Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/74/e46951-8fa4-45b6-87bf-5a4b7b5e4007/1/AozMjYF4yenS_8Uy_LXNaL6qd20.mft
File: AozMjYF4yenS_8Uy_LXNaL6qd20.mft (raw, json)
Hash identifier: 663YYPToeozfH+T/BmYS75WjxFpFUPyZV41TgtJoQxQ=
Subject key identifier: 87:05:60:DC:D8:AB:CE:2D:BF:B2:A2:9A:11:FD:79:E7:86:FC:40:6A
Authority key identifier: 02:8C:CC:8D:81:78:C9:E9:D2:FF:C5:32:FC:B5:CD:68:BE:AA:77:6D
Certificate issuer: /CN=028ccc8d8178c9e9d2ffc532fcb5cd68beaa776d
Certificate serial: 01A0D94D0BC6E7F96B0C22AE446706A6DB94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AozMjYF4yenS_8Uy_LXNaL6qd20.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/e46951-8fa4-45b6-87bf-5a4b7b5e4007/1/AozMjYF4yenS_8Uy_LXNaL6qd20.mft
Manifest number: 04B9
Signing time: Fri 25 Sep 2026 16:01:40 +0000
Manifest this update: Fri 25 Sep 2026 16:01:40 +0000
Manifest next update: Sat 26 Sep 2026 16:01:40 +0000
Files and hashes: 1: AozMjYF4yenS_8Uy_LXNaL6qd20.crl (hash: UP0O5Lky//A1YdhEPmMHLd0JxX0wvPKWWZ9mCRO6TKU=)
2: nmpgPMBFt9dLqNX0M81_MpAwEgA.roa (hash: 4RQmSgy56Vqmok8SF0GYYTjto7wxmhh7LR4/RfXSDMg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/e46951-8fa4-45b6-87bf-5a4b7b5e4007/1/AozMjYF4yenS_8Uy_LXNaL6qd20.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/e46951-8fa4-45b6-87bf-5a4b7b5e4007/1/AozMjYF4yenS_8Uy_LXNaL6qd20.mft
rsync://rpki.ripe.net/repository/DEFAULT/AozMjYF4yenS_8Uy_LXNaL6qd20.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 16:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d9:4d:0b:c6:e7:f9:6b:0c:22:ae:44:67:06:a6:db:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=028ccc8d8178c9e9d2ffc532fcb5cd68beaa776d
Validity
Not Before: Sep 25 16:01:40 2026 GMT
Not After : Sep 26 16:01:40 2026 GMT
Subject: CN=870560dcd8abce2dbfb2a29a11fd79e786fc406a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:72:78:72:bc:fb:ce:4b:86:4f:83:0a:24:69:
fb:b8:be:22:02:16:d8:df:7b:68:56:f8:43:f0:41:
29:d7:11:37:d3:05:8c:02:6b:04:42:10:99:90:7c:
6b:e0:34:bf:4d:20:d0:60:bd:3f:a8:e5:22:60:7d:
85:67:3a:92:15:a9:32:82:d3:54:01:86:7e:37:4c:
02:3e:0e:27:53:38:ae:95:10:c2:03:1b:36:4b:a5:
d2:11:75:1a:93:10:e1:0c:19:09:7e:b0:f5:4b:50:
89:4a:cd:a2:e9:8c:e0:5a:67:53:15:56:b3:29:84:
ec:ab:5c:5b:40:33:99:23:68:d4:2f:b8:37:1b:66:
50:8c:20:13:4e:b9:7c:a8:06:ad:5c:c7:6e:69:b5:
78:55:15:bb:0f:87:c3:61:37:1c:e9:72:43:a4:c6:
59:24:0f:6c:01:a2:29:a1:8a:28:15:54:80:ea:3c:
0d:53:4d:50:b8:23:06:d7:e9:00:e1:f0:3b:12:62:
53:17:78:c1:f1:b8:86:84:35:03:3e:ad:f4:29:85:
ce:bd:aa:b7:8b:6e:42:da:71:35:4a:18:58:63:3e:
75:40:48:fd:e9:80:be:cf:30:8a:82:df:1e:48:b2:
1c:2a:46:4b:a2:e8:0c:bd:54:5b:a8:e3:41:2b:b4:
98:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:05:60:DC:D8:AB:CE:2D:BF:B2:A2:9A:11:FD:79:E7:86:FC:40:6A
X509v3 Authority Key Identifier:
keyid:02:8C:CC:8D:81:78:C9:E9:D2:FF:C5:32:FC:B5:CD:68:BE:AA:77:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AozMjYF4yenS_8Uy_LXNaL6qd20.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/e46951-8fa4-45b6-87bf-5a4b7b5e4007/1/AozMjYF4yenS_8Uy_LXNaL6qd20.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/e46951-8fa4-45b6-87bf-5a4b7b5e4007/1/AozMjYF4yenS_8Uy_LXNaL6qd20.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:02:09:bb:36:18:76:5f:67:81:24:27:ae:fe:22:53:3e:9f:
fe:07:d6:33:6d:ca:40:34:0f:7f:1f:79:0f:83:28:6f:60:f3:
9f:63:0b:e6:24:46:75:a7:8e:54:44:cf:06:c1:39:82:dd:c7:
82:06:dc:1a:e5:fc:a1:97:40:d1:6a:6a:02:96:3d:07:4a:f4:
a8:f7:35:56:2b:ed:3f:28:3f:28:24:c9:23:bf:4f:00:e4:08:
71:a5:e2:e5:e4:98:f0:93:39:03:02:3e:a4:f1:73:c1:14:a0:
94:30:51:64:0a:a7:01:cd:0e:9a:de:9c:6c:53:ca:fd:9e:4f:
4f:65:13:2a:65:c7:63:81:99:7a:64:b3:57:19:dc:78:f8:e2:
88:54:ad:44:0e:e6:7e:56:33:30:c1:32:10:56:d3:e8:83:53:
53:ca:5f:2a:26:72:6c:a5:0c:3b:0f:8a:f7:37:d3:66:4c:75:
c1:a0:f9:29:8d:cd:7a:34:a4:f1:4a:37:30:df:38:59:50:c2:
8a:0c:c1:b9:fb:06:71:4d:52:e8:59:5e:9c:1c:8a:9c:5f:87:
32:8e:a3:d3:3e:7a:84:76:b4:45:a0:a2:21:40:01:7f:53:a1:
3b:09:7e:ff:17:b4:67:09:77:66:14:dd:af:8b:5f:34:49:46:
ef:35:70:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 01:49:58 2026 by rpki-client