Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/71/bd60d7-96fd-4128-8b8b-d7e287d86fce/1/AuXuP9sWlTVBnnlO6MgT2Sk1gco.mft
File: AuXuP9sWlTVBnnlO6MgT2Sk1gco.mft (raw, json)
Hash identifier: X4sPsVG1kiYgZ44BGN+5iIU4tSWcvYL21WLNXvgMhiM=
Subject key identifier: 5A:1E:6E:73:EC:54:FC:AF:70:6E:1D:3F:AC:08:19:00:6F:32:80:A0
Authority key identifier: 02:E5:EE:3F:DB:16:95:35:41:9E:79:4E:E8:C8:13:D9:29:35:81:CA
Certificate issuer: /CN=02e5ee3fdb169535419e794ee8c813d9293581ca
Certificate serial: 01A0404E4526E686F1FFD09C1D96395C54E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AuXuP9sWlTVBnnlO6MgT2Sk1gco.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/bd60d7-96fd-4128-8b8b-d7e287d86fce/1/AuXuP9sWlTVBnnlO6MgT2Sk1gco.mft
Manifest number: 0240
Signing time: Wed 26 Aug 2026 23:01:06 +0000
Manifest this update: Wed 26 Aug 2026 23:01:06 +0000
Manifest next update: Thu 27 Aug 2026 23:01:06 +0000
Files and hashes: 1: AuXuP9sWlTVBnnlO6MgT2Sk1gco.crl (hash: UCXmH5BkLM4oXbaGdoRD/RpcpTV8EhLDNqbUTIJ1FX4=)
2: PSP80WvoeTaK8qKEzf5_rBtjRiA.roa (hash: LuMRxihjGgulFR1nfBGt4wCkEt33UifqQX3zhBk0Gig=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/bd60d7-96fd-4128-8b8b-d7e287d86fce/1/AuXuP9sWlTVBnnlO6MgT2Sk1gco.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/bd60d7-96fd-4128-8b8b-d7e287d86fce/1/AuXuP9sWlTVBnnlO6MgT2Sk1gco.mft
rsync://rpki.ripe.net/repository/DEFAULT/AuXuP9sWlTVBnnlO6MgT2Sk1gco.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 20:12:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:40:4e:45:26:e6:86:f1:ff:d0:9c:1d:96:39:5c:54:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02e5ee3fdb169535419e794ee8c813d9293581ca
Validity
Not Before: Aug 26 23:01:06 2026 GMT
Not After : Aug 27 23:01:06 2026 GMT
Subject: CN=5a1e6e73ec54fcaf706e1d3fac0819006f3280a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:8d:7e:bd:df:cd:8a:b6:61:5f:f7:56:f9:8a:
50:14:1b:a6:5b:ca:09:d4:fc:d6:42:1c:38:be:5c:
9b:b7:19:4e:17:5a:35:41:93:2b:2c:40:f3:75:82:
6a:cd:07:f1:24:f4:bd:0a:ca:73:cc:a1:81:e2:52:
66:20:20:18:74:da:40:0f:80:ac:a5:c2:41:70:4d:
1b:2c:3a:67:c3:5e:75:f3:35:7a:a7:75:8f:65:99:
fd:f7:a6:1e:a5:e7:e2:d2:e4:94:50:28:5a:fe:54:
2a:8c:93:5b:1a:13:80:81:29:a7:8e:de:b8:02:5d:
8c:30:8b:1b:c9:d4:1f:91:1f:0a:29:40:76:a4:6d:
a2:c9:b7:42:82:38:64:b1:0d:f4:15:9b:86:c0:04:
87:12:61:7d:1a:79:76:00:11:f9:27:3a:a7:81:af:
55:ec:b9:3b:da:c7:f1:48:bf:70:7d:dd:72:7e:bd:
fd:fb:d4:ed:5f:b1:3b:c9:de:58:16:ed:7e:9a:0b:
00:7e:a9:44:db:9b:74:16:8c:03:5c:eb:27:94:5e:
aa:03:f2:ee:79:e6:d6:ae:15:08:f3:6b:19:e2:64:
43:8c:30:85:8c:60:d1:02:d0:48:54:35:95:2f:4e:
3c:cf:b2:16:1f:65:e6:34:45:29:42:18:b3:bf:2e:
72:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:1E:6E:73:EC:54:FC:AF:70:6E:1D:3F:AC:08:19:00:6F:32:80:A0
X509v3 Authority Key Identifier:
keyid:02:E5:EE:3F:DB:16:95:35:41:9E:79:4E:E8:C8:13:D9:29:35:81:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AuXuP9sWlTVBnnlO6MgT2Sk1gco.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/bd60d7-96fd-4128-8b8b-d7e287d86fce/1/AuXuP9sWlTVBnnlO6MgT2Sk1gco.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/bd60d7-96fd-4128-8b8b-d7e287d86fce/1/AuXuP9sWlTVBnnlO6MgT2Sk1gco.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:5a:6a:3d:e7:0c:d5:ee:40:aa:44:03:ef:2d:72:38:60:6f:
93:6e:f9:05:7a:71:83:dd:ee:d9:4b:bf:4c:66:ad:26:93:7d:
c9:d4:f2:bc:4e:db:99:8b:c0:6d:d0:ca:d6:bc:24:22:16:cc:
18:ce:c5:e6:8d:32:08:08:7c:59:b8:1f:c4:0b:18:9c:cf:8f:
5b:a4:6f:87:33:ec:11:16:4c:a6:86:d8:49:c9:3d:7a:9c:46:
c5:22:42:b5:44:e0:45:e3:22:fa:3d:59:a4:03:fc:77:4e:51:
7a:f7:ab:67:e3:2f:2b:fb:6b:01:d3:44:c9:5e:dd:71:43:7e:
eb:19:39:02:8c:19:79:de:a5:05:7b:40:d4:7b:63:33:79:78:
54:8f:9b:69:6a:6f:aa:50:47:4e:f2:b7:f3:58:09:d5:72:80:
3d:c7:8b:13:e7:c2:89:31:cb:f4:63:12:94:cf:13:13:4d:1a:
2e:e7:52:98:99:c9:a6:80:38:60:66:37:6c:9e:1a:62:71:ba:
71:7c:23:f0:db:6d:ce:8b:2c:e4:2f:5f:d7:23:3b:a9:f9:a4:
10:98:12:36:da:bd:2a:49:7a:4f:a1:3b:dd:0f:e8:04:70:66:
70:31:2e:e4:b0:92:35:9f:5b:88:57:11:28:05:3f:76:7b:e1:
a4:c9:2c:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 04:02:40 2026 by rpki-client