Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/1b78cd-d005-492c-9167-1bf868a03538/1/AUjSyoorQ7bK0lsiJlNU_jA5EaA.mft
File: AUjSyoorQ7bK0lsiJlNU_jA5EaA.mft (raw, json)
Hash identifier: PIjLAp13hUmbgo+7jpzXZ6zyFM82JKAhwhOJu3Hf9TA=
Subject key identifier: 1F:D8:90:78:FC:F2:49:9C:C5:11:F8:50:4F:A0:47:18:A4:20:F6:25
Authority key identifier: 01:48:D2:CA:8A:2B:43:B6:CA:D2:5B:22:26:53:54:FE:30:39:11:A0
Certificate issuer: /CN=0148d2ca8a2b43b6cad25b22265354fe303911a0
Certificate serial: 019D394129065ACE612C42ACEA0D5E48CEC6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AUjSyoorQ7bK0lsiJlNU_jA5EaA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/1b78cd-d005-492c-9167-1bf868a03538/1/AUjSyoorQ7bK0lsiJlNU_jA5EaA.mft
Manifest number: 1756
Signing time: Sun 29 Mar 2026 11:01:04 +0000
Manifest this update: Sun 29 Mar 2026 11:01:04 +0000
Manifest next update: Mon 30 Mar 2026 11:01:04 +0000
Files and hashes: 1: 6uyLPr7GcIkDSRR1cBioO7oGEF0.roa (hash: FfvCuloLAdVXrZLuuHrf1reVNj9KC+EjXSXR/em79FA=)
2: AUjSyoorQ7bK0lsiJlNU_jA5EaA.crl (hash: 8ZjeNWzPxuqJ9CAI1Px+0iVLAoKZwktbpgtg8PlFL0A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/1b78cd-d005-492c-9167-1bf868a03538/1/AUjSyoorQ7bK0lsiJlNU_jA5EaA.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/1b78cd-d005-492c-9167-1bf868a03538/1/AUjSyoorQ7bK0lsiJlNU_jA5EaA.mft
rsync://rpki.ripe.net/repository/DEFAULT/AUjSyoorQ7bK0lsiJlNU_jA5EaA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:41:29:06:5a:ce:61:2c:42:ac:ea:0d:5e:48:ce:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0148d2ca8a2b43b6cad25b22265354fe303911a0
Validity
Not Before: Mar 29 11:01:04 2026 GMT
Not After : Mar 30 11:01:04 2026 GMT
Subject: CN=1fd89078fcf2499cc511f8504fa04718a420f625
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:4f:21:13:48:14:b0:d9:8a:e0:57:56:ce:99:
e3:56:4a:1b:6b:cd:3e:f8:75:79:a8:fa:00:0e:06:
2b:c0:9f:e7:5b:b8:a1:5a:f3:b1:a9:89:4d:16:e8:
56:93:bf:f3:fd:b1:cf:ce:23:98:41:05:96:69:dc:
de:a3:0b:e6:63:5a:8d:54:49:76:33:0d:89:ce:68:
99:49:a4:8e:64:5a:aa:6b:be:72:3c:5f:10:84:87:
53:bc:af:57:76:eb:3a:f1:45:04:ec:38:72:08:64:
79:34:b5:6e:e0:8b:ec:b5:cc:1d:12:c9:d4:ab:b1:
ed:1b:b7:29:97:73:af:87:46:43:8d:d0:01:c0:45:
e1:22:d1:ef:96:72:d2:b6:84:c3:dc:d2:5b:75:60:
0e:2e:09:40:45:3f:78:a3:3f:d2:8a:e3:2a:37:ba:
bf:61:ae:b1:ce:d4:37:c3:08:62:88:6c:4e:14:b6:
fa:e3:df:5b:a0:2c:b1:26:16:04:56:8b:98:3b:7e:
da:0b:18:0e:6a:ab:59:04:73:d9:79:52:09:b3:a1:
bc:83:6c:98:e4:a2:9f:44:85:28:95:34:c2:bf:75:
8e:a8:e3:14:db:33:28:37:52:d1:71:af:28:65:dd:
30:18:ea:db:ba:62:a7:92:72:6c:bb:91:46:e0:07:
73:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:D8:90:78:FC:F2:49:9C:C5:11:F8:50:4F:A0:47:18:A4:20:F6:25
X509v3 Authority Key Identifier:
