Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/68/9f3205-52e9-46a4-b6c2-c703522488f9/1/AoT9lBz3spS4gudNsPyXFnQ02rw.mft
File: AoT9lBz3spS4gudNsPyXFnQ02rw.mft (raw, json)
Hash identifier: LO4ZOrSYf5luaX1kKgHl6Vn1wHftqLF/WV1mTzmLuSo=
Subject key identifier: 42:CF:8D:C4:64:B7:36:08:F2:15:6A:78:A2:77:9E:50:EB:26:51:C8
Authority key identifier: 02:84:FD:94:1C:F7:B2:94:B8:82:E7:4D:B0:FC:97:16:74:34:DA:BC
Certificate issuer: /CN=0284fd941cf7b294b882e74db0fc97167434dabc
Certificate serial: 01A0CA7DF5E6231F43AED9F56F4006DB6B25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AoT9lBz3spS4gudNsPyXFnQ02rw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/9f3205-52e9-46a4-b6c2-c703522488f9/1/AoT9lBz3spS4gudNsPyXFnQ02rw.mft
Manifest number: 0243
Signing time: Tue 22 Sep 2026 19:00:47 +0000
Manifest this update: Tue 22 Sep 2026 19:00:47 +0000
Manifest next update: Wed 23 Sep 2026 19:00:47 +0000
Files and hashes: 1: AoT9lBz3spS4gudNsPyXFnQ02rw.crl (hash: dEeLuuH+pPfxc7weo40wP7kjCyQBWa4RQkVvoF6YCp0=)
2: KWX40V7o8A6zMkKoIGkCmwKYmr0.roa (hash: nJ0kf2dRdOxQXbxBLcQMmLtNRpU/yw5QdnU4YcpxOtc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/9f3205-52e9-46a4-b6c2-c703522488f9/1/AoT9lBz3spS4gudNsPyXFnQ02rw.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/9f3205-52e9-46a4-b6c2-c703522488f9/1/AoT9lBz3spS4gudNsPyXFnQ02rw.mft
rsync://rpki.ripe.net/repository/DEFAULT/AoT9lBz3spS4gudNsPyXFnQ02rw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ca:7d:f5:e6:23:1f:43:ae:d9:f5:6f:40:06:db:6b:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0284fd941cf7b294b882e74db0fc97167434dabc
Validity
Not Before: Sep 22 19:00:47 2026 GMT
Not After : Sep 23 19:00:47 2026 GMT
Subject: CN=42cf8dc464b73608f2156a78a2779e50eb2651c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:03:c1:ff:a1:c9:8b:de:d7:17:20:11:12:c1:
61:5b:0e:1f:b7:13:3b:7d:1a:60:6d:b5:08:c9:83:
ba:d0:db:00:05:98:bb:c5:ae:8e:6d:b7:49:ad:3e:
5b:ce:10:39:ea:cb:9a:f4:5f:e3:79:78:b3:c7:b3:
0c:9d:6f:52:8f:82:3e:7b:ca:51:a6:c7:30:1b:a1:
d3:0e:b5:d4:5a:f1:b2:55:ca:13:9f:b5:85:70:e4:
a8:d1:e0:a3:24:88:e3:45:f2:ca:45:e1:b1:bb:63:
e1:f5:d2:40:b0:a1:5a:e5:bc:de:b7:07:50:06:14:
da:b6:3d:3d:6f:82:69:fd:e4:82:e3:28:22:ad:38:
85:ec:80:40:31:62:22:71:6a:4a:f3:a1:b3:a7:04:
23:06:41:65:b0:a5:24:84:68:75:45:2e:87:4e:c9:
4f:38:64:ba:56:98:d3:a1:6b:ed:39:85:87:03:2b:
cb:95:fb:f6:c8:0d:41:81:76:4a:f5:c6:4d:3d:07:
a9:92:79:f2:bd:a3:18:a2:af:cc:8b:48:9c:c4:c8:
2e:ae:c3:a7:84:ed:72:1b:45:54:02:6b:4e:36:67:
2b:28:3d:ed:34:f5:da:a3:e4:97:fb:6f:0c:c9:cc:
c8:2d:6b:08:75:89:fb:e5:5c:84:85:3e:95:0f:63:
e9:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:CF:8D:C4:64:B7:36:08:F2:15:6A:78:A2:77:9E:50:EB:26:51:C8
X509v3 Authority Key Identifier:
keyid:02:84:FD:94:1C:F7:B2:94:B8:82:E7:4D:B0:FC:97:16:74:34:DA:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AoT9lBz3spS4gudNsPyXFnQ02rw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/9f3205-52e9-46a4-b6c2-c703522488f9/1/AoT9lBz3spS4gudNsPyXFnQ02rw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/9f3205-52e9-46a4-b6c2-c703522488f9/1/AoT9lBz3spS4gudNsPyXFnQ02rw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:54:2b:73:71:59:f9:f4:42:da:8b:ae:b0:4a:79:44:e6:6b:
0a:89:a9:26:68:88:25:60:0c:12:df:3a:6f:d3:f1:be:a6:68:
27:4c:31:53:3f:6f:fd:5f:af:21:2e:bf:51:ab:17:ff:a1:73:
e9:34:d7:41:50:d4:9d:98:e3:e3:a0:22:3e:6a:b6:28:4b:dd:
11:73:99:38:a3:df:84:fb:68:e1:f5:de:3e:6a:db:c7:bb:6a:
dd:09:1f:5e:e2:55:7c:54:76:72:8c:33:aa:1b:46:8d:d9:62:
21:b2:00:64:01:af:9c:5c:6c:35:61:f5:a4:c7:dc:11:b1:eb:
43:ec:4f:01:89:20:c7:1b:3f:36:be:71:24:0d:3a:4e:f6:44:
cc:f2:6d:59:1d:0d:0b:9e:79:74:4a:28:da:a9:4c:e9:38:27:
d9:b9:ce:76:97:ee:ec:6f:17:9e:18:6c:84:80:27:ce:6a:23:
e6:3e:e5:d9:d6:4e:3a:c0:53:96:de:dc:a5:8d:b3:77:9f:42:
2c:8f:25:b6:cb:28:b9:27:79:e9:b0:b9:d4:c7:2f:c9:86:e0:
8b:02:04:aa:d1:5d:c3:bd:21:28:04:e6:19:ba:34:ea:6c:24:
86:3e:93:ac:c6:84:4f:de:75:c2:1f:9e:00:dc:50:67:85:4e:
37:3d:da:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 21:54:13 2026 by rpki-client