Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/afae93-e79f-499f-9203-0fe8bd6556d5/1/auug8jdBINVPpbzcKp0kUUFy6m0.mft
File: auug8jdBINVPpbzcKp0kUUFy6m0.mft (raw, json)
Hash identifier: K0eXkON7WMQCzUmX17DumnVa8w7vibwlI+AocoBLb0A=
Subject key identifier: 8F:DC:A3:BF:79:D8:2E:60:80:D1:9B:A3:91:3C:C2:8C:CB:A4:BB:20
Authority key identifier: 6A:EB:A0:F2:37:41:20:D5:4F:A5:BC:DC:2A:9D:24:51:41:72:EA:6D
Certificate issuer: /CN=6aeba0f2374120d54fa5bcdc2a9d24514172ea6d
Certificate serial: 019D389BB24E2BDF14761C9A1FE555FF7E46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/auug8jdBINVPpbzcKp0kUUFy6m0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/afae93-e79f-499f-9203-0fe8bd6556d5/1/auug8jdBINVPpbzcKp0kUUFy6m0.mft
Manifest number: 1344
Signing time: Sun 29 Mar 2026 08:00:20 +0000
Manifest this update: Sun 29 Mar 2026 08:00:20 +0000
Manifest next update: Mon 30 Mar 2026 08:00:20 +0000
Files and hashes: 1: Z1_Ilgkk_eYWGCinn6n7Y5F65JQ.roa (hash: +YFS73ucb1Xy4jgZbgT/uSrdoIXa/AoEr1GGjusXbmc=)
2: auug8jdBINVPpbzcKp0kUUFy6m0.crl (hash: HGx8ocieNgHo7A1X9r2cP3Wdm+QXQZIVJ59T61ywM2k=)
3: n4Sn0nJNxJqIJRlgKy_q_tmfw-U.roa (hash: vxSCI94X5gLK34ETwzNqc8WiUEXZwqWPkOKd99kM8vc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/afae93-e79f-499f-9203-0fe8bd6556d5/1/auug8jdBINVPpbzcKp0kUUFy6m0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/afae93-e79f-499f-9203-0fe8bd6556d5/1/auug8jdBINVPpbzcKp0kUUFy6m0.mft
rsync://rpki.ripe.net/repository/DEFAULT/auug8jdBINVPpbzcKp0kUUFy6m0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9b:b2:4e:2b:df:14:76:1c:9a:1f:e5:55:ff:7e:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6aeba0f2374120d54fa5bcdc2a9d24514172ea6d
Validity
Not Before: Mar 29 08:00:20 2026 GMT
Not After : Mar 30 08:00:20 2026 GMT
Subject: CN=8fdca3bf79d82e6080d19ba3913cc28ccba4bb20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:d5:80:82:16:3e:f5:b7:57:7d:6c:be:0f:0e:
90:f2:48:05:80:a4:fd:4c:8e:60:95:63:4d:34:05:
5d:2f:57:f6:58:e2:ee:a2:1c:23:78:45:3f:38:3c:
01:1a:52:97:9a:eb:b3:97:cb:51:9a:6c:be:7f:5f:
52:71:5b:a1:30:09:a0:5b:9b:3c:57:2a:96:ab:76:
f6:aa:89:53:62:99:96:76:56:38:4a:df:28:7b:6d:
57:e6:be:a2:47:64:b0:6a:4b:43:c3:c3:5f:54:87:
d7:72:a3:0d:00:72:7d:07:a6:55:94:85:94:8b:1f:
d0:8e:0d:c7:22:0a:a3:04:af:6b:ef:49:c9:32:c7:
d0:05:fe:5c:fe:f3:bc:e6:9c:c2:f1:11:4d:34:42:
d8:37:78:c8:3a:79:59:e8:64:2e:49:41:a6:7d:b7:
20:ce:79:16:2f:39:18:37:2e:b4:01:84:e9:9b:d0:
4b:19:32:3c:e8:24:48:9e:3f:8a:ac:d8:c5:8d:e3:
a0:1d:65:c2:a3:74:9e:ac:ec:88:c6:1b:8e:51:7f:
04:c0:20:27:9c:b4:c0:ed:66:6b:e2:f0:e1:33:ec:
84:ad:58:f1:3d:aa:b8:7c:e0:b9:a4:41:7c:6e:af:
13:83:e2:c3:94:87:53:da:e3:24:46:54:d7:47:f1:
b1:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:DC:A3:BF:79:D8:2E:60:80:D1:9B:A3:91:3C:C2:8C:CB:A4:BB:20
X509v3 Authority Key Identifier:
keyid:6A:EB:A0:F2:37:41:20:D5:4F:A5:BC:DC:2A:9D:24:51:41:72:EA:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/auug8jdBINVPpbzcKp0kUUFy6m0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/afae93-e79f-499f-9203-0fe8bd6556d5/1/auug8jdBINVPpbzcKp0kUUFy6m0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/afae93-e79f-499f-9203-0fe8bd6556d5/1/auug8jdBINVPpbzcKp0kUUFy6m0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:09:14:38:1f:f4:ba:d6:6b:9e:1d:a1:94:ea:82:ec:68:73:
b9:6c:ce:19:2c:69:45:6e:a7:2c:16:a6:4d:87:a3:9b:db:0e:
55:f0:8f:b5:b1:86:94:89:1e:53:6c:f8:fb:f0:93:b9:7a:2b:
6d:05:ee:7a:a3:5b:f2:67:84:6a:88:1c:2f:ae:f1:d7:42:85:
9e:05:72:ea:41:4d:e9:8c:1a:d6:7f:d1:e1:9a:90:55:87:36:
bc:40:19:fb:bf:7b:54:e4:17:12:88:34:7e:20:b2:8b:4d:be:
2e:50:56:e1:4d:d5:cc:3c:42:a7:49:56:1c:21:d7:b2:02:09:
01:34:5f:96:91:37:1f:fa:e6:20:e6:c7:9d:74:b2:5c:03:70:
fd:76:66:f0:8b:22:f7:95:bb:62:ce:c1:dc:d5:5e:f2:5a:d6:
6e:f4:e3:75:99:43:a3:76:90:8b:ea:cf:da:e2:75:58:aa:92:
db:81:0e:8d:c5:61:c5:bf:61:36:94:1e:41:86:d2:ad:23:62:
44:a9:f5:61:7b:76:50:41:e4:9c:72:4f:76:e8:da:34:03:42:
a9:3f:a2:77:ef:60:e6:95:77:64:25:b3:dc:53:83:f0:99:ad:
02:25:dd:27:94:96:00:d5:8a:02:a2:b7:b0:f0:63:c4:4a:34:
74:03:8d:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:28:28 2026 by rpki-client