Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5f/b370c2-d46b-47b5-af28-645680e92fd4/1/AosCB3NxOyxT0GjjQuk_x6rfruI.mft
File: AosCB3NxOyxT0GjjQuk_x6rfruI.mft (raw, json)
Hash identifier: 3c83BAlGjkdG33k88s+bnxc4RD7hJ3J8GdSq97sGUsU=
Subject key identifier: 2B:74:5D:EA:39:00:E7:F9:54:30:4C:E4:CE:B3:4B:A6:49:BF:FF:D5
Authority key identifier: 02:8B:02:07:73:71:3B:2C:53:D0:68:E3:42:E9:3F:C7:AA:DF:AE:E2
Certificate issuer: /CN=028b020773713b2c53d068e342e93fc7aadfaee2
Certificate serial: 01A0D9BAB0C623916BEFD43E1047C9189BF2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AosCB3NxOyxT0GjjQuk_x6rfruI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/b370c2-d46b-47b5-af28-645680e92fd4/1/AosCB3NxOyxT0GjjQuk_x6rfruI.mft
Manifest number: 7A
Signing time: Fri 25 Sep 2026 18:01:25 +0000
Manifest this update: Fri 25 Sep 2026 18:01:25 +0000
Manifest next update: Sat 26 Sep 2026 18:01:25 +0000
Files and hashes: 1: AosCB3NxOyxT0GjjQuk_x6rfruI.crl (hash: zWceazK9lEgxckkD3WfbnDY+zg7Cw91cCwHzR67CiKo=)
2: g3EmADklwdN8SKQpyrRDpqOQn-A.asa (hash: XhAeshwtF1WxC0VdPxr/7VnAsSO7+obprfhUQB/R5ms=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/b370c2-d46b-47b5-af28-645680e92fd4/1/AosCB3NxOyxT0GjjQuk_x6rfruI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/b370c2-d46b-47b5-af28-645680e92fd4/1/AosCB3NxOyxT0GjjQuk_x6rfruI.mft
rsync://rpki.ripe.net/repository/DEFAULT/AosCB3NxOyxT0GjjQuk_x6rfruI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 17:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d9:ba:b0:c6:23:91:6b:ef:d4:3e:10:47:c9:18:9b:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=028b020773713b2c53d068e342e93fc7aadfaee2
Validity
Not Before: Sep 25 18:01:25 2026 GMT
Not After : Sep 26 18:01:25 2026 GMT
Subject: CN=2b745dea3900e7f954304ce4ceb34ba649bfffd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:e3:7e:ee:75:b6:82:2e:f0:ec:6d:fc:d6:76:
f5:79:4b:2d:9e:68:2e:a1:ee:28:ea:6c:c0:b1:c5:
eb:d4:01:21:68:5c:47:be:96:96:52:c2:41:c7:09:
c3:eb:7e:c9:9f:c1:01:99:a5:31:39:97:81:b4:e0:
b2:91:de:f4:89:eb:27:10:87:b0:8c:b3:60:f6:55:
0d:24:54:cb:bf:1b:37:97:42:3a:3a:fc:6a:d9:e8:
76:43:11:7b:1a:97:65:df:6c:2a:ee:b0:fb:48:81:
ef:fd:2d:f2:b9:57:cf:17:2a:b0:5f:5f:a1:d7:ad:
be:1a:23:cf:20:7d:de:90:86:84:fa:ef:dd:58:7e:
72:03:55:fc:40:9e:b6:4f:dc:b9:e6:83:7f:45:51:
87:bd:9c:ab:e6:ad:b0:09:f1:c9:6b:24:49:fa:ad:
f0:84:b6:26:14:9e:3d:ee:05:c0:60:e0:81:53:8c:
11:06:23:51:f2:03:2e:a2:dd:71:fa:be:6a:8a:a9:
e0:a1:58:f2:28:8f:09:db:ac:b2:f8:95:bf:d6:25:
ef:e3:ff:31:84:1b:b0:0f:63:5a:43:e9:eb:f3:07:
8f:c0:3a:ff:df:37:8a:99:a9:77:e6:81:df:21:37:
65:4c:2c:4f:68:e7:df:8d:dd:5d:cd:5b:e1:bf:cb:
5d:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:74:5D:EA:39:00:E7:F9:54:30:4C:E4:CE:B3:4B:A6:49:BF:FF:D5
X509v3 Authority Key Identifier:
keyid:02:8B:02:07:73:71:3B:2C:53:D0:68:E3:42:E9:3F:C7:AA:DF:AE:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AosCB3NxOyxT0GjjQuk_x6rfruI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b370c2-d46b-47b5-af28-645680e92fd4/1/AosCB3NxOyxT0GjjQuk_x6rfruI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b370c2-d46b-47b5-af28-645680e92fd4/1/AosCB3NxOyxT0GjjQuk_x6rfruI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:25:6c:4d:ed:9d:42:ce:b3:95:67:ae:5a:9f:c7:ac:2b:c0:
3b:da:4d:a8:97:2a:bb:5c:b4:9d:29:f8:4e:f8:40:e0:fe:dc:
f9:49:a3:d0:5a:e1:51:0a:7b:a7:75:58:64:2c:8b:9e:bd:00:
d6:60:ae:3b:c7:58:1d:e6:7d:af:7c:be:90:f3:03:0d:d6:9f:
1e:08:68:d0:54:4f:2f:fa:c4:85:4b:4a:cc:23:11:9e:1d:3e:
ef:5b:0c:74:50:6a:18:35:d7:89:24:4b:6f:3f:af:98:26:24:
e0:b6:45:6c:bd:48:a0:68:d7:72:cc:9a:3d:11:4c:49:d5:77:
74:77:37:04:15:e4:9b:44:38:c2:3b:83:07:80:b4:15:82:35:
cb:05:d7:59:61:8e:78:ff:8b:f5:11:26:fc:6d:2f:01:13:3f:
2f:f1:19:d5:fe:42:21:22:d8:5a:03:cd:9b:44:70:73:d3:df:
ef:8e:4b:90:3f:aa:04:5e:85:ba:93:33:b6:6b:77:1c:01:93:
d1:70:29:ca:2c:91:8e:ec:93:bb:16:48:16:c8:3a:35:12:dd:
4e:5c:9c:66:48:f2:b3:92:f6:68:41:e9:a7:fb:48:21:9c:26:
43:69:6c:db:49:41:bc:bf:24:b1:f9:31:42:81:af:0a:ee:35:
1f:b7:98:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 03:07:16 2026 by rpki-client