Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/207167-d551-41ba-86a8-2f50ea27213c/1/aAONTKy9QZGZUus3CcFlM4OJAOM.mft
File: aAONTKy9QZGZUus3CcFlM4OJAOM.mft (raw, json)
Hash identifier: zy4RBhyaWGx+gpO9FsYq5MFUOc8mSd9W7hYh6NXvbYg=
Subject key identifier: A8:3B:D3:71:B7:98:26:8E:DE:45:40:F6:7C:EC:3D:24:C5:62:C5:04
Authority key identifier: 68:03:8D:4C:AC:BD:41:91:99:52:EB:37:09:C1:65:33:83:89:00:E3
Certificate issuer: /CN=68038d4cacbd41919952eb3709c16533838900e3
Certificate serial: 019F95B76A8C1B3150DDE4902B4E0CEABB99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aAONTKy9QZGZUus3CcFlM4OJAOM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/207167-d551-41ba-86a8-2f50ea27213c/1/aAONTKy9QZGZUus3CcFlM4OJAOM.mft
Manifest number: 19CC
Signing time: Fri 24 Jul 2026 20:00:53 +0000
Manifest this update: Fri 24 Jul 2026 20:00:53 +0000
Manifest next update: Sat 25 Jul 2026 20:00:53 +0000
Files and hashes: 1: VUWyLZ0rJ2KWNFwxw_bl1XOWT5Y.roa (hash: h6fu2o5gEs54ynuGXWVxljJh43rB4bmU8/bT0YsjVoE=)
2: aAONTKy9QZGZUus3CcFlM4OJAOM.crl (hash: QSzHQ8Yh+6Fu541t6ohgWZxR09Wv1i2kUt3l6zbdq9A=)
3: tp0SOw0ReetfWj-1nSTTgqHkwxM.roa (hash: XzLhvr/WPwVDdpz3jGaEEAicJMQsJQFmkLSa5mS4sUM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/207167-d551-41ba-86a8-2f50ea27213c/1/aAONTKy9QZGZUus3CcFlM4OJAOM.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/207167-d551-41ba-86a8-2f50ea27213c/1/aAONTKy9QZGZUus3CcFlM4OJAOM.mft
rsync://rpki.ripe.net/repository/DEFAULT/aAONTKy9QZGZUus3CcFlM4OJAOM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:95:b7:6a:8c:1b:31:50:dd:e4:90:2b:4e:0c:ea:bb:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68038d4cacbd41919952eb3709c16533838900e3
Validity
Not Before: Jul 24 20:00:53 2026 GMT
Not After : Jul 25 20:00:53 2026 GMT
Subject: CN=a83bd371b798268ede4540f67cec3d24c562c504
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:56:db:42:36:a9:4d:e1:7d:cd:5d:97:ae:71:
47:48:0d:06:2c:a8:ce:f7:72:1d:d4:84:d5:ed:fa:
f7:7b:df:ce:fe:cf:66:06:13:f9:22:d5:b2:da:49:
79:fd:c7:7b:c5:89:1e:56:7e:68:96:15:f9:59:ec:
1a:87:ce:ab:d5:93:2e:b8:77:52:bb:88:7e:a8:4a:
dd:71:33:7a:a7:05:29:95:5c:d6:d3:51:be:5b:55:
d8:a3:80:50:20:b3:b5:cc:39:20:a9:34:f9:74:bf:
c1:a9:55:4b:ed:60:2d:14:48:9c:8f:b2:a8:01:2e:
16:9d:ae:1e:09:ab:aa:87:b8:b3:f3:70:45:b3:28:
d3:f5:f5:6e:09:2b:1e:45:a5:fb:0c:5b:ec:fc:7a:
e7:75:df:27:54:1b:55:fc:c1:20:3b:f8:7d:2d:59:
db:da:99:44:a9:50:e6:0d:be:4c:ae:8f:db:71:18:
e2:31:7c:ec:65:fd:d8:fa:f6:75:e6:d0:93:03:9c:
db:ea:d3:75:9a:8c:f0:9f:79:92:0c:38:6b:70:31:
25:6a:6b:16:bd:e4:16:35:45:5c:cf:3d:e4:2e:48:
9d:8d:22:3e:91:2a:e1:07:3c:49:16:d6:58:c2:fc:
01:f2:22:de:dc:cb:a0:75:84:ac:d9:ee:3c:76:15:
b0:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:3B:D3:71:B7:98:26:8E:DE:45:40:F6:7C:EC:3D:24:C5:62:C5:04
X509v3 Authority Key Identifier:
keyid:68:03:8D:4C:AC:BD:41:91:99:52:EB:37:09:C1:65:33:83:89:00:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aAONTKy9QZGZUus3CcFlM4OJAOM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/207167-d551-41ba-86a8-2f50ea27213c/1/aAONTKy9QZGZUus3CcFlM4OJAOM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/207167-d551-41ba-86a8-2f50ea27213c/1/aAONTKy9QZGZUus3CcFlM4OJAOM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:73:be:d8:f7:4b:77:be:f8:43:c1:60:2b:54:13:dc:33:21:
cc:96:14:74:42:88:c1:6e:6a:22:22:ee:1b:0a:42:70:dd:4d:
db:32:6d:1a:49:fd:74:df:b2:23:f9:c3:01:f1:43:1f:d9:55:
ff:f0:c0:b1:e5:a9:3a:7c:cb:4b:e9:e6:65:fa:dd:10:55:bd:
e7:10:c0:03:46:c9:bb:9a:61:b1:02:f6:94:33:aa:af:54:94:
c4:6d:42:38:23:88:97:d0:13:f3:b2:8f:18:42:d3:a9:c6:a6:
dc:74:87:0c:fb:c1:71:fb:be:6a:42:98:c1:e0:2c:f9:a2:d8:
a4:7f:b5:0f:96:a5:28:a1:c8:bd:6e:af:27:a3:f6:d1:39:76:
70:a4:af:95:24:db:16:16:55:64:3c:92:dc:65:3f:95:e7:d4:
35:ab:03:f9:b5:dc:28:56:0f:f7:f0:28:10:69:5c:5e:28:20:
2e:56:a1:a0:c3:2a:c8:b1:85:42:fa:9b:cc:b2:22:c5:e6:3b:
cd:e7:11:25:14:09:75:9f:7c:b7:1a:66:55:7a:5e:1b:44:23:
40:12:ad:4c:fd:66:e7:bc:ed:37:c0:57:c5:c4:1a:89:d8:f0:
fa:3f:30:86:d9:cf:02:3b:a5:6f:54:74:e2:a7:8c:5f:b0:aa:
5a:b6:aa:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 22:14:53 2026 by rpki-client