Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/c18105-d90f-442f-8b1d-c20de543c0df/1/A9aopjn4iq8fQ21qILQXezjTkPw.mft
File: A9aopjn4iq8fQ21qILQXezjTkPw.mft (raw, json)
Hash identifier: ztWl+qBfG1Q0Bx9HBcgj53GO2+a+yNCJhuCNyKRS9DM=
Subject key identifier: FF:8F:E7:97:32:25:79:53:7B:71:65:18:86:D5:2A:CE:AE:02:C2:C3
Authority key identifier: 03:D6:A8:A6:39:F8:8A:AF:1F:43:6D:6A:20:B4:17:7B:38:D3:90:FC
Certificate issuer: /CN=03d6a8a639f88aaf1f436d6a20b4177b38d390fc
Certificate serial: 019F9324589E44947EEA77C92E555AC660DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A9aopjn4iq8fQ21qILQXezjTkPw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/c18105-d90f-442f-8b1d-c20de543c0df/1/A9aopjn4iq8fQ21qILQXezjTkPw.mft
Manifest number: 06AB
Signing time: Fri 24 Jul 2026 08:01:00 +0000
Manifest this update: Fri 24 Jul 2026 08:01:00 +0000
Manifest next update: Sat 25 Jul 2026 08:01:00 +0000
Files and hashes: 1: A9aopjn4iq8fQ21qILQXezjTkPw.crl (hash: RhFivO1mQLeys6aEyd63aYIsT1aLpm1BrVcKVHxrPAY=)
2: R_tuRGNyH8maQImtyJX8ka61Rts.roa (hash: CI3pZc4MmuEvMGaaRVV9hzb41var6bWscwqeDxkewRU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/c18105-d90f-442f-8b1d-c20de543c0df/1/A9aopjn4iq8fQ21qILQXezjTkPw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/c18105-d90f-442f-8b1d-c20de543c0df/1/A9aopjn4iq8fQ21qILQXezjTkPw.mft
rsync://rpki.ripe.net/repository/DEFAULT/A9aopjn4iq8fQ21qILQXezjTkPw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:24:58:9e:44:94:7e:ea:77:c9:2e:55:5a:c6:60:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03d6a8a639f88aaf1f436d6a20b4177b38d390fc
Validity
Not Before: Jul 24 08:01:00 2026 GMT
Not After : Jul 25 08:01:00 2026 GMT
Subject: CN=ff8fe797322579537b71651886d52aceae02c2c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:89:be:b3:18:9a:4c:a9:24:c3:47:35:4f:84:
a6:ca:72:1e:59:6b:1e:b4:10:63:8b:93:12:fa:f8:
b8:58:48:02:e7:17:f8:5b:24:53:58:26:84:15:41:
93:e0:17:88:da:d9:df:4c:6a:05:f3:99:09:e6:ff:
61:40:42:e7:8f:61:79:63:d5:30:56:70:10:5a:2d:
ac:2b:1c:2b:54:c3:a0:6b:65:ef:1b:e7:db:07:c2:
72:a5:cc:86:e0:cf:04:da:93:74:e2:24:75:06:90:
76:9c:9b:1d:70:66:33:63:38:1f:4a:1e:0f:ff:f1:
b6:4c:28:16:aa:76:75:1a:a1:d9:7f:ed:5e:be:5d:
5c:90:9a:f0:75:d9:b2:3e:10:6f:5e:90:e8:d8:72:
a1:ce:a2:07:98:ed:de:76:20:46:2d:2d:82:b3:c4:
70:b6:f5:b8:6f:c0:53:c0:6f:f6:e4:bf:fd:9a:34:
42:f5:b2:41:2e:98:82:ba:ba:09:e0:20:c4:03:b2:
d8:2e:18:e1:20:ad:f1:84:66:d1:64:77:77:01:d2:
19:9b:ce:a1:72:a3:5e:5b:3c:2f:98:14:d0:7f:46:
67:47:97:a1:74:0a:85:1d:5e:6a:da:a5:c3:7d:cd:
72:74:e5:21:d0:1e:3c:bb:5d:1b:1c:7d:02:10:2a:
d8:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:8F:E7:97:32:25:79:53:7B:71:65:18:86:D5:2A:CE:AE:02:C2:C3
X509v3 Authority Key Identifier:
