Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/46/cadd6e-65c6-44da-9ee9-efea65dc3020/1/AoXs_ogqAqGVABRSSDMybJ7V0D0.mft
File: AoXs_ogqAqGVABRSSDMybJ7V0D0.mft (raw, json)
Hash identifier: 7na+LiGviQpNfa5o16HpS9wBXj2Ti99yH3hal9tsnTU=
Subject key identifier: EA:55:0C:77:2F:91:04:35:5C:AC:FD:A1:97:49:62:E7:4A:46:BD:F1
Authority key identifier: 02:85:EC:FE:88:2A:02:A1:95:00:14:52:48:33:32:6C:9E:D5:D0:3D
Certificate issuer: /CN=0285ecfe882a02a1950014524833326c9ed5d03d
Certificate serial: 01A0CA4680F028CDD264BB61236150E51E8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AoXs_ogqAqGVABRSSDMybJ7V0D0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/cadd6e-65c6-44da-9ee9-efea65dc3020/1/AoXs_ogqAqGVABRSSDMybJ7V0D0.mft
Manifest number: E2
Signing time: Tue 22 Sep 2026 18:00:13 +0000
Manifest this update: Tue 22 Sep 2026 18:00:13 +0000
Manifest next update: Wed 23 Sep 2026 18:00:13 +0000
Files and hashes: 1: AoXs_ogqAqGVABRSSDMybJ7V0D0.crl (hash: MkyuGyEFih6p6Umb3au41ua7l/aRXSPDkqqBpdTWj/o=)
2: gELtUXmcMpXkfU-ruzwBQq4A7Jw.asa (hash: 24wkmPQWoqZNRgCVS5rExhMXF8yP0+BcQiBXM5iYW9Q=)
3: iYTyASUWDKAaro_VtHzd5V1NW_k.asa (hash: 2dfsEYfXwhAKl0La6hBxTYJuJnYLE7CaYUYv30nw4zs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/cadd6e-65c6-44da-9ee9-efea65dc3020/1/AoXs_ogqAqGVABRSSDMybJ7V0D0.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/cadd6e-65c6-44da-9ee9-efea65dc3020/1/AoXs_ogqAqGVABRSSDMybJ7V0D0.mft
rsync://rpki.ripe.net/repository/DEFAULT/AoXs_ogqAqGVABRSSDMybJ7V0D0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 18:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ca:46:80:f0:28:cd:d2:64:bb:61:23:61:50:e5:1e:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0285ecfe882a02a1950014524833326c9ed5d03d
Validity
Not Before: Sep 22 18:00:13 2026 GMT
Not After : Sep 23 18:00:13 2026 GMT
Subject: CN=ea550c772f9104355cacfda1974962e74a46bdf1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:f5:25:e4:6e:17:20:52:9d:0a:61:d7:17:84:
b1:79:7b:5d:2e:66:5c:ad:71:d5:5a:50:7e:a0:95:
ee:d7:c3:bd:1a:4e:52:33:8d:48:ec:e2:2e:0d:f4:
a9:91:e1:0d:d6:3d:d5:60:b9:85:c8:1a:0a:4a:da:
6c:0c:d0:cc:96:79:8d:01:c4:2d:cd:0f:12:a3:ab:
65:94:23:ad:a2:b5:45:d0:3f:a3:e4:09:df:a3:fd:
59:14:3b:e6:a0:04:96:41:bb:75:08:05:6d:b3:16:
13:2e:80:31:f0:ce:2a:d7:8d:59:de:73:4c:ac:f2:
dc:62:60:f6:51:2d:98:b0:b1:e5:d8:44:28:6f:57:
20:a2:8d:52:47:03:ee:61:33:4c:ee:4e:4c:40:b4:
bc:ca:db:42:7d:eb:ad:0c:df:30:b9:7b:69:6b:c0:
e4:e3:44:cd:57:32:e2:7b:70:c6:f8:11:8f:42:12:
72:4e:7f:41:05:72:64:80:a4:42:5f:ee:e8:3f:d3:
7c:6a:5a:22:25:70:b6:a5:be:3d:40:a4:e9:39:74:
c6:2b:6a:cc:07:46:ff:8a:fb:98:a8:b2:27:13:93:
28:72:18:fd:94:97:e6:13:fc:58:5b:89:99:9d:0d:
25:a3:cc:68:52:35:a7:7c:e4:27:4a:a4:de:2c:a2:
f5:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:55:0C:77:2F:91:04:35:5C:AC:FD:A1:97:49:62:E7:4A:46:BD:F1
X509v3 Authority Key Identifier:
keyid:02:85:EC:FE:88:2A:02:A1:95:00:14:52:48:33:32:6C:9E:D5:D0:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AoXs_ogqAqGVABRSSDMybJ7V0D0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/cadd6e-65c6-44da-9ee9-efea65dc3020/1/AoXs_ogqAqGVABRSSDMybJ7V0D0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/cadd6e-65c6-44da-9ee9-efea65dc3020/1/AoXs_ogqAqGVABRSSDMybJ7V0D0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:d2:af:d0:53:86:b6:44:8f:e9:47:02:42:92:71:9c:e6:6d:
95:b1:16:fa:81:72:9d:f7:db:78:cf:16:7f:0a:ae:f6:57:d1:
76:b8:b3:8c:32:fc:6c:7b:d1:7f:ae:fa:05:c4:5a:7f:c6:38:
70:fc:56:c2:49:0f:35:d9:1d:ba:86:02:d5:d8:ad:d3:f4:3f:
39:46:28:b0:29:aa:ed:ba:ad:89:46:ba:ca:22:53:b5:24:c9:
54:f4:5a:43:e1:91:1a:c2:e8:b6:7d:7c:91:aa:d3:94:e2:89:
4f:1d:19:fb:02:d7:ea:e5:8f:67:2d:0a:4c:55:1b:ca:59:7c:
cf:db:98:5b:59:88:b0:3f:83:04:af:48:1f:f3:d5:01:17:1f:
da:cd:cd:0c:17:8c:6d:14:bb:c3:14:9d:f5:69:8e:17:0b:ba:
a4:90:d3:2f:bf:f7:19:b3:32:d0:c5:62:7a:bc:57:8a:82:fb:
62:6a:6b:5c:83:90:45:90:d8:cd:f0:05:2f:12:89:53:e0:b2:
42:2e:e2:2c:f9:87:b2:54:d6:fc:f0:04:87:dd:3e:87:d2:8d:
08:c1:57:81:03:91:68:4d:8b:9d:89:f6:c8:e1:77:19:12:99:
f8:e7:73:7e:10:d2:3e:43:e9:87:8f:43:1d:41:8a:7a:1e:f1:
bd:69:fb:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 03:37:16 2026 by rpki-client