Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/22b88b-1fbf-40f4-ada5-270929d05192/1/AonuzqJ5QTJX2JCMJVaKvrivhnc.mft
File: AonuzqJ5QTJX2JCMJVaKvrivhnc.mft (raw, json)
Hash identifier: cpYdvs+uApz+as3izfDrtwHUU7ifAFGPAfcc2WJf7zs=
Subject key identifier: D7:C4:14:D7:C2:B6:B9:46:96:6B:49:3C:02:72:E8:EC:45:C8:26:E0
Authority key identifier: 02:89:EE:CE:A2:79:41:32:57:D8:90:8C:25:56:8A:BE:B8:AF:86:77
Certificate issuer: /CN=0289eecea279413257d8908c25568abeb8af8677
Certificate serial: 019F916D7258C212AC2316F6824D744A52FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AonuzqJ5QTJX2JCMJVaKvrivhnc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/22b88b-1fbf-40f4-ada5-270929d05192/1/AonuzqJ5QTJX2JCMJVaKvrivhnc.mft
Manifest number: 0F3D
Signing time: Fri 24 Jul 2026 00:01:36 +0000
Manifest this update: Fri 24 Jul 2026 00:01:36 +0000
Manifest next update: Sat 25 Jul 2026 00:01:36 +0000
Files and hashes: 1: AonuzqJ5QTJX2JCMJVaKvrivhnc.crl (hash: 65rGDMHxdG3LrDbAO/m7lPUUYvN6gcpNHzAomo7hvIE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/22b88b-1fbf-40f4-ada5-270929d05192/1/AonuzqJ5QTJX2JCMJVaKvrivhnc.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/22b88b-1fbf-40f4-ada5-270929d05192/1/AonuzqJ5QTJX2JCMJVaKvrivhnc.mft
rsync://rpki.ripe.net/repository/DEFAULT/AonuzqJ5QTJX2JCMJVaKvrivhnc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:6d:72:58:c2:12:ac:23:16:f6:82:4d:74:4a:52:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0289eecea279413257d8908c25568abeb8af8677
Validity
Not Before: Jul 24 00:01:36 2026 GMT
Not After : Jul 25 00:01:36 2026 GMT
Subject: CN=d7c414d7c2b6b946966b493c0272e8ec45c826e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:59:6b:1a:fc:ee:b4:4e:f0:33:35:46:cb:a1:
db:76:db:00:9b:5f:a1:fd:62:d7:1e:9f:ff:64:c0:
95:60:88:fa:6e:8a:e4:09:23:03:df:78:49:ca:6f:
24:dc:f5:ed:17:37:70:b6:be:7a:62:75:c1:56:5f:
d6:13:05:9c:84:a8:5f:8d:13:d7:f1:2b:43:71:af:
e9:80:96:25:09:15:75:be:71:a4:e6:9f:22:d3:4b:
68:88:73:1a:67:7b:29:26:25:25:32:18:b3:31:2f:
77:76:83:e1:2b:8e:cf:90:ae:13:f4:8e:a3:00:b1:
da:53:81:a2:55:94:4d:11:7e:f4:82:5a:db:6a:b3:
c1:0c:72:4e:ec:0a:dc:33:31:80:ce:e3:61:61:36:
1f:10:06:11:97:89:76:4f:7d:f1:4e:ac:6f:68:c3:
f1:3b:b1:1b:85:4b:e0:d8:c8:9b:8e:01:d3:0a:ad:
f6:e4:5a:23:f2:50:c5:8e:ae:e0:37:ae:24:42:ef:
6f:09:4e:81:64:9d:f9:e5:7e:ae:7a:49:60:15:eb:
4a:74:85:78:b1:e1:7b:fc:54:1c:40:3a:ce:cc:6b:
f7:de:80:f4:78:22:0f:a7:ac:f8:99:e4:0f:8f:37:
75:ab:7e:db:96:78:11:a3:1b:21:2b:e3:16:46:8e:
cb:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:C4:14:D7:C2:B6:B9:46:96:6B:49:3C:02:72:E8:EC:45:C8:26:E0
X509v3 Authority Key Identifier:
keyid:02:89:EE:CE:A2:79:41:32:57:D8:90:8C:25:56:8A:BE:B8:AF:86:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AonuzqJ5QTJX2JCMJVaKvrivhnc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/22b88b-1fbf-40f4-ada5-270929d05192/1/AonuzqJ5QTJX2JCMJVaKvrivhnc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/22b88b-1fbf-40f4-ada5-270929d05192/1/AonuzqJ5QTJX2JCMJVaKvrivhnc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:1a:f0:7b:4c:63:28:f0:f7:f0:68:be:b6:e9:62:84:b6:56:
12:1f:2f:26:d0:3e:58:27:80:ab:4c:75:f6:58:be:8b:7f:45:
78:f4:c8:00:ed:3b:d4:62:09:0c:f1:48:d4:29:c3:ac:4f:7f:
0b:f0:9e:d0:08:50:61:c9:35:55:34:3a:dc:f5:a3:ee:6d:4d:
0d:8e:48:c3:d3:19:93:48:5e:c8:a9:b3:e5:f2:bf:70:4b:ed:
2c:37:c4:1f:b2:5b:06:74:cd:d7:3c:ff:33:45:70:e7:4b:95:
e4:d2:c1:1e:4f:31:6c:88:18:3d:59:c5:4b:54:a9:f7:0d:2f:
14:d7:6b:41:30:c2:d9:ec:4a:fe:39:d0:4c:da:55:3d:6a:fc:
2b:30:ea:d0:49:5c:a6:3f:6e:cd:a0:8a:12:a4:3a:05:d3:74:
8a:c3:ba:41:9e:eb:15:28:06:b3:85:ee:a9:71:10:34:b7:ba:
bd:14:6d:19:11:3d:f6:bc:da:6a:75:3f:36:ac:4c:48:5a:3c:
3b:2c:cb:de:4d:f4:8c:27:9f:8a:1f:72:8e:0d:6d:f5:51:8a:
6b:a3:dd:f9:85:23:6c:49:a2:2c:4f:26:9a:25:64:ad:99:03:
15:5b:aa:f5:21:40:46:26:71:df:19:02:2b:83:96:cf:74:d9:
b9:e4:40:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:55:51 2026 by rpki-client