Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/bf6049-8d1d-4be8-9f57-8bab78de32c9/1/AoB-CGMQPwkS5-AkeBHRZ3l9gQc.mft
File: AoB-CGMQPwkS5-AkeBHRZ3l9gQc.mft (raw, json)
Hash identifier: vXNST1/k1uQm6h7sItJSyoBEIntb63ab+KyDaeasgC8=
Subject key identifier: E9:EE:9A:EE:44:A8:E8:B8:E7:6E:60:1E:2B:72:B3:85:32:13:AC:1B
Authority key identifier: 02:80:7E:08:63:10:3F:09:12:E7:E0:24:78:11:D1:67:79:7D:81:07
Certificate issuer: /CN=02807e0863103f0912e7e0247811d167797d8107
Certificate serial: 019D265F260C420A1892D207A4CAEE0624AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AoB-CGMQPwkS5-AkeBHRZ3l9gQc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/bf6049-8d1d-4be8-9f57-8bab78de32c9/1/AoB-CGMQPwkS5-AkeBHRZ3l9gQc.mft
Manifest number: 0C45
Signing time: Wed 25 Mar 2026 19:01:02 +0000
Manifest this update: Wed 25 Mar 2026 19:01:02 +0000
Manifest next update: Thu 26 Mar 2026 19:01:02 +0000
Files and hashes: 1: 3a84f201VVV4zHV1iyP0KTsgDGc.roa (hash: Os2FOe6eOEdxwn4fXwRkDsov2wYvxoS0GMS6wsZRSdo=)
2: AoB-CGMQPwkS5-AkeBHRZ3l9gQc.crl (hash: IQgyWyR86sXzJCU7kWFv5E9XKavlSPuy3frN/dc0j68=)
3: l-6nzd356yZWqDEY9DG-Da5JKys.roa (hash: OR4c0rfMD7ZWa8BaNFc1YAW9kkgFhCHBU/rMA3THGI4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/bf6049-8d1d-4be8-9f57-8bab78de32c9/1/AoB-CGMQPwkS5-AkeBHRZ3l9gQc.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/bf6049-8d1d-4be8-9f57-8bab78de32c9/1/AoB-CGMQPwkS5-AkeBHRZ3l9gQc.mft
rsync://rpki.ripe.net/repository/DEFAULT/AoB-CGMQPwkS5-AkeBHRZ3l9gQc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:26:0c:42:0a:18:92:d2:07:a4:ca:ee:06:24:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02807e0863103f0912e7e0247811d167797d8107
Validity
Not Before: Mar 25 19:01:02 2026 GMT
Not After : Mar 26 19:01:02 2026 GMT
Subject: CN=e9ee9aee44a8e8b8e76e601e2b72b3853213ac1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:c1:dc:5f:a9:36:2b:8e:90:17:43:69:f6:69:
dd:f6:10:2a:22:af:6b:f7:4c:a2:7d:c4:49:db:bc:
df:93:a3:c9:13:f5:9d:8d:6d:0b:b7:d4:1c:b5:10:
7b:79:37:ec:02:ce:67:8c:e5:3d:cf:de:73:c5:a4:
fb:93:e6:ba:9d:47:20:aa:61:ff:02:11:2f:a0:94:
38:52:20:a0:52:db:60:7e:3e:fc:e6:37:5b:c6:cb:
97:b4:83:fa:84:4b:1b:e9:9a:41:7b:df:bb:f0:ed:
a0:60:59:53:5f:1e:54:70:b2:7f:42:90:64:7f:0b:
8e:e2:4a:a7:35:f6:11:f6:42:ca:c4:d7:ed:0e:ae:
9d:9f:93:91:6a:40:cb:29:8d:2b:7e:5b:88:93:e1:
86:ab:c2:ed:5b:9a:6b:31:3f:7f:8c:67:26:2b:1b:
50:06:1a:a6:03:2a:0c:1d:b5:d9:58:86:f4:d3:1b:
60:b2:ff:bd:cb:73:cf:59:31:b8:38:b4:24:33:ce:
6c:48:bd:e6:67:13:d8:21:b2:68:f0:78:cb:e8:2f:
29:d9:f0:c3:2b:81:43:c2:df:5f:23:b3:46:d1:f1:
10:c8:00:2e:96:20:ca:f6:02:f6:6c:aa:07:68:fd:
5a:fe:10:36:0b:83:fe:18:3b:ae:16:ee:00:a3:00:
45:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:EE:9A:EE:44:A8:E8:B8:E7:6E:60:1E:2B:72:B3:85:32:13:AC:1B
X509v3 Authority Key Identifier:
keyid:02:80:7E:08:63:10:3F:09:12:E7:E0:24:78:11:D1:67:79:7D:81:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AoB-CGMQPwkS5-AkeBHRZ3l9gQc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/bf6049-8d1d-4be8-9f57-8bab78de32c9/1/AoB-CGMQPwkS5-AkeBHRZ3l9gQc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/bf6049-8d1d-4be8-9f57-8bab78de32c9/1/AoB-CGMQPwkS5-AkeBHRZ3l9gQc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:b5:a8:ab:ad:7f:88:4c:f3:62:c7:28:47:24:91:f8:66:7a:
21:fc:57:17:de:75:cd:56:1f:69:f4:09:83:b7:db:8e:fa:6d:
50:73:bf:9c:a9:cc:63:51:37:25:cf:f6:99:bb:fc:38:ff:1c:
e1:f1:31:39:8d:6a:65:e5:d8:37:78:e3:2f:8a:10:5c:b7:9c:
ca:77:9e:6f:e7:22:02:1a:7a:e0:1d:a4:b8:94:50:d0:80:d8:
d5:4a:14:bc:99:18:84:d6:8f:46:f0:f6:60:1c:5d:c4:bf:12:
5f:c4:63:c4:aa:bc:ae:db:17:d8:89:e7:bf:a0:45:32:d4:9b:
74:fb:e3:80:0a:65:33:35:ac:60:6c:b2:78:ce:c4:c3:f7:0a:
f4:91:10:0c:b6:28:21:0e:1d:0e:a4:07:31:b5:4e:97:8b:43:
25:dd:26:cd:ac:08:c6:1f:d5:29:64:4e:aa:57:fe:a1:a0:8a:
f9:36:fc:29:58:22:1c:61:7a:6a:65:39:8d:9b:69:8e:d0:91:
23:80:93:62:3b:82:66:9c:3f:7e:38:54:2b:cc:2e:3f:e2:ed:
ca:b1:03:45:46:37:bc:22:26:63:07:f8:99:12:e0:3d:e1:bf:
da:d2:d9:d1:26:85:96:be:60:65:f1:8f:c7:a9:e0:c6:35:88:
ab:2d:c3:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:37:01 2026 by rpki-client