Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/75/bb298b-3c39-49b2-abb1-11d636b56dab/1/aNogbIPVBeJUs-88dlD5-5NFNDU.mft
File: aNogbIPVBeJUs-88dlD5-5NFNDU.mft (raw, json)
Hash identifier: 3HqJhnXBUU/rMT0qigkqKA+fQTmmb1ANnuwLqPDKjok=
Subject key identifier: 3C:E4:7A:57:94:DC:D9:9B:0B:05:75:44:0A:CC:A5:D6:E8:1E:C3:E1
Authority key identifier: 68:DA:20:6C:83:D5:05:E2:54:B3:EF:3C:76:50:F9:FB:93:45:34:35
Certificate issuer: /CN=68da206c83d505e254b3ef3c7650f9fb93453435
Certificate serial: 01A0DFBCC26C1785E0182BFE29009C2ED28D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aNogbIPVBeJUs-88dlD5-5NFNDU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/bb298b-3c39-49b2-abb1-11d636b56dab/1/aNogbIPVBeJUs-88dlD5-5NFNDU.mft
Manifest number: 0D63
Signing time: Sat 26 Sep 2026 22:01:24 +0000
Manifest this update: Sat 26 Sep 2026 22:01:24 +0000
Manifest next update: Sun 27 Sep 2026 22:01:24 +0000
Files and hashes: 1: aNogbIPVBeJUs-88dlD5-5NFNDU.crl (hash: ALTYTzdEMSQPUwb7MEBQe2sg7TpB6qlS1s4HIquFD0M=)
2: tI5e6iAaAZ4nNbkpCHsMqp1-ktQ.roa (hash: A9GN5Q7BwonPYBSN1TVcg69kmzmTkS/zhmBwNF2zRqM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/bb298b-3c39-49b2-abb1-11d636b56dab/1/aNogbIPVBeJUs-88dlD5-5NFNDU.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/bb298b-3c39-49b2-abb1-11d636b56dab/1/aNogbIPVBeJUs-88dlD5-5NFNDU.mft
rsync://rpki.ripe.net/repository/DEFAULT/aNogbIPVBeJUs-88dlD5-5NFNDU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 22:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:df:bc:c2:6c:17:85:e0:18:2b:fe:29:00:9c:2e:d2:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68da206c83d505e254b3ef3c7650f9fb93453435
Validity
Not Before: Sep 26 22:01:24 2026 GMT
Not After : Sep 27 22:01:24 2026 GMT
Subject: CN=3ce47a5794dcd99b0b0575440acca5d6e81ec3e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:64:0a:be:eb:ab:05:d6:f5:0a:bb:29:8e:e6:
ff:0f:39:2a:63:65:9d:57:50:dc:db:34:c6:e6:87:
e0:73:03:94:df:b7:75:57:31:32:c2:b9:16:6e:95:
ba:28:53:14:e7:0d:72:d5:7d:36:6e:73:29:ee:f6:
74:9d:78:12:80:7e:f0:07:27:b8:1c:e3:29:3a:64:
a1:c2:50:d0:46:4e:5c:02:32:3a:ce:aa:dc:64:cc:
47:e6:7a:1f:d5:71:0e:7a:8d:f7:12:ae:6c:cd:ee:
81:67:30:8d:1b:dc:f4:67:af:2e:4d:9b:e3:6a:ac:
b7:90:14:ea:7c:9c:83:35:aa:05:8a:81:1e:ae:a3:
96:8c:5b:85:76:e5:9e:84:32:ad:a0:1e:54:b7:05:
5f:49:2e:a6:2a:d9:1b:a3:a3:0e:d6:9b:a2:01:35:
b8:3b:5b:ad:87:9d:76:b1:fd:b7:ae:81:f1:0a:f1:
04:ef:f1:5e:c3:24:f8:6f:aa:de:d3:fa:50:dd:dd:
c5:7e:d7:8a:36:3f:73:81:f1:ed:26:50:ca:2d:dd:
cd:af:8c:32:ac:8d:c6:2d:19:49:c0:11:91:46:d2:
87:d1:ca:23:73:bd:52:b1:ed:8a:00:f1:7b:d7:e7:
46:02:fe:36:f6:2f:56:38:53:e0:80:6a:b1:e6:ab:
c8:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:E4:7A:57:94:DC:D9:9B:0B:05:75:44:0A:CC:A5:D6:E8:1E:C3:E1
X509v3 Authority Key Identifier:
keyid:68:DA:20:6C:83:D5:05:E2:54:B3:EF:3C:76:50:F9:FB:93:45:34:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aNogbIPVBeJUs-88dlD5-5NFNDU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/bb298b-3c39-49b2-abb1-11d636b56dab/1/aNogbIPVBeJUs-88dlD5-5NFNDU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/bb298b-3c39-49b2-abb1-11d636b56dab/1/aNogbIPVBeJUs-88dlD5-5NFNDU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:e4:81:3d:27:a9:a3:12:88:e8:e5:a0:11:15:77:ce:34:62:
51:64:ff:9d:9b:82:da:81:22:c8:6b:97:fc:b5:94:9d:1c:bb:
c1:6e:06:bc:72:50:2f:f7:e5:56:c9:78:82:dd:a1:43:6f:55:
76:88:e2:ce:3f:cc:11:00:4b:a3:6e:2b:93:7f:6f:a5:84:ce:
79:61:2b:18:7e:11:ad:f7:6b:96:03:30:38:66:22:27:15:9f:
7d:11:d5:19:1f:40:f2:78:8e:2a:41:b2:eb:19:8d:06:a8:5a:
e1:ce:65:63:e5:f6:ce:57:92:b1:59:b3:a6:58:55:56:9a:0c:
26:b9:a3:92:1e:80:47:4d:54:e4:99:0c:7f:78:56:14:9f:54:
fb:5b:03:fa:34:2a:1d:24:da:54:ec:f7:3c:c8:9b:6e:0d:54:
59:d5:8e:a5:bc:b5:2e:b4:12:3d:b2:b1:18:c5:ad:95:da:16:
c4:f6:b0:a3:a1:a3:a8:f7:91:2c:e3:10:98:a4:a1:1e:5d:fa:
31:af:ed:cd:6d:eb:2e:1a:32:c9:01:a0:54:7d:7b:97:b3:f0:
26:eb:41:a3:e5:b3:0e:f2:dc:7a:29:04:86:e2:24:d9:32:04:
84:7c:3f:05:8f:2e:e4:1a:18:6a:0a:8e:2a:13:3e:5a:7a:b4:
21:24:aa:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 08:44:36 2026 by rpki-client