Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/9f3205-52e9-46a4-b6c2-c703522488f9/1/AoT9lBz3spS4gudNsPyXFnQ02rw.mft
File: AoT9lBz3spS4gudNsPyXFnQ02rw.mft (raw, json)
Hash identifier: IUraq7MvjXBwqxAcUYwof2vZvg5rNqCnwsJqTI1hcpw=
Subject key identifier: 62:1B:5D:0F:87:3F:C1:80:F9:F3:D9:53:C7:AE:81:9E:70:4F:13:49
Authority key identifier: 02:84:FD:94:1C:F7:B2:94:B8:82:E7:4D:B0:FC:97:16:74:34:DA:BC
Certificate issuer: /CN=0284fd941cf7b294b882e74db0fc97167434dabc
Certificate serial: 019E1CEBC50622A610A79002FE62F6678042
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AoT9lBz3spS4gudNsPyXFnQ02rw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/9f3205-52e9-46a4-b6c2-c703522488f9/1/AoT9lBz3spS4gudNsPyXFnQ02rw.mft
Manifest number: E0
Signing time: Tue 12 May 2026 16:01:13 +0000
Manifest this update: Tue 12 May 2026 16:01:13 +0000
Manifest next update: Wed 13 May 2026 16:01:13 +0000
Files and hashes: 1: AoT9lBz3spS4gudNsPyXFnQ02rw.crl (hash: DUPtyvEzX+7ucjHvRhkvzrMOumxuKqcHlPUtosSC45s=)
2: KWX40V7o8A6zMkKoIGkCmwKYmr0.roa (hash: nJ0kf2dRdOxQXbxBLcQMmLtNRpU/yw5QdnU4YcpxOtc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/9f3205-52e9-46a4-b6c2-c703522488f9/1/AoT9lBz3spS4gudNsPyXFnQ02rw.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/9f3205-52e9-46a4-b6c2-c703522488f9/1/AoT9lBz3spS4gudNsPyXFnQ02rw.mft
rsync://rpki.ripe.net/repository/DEFAULT/AoT9lBz3spS4gudNsPyXFnQ02rw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:eb:c5:06:22:a6:10:a7:90:02:fe:62:f6:67:80:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0284fd941cf7b294b882e74db0fc97167434dabc
Validity
Not Before: May 12 16:01:13 2026 GMT
Not After : May 13 16:01:13 2026 GMT
Subject: CN=621b5d0f873fc180f9f3d953c7ae819e704f1349
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:3f:77:8c:7d:11:32:7b:3d:33:2b:ab:db:50:
fe:0f:16:a1:47:59:49:6d:e2:fd:6a:a4:4b:a5:dd:
b9:9b:f1:e8:1e:67:96:1a:9d:a3:f5:a9:b3:1a:c9:
c7:e8:02:95:91:50:80:68:96:c4:c2:6e:45:3f:a9:
29:56:fb:dc:0b:3e:8b:df:9f:4f:7c:0e:5e:83:73:
01:1d:8e:27:17:06:4b:6e:78:8f:f3:d6:0d:5b:e1:
43:4b:de:60:08:72:ca:80:58:1c:72:df:95:a3:29:
51:cb:7e:fc:4e:6d:18:19:99:53:88:06:75:ea:a3:
65:c7:1a:66:53:08:ac:58:3d:bc:79:4f:82:45:6a:
0d:2d:3d:09:7a:c6:9a:2d:6d:5d:b2:03:12:9a:63:
48:6d:28:fe:7f:79:a4:22:4a:84:dc:90:c4:37:36:
28:ca:83:12:f7:5a:30:9e:5e:4f:95:1d:68:37:4f:
d8:7c:46:8a:1f:23:4d:6f:f3:04:38:10:31:68:39:
03:a9:31:a3:41:4a:c3:4d:d6:34:20:cf:2f:e4:3a:
ee:a4:e7:bd:c4:c6:35:9d:6b:da:36:81:84:16:d3:
e3:e8:cd:58:a1:e4:55:a6:45:7a:2a:81:c3:7a:05:
53:44:ed:15:25:4a:f4:05:8b:6a:de:27:99:1e:45:
af:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:1B:5D:0F:87:3F:C1:80:F9:F3:D9:53:C7:AE:81:9E:70:4F:13:49
X509v3 Authority Key Identifier:
keyid:02:84:FD:94:1C:F7:B2:94:B8:82:E7:4D:B0:FC:97:16:74:34:DA:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AoT9lBz3spS4gudNsPyXFnQ02rw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/9f3205-52e9-46a4-b6c2-c703522488f9/1/AoT9lBz3spS4gudNsPyXFnQ02rw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/9f3205-52e9-46a4-b6c2-c703522488f9/1/AoT9lBz3spS4gudNsPyXFnQ02rw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:24:32:4a:cf:ef:1a:8f:46:e0:fc:ea:48:0d:dd:a3:b0:d6:
f3:a1:d2:db:e4:02:e4:28:47:58:58:1c:b0:4b:1d:e3:c0:7b:
f6:f6:90:47:c9:a5:d3:79:32:7c:85:e9:4c:0e:19:41:89:ef:
d6:b2:f9:61:c4:af:92:7b:00:7c:94:3b:45:5f:80:d0:d3:3e:
14:2d:8f:21:16:89:4d:fe:90:7d:b8:f7:98:f2:eb:da:de:26:
6d:bf:b3:ef:f4:c1:71:c0:22:8e:fe:03:90:04:72:16:66:8d:
2a:fe:2e:7d:4c:42:89:3d:cf:0b:9c:18:c0:1d:ee:87:55:26:
98:42:65:f1:47:59:71:01:4c:0f:da:a3:5e:e6:81:2d:4e:f0:
31:3d:f9:a2:3e:f2:07:27:af:9c:ae:f6:68:46:e9:4d:a0:4a:
27:d3:a8:8a:63:e5:a7:63:b5:94:d5:33:9d:a6:1f:01:95:89:
8e:52:d0:28:94:7f:07:8d:a7:a7:1e:34:c2:37:55:00:ad:27:
26:6d:d9:db:9b:b1:1e:5d:d3:8f:ab:6c:23:8b:39:16:f0:52:
95:d3:21:73:70:22:d0:47:13:a1:7d:b7:c1:96:a0:4f:3e:ff:
ba:2e:11:d4:2e:17:ec:52:6b:c3:09:5a:de:4e:01:88:8a:ca:
82:68:db:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:12:37 2026 by rpki-client