Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/9f3205-52e9-46a4-b6c2-c703522488f9/1/AoT9lBz3spS4gudNsPyXFnQ02rw.mft
File: AoT9lBz3spS4gudNsPyXFnQ02rw.mft (raw, json)
Hash identifier: wbzYdJqcM/ZlUDnYJF4KaXT+Ugm4kg0mFydl0vk/xMk=
Subject key identifier: 36:25:93:A3:70:4C:32:56:2D:AD:4A:D9:2A:E5:75:1C:B1:1D:43:D9
Authority key identifier: 02:84:FD:94:1C:F7:B2:94:B8:82:E7:4D:B0:FC:97:16:74:34:DA:BC
Certificate issuer: /CN=0284fd941cf7b294b882e74db0fc97167434dabc
Certificate serial: 019D299773D57340355BA2A424D993707500
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AoT9lBz3spS4gudNsPyXFnQ02rw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/9f3205-52e9-46a4-b6c2-c703522488f9/1/AoT9lBz3spS4gudNsPyXFnQ02rw.mft
Manifest number: 62
Signing time: Thu 26 Mar 2026 10:01:24 +0000
Manifest this update: Thu 26 Mar 2026 10:01:24 +0000
Manifest next update: Fri 27 Mar 2026 10:01:24 +0000
Files and hashes: 1: AoT9lBz3spS4gudNsPyXFnQ02rw.crl (hash: hXGxbjP8Npdf1ndeUP8k5vgvTmbpx4+Fir8kGEjGNtc=)
2: KWX40V7o8A6zMkKoIGkCmwKYmr0.roa (hash: nJ0kf2dRdOxQXbxBLcQMmLtNRpU/yw5QdnU4YcpxOtc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/9f3205-52e9-46a4-b6c2-c703522488f9/1/AoT9lBz3spS4gudNsPyXFnQ02rw.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/9f3205-52e9-46a4-b6c2-c703522488f9/1/AoT9lBz3spS4gudNsPyXFnQ02rw.mft
rsync://rpki.ripe.net/repository/DEFAULT/AoT9lBz3spS4gudNsPyXFnQ02rw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:97:73:d5:73:40:35:5b:a2:a4:24:d9:93:70:75:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0284fd941cf7b294b882e74db0fc97167434dabc
Validity
Not Before: Mar 26 10:01:24 2026 GMT
Not After : Mar 27 10:01:24 2026 GMT
Subject: CN=362593a3704c32562dad4ad92ae5751cb11d43d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:69:39:ec:e3:b6:e7:a7:1d:36:e4:eb:74:d6:
5c:4b:48:c8:51:8e:2d:89:fd:40:e9:83:f1:7a:69:
20:f8:46:3f:17:cf:08:6a:9e:10:d1:17:83:55:f8:
cf:59:48:76:da:cb:a9:1d:ae:4f:e2:b4:05:d0:22:
fc:0f:ba:e5:b0:83:6c:d5:77:bc:cb:48:e0:ea:d4:
3a:f1:d9:f3:71:60:ef:59:51:71:07:9f:be:9c:fc:
7d:fa:f4:5c:dd:60:74:a0:46:7b:20:ea:c3:e3:49:
6f:e6:c7:5d:d1:2d:18:69:df:ae:4b:f9:d0:e4:d7:
db:99:35:81:97:f4:7f:ac:5c:a5:47:92:cc:d1:48:
2b:46:43:ee:19:5c:b8:a8:3f:e4:73:70:d9:99:47:
c8:e3:cc:cf:55:d7:2c:5b:9b:e9:6e:69:a6:ae:cd:
af:4d:d5:f1:55:58:25:f9:82:87:0f:62:81:25:72:
2a:69:44:06:66:52:c8:cf:03:88:50:04:5e:1a:b7:
f4:61:90:ee:11:6b:bb:8b:89:f8:1c:46:a5:7f:5a:
24:61:93:45:69:4c:66:b2:24:ba:6c:65:46:f7:98:
1f:35:2e:25:ab:78:51:1e:9d:a0:b3:e1:1f:19:a5:
03:4a:26:c8:93:47:e7:54:1e:0f:e3:c3:85:62:db:
83:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:25:93:A3:70:4C:32:56:2D:AD:4A:D9:2A:E5:75:1C:B1:1D:43:D9
X509v3 Authority Key Identifier:
keyid:02:84:FD:94:1C:F7:B2:94:B8:82:E7:4D:B0:FC:97:16:74:34:DA:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AoT9lBz3spS4gudNsPyXFnQ02rw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/9f3205-52e9-46a4-b6c2-c703522488f9/1/AoT9lBz3spS4gudNsPyXFnQ02rw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/9f3205-52e9-46a4-b6c2-c703522488f9/1/AoT9lBz3spS4gudNsPyXFnQ02rw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:66:f7:62:69:a2:33:a5:43:f6:3a:cf:c7:d4:32:bd:3d:f2:
ce:16:1d:cb:dc:b7:9f:56:1e:4c:18:d0:b4:e1:22:27:d4:15:
d7:bd:82:41:a9:92:a2:0a:d1:06:b8:6d:21:a1:da:28:a0:37:
7c:7c:d2:d5:47:d8:4b:ab:30:25:ac:82:f8:54:a7:98:5f:94:
be:df:c3:da:c0:ca:7f:44:c0:ac:7c:b0:ee:5d:c8:b8:98:d5:
f6:19:f9:b2:2b:5b:69:6d:82:bc:0f:1b:a3:1e:39:a7:1b:7c:
bc:f3:88:7f:de:af:0e:f6:91:f0:3c:d6:4d:8f:6c:86:ba:b4:
e7:f1:bb:cf:a5:e9:36:b2:62:b1:9c:7b:c3:01:11:22:62:f1:
56:c6:31:ab:8f:4d:7a:84:9f:79:0e:d4:a2:bc:b0:b5:30:5f:
81:f9:7d:8b:8b:37:ba:16:0c:86:cc:13:a0:92:0f:0a:3d:17:
3b:85:9e:60:74:da:45:0e:70:aa:b3:e1:f4:37:12:63:47:14:
47:16:a2:a6:62:7b:3f:d5:85:02:47:e9:b7:4f:cc:72:db:5a:
16:43:c5:4c:d3:e1:7e:bc:6f:31:ea:5f:f1:8d:8a:48:d9:b6:
7f:de:bd:ad:e7:fa:33:d7:7e:40:5c:27:f3:ab:45:b5:3f:3f:
13:13:f5:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:20:23 2026 by rpki-client