Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/bf6049-8d1d-4be8-9f57-8bab78de32c9/1/AoB-CGMQPwkS5-AkeBHRZ3l9gQc.mft
File: AoB-CGMQPwkS5-AkeBHRZ3l9gQc.mft (raw, json)
Hash identifier: vLc1OkMmlK5zj/CtGgeXEzilor6LENgGmeoM0TXULPA=
Subject key identifier: 61:C5:54:9B:73:C4:FE:AA:99:EF:AC:44:2F:D1:22:E2:6E:11:EB:1A
Authority key identifier: 02:80:7E:08:63:10:3F:09:12:E7:E0:24:78:11:D1:67:79:7D:81:07
Certificate issuer: /CN=02807e0863103f0912e7e0247811d167797d8107
Certificate serial: 019E1D90A38F674C851CD8489181FE272B56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AoB-CGMQPwkS5-AkeBHRZ3l9gQc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/bf6049-8d1d-4be8-9f57-8bab78de32c9/1/AoB-CGMQPwkS5-AkeBHRZ3l9gQc.mft
Manifest number: 0CC5
Signing time: Tue 12 May 2026 19:01:18 +0000
Manifest this update: Tue 12 May 2026 19:01:18 +0000
Manifest next update: Wed 13 May 2026 19:01:18 +0000
Files and hashes: 1: 3a84f201VVV4zHV1iyP0KTsgDGc.roa (hash: Os2FOe6eOEdxwn4fXwRkDsov2wYvxoS0GMS6wsZRSdo=)
2: AoB-CGMQPwkS5-AkeBHRZ3l9gQc.crl (hash: w5CSS4uFg+N9pie1GCIFjVpU5dO5NQBlGOkEBJYtFYA=)
3: l-6nzd356yZWqDEY9DG-Da5JKys.roa (hash: OR4c0rfMD7ZWa8BaNFc1YAW9kkgFhCHBU/rMA3THGI4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/bf6049-8d1d-4be8-9f57-8bab78de32c9/1/AoB-CGMQPwkS5-AkeBHRZ3l9gQc.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/bf6049-8d1d-4be8-9f57-8bab78de32c9/1/AoB-CGMQPwkS5-AkeBHRZ3l9gQc.mft
rsync://rpki.ripe.net/repository/DEFAULT/AoB-CGMQPwkS5-AkeBHRZ3l9gQc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:90:a3:8f:67:4c:85:1c:d8:48:91:81:fe:27:2b:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02807e0863103f0912e7e0247811d167797d8107
Validity
Not Before: May 12 19:01:18 2026 GMT
Not After : May 13 19:01:18 2026 GMT
Subject: CN=61c5549b73c4feaa99efac442fd122e26e11eb1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:be:71:46:ed:82:93:72:d4:32:59:08:63:78:
6b:28:eb:06:a9:c2:2d:3a:06:1b:68:79:fa:f5:f3:
c3:4e:11:91:a5:8f:3e:c0:35:3c:90:4f:a8:e1:42:
71:67:16:a1:1a:e4:18:0e:6d:0a:e1:49:65:86:33:
ad:0d:03:22:8f:ef:b0:d9:47:20:03:69:f4:dc:7c:
92:e6:f3:44:d3:f0:81:66:ac:b0:d9:ed:1f:36:52:
b2:d4:5a:89:53:33:5b:eb:17:ed:f3:11:93:4c:1d:
8c:b5:47:81:00:90:2e:31:43:65:93:14:8e:a3:5f:
99:98:5b:c2:f6:cc:d8:e1:7c:b6:28:de:7a:9e:4d:
5e:83:cc:68:ff:2a:07:e2:b1:1f:71:9a:99:db:c0:
85:8d:e5:21:a3:a8:d3:59:25:16:07:52:c7:b7:97:
1c:c0:08:05:44:9f:ae:dd:f7:46:32:25:1f:12:6a:
76:52:75:c1:be:b6:54:20:a2:5a:fb:9b:f7:0a:7a:
be:6f:35:29:70:1f:44:83:ff:4e:f1:58:93:3f:38:
6d:1c:e1:98:ab:5d:c2:4b:a7:bd:15:9c:62:44:b6:
2d:02:f0:2e:c3:c4:13:97:91:b6:e6:39:31:66:f7:
2a:71:19:cd:51:32:8f:4c:72:f5:4e:e4:1d:d0:5f:
25:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:C5:54:9B:73:C4:FE:AA:99:EF:AC:44:2F:D1:22:E2:6E:11:EB:1A
X509v3 Authority Key Identifier:
keyid:02:80:7E:08:63:10:3F:09:12:E7:E0:24:78:11:D1:67:79:7D:81:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AoB-CGMQPwkS5-AkeBHRZ3l9gQc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/bf6049-8d1d-4be8-9f57-8bab78de32c9/1/AoB-CGMQPwkS5-AkeBHRZ3l9gQc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/bf6049-8d1d-4be8-9f57-8bab78de32c9/1/AoB-CGMQPwkS5-AkeBHRZ3l9gQc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:d6:92:f6:d2:aa:d1:92:9e:52:28:be:5d:3e:3b:3e:84:e4:
d0:87:93:3d:74:d0:35:da:fd:ce:03:3e:85:0c:fb:4b:d9:91:
ee:31:c3:1b:da:dc:64:be:63:87:3d:aa:f9:59:35:02:8f:48:
a5:1b:51:58:77:51:13:d3:5f:ca:c9:a4:41:d3:08:77:33:df:
b4:95:52:8c:6c:01:93:99:b9:cf:bb:0f:20:c5:3e:dd:65:94:
cd:01:37:22:f5:52:97:b4:33:76:b5:f7:5d:e6:6a:42:bf:46:
29:cc:ac:79:84:d1:f3:f8:65:af:6b:92:1c:c3:10:1d:d3:c5:
52:91:19:2b:5b:e8:21:8c:5f:0e:fa:2f:26:7b:de:9c:6a:40:
d7:c0:fd:c1:5c:33:d3:d5:fe:c3:2a:22:ef:05:2d:cb:b3:13:
26:8a:b5:90:4a:17:5e:81:21:dc:ff:bd:5a:97:cf:35:e2:9c:
d6:c9:82:c0:e8:df:32:38:e8:53:bd:b1:d5:3b:dc:30:11:78:
99:a2:fe:a4:11:fa:2b:af:9a:31:94:3d:5a:d3:ff:69:01:5a:
b2:f9:fe:56:00:f9:7d:41:c7:12:83:01:91:83:a5:89:11:d9:
6b:fa:85:2b:22:74:95:7b:2d:d9:71:94:df:14:44:54:e5:f9:
70:0b:13:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:14:43 2026 by rpki-client