keyid:03:D6:A8:A6:39:F8:8A:AF:1F:43:6D:6A:20:B4:17:7B:38:D3:90:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A9aopjn4iq8fQ21qILQXezjTkPw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/c18105-d90f-442f-8b1d-c20de543c0df/1/A9aopjn4iq8fQ21qILQXezjTkPw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/c18105-d90f-442f-8b1d-c20de543c0df/1/A9aopjn4iq8fQ21qILQXezjTkPw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:f8:52:42:59:a2:cf:a2:75:d7:5c:03:41:8a:88:74:3e:e4:
1c:7c:f3:01:e4:03:7a:5f:08:f8:7f:ad:d7:70:80:0b:cc:fd:
97:b7:e8:62:9b:c4:84:df:9e:a3:5e:c4:d3:74:1d:89:9d:e0:
11:2c:ac:c4:1e:36:10:7a:b9:e4:1c:69:1b:db:d0:8b:54:4f:
0a:1a:6a:df:45:65:4d:4c:ee:2a:c0:3d:de:6c:21:6a:a5:f8:
76:52:7c:28:47:81:81:06:da:8b:6e:ed:dd:16:55:da:d2:f2:
9b:7c:57:87:86:d6:6e:0f:a5:56:3d:87:b6:00:a2:4c:fc:d4:
df:af:95:e3:fe:1d:17:75:f7:c8:11:27:44:94:67:66:6d:c6:
55:a9:d9:6b:1b:78:8f:d4:b4:ed:8f:05:d4:58:4d:b3:2e:6f:
b6:99:48:aa:40:5b:81:67:a7:75:61:37:e5:2c:5f:aa:43:da:
75:77:df:58:56:de:bc:43:5e:a9:53:76:3f:2a:ae:b9:d4:8d:
34:35:63:e1:f5:8a:d8:67:86:d8:14:8a:05:5b:6f:be:cc:07:
a0:5a:98:fb:8c:07:f7:d5:c6:b4:48:c7:09:21:c6:1d:b6:01:
84:d4:9d:59:cd:83:e5:03:2b:02:e7:13:a2:b7:47:5c:be:ef:
6e:28:13:b5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+TJFieRJR+6nfJLlVaxmDdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAzZDZhOGE2MzlmODhhYWYxZjQzNmQ2YTIwYjQxNzdiMzhk
MzkwZmMwHhcNMjYwNzI0MDgwMTAwWhcNMjYwNzI1MDgwMTAwWjAzMTEwLwYDVQQD
EyhmZjhmZTc5NzMyMjU3OTUzN2I3MTY1MTg4NmQ1MmFjZWFlMDJjMmMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1om+sxiaTKkkw0c1T4SmynIeWWse
tBBji5MS+vi4WEgC5xf4WyRTWCaEFUGT4BeI2tnfTGoF85kJ5v9hQELnj2F5Y9Uw
VnAQWi2sKxwrVMOga2XvG+fbB8JypcyG4M8E2pN04iR1BpB2nJsdcGYzYzgfSh4P
//G2TCgWqnZ1GqHZf+1evl1ckJrwddmyPhBvXpDo2HKhzqIHmO3ediBGLS2Cs8Rw
tvW4b8BTwG/25L/9mjRC9bJBLpiCuroJ4CDEA7LYLhjhIK3xhGbRZHd3AdIZm86h
cqNeWzwvmBTQf0ZnR5ehdAqFHV5q2qXDfc1ydOUh0B48u10bHH0CECrYjwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP+P55cyJXlTe3FlGIbVKs6uAsLDMB8GA1UdIwQY
MBaAFAPWqKY5+IqvH0NtaiC0F3s405D8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQTlhb3BqbjRpcThmUTIxcUlMUVhlempUa1B3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi9jMTgxMDUtZDkwZi00NDJmLThiMWQt
YzIwZGU1NDNjMGRmLzEvQTlhb3BqbjRpcThmUTIxcUlMUVhlempUa1B3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYi9jMTgxMDUtZDkwZi00NDJmLThiMWQtYzIwZGU1NDNjMGRm
LzEvQTlhb3BqbjRpcThmUTIxcUlMUVhlempUa1B3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM/hSQlmi
z6J111wDQYqIdD7kHHzzAeQDel8I+H+t13CAC8z9l7foYpvEhN+eo17E03QdiZ3g
ESysxB42EHq55BxpG9vQi1RPChpq30VlTUzuKsA93mwhaqX4dlJ8KEeBgQbai27t
3RZV2tLym3xXh4bWbg+lVj2HtgCiTPzU36+V4/4dF3X3yBEnRJRnZm3GVanZaxt4
j9S07Y8F1FhNsy5vtplIqkBbgWendWE35SxfqkPadXffWFbevENeqVN2PyquudSN
NDVj4fWK2GeG2BSKBVtvvswHoFqY+4wH99XGtEjHCSHGHbYBhNSdWc2D5QMrAucT
ordHXL7vbigTtQ==
-----END CERTIFICATE-----
Generated at Fri Jul 24 10:15:35 2026 by rpki-client