keyid:01:48:D2:CA:8A:2B:43:B6:CA:D2:5B:22:26:53:54:FE:30:39:11:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AUjSyoorQ7bK0lsiJlNU_jA5EaA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/1b78cd-d005-492c-9167-1bf868a03538/1/AUjSyoorQ7bK0lsiJlNU_jA5EaA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/1b78cd-d005-492c-9167-1bf868a03538/1/AUjSyoorQ7bK0lsiJlNU_jA5EaA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d7:55:02:f6:26:58:71:2e:0e:28:4f:ee:f1:ad:30:66:05:18:
23:16:bd:9c:08:42:d4:21:93:1d:36:52:cd:c1:67:8f:03:52:
5b:d0:d0:19:a5:3b:41:e6:a9:01:9b:4d:e1:86:4c:c9:a7:eb:
18:a9:23:b2:c7:86:ea:11:34:bd:47:c0:8d:fc:f7:bb:77:09:
99:02:63:44:82:f4:8b:d4:b6:ab:09:33:3f:e0:19:29:14:a9:
fa:f2:48:cc:b3:8f:9d:8f:13:09:5f:7d:c7:4d:ac:92:1f:92:
4b:b6:d8:fb:ca:cb:9e:fd:f9:c1:dc:8f:15:a9:b0:6c:5e:7c:
05:1e:e7:d2:b0:11:12:0a:5f:0b:24:4f:8a:6c:93:01:65:2c:
be:f7:cc:3d:f3:84:7f:74:22:5c:9d:e3:1a:c7:99:ae:e5:39:
e1:9d:ab:a7:02:72:eb:18:3b:d0:1d:49:1e:de:6d:6e:c2:a0:
eb:c1:f5:18:f8:4a:48:08:24:bd:1d:83:a3:85:81:b3:f4:5c:
3a:5f:e1:dc:65:3e:a8:ab:f0:3d:14:a6:82:d0:54:1a:44:a7:
61:7c:7c:86:f5:61:50:34:f7:82:4b:a9:9b:b1:76:7b:03:b1:
94:29:b0:ed:83:99:c8:3a:b9:0d:1f:6e:12:4b:6d:cf:2b:d7:
a2:2e:aa:a6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05QSkGWs5hLEKs6g1eSM7GMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAxNDhkMmNhOGEyYjQzYjZjYWQyNWIyMjI2NTM1NGZlMzAz
OTExYTAwHhcNMjYwMzI5MTEwMTA0WhcNMjYwMzMwMTEwMTA0WjAzMTEwLwYDVQQD
EygxZmQ4OTA3OGZjZjI0OTljYzUxMWY4NTA0ZmEwNDcxOGE0MjBmNjI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp08hE0gUsNmK4FdWzpnjVkoba80+
+HV5qPoADgYrwJ/nW7ihWvOxqYlNFuhWk7/z/bHPziOYQQWWadzeowvmY1qNVEl2
Mw2JzmiZSaSOZFqqa75yPF8QhIdTvK9Xdus68UUE7DhyCGR5NLVu4IvstcwdEsnU
q7HtG7cpl3Ovh0ZDjdABwEXhItHvlnLStoTD3NJbdWAOLglART94oz/SiuMqN7q/
Ya6xztQ3wwhiiGxOFLb6499boCyxJhYEVouYO37aCxgOaqtZBHPZeVIJs6G8g2yY
5KKfRIUolTTCv3WOqOMU2zMoN1LRca8oZd0wGOrbumKnknJsu5FG4AdzeQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB/YkHj88kmcxRH4UE+gRxikIPYlMB8GA1UdIwQY
MBaAFAFI0sqKK0O2ytJbIiZTVP4wORGgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQVVqU3lvb3JRN2JLMGxzaUpsTlVfakE1RWFBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny8xYjc4Y2QtZDAwNS00OTJjLTkxNjct
MWJmODY4YTAzNTM4LzEvQVVqU3lvb3JRN2JLMGxzaUpsTlVfakE1RWFBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ny8xYjc4Y2QtZDAwNS00OTJjLTkxNjctMWJmODY4YTAzNTM4
LzEvQVVqU3lvb3JRN2JLMGxzaUpsTlVfakE1RWFBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA11UC9iZY
cS4OKE/u8a0wZgUYIxa9nAhC1CGTHTZSzcFnjwNSW9DQGaU7QeapAZtN4YZMyafr
GKkjsseG6hE0vUfAjfz3u3cJmQJjRIL0i9S2qwkzP+AZKRSp+vJIzLOPnY8TCV99
x02skh+SS7bY+8rLnv35wdyPFamwbF58BR7n0rAREgpfCyRPimyTAWUsvvfMPfOE
f3QiXJ3jGseZruU54Z2rpwJy6xg70B1JHt5tbsKg68H1GPhKSAgkvR2Do4WBs/Rc
Ol/h3GU+qKvwPRSmgtBUGkSnYXx8hvVhUDT3gkupm7F2ewOxlCmw7YOZyDq5DR9u
EkttzyvXoi6qpg==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:47:19 2026 by rpki-client