Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/bf6049-8d1d-4be8-9f57-8bab78de32c9/1/AoB-CGMQPwkS5-AkeBHRZ3l9gQc.mft
File: AoB-CGMQPwkS5-AkeBHRZ3l9gQc.mft (raw, json)
Hash identifier: J2knrMecAlZxwzZMJlg3ldEOMIqI1tWTXhCBlb/ouIE=
Subject key identifier: 65:9D:DA:1A:69:FE:0B:26:9A:F3:38:14:BD:33:D3:1D:D2:18:48:7F
Authority key identifier: 02:80:7E:08:63:10:3F:09:12:E7:E0:24:78:11:D1:67:79:7D:81:07
Certificate issuer: /CN=02807e0863103f0912e7e0247811d167797d8107
Certificate serial: 019F905A4450BB523083E6444A657161CD42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AoB-CGMQPwkS5-AkeBHRZ3l9gQc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/bf6049-8d1d-4be8-9f57-8bab78de32c9/1/AoB-CGMQPwkS5-AkeBHRZ3l9gQc.mft
Manifest number: 0D85
Signing time: Thu 23 Jul 2026 19:01:02 +0000
Manifest this update: Thu 23 Jul 2026 19:01:02 +0000
Manifest next update: Fri 24 Jul 2026 19:01:02 +0000
Files and hashes: 1: 3a84f201VVV4zHV1iyP0KTsgDGc.roa (hash: Os2FOe6eOEdxwn4fXwRkDsov2wYvxoS0GMS6wsZRSdo=)
2: AoB-CGMQPwkS5-AkeBHRZ3l9gQc.crl (hash: TtzWz2F/PcenZy1LROor5wH2R53T4j8NS8FW4c3wquk=)
3: l-6nzd356yZWqDEY9DG-Da5JKys.roa (hash: OR4c0rfMD7ZWa8BaNFc1YAW9kkgFhCHBU/rMA3THGI4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/bf6049-8d1d-4be8-9f57-8bab78de32c9/1/AoB-CGMQPwkS5-AkeBHRZ3l9gQc.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/bf6049-8d1d-4be8-9f57-8bab78de32c9/1/AoB-CGMQPwkS5-AkeBHRZ3l9gQc.mft
rsync://rpki.ripe.net/repository/DEFAULT/AoB-CGMQPwkS5-AkeBHRZ3l9gQc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:5a:44:50:bb:52:30:83:e6:44:4a:65:71:61:cd:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02807e0863103f0912e7e0247811d167797d8107
Validity
Not Before: Jul 23 19:01:02 2026 GMT
Not After : Jul 24 19:01:02 2026 GMT
Subject: CN=659dda1a69fe0b269af33814bd33d31dd218487f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:5d:f5:20:fb:f9:ae:72:78:a7:4f:36:97:62:
7e:2d:70:59:ee:c6:55:14:e6:b2:d0:eb:f7:51:45:
eb:8b:d0:67:88:93:90:6b:eb:0d:76:dc:96:2b:f3:
79:de:88:90:c0:fb:57:bb:c5:7f:85:6a:af:19:b8:
d9:ce:3d:e6:e8:db:8e:df:02:9d:ff:98:32:59:27:
b0:45:c7:fe:9d:ea:9e:4d:29:6c:b1:04:7a:3b:db:
fb:df:3e:15:d6:74:3c:60:6b:9d:39:ec:14:51:d8:
a0:36:cf:07:bb:4e:a1:03:37:16:0c:bf:85:8b:ce:
db:0b:44:a5:c5:78:08:5e:44:a5:fe:a9:a2:47:40:
57:0b:27:16:ce:55:f4:41:a5:56:17:53:91:5f:f1:
53:c0:ff:af:5d:2d:df:c0:55:e9:8e:5a:32:69:b8:
e2:78:1b:d1:95:dc:1e:c2:0d:cf:61:08:ec:a0:02:
93:e9:0d:48:67:b0:b5:b0:44:02:c6:1c:b0:d7:dd:
7e:23:7d:7a:6b:42:73:d0:40:3d:d5:86:c0:cd:e6:
0d:9d:3c:bb:cc:ce:02:be:56:31:20:cb:50:18:5a:
f1:b2:71:7a:df:d2:2a:6b:2d:b5:f9:fd:b5:7b:ee:
7a:78:ba:2a:4e:2a:a3:a9:77:41:5c:34:f1:0a:b7:
34:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:9D:DA:1A:69:FE:0B:26:9A:F3:38:14:BD:33:D3:1D:D2:18:48:7F
X509v3 Authority Key Identifier:
keyid:02:80:7E:08:63:10:3F:09:12:E7:E0:24:78:11:D1:67:79:7D:81:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AoB-CGMQPwkS5-AkeBHRZ3l9gQc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/bf6049-8d1d-4be8-9f57-8bab78de32c9/1/AoB-CGMQPwkS5-AkeBHRZ3l9gQc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/bf6049-8d1d-4be8-9f57-8bab78de32c9/1/AoB-CGMQPwkS5-AkeBHRZ3l9gQc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:38:0e:5a:96:5f:16:59:92:d0:0c:ed:07:ca:cb:5f:68:8d:
bd:39:43:40:c5:06:89:37:90:6d:28:55:3a:ed:77:50:08:c2:
af:21:b3:f7:b7:de:23:1e:81:5d:eb:3c:c4:e7:a3:42:e1:d1:
16:4d:16:2b:86:3a:e6:16:9a:77:c4:09:83:6c:f4:c5:26:d3:
60:94:3d:8f:be:a8:0f:8d:0b:da:dc:00:6e:17:10:a0:cd:f7:
8b:46:8d:00:36:32:5f:ce:bc:0a:13:70:a0:02:09:59:37:9d:
0f:fb:ab:22:5c:30:61:0e:10:b2:4d:18:bc:38:23:f7:82:b4:
40:8d:05:77:f8:1c:55:0b:4f:35:65:22:e9:b1:cb:0b:c4:bb:
e9:88:4d:a4:e4:0a:4b:98:75:3f:93:52:95:3e:df:27:8c:77:
09:22:98:13:74:9e:4f:c3:85:1e:bb:47:31:c2:99:c1:23:a9:
e2:e6:f5:80:e9:2e:50:bc:5d:d6:41:64:4b:ea:38:34:f6:6a:
93:eb:50:6b:6a:00:b8:b3:6f:1b:96:72:48:17:43:a1:14:3b:
be:e7:9a:5a:34:fb:97:56:d4:d2:04:40:a6:b5:3b:90:89:d9:
01:f8:fa:cb:75:cb:ee:40:2c:a0:b5:03:6c:66:6d:fe:b2:64:
41:20:5c:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:06:30 2026 by rpki-client