Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/68/e1a37d-868e-46bb-a7c8-9d2d9f6eee93/1/AUcceelkLK72p0N_H3TFR4rlISk.mft
File: AUcceelkLK72p0N_H3TFR4rlISk.mft (raw, json)
Hash identifier: eRe7CURLrcz04BLcj60ETvGxxKxO8HWqGrXApxcjxC8=
Subject key identifier: 36:FC:8A:11:B4:29:DF:59:6A:BF:B9:34:9B:90:A5:71:B7:46:7E:2A
Authority key identifier: 01:47:1C:79:E9:64:2C:AE:F6:A7:43:7F:1F:74:C5:47:8A:E5:21:29
Certificate issuer: /CN=01471c79e9642caef6a7437f1f74c5478ae52129
Certificate serial: 01A13ECB8F15F97C8594B1E216B77E8A8265
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AUcceelkLK72p0N_H3TFR4rlISk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/e1a37d-868e-46bb-a7c8-9d2d9f6eee93/1/AUcceelkLK72p0N_H3TFR4rlISk.mft
Manifest number: 1AA6
Signing time: Thu 15 Oct 2026 09:01:30 +0000
Manifest this update: Thu 15 Oct 2026 09:01:30 +0000
Manifest next update: Fri 16 Oct 2026 09:01:30 +0000
Files and hashes: 1: AUcceelkLK72p0N_H3TFR4rlISk.crl (hash: ChqJte88U4nWi0PCOWMHobzQu7M2qXcXBVhuxuqwOL0=)
2: o2sIQqxtrsXU4-sHgN1DBCyW2Do.roa (hash: OOS32X72fHPV4c6ntyzjKEpP2sDTlpCLbnwcUWRnCGc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/e1a37d-868e-46bb-a7c8-9d2d9f6eee93/1/AUcceelkLK72p0N_H3TFR4rlISk.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/e1a37d-868e-46bb-a7c8-9d2d9f6eee93/1/AUcceelkLK72p0N_H3TFR4rlISk.mft
rsync://rpki.ripe.net/repository/DEFAULT/AUcceelkLK72p0N_H3TFR4rlISk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3e:cb:8f:15:f9:7c:85:94:b1:e2:16:b7:7e:8a:82:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01471c79e9642caef6a7437f1f74c5478ae52129
Validity
Not Before: Oct 15 09:01:30 2026 GMT
Not After : Oct 16 09:01:30 2026 GMT
Subject: CN=36fc8a11b429df596abfb9349b90a571b7467e2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:51:09:a3:59:da:42:e9:2f:7e:ac:a0:cc:3b:
84:31:db:1b:03:6e:bb:6c:c9:06:f2:79:c8:91:00:
05:79:f2:e7:35:3e:d2:96:82:66:cb:62:86:d7:8d:
f3:10:91:ed:ef:d4:af:ea:09:73:ce:9e:b4:2c:bf:
6c:f4:1c:07:f4:0e:4d:65:85:d2:2d:ac:64:ca:67:
be:bc:22:6c:40:47:ef:87:1e:3a:4a:07:32:70:b1:
3b:61:c6:db:cc:f9:65:40:33:5f:f1:4c:3b:44:ba:
cd:56:96:69:f0:97:80:ec:5c:70:23:cc:6d:9d:3b:
cc:a7:62:dd:e5:2e:dd:f7:81:a4:63:99:fe:43:47:
30:94:43:8f:9b:20:2a:0f:66:4a:c8:dc:b2:3c:c4:
e1:fa:5c:64:76:02:b2:ea:b9:b9:ac:f0:ff:dc:17:
8d:da:33:da:8f:f0:6c:ee:0f:09:f0:bc:97:ec:71:
36:f9:cf:ed:21:97:45:98:96:c3:0d:92:00:f7:7b:
7f:3d:d1:26:8c:44:d3:f5:4a:bb:30:98:82:57:6d:
49:3a:b6:e4:a3:17:82:f7:23:dd:76:e9:5d:f0:e3:
6a:d1:b3:a6:ab:67:25:aa:30:fc:90:81:1e:a1:b1:
44:74:7b:33:a8:c0:ca:45:ae:4a:cd:22:77:e9:90:
98:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:FC:8A:11:B4:29:DF:59:6A:BF:B9:34:9B:90:A5:71:B7:46:7E:2A
X509v3 Authority Key Identifier:
keyid:01:47:1C:79:E9:64:2C:AE:F6:A7:43:7F:1F:74:C5:47:8A:E5:21:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AUcceelkLK72p0N_H3TFR4rlISk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/e1a37d-868e-46bb-a7c8-9d2d9f6eee93/1/AUcceelkLK72p0N_H3TFR4rlISk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/e1a37d-868e-46bb-a7c8-9d2d9f6eee93/1/AUcceelkLK72p0N_H3TFR4rlISk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:f0:c8:3a:4c:28:ef:ac:bd:63:fe:9e:4e:4f:d6:b8:7c:c9:
8c:16:a7:9a:db:1f:2f:97:a4:5d:e0:72:d8:db:58:26:d5:93:
d7:88:51:37:ee:57:16:3a:44:5c:85:d6:a2:f0:65:a1:53:f2:
00:0e:2f:7a:20:4f:c7:58:51:ca:20:55:7a:01:a9:c8:09:f1:
d6:6e:f7:f4:88:27:c2:db:09:33:21:ed:73:d6:2a:57:6f:6b:
0d:5f:d1:65:c9:22:cb:6e:31:5a:fb:14:98:22:39:01:96:ee:
87:c9:8d:12:72:bf:32:62:b3:b0:14:49:7b:5a:15:e0:df:67:
9a:f0:6d:e7:9d:a6:ad:28:a7:88:2c:c5:59:cb:85:ba:35:f1:
f0:6b:3f:21:5b:1a:9c:9d:90:6f:6f:d1:98:5c:5c:d5:cc:07:
bc:b5:91:3e:08:ba:f5:45:57:b6:c6:6a:08:fa:86:b6:b5:bc:
d5:a3:5b:20:92:d2:f6:85:ba:4a:66:49:cc:9a:82:1e:b2:40:
c5:3f:52:af:ae:50:e7:6c:e1:33:95:97:d4:cc:d5:23:19:12:
e2:b2:26:73:08:0d:50:9d:66:b0:22:ab:65:e6:26:fa:72:b3:
81:2a:07:af:5f:5e:7c:d2:5e:ee:d2:7f:75:9e:98:a2:74:64:
74:c9:5d:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 12:32:32 2026 by rpki-client