Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/36/22b88b-1fbf-40f4-ada5-270929d05192/1/AonuzqJ5QTJX2JCMJVaKvrivhnc.mft
File: AonuzqJ5QTJX2JCMJVaKvrivhnc.mft (raw, json)
Hash identifier: AblKX+HsRTXYZGJ7V/6jJpf/vzMxzVVhOXegDWKAzKw=
Subject key identifier: 23:7C:9F:12:96:D1:CE:39:6A:DC:F4:8F:A6:EC:FD:7B:41:95:6F:47
Authority key identifier: 02:89:EE:CE:A2:79:41:32:57:D8:90:8C:25:56:8A:BE:B8:AF:86:77
Certificate issuer: /CN=0289eecea279413257d8908c25568abeb8af8677
Certificate serial: 01A0D5DE2E91A85867FC2466B4ECD07E0E87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AonuzqJ5QTJX2JCMJVaKvrivhnc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/22b88b-1fbf-40f4-ada5-270929d05192/1/AonuzqJ5QTJX2JCMJVaKvrivhnc.mft
Manifest number: 0FE5
Signing time: Fri 25 Sep 2026 00:01:42 +0000
Manifest this update: Fri 25 Sep 2026 00:01:42 +0000
Manifest next update: Sat 26 Sep 2026 00:01:42 +0000
Files and hashes: 1: AonuzqJ5QTJX2JCMJVaKvrivhnc.crl (hash: rxJ7Oz4fLk4d+8ouyJSoO0yYIsIIb3cd9eu5SE8lxI4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/22b88b-1fbf-40f4-ada5-270929d05192/1/AonuzqJ5QTJX2JCMJVaKvrivhnc.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/22b88b-1fbf-40f4-ada5-270929d05192/1/AonuzqJ5QTJX2JCMJVaKvrivhnc.mft
rsync://rpki.ripe.net/repository/DEFAULT/AonuzqJ5QTJX2JCMJVaKvrivhnc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 21:08:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d5:de:2e:91:a8:58:67:fc:24:66:b4:ec:d0:7e:0e:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0289eecea279413257d8908c25568abeb8af8677
Validity
Not Before: Sep 25 00:01:42 2026 GMT
Not After : Sep 26 00:01:42 2026 GMT
Subject: CN=237c9f1296d1ce396adcf48fa6ecfd7b41956f47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:18:ad:99:3f:19:7b:83:d3:88:8c:95:cc:4f:
df:01:01:1c:e7:59:e9:95:2b:86:4c:38:a7:4e:4d:
72:b7:a3:9f:8f:ca:99:87:c9:48:07:7d:7f:de:30:
e7:f5:08:7f:b4:4c:34:f0:41:79:eb:39:0c:a3:23:
74:b3:9e:97:9e:61:35:eb:eb:aa:56:64:99:1f:15:
9f:2c:1b:e4:a0:1b:f5:9c:71:e4:cb:d3:f5:68:af:
77:e6:ef:0c:b6:7e:7b:ec:3d:a7:88:29:72:bb:49:
c5:4c:aa:71:70:bb:28:3c:88:d9:b4:e0:aa:4d:dd:
1d:3a:69:5a:ef:e3:6f:e5:5c:b8:18:a4:3d:3c:5b:
d2:f1:74:06:58:4f:b3:e4:04:16:5d:38:94:b3:b9:
c2:4d:8b:bd:08:e3:e2:bf:4e:c9:84:b4:c4:cb:a2:
b7:0a:98:15:5f:45:59:37:bd:26:b0:bd:02:01:3a:
af:69:2e:11:32:0e:f2:5d:f2:a9:a1:5f:0d:da:91:
1b:ff:63:5f:e2:c6:17:14:b7:bd:57:b1:7e:47:1d:
9f:8b:9c:e9:60:60:f4:52:94:80:e9:1b:22:27:79:
4c:1c:c0:c9:cd:06:5d:6b:b6:55:4f:2b:46:86:03:
1b:54:a7:76:40:c2:c2:f2:ce:24:59:45:b0:42:f3:
48:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:7C:9F:12:96:D1:CE:39:6A:DC:F4:8F:A6:EC:FD:7B:41:95:6F:47
X509v3 Authority Key Identifier:
