Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/d28729-84ee-4085-b85c-16a2d3e6c994/1/AUqAjM9ZGdBWfcQjTpCj5gzrFkg.mft
File: AUqAjM9ZGdBWfcQjTpCj5gzrFkg.mft (raw, json)
Hash identifier: U4LvUnwz98ixJHQDRMiwfqs29ZAy4FOd9fqrwODGPuU=
Subject key identifier: 20:C3:52:5F:F0:F9:7A:75:BD:EA:C1:B1:2D:1B:06:A5:89:9A:06:35
Authority key identifier: 01:4A:80:8C:CF:59:19:D0:56:7D:C4:23:4E:90:A3:E6:0C:EB:16:48
Certificate issuer: /CN=014a808ccf5919d0567dc4234e90a3e60ceb1648
Certificate serial: 019D37C076392D725F9941E5070A3293E3E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AUqAjM9ZGdBWfcQjTpCj5gzrFkg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/d28729-84ee-4085-b85c-16a2d3e6c994/1/AUqAjM9ZGdBWfcQjTpCj5gzrFkg.mft
Manifest number: 1770
Signing time: Sun 29 Mar 2026 04:00:53 +0000
Manifest this update: Sun 29 Mar 2026 04:00:53 +0000
Manifest next update: Mon 30 Mar 2026 04:00:53 +0000
Files and hashes: 1: AUqAjM9ZGdBWfcQjTpCj5gzrFkg.crl (hash: fglrB1GVVWxkIu3raFidesVlFc6WhND9Ez10VdPfDik=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/d28729-84ee-4085-b85c-16a2d3e6c994/1/AUqAjM9ZGdBWfcQjTpCj5gzrFkg.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/d28729-84ee-4085-b85c-16a2d3e6c994/1/AUqAjM9ZGdBWfcQjTpCj5gzrFkg.mft
rsync://rpki.ripe.net/repository/DEFAULT/AUqAjM9ZGdBWfcQjTpCj5gzrFkg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:76:39:2d:72:5f:99:41:e5:07:0a:32:93:e3:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=014a808ccf5919d0567dc4234e90a3e60ceb1648
Validity
Not Before: Mar 29 04:00:53 2026 GMT
Not After : Mar 30 04:00:53 2026 GMT
Subject: CN=20c3525ff0f97a75bdeac1b12d1b06a5899a0635
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:a8:d2:0d:3b:c3:a3:36:05:f1:b7:c4:a2:bb:
1d:8d:bb:24:84:c2:b7:7f:36:03:a7:1c:d9:cc:08:
37:f4:10:7b:df:49:3e:1e:be:8b:9b:48:b7:c0:06:
4f:2d:3d:f8:d5:4c:bf:c6:8a:08:ea:65:5b:b1:12:
7f:89:8a:5c:b5:71:26:53:d0:c3:02:46:89:05:10:
d2:ce:53:5b:f8:a3:cc:52:86:4d:28:e9:fe:1f:f9:
97:78:a0:09:84:e4:3a:f4:cc:aa:91:b4:b9:12:dd:
b5:48:f2:b3:64:da:c1:1d:10:82:05:b5:0a:bf:eb:
9d:79:ce:5a:a1:45:f5:cb:d3:62:3f:b1:02:d3:9b:
10:0c:d7:84:5e:58:3c:37:82:2e:4c:3e:3a:f7:4d:
9c:d7:c9:42:e5:9c:75:47:61:f7:61:bf:d2:6b:4f:
2d:e3:52:47:be:8d:17:c2:db:23:15:3b:4d:09:eb:
a4:89:e4:7f:f9:cc:bb:67:ff:43:ea:24:cc:1f:00:
39:23:9a:8a:ae:dc:bd:51:b2:c5:cc:a5:ff:51:8c:
dd:49:f5:bd:c0:3e:3e:82:09:bd:18:13:1d:10:72:
72:fd:89:a2:0c:12:fb:24:01:7a:4e:fe:8a:7e:4a:
35:53:8a:71:54:26:3e:05:ec:77:e7:33:9e:ef:6d:
5f:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:C3:52:5F:F0:F9:7A:75:BD:EA:C1:B1:2D:1B:06:A5:89:9A:06:35
X509v3 Authority Key Identifier:
keyid:01:4A:80:8C:CF:59:19:D0:56:7D:C4:23:4E:90:A3:E6:0C:EB:16:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AUqAjM9ZGdBWfcQjTpCj5gzrFkg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/d28729-84ee-4085-b85c-16a2d3e6c994/1/AUqAjM9ZGdBWfcQjTpCj5gzrFkg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/d28729-84ee-4085-b85c-16a2d3e6c994/1/AUqAjM9ZGdBWfcQjTpCj5gzrFkg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:be:d5:48:4d:61:0c:18:d3:0f:35:e9:db:b2:10:5e:9f:21:
b7:9c:50:9b:73:04:76:e1:b6:cc:73:4f:f8:f6:73:08:77:7e:
83:5c:d5:4b:d0:3a:c1:a2:89:6c:8a:d8:f1:69:de:c4:5d:9a:
0d:b3:77:de:dc:10:c1:eb:d1:a5:62:6e:e5:f8:53:72:a3:d0:
c4:15:12:bc:9d:71:46:fa:5a:f7:dc:df:ad:84:da:40:d6:dd:
48:da:b1:6e:84:fa:cc:74:2d:f1:bb:62:46:d5:c6:85:2e:15:
48:e0:11:4f:c2:b8:3a:f7:d5:f0:5d:83:8f:4b:28:e8:ab:bf:
1e:f0:d2:f7:27:6b:1a:11:60:18:c9:18:62:0c:16:ac:b0:c5:
76:63:08:78:99:69:02:9f:a3:45:a2:35:d7:b5:f4:f2:0b:40:
86:7b:9f:2f:6a:50:b5:ce:3d:99:64:0e:21:4b:04:44:ef:02:
e1:76:60:bf:2d:cd:92:9c:07:27:f1:5c:16:e5:bb:0c:ab:87:
51:1c:c0:33:d9:55:6c:d0:a0:56:c8:87:43:d9:21:f2:ea:8f:
6a:bb:c7:2b:7e:2e:61:e6:d5:0e:7a:b8:8a:d5:cd:67:e3:b2:
ec:84:e7:70:3d:1e:b8:01:09:f8:05:eb:43:7a:ee:9b:47:33:
97:9e:43:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:46:43 2026 by rpki-client