Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1c/17aa67-8fe4-4a43-aadd-c4c51fcff497/1/AU97fVHlCBgO5zzt292VXDl3SCI.mft
File: AU97fVHlCBgO5zzt292VXDl3SCI.mft (raw, json)
Hash identifier: WFSgU2Ghc696e6WfXfm2yZVBG9uW79G+93HA6VJL67I=
Subject key identifier: 42:9A:6F:98:7C:FB:34:44:6B:1A:BB:62:13:B9:8E:8F:13:B2:2D:34
Authority key identifier: 01:4F:7B:7D:51:E5:08:18:0E:E7:3C:ED:DB:DD:95:5C:39:77:48:22
Certificate issuer: /CN=014f7b7d51e508180ee73ceddbdd955c39774822
Certificate serial: 01A13E2674D0A897FA1B243D6E47BE5114DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AU97fVHlCBgO5zzt292VXDl3SCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/17aa67-8fe4-4a43-aadd-c4c51fcff497/1/AU97fVHlCBgO5zzt292VXDl3SCI.mft
Manifest number: 1AA1
Signing time: Thu 15 Oct 2026 06:01:09 +0000
Manifest this update: Thu 15 Oct 2026 06:01:09 +0000
Manifest next update: Fri 16 Oct 2026 06:01:09 +0000
Files and hashes: 1: AU97fVHlCBgO5zzt292VXDl3SCI.crl (hash: BW2cojYesIDSapEwQRuCEs3ERt9sqgK509LtvAxg24s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/17aa67-8fe4-4a43-aadd-c4c51fcff497/1/AU97fVHlCBgO5zzt292VXDl3SCI.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/17aa67-8fe4-4a43-aadd-c4c51fcff497/1/AU97fVHlCBgO5zzt292VXDl3SCI.mft
rsync://rpki.ripe.net/repository/DEFAULT/AU97fVHlCBgO5zzt292VXDl3SCI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 06:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3e:26:74:d0:a8:97:fa:1b:24:3d:6e:47:be:51:14:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=014f7b7d51e508180ee73ceddbdd955c39774822
Validity
Not Before: Oct 15 06:01:09 2026 GMT
Not After : Oct 16 06:01:09 2026 GMT
Subject: CN=429a6f987cfb34446b1abb6213b98e8f13b22d34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:b0:0b:4a:ea:be:19:9a:73:44:e2:45:89:59:
4d:c0:91:1a:0c:bd:26:fb:1a:51:41:ea:d0:ce:d8:
ca:18:2c:6f:cc:9f:65:80:be:aa:c1:80:4d:6f:e1:
53:da:9f:80:e1:d3:8d:54:c2:ab:0a:23:9a:22:d4:
74:b4:41:12:00:1c:14:83:e0:df:89:40:47:41:71:
a6:e5:a3:ba:16:13:3d:75:1f:3e:75:7b:bd:f5:40:
44:17:18:13:75:4c:52:d7:c8:48:ae:b6:f6:6e:bf:
65:28:0a:0b:8f:9e:f9:7c:f2:d5:24:a6:2d:e7:ef:
f3:c3:2c:3e:e3:95:08:c8:dd:65:fb:2d:1e:0b:0c:
da:1b:71:4a:ff:99:da:cc:e3:21:6b:70:33:73:91:
00:0d:52:2b:f5:4f:c8:53:6c:54:d6:c8:ac:e1:e3:
f3:dd:bf:22:12:41:ab:3a:99:16:d2:e6:bf:6a:10:
df:0a:b5:77:70:eb:a3:31:f3:25:65:89:5f:8f:44:
6b:37:6c:cb:ff:dd:1a:a9:ac:4e:f8:e1:6b:0a:9c:
85:1d:d6:0d:95:bd:96:a9:12:d7:29:ee:ce:b1:e3:
0f:ac:06:9c:e9:df:56:44:39:33:c8:e5:2c:19:97:
ce:2c:30:67:cc:07:88:c7:07:92:0d:d7:1d:f0:cd:
f1:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:9A:6F:98:7C:FB:34:44:6B:1A:BB:62:13:B9:8E:8F:13:B2:2D:34
X509v3 Authority Key Identifier:
keyid:01:4F:7B:7D:51:E5:08:18:0E:E7:3C:ED:DB:DD:95:5C:39:77:48:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AU97fVHlCBgO5zzt292VXDl3SCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/17aa67-8fe4-4a43-aadd-c4c51fcff497/1/AU97fVHlCBgO5zzt292VXDl3SCI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/17aa67-8fe4-4a43-aadd-c4c51fcff497/1/AU97fVHlCBgO5zzt292VXDl3SCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:66:51:d5:ed:03:6e:54:8d:7a:82:29:f6:cd:e5:0c:68:79:
5c:08:7c:b8:31:bd:23:d9:c0:10:f4:bc:69:3c:79:63:53:47:
21:b9:26:4f:bf:a3:ba:08:23:37:49:f7:3c:b0:05:27:d5:a4:
cd:76:5e:d4:b8:47:2a:b3:87:92:a4:fe:ba:ff:c6:61:80:31:
00:8f:f1:88:16:aa:24:14:a9:db:19:58:86:55:d9:3c:04:a6:
79:76:07:fb:45:82:df:c8:87:34:6b:76:67:c9:af:db:ce:fe:
21:8b:18:88:a8:fb:f0:8c:c7:5a:37:f3:c8:aa:ec:62:1d:1b:
50:8e:57:fb:9d:3e:39:75:b4:2c:19:91:8e:c1:e8:97:88:12:
eb:37:02:79:4d:48:7c:16:94:5f:0d:a0:8a:97:4b:c3:a1:41:
f4:17:5a:3a:8f:46:91:de:02:41:21:d7:e6:de:63:51:88:f1:
a4:a1:a1:67:a1:00:a9:57:ed:1e:49:54:b8:86:b7:b4:ea:c3:
84:c4:da:19:1f:6d:c8:e2:f9:ed:98:1b:2b:e4:7c:44:39:69:
6c:a0:bc:f6:ac:49:83:f1:5c:c5:a7:de:56:3a:a1:3e:21:52:
b8:73:26:63:81:47:4f:85:64:b6:c7:73:45:36:52:41:c0:47:
cf:0c:04:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 16:23:09 2026 by rpki-client