Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/87/313988-6f21-453e-8ef4-e671d94b0a20/1/aOB4tRgb5fvpFLQSpBIJa8jXFUk.mft
File: aOB4tRgb5fvpFLQSpBIJa8jXFUk.mft (raw, json)
Hash identifier: cINw+mbruwh5Fz/0gaECCg1waMIsd0fNi0t5z+PSDlA=
Subject key identifier: 31:84:32:8B:BA:3C:74:16:28:89:C7:45:F0:00:18:9E:4A:F4:38:6D
Authority key identifier: 68:E0:78:B5:18:1B:E5:FB:E9:14:B4:12:A4:12:09:6B:C8:D7:15:49
Certificate issuer: /CN=68e078b5181be5fbe914b412a412096bc8d71549
Certificate serial: 01A0DA2845E3138EEA6D9CE6CDCB3CF2AE7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aOB4tRgb5fvpFLQSpBIJa8jXFUk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/313988-6f21-453e-8ef4-e671d94b0a20/1/aOB4tRgb5fvpFLQSpBIJa8jXFUk.mft
Manifest number: 1A76
Signing time: Fri 25 Sep 2026 20:01:07 +0000
Manifest this update: Fri 25 Sep 2026 20:01:07 +0000
Manifest next update: Sat 26 Sep 2026 20:01:07 +0000
Files and hashes: 1: E0qsSsXvJA7eTjmf9QIZIPlFRl0.asa (hash: pvwAZEYObtjRdyOg9qCz2xFJ0nX0q9m4ifjK1DFkmOo=)
2: O94SxcSZ3vVC0i2tgYMUoWnLrx8.roa (hash: 4LC0luZN8wKvuxcvPoYnx2Xg9O0bR+DUu8P97rau+nM=)
3: aOB4tRgb5fvpFLQSpBIJa8jXFUk.crl (hash: 2RGjZvoMToZVS1FMIMHeXfd86pPG1K/8z9vd/vLi2so=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/313988-6f21-453e-8ef4-e671d94b0a20/1/aOB4tRgb5fvpFLQSpBIJa8jXFUk.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/313988-6f21-453e-8ef4-e671d94b0a20/1/aOB4tRgb5fvpFLQSpBIJa8jXFUk.mft
rsync://rpki.ripe.net/repository/DEFAULT/aOB4tRgb5fvpFLQSpBIJa8jXFUk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 17:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:da:28:45:e3:13:8e:ea:6d:9c:e6:cd:cb:3c:f2:ae:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68e078b5181be5fbe914b412a412096bc8d71549
Validity
Not Before: Sep 25 20:01:07 2026 GMT
Not After : Sep 26 20:01:07 2026 GMT
Subject: CN=3184328bba3c74162889c745f000189e4af4386d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:11:19:ad:4c:93:b0:47:ca:97:79:30:1e:db:
37:1e:e0:cf:bb:55:e7:6c:1e:32:e2:e5:cd:a0:95:
d9:6e:44:87:fb:21:7f:79:c5:b8:89:4b:9d:3c:4b:
27:67:36:f9:8c:2b:ca:a3:64:ec:4e:4d:b9:e4:d4:
1e:a7:71:a7:39:42:35:1f:d1:28:25:5d:54:77:df:
db:da:4d:b8:c9:e2:14:48:7c:cb:d6:a7:46:43:e3:
1c:93:8f:e5:23:e5:4e:a7:bb:1e:ef:68:24:b7:0a:
12:e3:f5:bf:1e:20:80:1b:06:b1:3f:47:1a:86:c6:
ea:30:46:86:d5:10:6c:f0:37:8c:32:2f:52:39:d3:
82:25:40:bb:65:fa:5c:2d:c4:1e:60:3b:5e:f0:50:
7c:ea:f3:16:82:84:48:64:e1:b0:f1:4e:0c:ed:17:
b8:3a:26:c2:2a:58:c5:b7:69:fa:58:79:85:9b:bb:
0d:0e:43:2a:d4:ed:e7:8d:6f:b0:05:69:25:80:1a:
c8:e0:ec:81:be:4c:cd:1b:54:66:5a:67:e2:3b:22:
44:8a:28:39:b9:dd:c6:24:d1:16:a3:bf:9a:80:46:
52:0f:95:49:d8:b4:5a:d7:f8:d4:e5:12:ce:70:12:
6c:26:4e:10:40:c4:7d:48:d9:f1:c1:69:5a:a0:3b:
12:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:84:32:8B:BA:3C:74:16:28:89:C7:45:F0:00:18:9E:4A:F4:38:6D
X509v3 Authority Key Identifier:
keyid:68:E0:78:B5:18:1B:E5:FB:E9:14:B4:12:A4:12:09:6B:C8:D7:15:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aOB4tRgb5fvpFLQSpBIJa8jXFUk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/313988-6f21-453e-8ef4-e671d94b0a20/1/aOB4tRgb5fvpFLQSpBIJa8jXFUk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/313988-6f21-453e-8ef4-e671d94b0a20/1/aOB4tRgb5fvpFLQSpBIJa8jXFUk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:6c:9c:95:a0:79:ac:c9:93:75:d7:28:dd:38:6e:b7:dc:8f:
8b:8f:ac:1f:f2:d3:b4:03:e2:4a:80:ce:c5:4f:76:2d:85:6c:
7a:86:22:70:c1:af:03:60:12:30:0f:1e:e9:d0:cb:64:34:98:
b7:a0:b0:9d:10:c0:77:71:08:23:c6:53:5e:2a:d6:c6:0e:24:
fe:b8:81:58:71:19:1e:f4:ba:00:ac:39:01:76:1f:c9:54:8d:
bc:62:18:52:58:49:4e:d6:e1:55:1a:60:d7:c0:9d:f2:84:fe:
7c:cb:90:5d:bb:62:90:cd:9c:b4:76:9f:e5:23:a8:eb:12:9a:
89:05:10:8b:5c:77:ba:fd:76:92:04:1b:05:ec:18:c1:26:4e:
e9:00:41:95:18:a2:01:e5:fd:65:57:8f:8e:c9:b8:d3:26:5e:
e5:28:61:79:06:27:cc:5b:2a:c1:e7:3b:b5:a1:45:a1:92:9b:
3b:20:4b:59:a2:72:08:18:bc:71:d5:da:08:4f:da:f0:5d:2b:
aa:af:df:9d:9c:6c:f9:fe:fb:92:27:33:10:46:cd:66:bc:46:
b8:46:22:cd:de:c9:c2:d7:0d:3b:f8:70:ed:00:af:d5:76:74:
85:1b:61:46:d2:83:cf:7b:b7:7b:80:23:ea:81:62:9e:dc:4f:
e3:2e:00:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 02:02:17 2026 by rpki-client