Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7d/bf6049-8d1d-4be8-9f57-8bab78de32c9/1/AoB-CGMQPwkS5-AkeBHRZ3l9gQc.mft
File: AoB-CGMQPwkS5-AkeBHRZ3l9gQc.mft (raw, json)
Hash identifier: FYOYdipZQSBbUZHFN3Y3tK86RwEr3Yb8jHLxxJkt83Q=
Subject key identifier: AC:7E:09:CD:2C:84:B5:16:D7:0E:87:C7:43:A0:21:4F:2A:B8:DF:2C
Authority key identifier: 02:80:7E:08:63:10:3F:09:12:E7:E0:24:78:11:D1:67:79:7D:81:07
Certificate issuer: /CN=02807e0863103f0912e7e0247811d167797d8107
Certificate serial: 01A0D8A7F29E3193923B476E9803C9FD2187
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AoB-CGMQPwkS5-AkeBHRZ3l9gQc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/bf6049-8d1d-4be8-9f57-8bab78de32c9/1/AoB-CGMQPwkS5-AkeBHRZ3l9gQc.mft
Manifest number: 0E2F
Signing time: Fri 25 Sep 2026 13:01:20 +0000
Manifest this update: Fri 25 Sep 2026 13:01:20 +0000
Manifest next update: Sat 26 Sep 2026 13:01:20 +0000
Files and hashes: 1: 3a84f201VVV4zHV1iyP0KTsgDGc.roa (hash: Os2FOe6eOEdxwn4fXwRkDsov2wYvxoS0GMS6wsZRSdo=)
2: AoB-CGMQPwkS5-AkeBHRZ3l9gQc.crl (hash: 85fNavkUhA6fQnvYUVagD0d3DjQONX09W0pN4sNPRd4=)
3: l-6nzd356yZWqDEY9DG-Da5JKys.roa (hash: OR4c0rfMD7ZWa8BaNFc1YAW9kkgFhCHBU/rMA3THGI4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/bf6049-8d1d-4be8-9f57-8bab78de32c9/1/AoB-CGMQPwkS5-AkeBHRZ3l9gQc.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/bf6049-8d1d-4be8-9f57-8bab78de32c9/1/AoB-CGMQPwkS5-AkeBHRZ3l9gQc.mft
rsync://rpki.ripe.net/repository/DEFAULT/AoB-CGMQPwkS5-AkeBHRZ3l9gQc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 13:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d8:a7:f2:9e:31:93:92:3b:47:6e:98:03:c9:fd:21:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02807e0863103f0912e7e0247811d167797d8107
Validity
Not Before: Sep 25 13:01:20 2026 GMT
Not After : Sep 26 13:01:20 2026 GMT
Subject: CN=ac7e09cd2c84b516d70e87c743a0214f2ab8df2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:8d:50:bd:7b:d2:55:58:7e:f6:4d:0e:38:b8:
85:e1:c3:4e:cf:eb:65:ab:6d:1f:39:9b:4a:36:ca:
15:e1:42:21:bd:2a:16:54:48:56:2b:88:cb:2b:d0:
0c:d1:8b:00:b4:96:0f:a4:c4:ef:df:39:57:89:31:
4c:09:f8:51:e3:d8:35:d5:b7:88:0a:e5:7c:56:af:
9c:bc:ed:df:f6:43:fc:c2:f0:84:ce:83:19:88:e1:
62:15:96:6f:bb:35:a4:d5:4b:33:38:c7:d3:2f:5a:
ac:7f:e7:f6:f0:85:8c:a6:6b:10:ce:47:41:89:7c:
c0:30:92:ca:38:c1:75:5e:10:0b:96:37:70:62:2d:
62:c8:a6:cf:b4:87:c6:62:75:e2:6c:55:6d:e4:9e:
9e:75:29:84:f1:d7:40:13:e5:b4:b3:dc:c4:39:bf:
97:59:a5:f0:0c:39:c9:ee:61:d6:2a:c4:5e:06:3a:
7d:fc:16:86:51:2e:04:e1:8a:de:f8:51:9b:c4:6c:
1f:e1:3e:40:61:77:e0:4d:27:a0:b0:4d:37:3e:29:
d9:8d:36:be:ab:0a:3b:9c:a6:00:ad:55:62:90:10:
f8:fb:90:9c:47:fc:fc:9f:f9:e9:7a:4b:f8:d4:44:
69:52:c2:27:40:96:0f:55:e8:c7:be:6a:df:d6:7b:
e3:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:7E:09:CD:2C:84:B5:16:D7:0E:87:C7:43:A0:21:4F:2A:B8:DF:2C
X509v3 Authority Key Identifier:
