Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/58/a624d1-3feb-486d-b020-9ef967fc77d8/1/Aoek4s-o7NArUHMCs8bbF_IRdC8.mft
File: Aoek4s-o7NArUHMCs8bbF_IRdC8.mft (raw, json)
Hash identifier: FEHCJvvwMauIAF4y1AnUTtpg6UnTLf8DS3TweNT1aX4=
Subject key identifier: 37:3D:F3:89:5D:CD:67:BA:9B:40:DB:CF:F2:D1:CD:3C:90:58:02:38
Authority key identifier: 02:87:A4:E2:CF:A8:EC:D0:2B:50:73:02:B3:C6:DB:17:F2:11:74:2F
Certificate issuer: /CN=0287a4e2cfa8ecd02b507302b3c6db17f211742f
Certificate serial: 01A0CB90030AEBDE9BB8963FE20981C51EB0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Aoek4s-o7NArUHMCs8bbF_IRdC8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/a624d1-3feb-486d-b020-9ef967fc77d8/1/Aoek4s-o7NArUHMCs8bbF_IRdC8.mft
Manifest number: 0438
Signing time: Wed 23 Sep 2026 00:00:07 +0000
Manifest this update: Wed 23 Sep 2026 00:00:07 +0000
Manifest next update: Thu 24 Sep 2026 00:00:07 +0000
Files and hashes: 1: 3DpnlXPjDQo6s3MFIV18FHk0jxQ.roa (hash: NIhxzfLk3mbiT3cRk3puqCB8KvdXHUd8N5EcFBnPSDo=)
2: Aoek4s-o7NArUHMCs8bbF_IRdC8.crl (hash: 8z6BfvfBniVcuUZrj6bb9G/gigDmJDe821w8phgDZt8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/a624d1-3feb-486d-b020-9ef967fc77d8/1/Aoek4s-o7NArUHMCs8bbF_IRdC8.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/a624d1-3feb-486d-b020-9ef967fc77d8/1/Aoek4s-o7NArUHMCs8bbF_IRdC8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Aoek4s-o7NArUHMCs8bbF_IRdC8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 22:31:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cb:90:03:0a:eb:de:9b:b8:96:3f:e2:09:81:c5:1e:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0287a4e2cfa8ecd02b507302b3c6db17f211742f
Validity
Not Before: Sep 23 00:00:07 2026 GMT
Not After : Sep 24 00:00:07 2026 GMT
Subject: CN=373df3895dcd67ba9b40dbcff2d1cd3c90580238
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:a3:d2:36:85:f9:4f:dc:7d:c1:41:25:53:3d:
4b:8b:91:02:38:a7:24:9f:15:19:0b:be:9f:35:a1:
83:8b:fa:e5:d9:0e:d9:88:16:f7:0b:8e:51:40:61:
13:65:3f:3a:02:7f:84:92:cb:e1:db:3e:b9:ce:8b:
f0:ea:89:6b:ec:2a:91:d1:6d:bb:2c:f5:b9:43:fe:
73:90:21:09:7f:90:45:30:49:2d:9d:c1:c5:a3:a6:
40:53:1f:8b:77:59:44:c5:d5:ee:ae:a2:47:da:ac:
82:8b:7f:ea:3e:54:88:cc:57:3d:4f:3b:f6:97:72:
a5:69:71:bb:2e:73:8f:8a:40:3c:0b:05:72:d4:93:
38:04:4b:58:f0:05:97:cd:bf:f7:48:b7:7f:b0:af:
80:d2:8f:f0:97:62:68:d2:2a:b0:9f:0b:82:de:fd:
9f:9f:c3:a4:fe:b6:08:8a:ce:0c:61:91:0d:05:6b:
44:d2:bd:0c:c8:95:86:1c:4d:e6:d0:d0:c3:90:77:
f4:eb:db:74:39:26:f8:ea:4f:bd:ad:40:7a:85:6e:
ed:ab:27:4d:f4:7b:94:af:be:7b:cd:6c:10:4b:34:
ab:df:d9:89:7f:88:ba:3f:74:fa:ac:1e:6d:6f:80:
93:a8:be:3e:32:35:c4:51:85:bf:ba:0a:fe:64:44:
55:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:3D:F3:89:5D:CD:67:BA:9B:40:DB:CF:F2:D1:CD:3C:90:58:02:38
X509v3 Authority Key Identifier:
keyid:02:87:A4:E2:CF:A8:EC:D0:2B:50:73:02:B3:C6:DB:17:F2:11:74:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Aoek4s-o7NArUHMCs8bbF_IRdC8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/a624d1-3feb-486d-b020-9ef967fc77d8/1/Aoek4s-o7NArUHMCs8bbF_IRdC8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/a624d1-3feb-486d-b020-9ef967fc77d8/1/Aoek4s-o7NArUHMCs8bbF_IRdC8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:75:75:86:3c:56:3c:81:bd:57:14:5f:d8:77:60:e3:37:86:
05:bf:62:19:10:92:9e:7b:00:8d:4b:4c:b4:6c:d5:5e:6d:93:
e3:1b:9a:0a:53:9a:ca:32:b0:e8:52:f8:82:9f:71:62:54:be:
e7:4e:fb:fc:50:0e:fd:c2:1f:b7:0b:ba:0d:bb:e3:7a:a1:43:
79:07:ad:b5:b3:42:45:6a:c4:6f:fd:d5:9e:bc:13:19:43:6b:
4a:03:8d:a5:79:f2:32:b2:8f:45:5e:15:68:06:9f:37:75:ed:
a4:74:a4:d6:c2:1c:8a:66:62:a5:bf:18:b1:02:79:e7:ad:9b:
f2:77:46:cc:6d:35:2c:e3:78:79:58:78:ca:a8:92:c4:2c:48:
a6:5f:c5:4b:07:0d:64:0e:9d:12:e2:da:e0:18:4b:c3:41:13:
fe:3a:24:0c:ea:2d:cf:6d:15:54:08:37:0b:e5:10:e9:79:ce:
19:9f:a2:08:14:3b:84:e0:12:a8:80:eb:7f:31:11:07:62:04:
92:a3:aa:1c:67:27:41:b1:d8:a8:8d:fc:6e:88:3d:99:b2:36:
78:44:e6:ba:b0:9d:03:05:53:c8:96:b9:56:d0:4e:ee:cb:ed:
a7:23:d3:54:0b:a8:0a:36:3b:50:a5:a3:1e:99:6c:96:1e:39:
97:4a:9d:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 03:19:41 2026 by rpki-client