Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/bd60d7-96fd-4128-8b8b-d7e287d86fce/1/AuXuP9sWlTVBnnlO6MgT2Sk1gco.mft
File: AuXuP9sWlTVBnnlO6MgT2Sk1gco.mft (raw, json)
Hash identifier: Ljq2M8KqZrvHI2J5955pgyGc1OPKTAtJzvoKPUHDFEM=
Subject key identifier: 5B:4E:CD:BD:0C:FC:33:60:4F:CC:C2:65:0B:66:3D:F6:2E:CE:F2:00
Authority key identifier: 02:E5:EE:3F:DB:16:95:35:41:9E:79:4E:E8:C8:13:D9:29:35:81:CA
Certificate issuer: /CN=02e5ee3fdb169535419e794ee8c813d9293581ca
Certificate serial: 019D37F7396E52C3816978B97BFB520430B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AuXuP9sWlTVBnnlO6MgT2Sk1gco.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/bd60d7-96fd-4128-8b8b-d7e287d86fce/1/AuXuP9sWlTVBnnlO6MgT2Sk1gco.mft
Manifest number: AE
Signing time: Sun 29 Mar 2026 05:00:42 +0000
Manifest this update: Sun 29 Mar 2026 05:00:42 +0000
Manifest next update: Mon 30 Mar 2026 05:00:42 +0000
Files and hashes: 1: AuXuP9sWlTVBnnlO6MgT2Sk1gco.crl (hash: UuektRk62Xz/O4/tWzha72z+oFjvgLDOvYETF5fgU90=)
2: PSP80WvoeTaK8qKEzf5_rBtjRiA.roa (hash: LuMRxihjGgulFR1nfBGt4wCkEt33UifqQX3zhBk0Gig=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/bd60d7-96fd-4128-8b8b-d7e287d86fce/1/AuXuP9sWlTVBnnlO6MgT2Sk1gco.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/bd60d7-96fd-4128-8b8b-d7e287d86fce/1/AuXuP9sWlTVBnnlO6MgT2Sk1gco.mft
rsync://rpki.ripe.net/repository/DEFAULT/AuXuP9sWlTVBnnlO6MgT2Sk1gco.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:39:6e:52:c3:81:69:78:b9:7b:fb:52:04:30:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02e5ee3fdb169535419e794ee8c813d9293581ca
Validity
Not Before: Mar 29 05:00:42 2026 GMT
Not After : Mar 30 05:00:42 2026 GMT
Subject: CN=5b4ecdbd0cfc33604fccc2650b663df62ecef200
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:c7:fd:82:d3:79:39:b2:f6:20:3c:9b:36:7e:
83:6f:0e:e0:b5:30:eb:c5:8a:44:0b:94:68:35:0d:
cb:27:48:d0:95:8d:dc:2b:8c:f9:30:2e:e7:63:c9:
eb:d3:33:57:6e:01:82:8a:fa:56:08:5a:cd:77:17:
30:da:5a:1d:42:58:14:55:f7:2e:4a:88:4d:de:dc:
7b:f9:7a:3a:ae:76:6a:39:8e:1f:d7:96:6e:c4:8d:
04:71:33:01:f8:2c:61:3f:e4:40:5d:11:5e:55:68:
0d:79:3e:3f:41:a4:26:6d:42:f9:e9:00:70:d7:3f:
7a:b8:05:34:6b:70:4b:2f:e6:85:93:c7:da:ab:b3:
b0:4f:41:45:bd:c0:5f:6c:6a:8c:16:eb:03:91:7e:
3f:9d:44:61:64:c5:9f:d0:9c:19:e9:7f:41:71:b3:
fa:02:a8:64:5e:02:44:ca:b9:a0:3b:b8:87:5f:9b:
5d:0f:6f:71:a0:54:07:01:4b:58:80:45:62:99:83:
5e:e2:8f:fd:73:ca:37:0f:a6:60:08:eb:8d:29:31:
8b:21:ea:50:c6:71:25:d6:1e:ce:e4:fc:2f:62:f8:
30:ca:d9:a2:70:92:14:de:0a:18:1a:97:88:fa:ab:
45:f4:3a:fb:23:de:85:3a:59:d8:56:00:49:55:25:
6b:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:4E:CD:BD:0C:FC:33:60:4F:CC:C2:65:0B:66:3D:F6:2E:CE:F2:00
X509v3 Authority Key Identifier:
keyid:02:E5:EE:3F:DB:16:95:35:41:9E:79:4E:E8:C8:13:D9:29:35:81:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AuXuP9sWlTVBnnlO6MgT2Sk1gco.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/bd60d7-96fd-4128-8b8b-d7e287d86fce/1/AuXuP9sWlTVBnnlO6MgT2Sk1gco.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/bd60d7-96fd-4128-8b8b-d7e287d86fce/1/AuXuP9sWlTVBnnlO6MgT2Sk1gco.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:c8:97:e5:f1:33:37:9f:6d:55:f2:e9:b5:81:b0:0b:48:f6:
28:4c:00:ed:28:b0:c2:b5:ca:41:27:f7:41:c3:b8:6e:04:fd:
73:e7:8e:5e:a9:40:58:e7:15:c5:e4:53:0e:37:a6:d3:2f:2d:
be:9c:e2:10:1e:cc:0b:f1:19:45:48:12:27:e9:82:55:a1:6a:
27:7e:7e:a5:56:31:f7:66:d8:17:68:7c:82:6a:f3:ab:b2:57:
0b:77:be:7d:94:d1:fe:7d:de:08:4e:07:2a:82:bf:71:9d:54:
68:a7:a0:fa:3e:b0:f4:f3:1c:b9:f8:2a:34:d1:2f:be:c5:fe:
93:2b:c4:e6:40:4b:e9:8d:3a:1b:20:da:b4:5a:bc:83:e0:40:
66:56:f7:10:60:9c:4e:dd:50:df:6f:63:6c:74:f8:39:b7:e6:
d1:5e:4b:41:66:af:fb:0e:46:54:0f:8e:02:89:50:91:1a:95:
e4:df:fd:a8:5f:25:09:43:04:9b:8e:8e:91:b6:9d:9d:42:90:
3e:a4:82:40:fe:4c:e6:44:62:1b:60:c0:83:f6:12:88:2b:e6:
3a:e3:40:37:da:06:eb:05:5a:5f:fe:44:37:f9:7e:cd:4f:11:
56:f6:f3:0f:4c:b7:2b:ef:ed:75:4d:63:b7:f2:fe:b8:30:fc:
2c:0b:24:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:29:51 2026 by rpki-client