keyid:02:80:7E:08:63:10:3F:09:12:E7:E0:24:78:11:D1:67:79:7D:81:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AoB-CGMQPwkS5-AkeBHRZ3l9gQc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/bf6049-8d1d-4be8-9f57-8bab78de32c9/1/AoB-CGMQPwkS5-AkeBHRZ3l9gQc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/bf6049-8d1d-4be8-9f57-8bab78de32c9/1/AoB-CGMQPwkS5-AkeBHRZ3l9gQc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:ce:78:69:8b:49:0e:02:44:27:22:8d:8d:09:c4:ec:d7:75:
9d:ab:2e:88:ac:45:2c:41:e8:4f:79:1f:20:74:7e:de:c0:df:
5a:fd:45:9f:13:91:3f:78:6f:c6:91:12:f0:69:ef:1f:b9:ba:
e1:ac:f6:6f:2d:23:f5:7e:2d:b6:ff:a2:70:89:13:fe:92:f6:
70:91:7c:f2:6b:35:2f:a7:f5:b4:2f:14:9a:90:50:50:49:54:
e0:3c:95:87:07:09:ed:1c:14:54:4c:23:e6:15:bb:f4:4c:68:
a0:d5:c7:96:ad:f6:7b:74:03:35:0a:70:52:67:0a:54:d2:9c:
0e:a1:ca:8d:27:92:80:88:bb:a6:0e:5c:06:95:68:40:59:d3:
5b:9d:d1:2b:e0:ef:28:ac:02:b0:89:5a:29:96:70:8b:a7:c0:
03:5e:69:83:45:55:30:b0:18:c0:eb:8e:d3:24:bb:83:75:49:
08:e2:bc:22:8b:c9:4c:30:49:2f:cc:5d:e7:40:01:52:1f:6b:
3c:f3:a0:0b:bc:92:0d:c7:66:4e:c4:f5:ae:ce:96:69:0b:a8:
45:33:12:03:c4:d4:35:cf:da:db:fd:6b:3d:6b:e3:a5:4a:fc:
97:c4:74:c2:b7:b0:53:10:84:1b:27:43:39:73:07:6e:41:87:
8f:5d:e3:92
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDYp/KeMZOSO0dumAPJ/SGHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAyODA3ZTA4NjMxMDNmMDkxMmU3ZTAyNDc4MTFkMTY3Nzk3
ZDgxMDcwHhcNMjYwOTI1MTMwMTIwWhcNMjYwOTI2MTMwMTIwWjAzMTEwLwYDVQQD
EyhhYzdlMDljZDJjODRiNTE2ZDcwZTg3Yzc0M2EwMjE0ZjJhYjhkZjJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA241QvXvSVVh+9k0OOLiF4cNOz+tl
q20fOZtKNsoV4UIhvSoWVEhWK4jLK9AM0YsAtJYPpMTv3zlXiTFMCfhR49g11beI
CuV8Vq+cvO3f9kP8wvCEzoMZiOFiFZZvuzWk1UszOMfTL1qsf+f28IWMpmsQzkdB
iXzAMJLKOMF1XhALljdwYi1iyKbPtIfGYnXibFVt5J6edSmE8ddAE+W0s9zEOb+X
WaXwDDnJ7mHWKsReBjp9/BaGUS4E4Yre+FGbxGwf4T5AYXfgTSegsE03PinZjTa+
qwo7nKYArVVikBD4+5CcR/z8n/npekv41ERpUsInQJYPVejHvmrf1nvjAQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKx+Cc0shLUW1w6Hx0OgIU8quN8sMB8GA1UdIwQY
MBaAFAKAfghjED8JEufgJHgR0Wd5fYEHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQW9CLUNHTVFQd2tTNS1Ba2VCSFJaM2w5Z1FjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC9iZjYwNDktOGQxZC00YmU4LTlmNTct
OGJhYjc4ZGUzMmM5LzEvQW9CLUNHTVFQd2tTNS1Ba2VCSFJaM2w5Z1FjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZC9iZjYwNDktOGQxZC00YmU4LTlmNTctOGJhYjc4ZGUzMmM5
LzEvQW9CLUNHTVFQd2tTNS1Ba2VCSFJaM2w5Z1FjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwM54aYtJ
DgJEJyKNjQnE7Nd1nasuiKxFLEHoT3kfIHR+3sDfWv1FnxORP3hvxpES8GnvH7m6
4az2by0j9X4ttv+icIkT/pL2cJF88ms1L6f1tC8UmpBQUElU4DyVhwcJ7RwUVEwj
5hW79ExooNXHlq32e3QDNQpwUmcKVNKcDqHKjSeSgIi7pg5cBpVoQFnTW53RK+Dv
KKwCsIlaKZZwi6fAA15pg0VVMLAYwOuO0yS7g3VJCOK8IovJTDBJL8xd50ABUh9r
PPOgC7ySDcdmTsT1rs6WaQuoRTMSA8TUNc/a2/1rPWvjpUr8l8R0wrewUxCEGydD
OXMHbkGHj13jkg==
-----END CERTIFICATE-----
Generated at Fri Sep 25 21:53:22 2026 by rpki-client