Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/28/40a1e5-7d2a-48d6-a50e-f96fb4ea7e70/1/aom7lPpf5QmM7X4hUpoL2G48TY0.mft
File: aom7lPpf5QmM7X4hUpoL2G48TY0.mft (raw, json)
Hash identifier: +F1wuagTOOwdXALRqoNmrFIeKSdrPuqOjuMfjpSR0uE=
Subject key identifier: E5:9E:AB:FE:91:CE:6D:68:E2:90:92:2A:3D:28:D8:07:66:65:BB:9F
Authority key identifier: 6A:89:BB:94:FA:5F:E5:09:8C:ED:7E:21:52:9A:0B:D8:6E:3C:4D:8D
Certificate issuer: /CN=6a89bb94fa5fe5098ced7e21529a0bd86e3c4d8d
Certificate serial: 01A0F0E7BECFD9AFA61689B69C6CE7CC42A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aom7lPpf5QmM7X4hUpoL2G48TY0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/40a1e5-7d2a-48d6-a50e-f96fb4ea7e70/1/aom7lPpf5QmM7X4hUpoL2G48TY0.mft
Manifest number: F6
Signing time: Wed 30 Sep 2026 06:01:54 +0000
Manifest this update: Wed 30 Sep 2026 06:01:54 +0000
Manifest next update: Thu 01 Oct 2026 06:01:54 +0000
Files and hashes: 1: 3g9vEIvZ3Ad22o1OnOmjkYKrx-Y.roa (hash: dwEr+ygUTjcoJhBqeNSDCT0jVemskxaLd88sjFgcW5c=)
2: WjZ-lIR7MyhCZaOyQOqTaGg93bc.roa (hash: 9r+bJWO2ypdWBvTMrN/txM30uqxsJdCMbt8zxX7CLS8=)
3: aom7lPpf5QmM7X4hUpoL2G48TY0.crl (hash: ZCIiEfGfxk2GIkaZlCV8Rauo5Ogi2lWt2BbWXXiFu3c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/40a1e5-7d2a-48d6-a50e-f96fb4ea7e70/1/aom7lPpf5QmM7X4hUpoL2G48TY0.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/40a1e5-7d2a-48d6-a50e-f96fb4ea7e70/1/aom7lPpf5QmM7X4hUpoL2G48TY0.mft
rsync://rpki.ripe.net/repository/DEFAULT/aom7lPpf5QmM7X4hUpoL2G48TY0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 Oct 2026 06:01:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f0:e7:be:cf:d9:af:a6:16:89:b6:9c:6c:e7:cc:42:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a89bb94fa5fe5098ced7e21529a0bd86e3c4d8d
Validity
Not Before: Sep 30 06:01:54 2026 GMT
Not After : Oct 1 06:01:54 2026 GMT
Subject: CN=e59eabfe91ce6d68e290922a3d28d8076665bb9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:c0:db:6c:b5:36:5c:3f:39:91:e2:ae:5d:39:
26:13:a7:2b:35:9d:0c:d0:44:b4:d2:e8:cd:6c:13:
27:dd:d9:02:d9:a9:49:5c:03:69:01:5c:17:64:57:
66:3d:e3:14:2a:85:f6:5f:01:6f:6b:2b:5b:ff:a2:
7c:49:1c:aa:91:2c:9f:6d:34:ac:b7:f8:4c:5b:3e:
0f:a2:04:51:b0:48:48:db:8c:61:b6:21:aa:81:75:
35:6f:30:19:eb:cc:2e:7d:9e:b8:81:f1:45:74:69:
5e:95:09:ac:9a:0a:fd:55:39:08:61:ed:8d:47:e5:
9a:c7:a5:c9:79:e5:13:48:f8:31:20:ba:d5:fe:af:
09:cf:c4:65:93:be:58:b4:c4:2e:e8:7f:7c:e7:81:
3f:88:02:dd:06:6b:fd:9a:ba:c8:d6:1a:7b:07:83:
a4:2d:c1:39:ff:0e:3f:8c:e7:30:c9:d7:5b:b3:b4:
02:62:7c:30:36:2d:08:1d:cf:b8:0b:f2:89:75:dc:
e3:7f:dc:c7:6e:73:86:86:ac:65:9e:bb:54:9c:7d:
39:5c:bd:4e:9e:b6:d3:12:99:50:18:2b:5d:0b:7f:
73:3b:ec:3f:75:75:fa:88:a1:c8:02:bf:ac:f9:1e:
4d:da:33:c6:6c:c4:fd:ad:e3:fc:2e:2d:0d:14:71:
91:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:9E:AB:FE:91:CE:6D:68:E2:90:92:2A:3D:28:D8:07:66:65:BB:9F
X509v3 Authority Key Identifier:
keyid:6A:89:BB:94:FA:5F:E5:09:8C:ED:7E:21:52:9A:0B:D8:6E:3C:4D:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aom7lPpf5QmM7X4hUpoL2G48TY0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/40a1e5-7d2a-48d6-a50e-f96fb4ea7e70/1/aom7lPpf5QmM7X4hUpoL2G48TY0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/40a1e5-7d2a-48d6-a50e-f96fb4ea7e70/1/aom7lPpf5QmM7X4hUpoL2G48TY0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:ba:2a:4e:32:31:d5:78:f1:cc:28:46:4f:fd:82:fd:82:a1:
63:eb:fa:d7:d7:70:5c:3f:2f:3c:1d:a7:7b:de:5f:4f:ba:9c:
1a:4b:05:97:9e:41:d0:7a:6e:a6:fb:92:ca:0d:0d:6d:24:0a:
7f:3a:15:dc:9d:04:54:07:dc:8c:8b:29:d3:90:fa:f9:18:e8:
64:dc:cc:5f:6c:ee:44:55:0b:77:f7:21:9b:8c:6e:85:c1:1c:
8e:cd:a7:62:40:68:b9:48:d1:dc:ff:90:a6:ec:01:b7:1f:0f:
c7:95:06:64:84:75:a3:22:e2:82:d8:dc:18:a7:e1:5b:8b:af:
56:4b:15:c5:d1:e7:93:62:74:ad:3d:0d:00:8d:bd:45:2f:66:
45:a4:a3:3d:7f:7a:19:a9:74:e2:8e:75:5c:a5:0a:d0:ef:84:
9b:7c:8a:49:62:e1:e6:5e:32:25:1b:ea:a5:e8:1e:9e:ce:d8:
79:6c:37:51:97:27:c4:7c:14:e2:c5:59:1d:59:ac:26:56:fc:
b4:26:39:6b:17:69:ad:57:e1:fe:76:96:52:ba:8c:32:78:b8:
50:00:c4:fb:1d:dd:f8:3a:30:8b:f8:fd:48:e5:d6:91:fc:2c:
76:6b:72:40:18:e1:4a:5d:2c:d2:0e:b6:69:60:21:66:b7:d2:
ec:81:44:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 17:09:08 2026 by rpki-client