Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/17aa67-8fe4-4a43-aadd-c4c51fcff497/1/AU97fVHlCBgO5zzt292VXDl3SCI.mft
File: AU97fVHlCBgO5zzt292VXDl3SCI.mft (raw, json)
Hash identifier: g49FkM6ig9uC8F3v2K3igjmDTE81YWcmZT4eNOm3rAc=
Subject key identifier: 71:E6:9D:F6:37:31:EC:FE:04:50:FF:DA:A2:48:DC:C6:3C:10:1F:D3
Authority key identifier: 01:4F:7B:7D:51:E5:08:18:0E:E7:3C:ED:DB:DD:95:5C:39:77:48:22
Certificate issuer: /CN=014f7b7d51e508180ee73ceddbdd955c39774822
Certificate serial: 019F17C354AA5243E5F0801AA3ADCA454D6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AU97fVHlCBgO5zzt292VXDl3SCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/17aa67-8fe4-4a43-aadd-c4c51fcff497/1/AU97fVHlCBgO5zzt292VXDl3SCI.mft
Manifest number: 1984
Signing time: Tue 30 Jun 2026 09:01:44 +0000
Manifest this update: Tue 30 Jun 2026 09:01:44 +0000
Manifest next update: Wed 01 Jul 2026 09:01:44 +0000
Files and hashes: 1: AU97fVHlCBgO5zzt292VXDl3SCI.crl (hash: gJ/CGYpNEGGgRzw5HUyD7H+rIfHeoKMrnAm/sWwi0tk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/17aa67-8fe4-4a43-aadd-c4c51fcff497/1/AU97fVHlCBgO5zzt292VXDl3SCI.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/17aa67-8fe4-4a43-aadd-c4c51fcff497/1/AU97fVHlCBgO5zzt292VXDl3SCI.mft
rsync://rpki.ripe.net/repository/DEFAULT/AU97fVHlCBgO5zzt292VXDl3SCI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 09:01:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:17:c3:54:aa:52:43:e5:f0:80:1a:a3:ad:ca:45:4d:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=014f7b7d51e508180ee73ceddbdd955c39774822
Validity
Not Before: Jun 30 09:01:44 2026 GMT
Not After : Jul 1 09:01:44 2026 GMT
Subject: CN=71e69df63731ecfe0450ffdaa248dcc63c101fd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:4d:d2:1d:63:38:64:b9:d5:99:99:43:96:c8:
9b:43:a6:1f:ad:23:d1:df:ca:b3:a5:bd:bf:fc:7a:
de:b8:2f:ca:cf:eb:74:c9:eb:52:e4:74:71:a9:cc:
c7:1e:1a:e5:5a:ca:29:3b:b4:f4:00:eb:34:2c:fe:
92:12:92:32:cf:99:56:24:77:e8:31:80:c9:98:6f:
8b:fd:58:4d:48:32:3a:cf:26:bb:7e:a4:a6:cf:2b:
8b:ac:cc:e0:83:97:12:d1:05:ec:75:2d:e3:e9:cf:
7a:ff:59:66:a8:74:9c:9e:ab:b6:f0:ee:68:b5:d3:
a1:7a:f3:ec:bc:53:57:80:f5:94:0b:0a:17:f3:64:
e3:43:28:2a:94:20:fc:5a:31:d2:62:03:8c:64:05:
de:5d:ca:0e:83:c0:bd:d9:d3:52:ed:81:70:09:4e:
97:4a:00:be:a4:bb:29:09:ca:79:c7:bf:14:52:b4:
07:71:33:c0:6a:51:f1:bc:08:06:b2:3f:ec:92:0a:
70:4c:c2:cc:cc:25:10:18:a0:6f:2f:4a:ca:65:25:
2a:76:00:f5:a2:a0:6f:a0:45:6c:11:3f:b9:ed:6e:
77:7d:f9:1a:4c:ac:f3:4f:12:a7:70:6c:5c:37:52:
b6:9b:95:99:d9:08:b6:a1:d9:32:45:05:ec:32:2d:
ac:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:E6:9D:F6:37:31:EC:FE:04:50:FF:DA:A2:48:DC:C6:3C:10:1F:D3
X509v3 Authority Key Identifier:
keyid:01:4F:7B:7D:51:E5:08:18:0E:E7:3C:ED:DB:DD:95:5C:39:77:48:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AU97fVHlCBgO5zzt292VXDl3SCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/17aa67-8fe4-4a43-aadd-c4c51fcff497/1/AU97fVHlCBgO5zzt292VXDl3SCI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/17aa67-8fe4-4a43-aadd-c4c51fcff497/1/AU97fVHlCBgO5zzt292VXDl3SCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:1c:1c:b9:44:30:29:d6:6d:7b:cc:d8:4b:d6:3b:ee:c2:e0:
73:25:fb:f4:5c:96:0b:f1:ab:8f:4b:d6:06:ab:81:24:80:a4:
95:32:19:42:4f:4b:b4:86:e9:58:84:54:94:56:9c:0c:cc:80:
e0:b7:e1:14:23:24:fe:ea:97:22:f2:a4:e9:9d:9b:4e:53:d0:
94:3b:69:7f:d5:5a:97:62:f0:4c:36:bd:46:c2:0c:f5:7b:8d:
a3:c5:86:36:9d:6c:52:b2:bc:f7:7d:c9:76:0a:0e:8b:dc:3a:
17:1b:42:78:a0:a0:ff:a0:2f:64:67:f6:e7:81:70:9c:44:77:
8a:3b:9e:49:f6:51:61:22:f0:f9:ab:2d:8c:29:e0:f7:f8:81:
66:11:c2:cf:e7:59:c0:0c:7e:74:cc:80:63:a3:3e:eb:a0:87:
42:21:07:a7:b4:01:28:5e:4d:31:5b:8e:ba:2a:1b:5d:57:b1:
02:e4:87:fe:df:a5:7e:1b:a3:12:dc:ab:0b:21:4c:7d:d3:b1:
c5:21:f3:df:e3:08:db:6d:b7:60:3a:4e:25:84:13:8f:24:88:
64:0f:a5:64:e5:f3:15:d9:f8:1a:ce:8b:e6:e0:5b:d8:8d:f3:
ff:05:71:ff:14:9e:93:e4:ca:7c:9d:2d:4b:f6:83:b1:ec:71:
f8:55:41:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:18:13 2026 by rpki-client