Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/408667-0b39-4da0-9aa0-3cc11bc9d594/1/0AumM_HpgkB20WGpg9i46IEmOYI.mft
File: 0AumM_HpgkB20WGpg9i46IEmOYI.mft (raw, json)
Hash identifier: D2N1q+aQer3LfRA61j9ksNbcdCVpJbw6Ftukn18E9+w=
Subject key identifier: 5E:36:13:34:FE:A2:CA:DA:63:2F:7E:D2:E1:E2:25:EA:B9:52:27:4A
Authority key identifier: D0:0B:A6:33:F1:E9:82:40:76:D1:61:A9:83:D8:B8:E8:81:26:39:82
Certificate issuer: /CN=d00ba633f1e9824076d161a983d8b8e881263982
Certificate serial: 019F8F474FB7CBD709564981C9A25A9FBE67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0AumM_HpgkB20WGpg9i46IEmOYI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/408667-0b39-4da0-9aa0-3cc11bc9d594/1/0AumM_HpgkB20WGpg9i46IEmOYI.mft
Manifest number: 19C8
Signing time: Thu 23 Jul 2026 14:00:43 +0000
Manifest this update: Thu 23 Jul 2026 14:00:43 +0000
Manifest next update: Fri 24 Jul 2026 14:00:43 +0000
Files and hashes: 1: 0AumM_HpgkB20WGpg9i46IEmOYI.crl (hash: VsIqiN0UGru3CuNVlFCszPnhJbI9beh8utoDT4L99mA=)
2: ISlu2yBKOiwYiK7qUKEsRGH2kzo.roa (hash: 4RnBkIb7B8coxfzF6I8zgcJVOP7X3HVqDAGpERLc3lw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/408667-0b39-4da0-9aa0-3cc11bc9d594/1/0AumM_HpgkB20WGpg9i46IEmOYI.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/408667-0b39-4da0-9aa0-3cc11bc9d594/1/0AumM_HpgkB20WGpg9i46IEmOYI.mft
rsync://rpki.ripe.net/repository/DEFAULT/0AumM_HpgkB20WGpg9i46IEmOYI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:47:4f:b7:cb:d7:09:56:49:81:c9:a2:5a:9f:be:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d00ba633f1e9824076d161a983d8b8e881263982
Validity
Not Before: Jul 23 14:00:43 2026 GMT
Not After : Jul 24 14:00:43 2026 GMT
Subject: CN=5e361334fea2cada632f7ed2e1e225eab952274a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:07:87:b4:d1:25:7a:d0:52:f8:16:aa:e1:3d:
93:0e:7e:55:e2:66:a8:e0:c1:35:c8:ef:c9:1d:e3:
62:c9:33:c5:fa:17:5a:f5:96:38:b9:ad:63:f8:53:
95:b9:f8:3f:95:8f:a7:a6:77:46:50:cc:48:de:22:
b7:bc:16:72:a4:3e:69:fa:26:21:1f:3c:f0:f3:4c:
d7:75:91:aa:fc:6e:03:fe:f1:c1:e0:0f:32:c9:be:
a3:e5:1c:7a:e6:b5:09:d9:e5:bb:00:95:35:04:99:
96:c0:5b:a0:af:56:c8:5a:cd:86:94:e7:63:07:a8:
57:d4:7f:19:07:a3:be:7b:ec:95:96:a0:4f:b9:d7:
1f:36:52:13:3e:cf:e4:a2:b0:56:71:de:d0:b6:c3:
62:a6:60:cb:96:32:e8:40:54:41:84:aa:11:8a:77:
82:8d:3f:a9:42:cb:e2:6a:ec:70:67:49:a1:a8:96:
62:4d:a3:a4:3e:fe:90:cd:71:7d:82:0f:21:1c:8b:
d8:7c:d9:de:a0:ae:d6:9e:05:47:ed:46:95:17:b4:
82:32:f5:b5:74:94:72:6f:75:71:ce:06:2a:59:7e:
d3:e5:dc:54:f9:9b:f5:a5:db:b5:1e:0b:e5:7a:24:
c2:68:4f:af:ac:07:97:16:29:89:0f:4a:35:26:bf:
a2:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:36:13:34:FE:A2:CA:DA:63:2F:7E:D2:E1:E2:25:EA:B9:52:27:4A
X509v3 Authority Key Identifier:
keyid:D0:0B:A6:33:F1:E9:82:40:76:D1:61:A9:83:D8:B8:E8:81:26:39:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0AumM_HpgkB20WGpg9i46IEmOYI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/408667-0b39-4da0-9aa0-3cc11bc9d594/1/0AumM_HpgkB20WGpg9i46IEmOYI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/408667-0b39-4da0-9aa0-3cc11bc9d594/1/0AumM_HpgkB20WGpg9i46IEmOYI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:eb:71:1f:75:27:3c:14:07:3e:19:45:1b:41:c5:b0:ed:df:
f9:6c:65:8a:ee:73:4f:ac:f8:13:b2:d9:a7:c5:0b:07:f1:ad:
4c:bc:79:61:a3:13:3b:47:f6:e0:7e:86:87:3d:82:c5:5e:c3:
20:e0:9e:7d:78:7c:d5:aa:de:e1:0a:b1:6c:6a:7a:b9:77:18:
7f:32:1a:0c:e7:51:0b:7c:bc:ea:52:b5:1c:64:c3:e8:35:de:
f2:6e:f5:75:b2:e3:e2:f6:58:f4:87:1b:46:4f:ca:3e:56:70:
33:eb:85:71:fd:72:3e:f3:cf:a0:6b:11:7b:9a:e7:91:34:65:
e7:c8:1c:d0:99:2e:db:90:9a:70:a8:c3:73:c0:dd:07:68:7a:
1e:e0:55:44:3f:47:02:67:d8:ac:36:f7:1e:e0:53:56:36:70:
94:40:67:c7:71:85:45:c4:95:94:09:79:90:72:3b:2e:21:5d:
e4:0f:31:3e:5d:35:5a:b7:74:c9:5f:a2:a2:93:5f:55:fd:7b:
44:57:0e:71:0e:af:2e:df:a0:f2:ad:67:e8:55:10:fe:49:da:
92:46:5a:7b:bc:a3:60:49:37:e6:cf:9b:49:95:59:70:11:cc:
a1:2b:27:b2:16:68:d1:63:f3:48:d0:64:66:6e:21:44:0a:16:
c8:7d:ff:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:53:32 2026 by rpki-client