keyid:02:89:EE:CE:A2:79:41:32:57:D8:90:8C:25:56:8A:BE:B8:AF:86:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AonuzqJ5QTJX2JCMJVaKvrivhnc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/22b88b-1fbf-40f4-ada5-270929d05192/1/AonuzqJ5QTJX2JCMJVaKvrivhnc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/22b88b-1fbf-40f4-ada5-270929d05192/1/AonuzqJ5QTJX2JCMJVaKvrivhnc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:9b:a2:51:f4:9c:bd:d0:04:af:48:4d:6e:cb:93:4d:80:6e:
50:b8:4c:a5:e3:2a:02:ed:42:3d:f2:aa:5b:b8:a8:12:2e:ad:
58:f2:f5:7f:52:81:a1:da:a5:e6:ed:82:fc:b6:76:ab:b9:a3:
04:84:95:3f:3d:c8:29:70:ba:39:a6:ee:58:e2:79:dc:ab:94:
db:f3:26:12:0b:85:71:89:cc:98:e5:a0:86:55:98:f4:d4:05:
27:29:79:8a:16:4e:87:5e:a5:59:49:a9:46:2c:00:cc:4e:20:
52:1a:f9:39:bc:46:60:db:28:60:dd:78:60:76:93:7e:76:78:
0d:88:3b:33:cb:eb:da:8a:7d:f3:9e:60:6c:e4:1d:c4:5b:69:
3e:2c:08:2e:ac:7e:ef:a7:25:c1:90:08:92:d8:af:f8:6d:67:
cc:2e:50:51:5e:4c:1c:1f:e6:4f:aa:f7:a9:2a:15:7d:b3:18:
2f:5a:59:b0:86:0c:df:38:a2:21:4f:92:23:f9:44:82:e9:64:
84:95:8d:3e:27:11:46:52:25:51:81:8b:4d:24:ef:32:4f:b8:
4d:46:60:80:7a:73:84:23:92:43:97:4e:d4:19:00:a2:b0:58:
6f:0b:3e:58:9e:05:7b:ea:1f:d0:3a:21:33:8c:6b:3e:16:01:
67:3d:c7:43
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDV3i6RqFhn/CRmtOzQfg6HMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAyODllZWNlYTI3OTQxMzI1N2Q4OTA4YzI1NTY4YWJlYjhh
Zjg2NzcwHhcNMjYwOTI1MDAwMTQyWhcNMjYwOTI2MDAwMTQyWjAzMTEwLwYDVQQD
EygyMzdjOWYxMjk2ZDFjZTM5NmFkY2Y0OGZhNmVjZmQ3YjQxOTU2ZjQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArhitmT8Ze4PTiIyVzE/fAQEc51np
lSuGTDinTk1yt6Ofj8qZh8lIB31/3jDn9Qh/tEw08EF56zkMoyN0s56XnmE16+uq
VmSZHxWfLBvkoBv1nHHky9P1aK935u8Mtn577D2niClyu0nFTKpxcLsoPIjZtOCq
Td0dOmla7+Nv5Vy4GKQ9PFvS8XQGWE+z5AQWXTiUs7nCTYu9COPiv07JhLTEy6K3
CpgVX0VZN70msL0CATqvaS4RMg7yXfKpoV8N2pEb/2Nf4sYXFLe9V7F+Rx2fi5zp
YGD0UpSA6RsiJ3lMHMDJzQZda7ZVTytGhgMbVKd2QMLC8s4kWUWwQvNIHwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCN8nxKW0c45atz0j6bs/XtBlW9HMB8GA1UdIwQY
MBaAFAKJ7s6ieUEyV9iQjCVWir64r4Z3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQW9udXpxSjVRVEpYMkpDTUpWYUt2cml2aG5jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi8yMmI4OGItMWZiZi00MGY0LWFkYTUt
MjcwOTI5ZDA1MTkyLzEvQW9udXpxSjVRVEpYMkpDTUpWYUt2cml2aG5jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi8yMmI4OGItMWZiZi00MGY0LWFkYTUtMjcwOTI5ZDA1MTky
LzEvQW9udXpxSjVRVEpYMkpDTUpWYUt2cml2aG5jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhZuiUfSc
vdAEr0hNbsuTTYBuULhMpeMqAu1CPfKqW7ioEi6tWPL1f1KBodql5u2C/LZ2q7mj
BISVPz3IKXC6OabuWOJ53KuU2/MmEguFcYnMmOWghlWY9NQFJyl5ihZOh16lWUmp
RiwAzE4gUhr5ObxGYNsoYN14YHaTfnZ4DYg7M8vr2op9855gbOQdxFtpPiwILqx+
76clwZAIktiv+G1nzC5QUV5MHB/mT6r3qSoVfbMYL1pZsIYM3ziiIU+SI/lEgulk
hJWNPicRRlIlUYGLTSTvMk+4TUZggHpzhCOSQ5dO1BkAorBYbws+WJ4Fe+of0Doh
M4xrPhYBZz3HQw==
-----END CERTIFICATE-----
Generated at Fri Sep 25 04:25:55 2026 by rpki-client