Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8a/408667-0b39-4da0-9aa0-3cc11bc9d594/1/0AumM_HpgkB20WGpg9i46IEmOYI.mft
File: 0AumM_HpgkB20WGpg9i46IEmOYI.mft (raw, json)
Hash identifier: NahkiWc0EXUOqZfTCx7WCnclPm5OyBjT87xekPcTUT4=
Subject key identifier: 06:82:CE:A0:88:3F:CD:27:CF:FD:53:FA:95:DB:39:42:F0:C9:30:3A
Authority key identifier: D0:0B:A6:33:F1:E9:82:40:76:D1:61:A9:83:D8:B8:E8:81:26:39:82
Certificate issuer: /CN=d00ba633f1e9824076d161a983d8b8e881263982
Certificate serial: 01A0D1C93EAB6D03979656431F5380662695
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0AumM_HpgkB20WGpg9i46IEmOYI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/408667-0b39-4da0-9aa0-3cc11bc9d594/1/0AumM_HpgkB20WGpg9i46IEmOYI.mft
Manifest number: 1A6F
Signing time: Thu 24 Sep 2026 05:00:21 +0000
Manifest this update: Thu 24 Sep 2026 05:00:21 +0000
Manifest next update: Fri 25 Sep 2026 05:00:21 +0000
Files and hashes: 1: 0AumM_HpgkB20WGpg9i46IEmOYI.crl (hash: gwTFBGtke76N6ekJ9JaAFQm1YjqOPSW2qearWqjwEYs=)
2: ISlu2yBKOiwYiK7qUKEsRGH2kzo.roa (hash: 4RnBkIb7B8coxfzF6I8zgcJVOP7X3HVqDAGpERLc3lw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/408667-0b39-4da0-9aa0-3cc11bc9d594/1/0AumM_HpgkB20WGpg9i46IEmOYI.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/408667-0b39-4da0-9aa0-3cc11bc9d594/1/0AumM_HpgkB20WGpg9i46IEmOYI.mft
rsync://rpki.ripe.net/repository/DEFAULT/0AumM_HpgkB20WGpg9i46IEmOYI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 05:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d1:c9:3e:ab:6d:03:97:96:56:43:1f:53:80:66:26:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d00ba633f1e9824076d161a983d8b8e881263982
Validity
Not Before: Sep 24 05:00:21 2026 GMT
Not After : Sep 25 05:00:21 2026 GMT
Subject: CN=0682cea0883fcd27cffd53fa95db3942f0c9303a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:a2:85:2c:1f:44:e3:23:61:71:3c:9b:7e:f8:
55:9b:39:3f:30:a7:39:ad:72:97:60:8c:d2:8f:80:
fa:43:04:32:8d:52:70:46:64:9b:a6:63:4a:02:d6:
82:09:c5:ca:96:d3:32:45:b1:39:e4:d2:0a:ba:8b:
f4:13:62:57:63:f9:ca:b9:04:f6:9e:6d:0c:df:5c:
20:63:3d:64:c0:a9:e7:5a:c0:58:e7:26:57:06:0d:
c6:23:fa:f4:dd:bb:5f:06:fe:68:ce:e3:30:d0:b1:
cb:6b:e9:9b:3f:28:2b:81:70:6e:97:7b:39:b5:ad:
b3:7c:1c:4a:78:d8:71:fc:20:1b:6a:ef:2d:dc:e2:
81:39:c7:6f:60:cb:86:72:90:36:07:68:e5:23:18:
2a:26:1a:07:6b:46:0d:f2:fa:ba:94:63:3d:1b:29:
a9:8f:61:4d:b3:77:6f:50:11:2a:c7:42:a5:4d:25:
69:8c:06:73:7f:95:7a:ad:9f:1f:8a:c3:b0:9b:84:
b0:b7:fb:5e:dc:90:20:f9:85:b9:50:49:5f:69:47:
e5:ac:24:0b:b8:0c:8b:8e:5d:8d:c9:e2:f6:3d:ff:
3d:fa:97:ea:41:7f:6a:13:57:ba:1f:38:34:d3:be:
59:25:1f:58:09:3b:e6:37:b5:07:1f:ab:86:cc:1c:
c2:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:82:CE:A0:88:3F:CD:27:CF:FD:53:FA:95:DB:39:42:F0:C9:30:3A
X509v3 Authority Key Identifier:
keyid:D0:0B:A6:33:F1:E9:82:40:76:D1:61:A9:83:D8:B8:E8:81:26:39:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0AumM_HpgkB20WGpg9i46IEmOYI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/408667-0b39-4da0-9aa0-3cc11bc9d594/1/0AumM_HpgkB20WGpg9i46IEmOYI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/408667-0b39-4da0-9aa0-3cc11bc9d594/1/0AumM_HpgkB20WGpg9i46IEmOYI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:ab:ee:f5:d4:0a:d5:69:3d:0f:ab:28:77:1a:6b:f6:0f:e7:
cd:ec:28:bb:95:20:dc:a0:3b:46:84:7e:1d:9d:da:b6:c0:1d:
c9:8b:db:97:36:86:b3:00:c6:ae:96:b7:ef:1e:9e:31:c4:1f:
7c:2a:81:2c:9c:7e:a5:6a:16:de:74:e4:58:e4:f6:e4:d5:0a:
f7:76:f4:d4:22:1b:30:94:2d:df:9f:1f:5b:61:46:8a:3c:82:
42:91:f8:4a:7f:0b:35:53:07:2c:05:a4:f5:15:6a:3c:2a:e6:
a0:b5:29:95:b1:1f:4c:a2:46:09:13:79:90:64:6a:a3:7c:09:
c3:c3:9a:74:7c:d4:a5:d8:d7:05:16:01:e3:87:2e:59:7b:ac:
51:bf:84:eb:1e:43:e0:c2:35:71:31:0b:4d:ad:6a:00:8f:0c:
37:34:dc:fa:c3:a8:d4:e6:4c:70:f6:1b:f5:ba:71:b6:6e:52:
fc:2a:31:af:dd:33:83:75:19:70:35:5e:7b:07:34:27:8e:49:
06:fa:27:86:6c:cc:4c:49:cd:47:71:da:a7:3e:1c:4c:25:11:
30:3a:fe:ca:01:63:34:d4:f7:ea:24:01:7c:96:64:ae:1c:62:
e8:db:85:96:1f:9f:82:c4:09:e7:53:c6:42:ef:f6:53:5d:8b:
a8:07:15:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 11:59:58 2026 by rpki-client