Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/a624d1-3feb-486d-b020-9ef967fc77d8/1/Aoek4s-o7NArUHMCs8bbF_IRdC8.mft
File: Aoek4s-o7NArUHMCs8bbF_IRdC8.mft (raw, json)
Hash identifier: 5JQI+eCin9RDfk2uncO+7DM7Mxt8PsscY9H3ih2ELdA=
Subject key identifier: 34:AF:5D:D7:1E:EF:D3:5D:9A:B0:2D:3D:7F:04:6F:B9:B9:72:79:E1
Authority key identifier: 02:87:A4:E2:CF:A8:EC:D0:2B:50:73:02:B3:C6:DB:17:F2:11:74:2F
Certificate issuer: /CN=0287a4e2cfa8ecd02b507302b3c6db17f211742f
Certificate serial: 019F90C83E9110A0A1227906713D23C0C933
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Aoek4s-o7NArUHMCs8bbF_IRdC8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/a624d1-3feb-486d-b020-9ef967fc77d8/1/Aoek4s-o7NArUHMCs8bbF_IRdC8.mft
Manifest number: 0395
Signing time: Thu 23 Jul 2026 21:01:09 +0000
Manifest this update: Thu 23 Jul 2026 21:01:09 +0000
Manifest next update: Fri 24 Jul 2026 21:01:09 +0000
Files and hashes: 1: 3DpnlXPjDQo6s3MFIV18FHk0jxQ.roa (hash: NIhxzfLk3mbiT3cRk3puqCB8KvdXHUd8N5EcFBnPSDo=)
2: Aoek4s-o7NArUHMCs8bbF_IRdC8.crl (hash: xKAaimkMJX04ELpGKwdX1hC70aTQzPkxD3s/icb8y50=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/a624d1-3feb-486d-b020-9ef967fc77d8/1/Aoek4s-o7NArUHMCs8bbF_IRdC8.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/a624d1-3feb-486d-b020-9ef967fc77d8/1/Aoek4s-o7NArUHMCs8bbF_IRdC8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Aoek4s-o7NArUHMCs8bbF_IRdC8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 21:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:c8:3e:91:10:a0:a1:22:79:06:71:3d:23:c0:c9:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0287a4e2cfa8ecd02b507302b3c6db17f211742f
Validity
Not Before: Jul 23 21:01:09 2026 GMT
Not After : Jul 24 21:01:09 2026 GMT
Subject: CN=34af5dd71eefd35d9ab02d3d7f046fb9b97279e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:96:1e:e9:60:c3:73:3a:81:ed:13:10:a1:83:
e0:8d:df:50:cb:10:05:f4:c1:2d:98:32:94:1a:aa:
b9:26:d4:46:91:de:b0:2a:7a:3d:b4:9d:2a:b9:80:
f2:b3:cb:1b:f6:3a:d6:d6:f2:78:d2:25:33:28:0d:
b3:7f:38:ad:4d:6b:57:21:6f:c4:06:1b:00:16:5d:
5c:2c:ac:3c:58:36:5c:1f:a6:d6:75:4e:37:ac:eb:
b3:83:eb:61:4f:2c:ef:e1:91:a0:89:8f:09:81:b3:
40:e2:91:70:be:aa:c6:d4:cd:d9:20:e1:1f:02:02:
f7:5b:2c:0d:f7:cd:ee:7e:20:93:2f:47:0d:82:59:
18:9b:4b:69:25:70:52:f1:82:74:25:c9:97:64:c6:
39:ea:2e:e9:c6:67:50:86:76:bb:61:ef:eb:00:67:
46:0c:c2:9e:e5:43:6e:75:f4:7b:47:b6:a3:a7:05:
a6:36:c7:66:8f:2a:84:62:e5:cf:17:b4:6b:8f:23:
a9:65:ba:e8:7f:f3:78:e6:80:21:7b:92:05:77:e2:
75:f7:5e:66:6d:e0:ea:37:5d:eb:a5:b6:ef:51:da:
d2:c5:c1:1b:7d:b7:38:9a:dd:b7:dd:db:17:02:dd:
48:91:9e:0a:01:f9:02:7a:52:ac:0a:d1:c8:03:6a:
f9:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:AF:5D:D7:1E:EF:D3:5D:9A:B0:2D:3D:7F:04:6F:B9:B9:72:79:E1
X509v3 Authority Key Identifier:
keyid:02:87:A4:E2:CF:A8:EC:D0:2B:50:73:02:B3:C6:DB:17:F2:11:74:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Aoek4s-o7NArUHMCs8bbF_IRdC8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/a624d1-3feb-486d-b020-9ef967fc77d8/1/Aoek4s-o7NArUHMCs8bbF_IRdC8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/a624d1-3feb-486d-b020-9ef967fc77d8/1/Aoek4s-o7NArUHMCs8bbF_IRdC8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:22:46:c6:14:64:61:e6:76:1f:f1:39:46:e5:90:55:7d:0f:
e7:10:12:30:e6:ac:c1:f2:a8:97:72:6f:94:6a:fb:ee:c6:6f:
a9:01:50:42:f5:78:76:cb:0f:0f:05:82:b6:dc:11:8a:34:b7:
33:fb:cc:24:2c:7e:7f:2f:c8:0b:53:da:91:f0:b1:02:1a:09:
47:19:f7:eb:00:ed:50:5e:63:93:bf:38:8a:25:f0:cb:b5:6a:
89:59:5f:4f:97:ce:2f:5a:8d:59:83:cf:46:23:50:80:8a:eb:
24:81:b9:04:3e:40:4c:ec:1f:53:86:8b:e7:cf:9f:f7:a2:e3:
3f:3d:6a:2a:ad:82:b8:b0:2d:c5:77:b6:c9:7f:0f:81:7e:44:
8d:9b:30:9b:25:16:4b:ae:75:84:8b:56:bb:bb:58:db:75:79:
ef:45:42:f4:37:c3:a6:86:3f:f6:ce:2e:c1:eb:09:b0:3e:c4:
7f:ab:57:f5:d0:3c:c6:fd:8d:65:7b:5c:e9:94:a1:b9:ff:bc:
b4:b6:5a:10:d7:d0:0b:20:4c:59:35:22:06:5f:56:b8:ec:12:
79:d1:2a:64:00:2f:40:58:1d:52:13:39:ba:fc:d5:c2:a2:75:
2d:22:15:08:0d:57:15:a3:72:c1:ae:9f:fe:18:38:f6:ef:19:
ee:86:dd:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:15:39 2026 by rpki-client