Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6f/d07435-750e-4f1a-bf78-6ed8ac7b52bf/1/AosRDxmx_lSJjpWJr8Y_kDdJ3_U.mft
File: AosRDxmx_lSJjpWJr8Y_kDdJ3_U.mft (raw, json)
Hash identifier: sBbW4k9NX9iuX6L6oyRdV6Sv19Yu+soKRmSP62gdu2k=
Subject key identifier: 42:E5:5B:D6:86:2F:B6:9F:D2:3F:2C:74:E9:44:5A:46:5B:3B:54:1A
Authority key identifier: 02:8B:11:0F:19:B1:FE:54:89:8E:95:89:AF:C6:3F:90:37:49:DF:F5
Certificate issuer: /CN=028b110f19b1fe54898e9589afc63f903749dff5
Certificate serial: 01A0CFDAED070D7699005F52AEBA1EA5666A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AosRDxmx_lSJjpWJr8Y_kDdJ3_U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/d07435-750e-4f1a-bf78-6ed8ac7b52bf/1/AosRDxmx_lSJjpWJr8Y_kDdJ3_U.mft
Manifest number: 9E
Signing time: Wed 23 Sep 2026 20:00:26 +0000
Manifest this update: Wed 23 Sep 2026 20:00:26 +0000
Manifest next update: Thu 24 Sep 2026 20:00:26 +0000
Files and hashes: 1: AosRDxmx_lSJjpWJr8Y_kDdJ3_U.crl (hash: u+wmRPYi7yDBTPWLyj68GHSNUhy3NCcfAiG1vWDcow4=)
2: _IpDACBsZMbScuGMBl89ukS0we8.roa (hash: XGdoR2Dqje9kO00dw3KBe8qTky3l0qaCLX0c+Z0GJ58=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/d07435-750e-4f1a-bf78-6ed8ac7b52bf/1/AosRDxmx_lSJjpWJr8Y_kDdJ3_U.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/d07435-750e-4f1a-bf78-6ed8ac7b52bf/1/AosRDxmx_lSJjpWJr8Y_kDdJ3_U.mft
rsync://rpki.ripe.net/repository/DEFAULT/AosRDxmx_lSJjpWJr8Y_kDdJ3_U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cf:da:ed:07:0d:76:99:00:5f:52:ae:ba:1e:a5:66:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=028b110f19b1fe54898e9589afc63f903749dff5
Validity
Not Before: Sep 23 20:00:26 2026 GMT
Not After : Sep 24 20:00:26 2026 GMT
Subject: CN=42e55bd6862fb69fd23f2c74e9445a465b3b541a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:d9:f5:4b:e1:d6:e2:01:06:07:e7:e2:fd:9e:
86:15:fe:18:b7:cc:44:c5:b2:1c:5e:11:2b:16:3d:
b2:b6:05:9c:83:00:9a:1c:89:a1:da:81:d9:40:e4:
59:78:d2:75:aa:74:39:b1:ff:a3:c4:54:78:a8:a3:
c0:3b:c5:7e:42:dc:18:58:a2:05:c6:88:4e:23:80:
27:77:dd:ad:0e:d9:67:ad:92:17:35:0e:5c:01:c0:
68:45:99:bf:38:1b:f3:99:72:36:f5:a1:f3:71:94:
eb:e5:fc:be:83:00:68:77:8a:25:f1:e8:10:7e:09:
0a:17:9d:8d:8b:c4:ce:70:04:aa:c7:bd:2e:9e:bc:
07:9d:55:de:7a:25:3a:71:a0:99:c8:94:d3:11:f3:
c6:02:5a:e5:2f:25:8c:1c:ef:48:43:90:e1:66:82:
ac:91:44:45:43:58:d6:5c:ec:de:f8:d9:34:19:0a:
e8:77:4f:c9:c3:21:04:90:4a:67:64:dd:be:b1:11:
35:49:82:25:e8:ad:e1:b8:4f:99:81:73:f1:0d:1b:
62:48:42:43:59:06:f7:28:25:80:a7:9d:5c:82:c3:
69:f0:37:7f:1c:b6:fb:e4:e9:c5:fd:7f:9f:80:5d:
1d:18:8b:b6:fb:05:4c:8d:7c:4d:99:a0:15:c9:19:
66:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:E5:5B:D6:86:2F:B6:9F:D2:3F:2C:74:E9:44:5A:46:5B:3B:54:1A
X509v3 Authority Key Identifier:
keyid:02:8B:11:0F:19:B1:FE:54:89:8E:95:89:AF:C6:3F:90:37:49:DF:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AosRDxmx_lSJjpWJr8Y_kDdJ3_U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/d07435-750e-4f1a-bf78-6ed8ac7b52bf/1/AosRDxmx_lSJjpWJr8Y_kDdJ3_U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/d07435-750e-4f1a-bf78-6ed8ac7b52bf/1/AosRDxmx_lSJjpWJr8Y_kDdJ3_U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:67:cc:7d:4c:bb:fe:7f:35:b3:20:a0:eb:20:60:6d:9a:6f:
15:58:00:63:58:a7:c1:58:dd:13:19:e4:5d:a0:60:57:7a:c6:
c8:22:77:ce:1c:55:29:61:4b:9a:9a:12:59:21:17:a7:de:d8:
04:21:c8:cc:0e:70:76:4d:98:9e:90:19:a6:d3:b3:e2:53:d9:
6c:ad:07:1b:11:00:5d:8b:ff:dc:10:87:be:db:a7:5b:9f:2a:
c6:02:76:be:ad:48:fc:52:09:e5:a1:68:ab:9e:5f:65:40:04:
f9:8f:e0:33:51:89:72:be:a1:c9:de:8b:b5:58:54:c3:8b:c1:
c6:4b:04:2a:fe:24:13:a4:ca:9f:c5:de:f4:bc:c8:ed:cc:38:
7d:79:bf:85:d5:8a:9c:49:ba:7f:06:13:fa:98:b8:e6:9a:be:
b7:7b:56:64:b5:7f:e7:fc:a1:93:a3:7c:50:87:4f:2a:9e:86:
f5:4b:fc:73:a6:86:20:47:55:01:87:70:db:63:c5:ab:56:41:
f3:13:01:c6:78:a5:ed:60:67:1f:3d:d4:07:38:39:3c:60:ba:
e7:fe:00:a8:7e:cd:ae:8f:06:3b:e9:21:e9:6c:bf:4f:98:4c:
a9:8b:7e:b9:1a:04:74:b9:c8:5e:0e:94:66:58:a3:ea:a8:97:
c2:23:8d:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 00:46:37 2026 by rpki-client