Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/9f3205-52e9-46a4-b6c2-c703522488f9/1/AoT9lBz3spS4gudNsPyXFnQ02rw.mft
File: AoT9lBz3spS4gudNsPyXFnQ02rw.mft (raw, json)
Hash identifier: vVzYIvquQJ5q6GF2SOgI2B/9zPa3HFy14d7D9wR5mSM=
Subject key identifier: 40:3F:CF:44:81:77:61:7B:47:0A:FB:78:45:4B:DB:F1:27:2E:91:31
Authority key identifier: 02:84:FD:94:1C:F7:B2:94:B8:82:E7:4D:B0:FC:97:16:74:34:DA:BC
Certificate issuer: /CN=0284fd941cf7b294b882e74db0fc97167434dabc
Certificate serial: 019F8FB4E4A23078116498678CE991430B0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AoT9lBz3spS4gudNsPyXFnQ02rw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/9f3205-52e9-46a4-b6c2-c703522488f9/1/AoT9lBz3spS4gudNsPyXFnQ02rw.mft
Manifest number: 01A0
Signing time: Thu 23 Jul 2026 16:00:24 +0000
Manifest this update: Thu 23 Jul 2026 16:00:24 +0000
Manifest next update: Fri 24 Jul 2026 16:00:24 +0000
Files and hashes: 1: AoT9lBz3spS4gudNsPyXFnQ02rw.crl (hash: g9JlFdt32vhy0zl7aMZFyss0CZoxV4reyMPpj+ee/RU=)
2: KWX40V7o8A6zMkKoIGkCmwKYmr0.roa (hash: nJ0kf2dRdOxQXbxBLcQMmLtNRpU/yw5QdnU4YcpxOtc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/9f3205-52e9-46a4-b6c2-c703522488f9/1/AoT9lBz3spS4gudNsPyXFnQ02rw.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/9f3205-52e9-46a4-b6c2-c703522488f9/1/AoT9lBz3spS4gudNsPyXFnQ02rw.mft
rsync://rpki.ripe.net/repository/DEFAULT/AoT9lBz3spS4gudNsPyXFnQ02rw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:b4:e4:a2:30:78:11:64:98:67:8c:e9:91:43:0b:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0284fd941cf7b294b882e74db0fc97167434dabc
Validity
Not Before: Jul 23 16:00:24 2026 GMT
Not After : Jul 24 16:00:24 2026 GMT
Subject: CN=403fcf448177617b470afb78454bdbf1272e9131
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:b8:c8:12:73:1f:c1:bc:d1:e0:79:93:05:ad:
ce:ee:2e:43:4b:64:ae:3e:ad:ab:2b:40:fd:2a:28:
a7:9b:2d:17:ce:64:43:bd:b5:e7:cb:44:d9:b9:a0:
eb:97:83:d3:d3:e3:a6:a3:3e:0d:2f:21:14:45:8d:
11:08:cf:50:f0:a8:f8:dc:3e:59:39:fc:cf:2f:6b:
1b:dc:00:69:74:6d:dd:00:87:05:f2:b8:99:c0:ed:
c3:50:16:9f:fb:7c:75:6a:f9:43:93:8e:04:44:72:
da:67:66:31:63:99:c5:64:50:e7:a6:cb:f2:6d:34:
9a:22:a0:74:8b:1c:86:76:45:ff:87:bf:7f:7d:93:
77:2a:a9:f6:b2:84:7e:dc:86:d6:cc:90:eb:f9:fa:
55:ee:d3:00:f5:d1:67:0c:2b:1c:f4:70:b2:72:1b:
ca:b2:f5:df:d9:a7:d2:e3:d0:af:05:4b:a3:78:91:
3a:b2:63:84:d2:11:02:d7:ea:19:64:b6:8c:7d:cb:
79:7a:d8:6e:fe:ba:87:dc:b7:e6:d8:bd:68:26:2e:
47:30:31:55:16:ed:ad:ac:36:25:bd:14:4f:51:ff:
af:3f:4a:60:4a:f7:1b:28:88:de:ce:84:4d:40:e5:
e6:5d:f8:b1:94:d9:9c:37:21:eb:b2:50:ab:7f:b1:
de:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:3F:CF:44:81:77:61:7B:47:0A:FB:78:45:4B:DB:F1:27:2E:91:31
X509v3 Authority Key Identifier:
keyid:02:84:FD:94:1C:F7:B2:94:B8:82:E7:4D:B0:FC:97:16:74:34:DA:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AoT9lBz3spS4gudNsPyXFnQ02rw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/9f3205-52e9-46a4-b6c2-c703522488f9/1/AoT9lBz3spS4gudNsPyXFnQ02rw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/9f3205-52e9-46a4-b6c2-c703522488f9/1/AoT9lBz3spS4gudNsPyXFnQ02rw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:83:c6:04:a2:10:61:c7:da:e8:13:ca:be:44:a0:0b:c8:40:
1b:6f:05:87:59:c5:34:d2:24:31:30:bb:be:3e:4b:12:15:28:
fd:f3:8a:36:e5:31:28:78:b9:92:33:cd:ba:13:d6:73:3b:21:
cb:fc:bd:a9:94:fe:26:80:45:82:5f:2f:a6:e3:a6:08:01:5a:
e9:dd:34:f6:cc:a1:54:d7:4d:b1:0a:6c:d3:f4:ca:90:8d:32:
6d:0a:db:37:15:44:e1:41:7f:48:2b:e3:71:60:fc:04:8f:63:
fc:d8:d3:95:d9:ef:9b:a1:79:2a:fe:44:49:9b:53:12:52:1c:
2b:40:cd:ac:1e:06:d8:99:28:8b:90:f8:73:15:be:f8:8b:8e:
c3:2f:4f:fc:27:5b:99:93:44:5d:48:d7:d5:b9:7b:f7:44:6b:
cd:12:b2:ef:2e:ed:3c:f5:4f:c8:86:a6:52:13:25:5f:14:21:
ba:c1:0d:9b:15:71:6b:b9:52:fe:94:4c:bf:7a:1d:14:93:e4:
d4:44:8a:05:9c:b3:cb:f9:5f:36:4b:00:32:ed:2c:0f:df:eb:
e2:10:d0:98:cc:fc:21:2c:1f:4a:7f:3c:ff:71:98:85:f1:51:
71:c4:65:dc:1a:58:75:14:73:7f:e8:f6:fd:29:af:cd:a9:0d:
1f:6b:dc:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:15:31 2026 by rpki-client