4jje44lI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b36dbd-55eb-4de4-b6b9-839196345b6d/1/AUI61NYpsvgot58ArEA4jje44lI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b36dbd-55eb-4de4-b6b9-839196345b6d/1/AUI61NYpsvgot58ArEA4jje44lI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:cf:43:c8:3d:98:67:7b:68:9a:20:9b:5b:c9:cf:ff:87:cd:
f2:8e:bb:1f:e3:73:02:7f:17:ca:ba:62:f6:24:a3:29:5f:ce:
67:24:21:96:8f:99:67:e1:c4:7a:11:96:de:8e:5e:d0:35:2d:
16:ed:bd:12:53:41:0c:f4:4f:cf:88:3a:50:f2:bc:4c:06:28:
c8:11:00:3b:f6:d0:b0:f3:9d:7c:f9:f0:35:ac:4b:d5:f3:be:
71:45:68:1b:20:6d:3e:df:0d:46:30:25:79:79:22:46:4c:6d:
bd:7e:cd:59:84:7f:d5:17:a8:53:1c:f4:c6:04:d4:1d:bf:81:
c6:09:8f:fe:cf:bf:97:a8:b3:a2:b3:02:b9:dc:e2:17:73:f3:
8b:eb:f0:82:b4:c6:06:f2:b8:83:99:c9:f9:42:9d:a1:15:c3:
90:e1:00:77:b8:ae:a9:24:a8:44:92:6d:83:45:b9:d7:93:bf:
73:bb:7a:61:b6:2c:65:52:6d:b8:71:9a:06:07:4e:7a:20:45:
6e:d3:6d:62:2d:5d:9c:72:69:3f:16:ba:87:ad:63:36:cf:16:
7f:c2:e7:a4:c2:f3:03:9b:8e:a3:d2:cf:6b:e8:42:30:a7:64:
71:32:6f:be:f0:48:b7:21:2d:88:77:a4:27:5c:d2:6d:de:cd:
b7:a9:e3:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:28:41 2026 by rpki-client