Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/85a9ff-f5c2-4361-901e-038d24071a8a/1/auSqdx_QpXjqOqxLTT7IPYlGRj0.mft
File: auSqdx_QpXjqOqxLTT7IPYlGRj0.mft (raw, json)
Hash identifier: LSn4KBebNx844P5kd2cO0+D60CBD82PpHvhYL2VkC+8=
Subject key identifier: 35:9B:4E:01:45:3D:C6:7A:6A:63:27:07:2B:55:C7:2E:22:04:FC:7C
Authority key identifier: 6A:E4:AA:77:1F:D0:A5:78:EA:3A:AC:4B:4D:3E:C8:3D:89:46:46:3D
Certificate issuer: /CN=6ae4aa771fd0a578ea3aac4b4d3ec83d8946463d
Certificate serial: 019D389C2F6002FF94A1801005E5BBFEC88C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/auSqdx_QpXjqOqxLTT7IPYlGRj0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/85a9ff-f5c2-4361-901e-038d24071a8a/1/auSqdx_QpXjqOqxLTT7IPYlGRj0.mft
Manifest number: D5
Signing time: Sun 29 Mar 2026 08:00:52 +0000
Manifest this update: Sun 29 Mar 2026 08:00:52 +0000
Manifest next update: Mon 30 Mar 2026 08:00:52 +0000
Files and hashes: 1: GDQQ0FqYT9AvbB4OzpV_W08txF4.roa (hash: +7D1/7LzTXBfcdD4Y5uzQNgYSY1go2hv/v2LnVgCR1Y=)
2: auSqdx_QpXjqOqxLTT7IPYlGRj0.crl (hash: /kWzvtWdu3CVZYNKs45ex1LtCGrXBw7Nsoiqa0SZr0c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/85a9ff-f5c2-4361-901e-038d24071a8a/1/auSqdx_QpXjqOqxLTT7IPYlGRj0.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/85a9ff-f5c2-4361-901e-038d24071a8a/1/auSqdx_QpXjqOqxLTT7IPYlGRj0.mft
rsync://rpki.ripe.net/repository/DEFAULT/auSqdx_QpXjqOqxLTT7IPYlGRj0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9c:2f:60:02:ff:94:a1:80:10:05:e5:bb:fe:c8:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ae4aa771fd0a578ea3aac4b4d3ec83d8946463d
Validity
Not Before: Mar 29 08:00:52 2026 GMT
Not After : Mar 30 08:00:52 2026 GMT
Subject: CN=359b4e01453dc67a6a6327072b55c72e2204fc7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:5a:18:13:6f:42:f8:e3:cb:b8:5e:ab:e6:29:
9b:87:29:22:1a:46:9e:2f:ce:0c:61:e7:45:3e:8f:
b9:06:f7:55:1d:c8:6f:fa:5b:94:59:8b:97:c2:0e:
11:69:c1:d7:73:e3:d4:c7:38:09:ff:54:3f:fc:7b:
9c:66:99:fe:14:73:65:e3:25:2c:b2:20:bd:f3:d6:
0a:e5:80:cf:f4:c5:10:17:77:3c:d2:d4:7b:54:aa:
9f:6a:c5:55:3e:6f:de:d0:20:44:2f:13:d2:44:c9:
89:bc:d6:5a:9e:03:18:b7:41:d3:ad:16:2c:dc:ab:
d3:0f:2e:0f:58:27:26:01:b2:93:94:3c:0f:4a:fd:
f6:97:f0:60:67:2a:a8:de:14:ce:f4:ad:4b:d4:1f:
4f:e1:6d:04:7b:69:75:d5:2c:e2:d3:d0:0c:92:17:
74:fb:95:48:cc:46:72:ed:80:db:5c:f0:94:77:ca:
0c:89:99:65:9b:30:b0:8e:4b:a6:c0:90:c0:1a:23:
4c:ac:34:3a:e8:73:5a:db:cf:a9:da:ea:38:85:1a:
4b:da:2e:34:ef:5f:16:40:56:68:7c:74:14:2b:e3:
51:7c:a2:f2:cb:7e:ce:c6:75:b0:be:a1:9a:db:2d:
7f:0a:6c:5a:18:5f:54:6d:38:7a:e6:2b:6f:0d:db:
ec:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:9B:4E:01:45:3D:C6:7A:6A:63:27:07:2B:55:C7:2E:22:04:FC:7C
X509v3 Authority Key Identifier:
keyid:6A:E4:AA:77:1F:D0:A5:78:EA:3A:AC:4B:4D:3E:C8:3D:89:46:46:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/auSqdx_QpXjqOqxLTT7IPYlGRj0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/85a9ff-f5c2-4361-901e-038d24071a8a/1/auSqdx_QpXjqOqxLTT7IPYlGRj0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/85a9ff-f5c2-4361-901e-038d24071a8a/1/auSqdx_QpXjqOqxLTT7IPYlGRj0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:4f:31:7e:6f:9b:d0:d9:79:7f:44:a4:06:30:4c:04:b2:52:
f3:da:1f:ac:d3:95:de:4e:57:f8:8c:b8:bd:90:7d:12:0c:a3:
ce:64:8d:e9:17:04:77:9a:65:c0:87:19:7c:65:e4:ce:61:99:
8e:12:f8:74:cc:60:67:c7:b8:7b:d4:07:df:ab:0b:36:d0:f0:
65:31:2f:ba:a0:ab:8e:fa:e4:af:4f:6f:3f:2a:0e:97:a4:0d:
b9:dc:2f:1c:2f:5d:d9:17:b8:50:97:b5:c4:17:89:58:c7:7a:
ff:96:b1:5f:1c:2b:ed:8e:08:20:48:7d:b6:75:f7:7e:45:72:
7c:a4:5b:f3:74:a5:b8:1b:4e:54:2e:73:ee:80:dc:d7:9e:eb:
6b:aa:f7:ec:f3:3e:e8:73:49:e5:b1:7d:5d:38:b9:74:63:58:
9f:f4:1d:e1:a4:78:a6:3c:43:e2:99:05:57:2f:c8:1e:a2:39:
1f:51:f2:8f:5f:41:8a:a9:16:9b:ef:2c:24:96:7b:f1:21:93:
9b:d1:39:a2:fc:3f:4f:da:ae:af:17:f5:d9:e1:9d:49:78:b1:
6e:5c:0b:f5:41:76:a7:21:43:bd:55:be:9f:e5:bc:de:bb:14:
1c:74:27:0a:1c:c6:86:3a:96:f8:5e:e8:15:ca:2f:98:52:71:
b0:32:88:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 18:38:15 2026 by rpki-client