Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/e1a37d-868e-46bb-a7c8-9d2d9f6eee93/1/AUcceelkLK72p0N_H3TFR4rlISk.mft
File: AUcceelkLK72p0N_H3TFR4rlISk.mft (raw, json)
Hash identifier: wPmi2N2VrmlUndbrx9Y3usHgENhcT7zYPcO42UXCBZg=
Subject key identifier: 33:65:DF:CE:EC:4A:AC:CD:38:A2:43:7C:69:F1:95:6D:CC:36:34:76
Authority key identifier: 01:47:1C:79:E9:64:2C:AE:F6:A7:43:7F:1F:74:C5:47:8A:E5:21:29
Certificate issuer: /CN=01471c79e9642caef6a7437f1f74c5478ae52129
Certificate serial: 019E3004DDAE163E51D99DEA94863883E1AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AUcceelkLK72p0N_H3TFR4rlISk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/e1a37d-868e-46bb-a7c8-9d2d9f6eee93/1/AUcceelkLK72p0N_H3TFR4rlISk.mft
Manifest number: 1910
Signing time: Sat 16 May 2026 09:01:25 +0000
Manifest this update: Sat 16 May 2026 09:01:25 +0000
Manifest next update: Sun 17 May 2026 09:01:25 +0000
Files and hashes: 1: AUcceelkLK72p0N_H3TFR4rlISk.crl (hash: eUB3OYSMP/ODCY+MW1vucsDVCc7f1cmIO9pc+TEExJk=)
2: gyKjgff4xPWR_xT3GYAWWCaM6V8.roa (hash: ACevHK+TApBdgqAMhe+oNyBWSjnTVbZ12xWe5OgMvkk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/e1a37d-868e-46bb-a7c8-9d2d9f6eee93/1/AUcceelkLK72p0N_H3TFR4rlISk.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/e1a37d-868e-46bb-a7c8-9d2d9f6eee93/1/AUcceelkLK72p0N_H3TFR4rlISk.mft
rsync://rpki.ripe.net/repository/DEFAULT/AUcceelkLK72p0N_H3TFR4rlISk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 05:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:04:dd:ae:16:3e:51:d9:9d:ea:94:86:38:83:e1:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01471c79e9642caef6a7437f1f74c5478ae52129
Validity
Not Before: May 16 09:01:25 2026 GMT
Not After : May 17 09:01:25 2026 GMT
Subject: CN=3365dfceec4aaccd38a2437c69f1956dcc363476
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:6a:f5:f3:43:2f:65:cf:02:92:03:fe:42:72:
99:05:8c:06:b4:10:00:84:4c:54:07:fd:b4:e4:8f:
5b:a7:ba:b5:06:9c:ac:cf:a0:3d:c2:ef:db:9c:a4:
9f:eb:73:f5:a4:c9:c6:27:2b:b8:a6:11:ab:ac:7c:
56:07:18:bf:2b:b9:9a:af:24:1b:27:bc:08:cf:81:
b1:55:e4:7d:0e:ed:4d:81:9e:79:72:6b:1a:c6:4c:
75:c6:fb:a6:26:7b:e6:c3:d7:94:e2:e7:0a:be:6a:
3c:aa:a7:3e:fb:ac:36:f6:ec:eb:c8:18:89:ec:09:
14:63:d4:6e:1e:58:11:2f:4d:77:5a:97:ea:27:90:
47:be:a5:81:4e:eb:c7:e0:12:b9:ff:3f:52:c1:00:
90:d7:c7:bc:10:9b:83:26:8e:05:5e:c1:01:c6:14:
28:27:34:cd:5e:62:48:02:70:3e:80:79:1d:4e:37:
cc:fc:96:a8:23:2d:14:23:ea:eb:00:92:c6:90:ae:
c5:3a:3d:03:77:a1:b9:ad:1e:88:6d:c3:f3:e7:8b:
2f:49:d2:6c:11:53:75:f7:d3:cc:df:6b:e9:e9:13:
bd:41:54:17:b0:99:b8:ba:f9:0e:95:84:8e:6b:f8:
62:b3:a8:65:68:e7:57:fe:42:1a:47:11:5e:ba:5f:
4b:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:65:DF:CE:EC:4A:AC:CD:38:A2:43:7C:69:F1:95:6D:CC:36:34:76
X509v3 Authority Key Identifier:
keyid:01:47:1C:79:E9:64:2C:AE:F6:A7:43:7F:1F:74:C5:47:8A:E5:21:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AUcceelkLK72p0N_H3TFR4rlISk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/e1a37d-868e-46bb-a7c8-9d2d9f6eee93/1/AUcceelkLK72p0N_H3TFR4rlISk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/e1a37d-868e-46bb-a7c8-9d2d9f6eee93/1/AUcceelkLK72p0N_H3TFR4rlISk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:35:0e:ec:09:59:81:4b:51:c5:e4:cb:f7:0f:9b:dc:60:0f:
f1:03:7e:16:0e:67:be:e5:88:6e:33:ec:a8:65:7b:20:ce:3f:
66:e4:a4:fb:ca:37:fe:16:e1:e3:7b:a5:d9:59:ec:9d:4a:65:
50:34:c1:c5:a7:07:15:1b:e9:2a:21:7d:4e:e4:6b:8f:4f:86:
13:9d:ea:00:f3:a7:06:dd:da:7b:b6:8f:ad:33:71:a5:09:51:
8d:a2:29:c2:dd:2b:0b:80:d3:98:f9:a5:d9:8c:9e:e4:f4:c1:
ec:6e:22:bb:02:a3:75:78:84:96:88:ee:d6:a3:5a:5b:dc:5e:
25:dc:14:f6:ae:68:75:3e:94:20:4d:1a:c1:db:97:2b:f8:68:
65:80:1f:88:b2:8f:a7:dc:29:31:6e:b7:b0:85:0f:55:0e:3f:
86:c2:04:26:e2:18:7c:70:02:37:b3:8b:1a:37:d3:40:a2:7c:
53:71:34:82:7d:a9:e3:0e:1b:a2:fd:45:46:b4:15:4b:34:cb:
1b:a0:1b:fd:5a:4a:f7:d4:ff:05:a0:33:46:eb:65:16:a1:8e:
d3:55:30:5f:8c:bb:18:82:c5:78:ea:da:48:00:55:69:93:da:
cd:6f:3a:85:ea:01:75:d0:d1:21:f1:86:80:7a:52:f1:3a:67:
03:e5:c3:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 15:37:32 2026 by rpki-client