Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/34b791-ffd5-49f0-8718-49b75c18349a/1/au27xW2vhfo_OHxgUtxy1dchO_c.mft
File: au27xW2vhfo_OHxgUtxy1dchO_c.mft (raw, json)
Hash identifier: JV9k0GXWW/ayCGrgyA1tWf6NOk/zWR/rCRjL+Q6Vdd8=
Subject key identifier: 56:97:FA:6C:8B:A6:7D:2D:3A:C2:6A:93:BD:2A:9E:CC:52:47:F6:A5
Authority key identifier: 6A:ED:BB:C5:6D:AF:85:FA:3F:38:7C:60:52:DC:72:D5:D7:21:3B:F7
Certificate issuer: /CN=6aedbbc56daf85fa3f387c6052dc72d5d7213bf7
Certificate serial: 019D3940871438DD7FCFA2801E6A0FF8E937
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/au27xW2vhfo_OHxgUtxy1dchO_c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/34b791-ffd5-49f0-8718-49b75c18349a/1/au27xW2vhfo_OHxgUtxy1dchO_c.mft
Manifest number: 030A
Signing time: Sun 29 Mar 2026 11:00:23 +0000
Manifest this update: Sun 29 Mar 2026 11:00:23 +0000
Manifest next update: Mon 30 Mar 2026 11:00:23 +0000
Files and hashes: 1: Vd4ynB66sCEtEXPuV_O3x4PgW4A.roa (hash: 4UTBj4Zh6vSwwX6L/YeCbJsNnwD0s0UfjFqN/ZdD3NU=)
2: au27xW2vhfo_OHxgUtxy1dchO_c.crl (hash: mdsEVNHZufvhPGQqAGnKgaHdBVbdqTqqGDCIuFDxAwQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/34b791-ffd5-49f0-8718-49b75c18349a/1/au27xW2vhfo_OHxgUtxy1dchO_c.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/34b791-ffd5-49f0-8718-49b75c18349a/1/au27xW2vhfo_OHxgUtxy1dchO_c.mft
rsync://rpki.ripe.net/repository/DEFAULT/au27xW2vhfo_OHxgUtxy1dchO_c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:40:87:14:38:dd:7f:cf:a2:80:1e:6a:0f:f8:e9:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6aedbbc56daf85fa3f387c6052dc72d5d7213bf7
Validity
Not Before: Mar 29 11:00:23 2026 GMT
Not After : Mar 30 11:00:23 2026 GMT
Subject: CN=5697fa6c8ba67d2d3ac26a93bd2a9ecc5247f6a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:41:48:85:f0:6b:65:e7:46:58:05:ad:95:5a:
d6:cb:9b:0a:b1:5d:0c:24:6e:11:46:1a:96:cc:3a:
d6:71:e6:92:a8:c9:9e:dc:21:82:6a:39:01:a7:77:
b0:d3:64:a3:46:f1:d9:84:da:cc:62:09:f9:fc:48:
a4:67:37:db:4f:59:a7:98:19:46:80:e0:7d:d8:32:
d0:16:0f:59:86:97:d0:7d:3d:5d:f1:a3:d9:4f:5f:
72:c0:aa:65:f3:62:d1:9b:45:5d:a2:90:2c:6d:a0:
9a:26:04:fd:dd:87:87:6c:4a:66:d3:d2:ea:9d:c7:
51:a3:64:1f:1f:01:8d:98:82:20:fa:2c:53:6a:ed:
41:91:7b:94:75:27:15:4d:3f:08:4c:8b:be:a6:b9:
ed:1d:9f:6d:66:1b:f8:43:0b:d8:33:c3:dc:39:84:
3e:05:f4:f3:e3:c7:5c:d3:d2:32:33:f6:65:b5:7f:
14:43:94:63:a6:3a:0e:b0:ed:35:b0:f9:01:9e:1b:
46:58:bc:57:bb:cc:ac:88:f2:36:7f:38:25:b4:9c:
79:9c:8e:6c:2a:c7:92:88:f5:61:98:c2:5a:d2:73:
a1:d6:81:81:2a:09:14:62:a8:2a:01:12:c9:e0:22:
c6:75:86:ff:63:97:41:f9:bc:86:cb:a0:9b:76:b9:
d4:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:97:FA:6C:8B:A6:7D:2D:3A:C2:6A:93:BD:2A:9E:CC:52:47:F6:A5
X509v3 Authority Key Identifier:
keyid:6A:ED:BB:C5:6D:AF:85:FA:3F:38:7C:60:52:DC:72:D5:D7:21:3B:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/au27xW2vhfo_OHxgUtxy1dchO_c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/34b791-ffd5-49f0-8718-49b75c18349a/1/au27xW2vhfo_OHxgUtxy1dchO_c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/34b791-ffd5-49f0-8718-49b75c18349a/1/au27xW2vhfo_OHxgUtxy1dchO_c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ea:ad:31:64:0b:4a:26:ca:6e:f1:ca:63:b2:4b:e8:5c:7c:90:
36:93:c8:06:d4:b8:fa:b4:c5:10:aa:a5:f5:f6:a3:44:6c:be:
fa:57:b3:e5:d1:53:f0:67:64:34:bd:84:af:30:4f:4c:9f:73:
ea:6c:07:9c:9e:bb:98:7c:42:9a:b7:90:12:d0:ba:a7:96:34:
b5:34:5e:17:5a:95:02:ae:98:33:5a:78:90:21:d0:a6:2c:cc:
e0:e4:d5:f5:d7:8d:66:7d:e9:94:79:dc:6d:7d:df:35:72:d0:
e2:5a:16:09:e8:f5:c2:bb:f2:97:f9:7f:55:fc:9f:e3:d9:32:
68:b9:4c:56:85:51:c6:28:4f:f8:a3:62:9f:49:9e:2f:f3:7b:
62:b1:4a:36:5e:92:09:a2:20:73:6c:a2:20:30:ea:60:49:a8:
32:0e:5d:0f:74:77:25:3e:ed:33:59:97:cf:60:9b:cd:d5:fe:
70:7b:56:22:c2:8f:f6:44:f1:d7:23:e1:67:81:06:98:a6:d4:
68:5b:78:09:34:30:86:e7:8e:78:b9:41:ae:53:da:b6:8f:b5:
a0:d9:4d:32:45:81:79:ba:c1:4e:65:a8:4d:91:f6:56:5b:40:
ba:87:cb:ff:dd:bf:5f:ce:ce:d6:c6:71:7a:8e:e1:17:6e:86:
73:80:33:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:51:07 2026 by rpki-client