Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/210043-5afe-456f-b3f8-dc027432e5a5/1/AOC06vnBB5HzU7qYfeI2ChOEF70.mft
File: AOC06vnBB5HzU7qYfeI2ChOEF70.mft (raw, json)
Hash identifier: Zx73oicaDcd3wx9NXNpiO1/LZGCUNm+BpGp4npqtdHY=
Subject key identifier: D8:B0:53:DA:4D:0B:7E:50:BB:D1:4D:97:C6:DB:6B:D2:40:2D:4E:17
Authority key identifier: 00:E0:B4:EA:F9:C1:07:91:F3:53:BA:98:7D:E2:36:0A:13:84:17:BD
Certificate issuer: /CN=00e0b4eaf9c10791f353ba987de2360a138417bd
Certificate serial: 019F9090E3F472456F5C8759B77FE2D08D29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AOC06vnBB5HzU7qYfeI2ChOEF70.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/210043-5afe-456f-b3f8-dc027432e5a5/1/AOC06vnBB5HzU7qYfeI2ChOEF70.mft
Manifest number: 0BF2
Signing time: Thu 23 Jul 2026 20:00:42 +0000
Manifest this update: Thu 23 Jul 2026 20:00:42 +0000
Manifest next update: Fri 24 Jul 2026 20:00:42 +0000
Files and hashes: 1: 62RbiFwZ1_XOHrvMeuIO0qbkA1A.roa (hash: cnho+bLoMv/Bp0S5dtnd6UgwZIY4cZQKOz8bwCDVOf8=)
2: AOC06vnBB5HzU7qYfeI2ChOEF70.crl (hash: BF4A8luUjHe321JAdB7Lvmt/0guw+gHWFefzU+/8CZM=)
3: HpozfWSyymsia54p2HJ2tEgSK_E.roa (hash: e6p/ARizQ8W8ejvfvFNvou7uYIT43NAz42TTWvmqlQM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/210043-5afe-456f-b3f8-dc027432e5a5/1/AOC06vnBB5HzU7qYfeI2ChOEF70.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/210043-5afe-456f-b3f8-dc027432e5a5/1/AOC06vnBB5HzU7qYfeI2ChOEF70.mft
rsync://rpki.ripe.net/repository/DEFAULT/AOC06vnBB5HzU7qYfeI2ChOEF70.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:90:e3:f4:72:45:6f:5c:87:59:b7:7f:e2:d0:8d:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00e0b4eaf9c10791f353ba987de2360a138417bd
Validity
Not Before: Jul 23 20:00:42 2026 GMT
Not After : Jul 24 20:00:42 2026 GMT
Subject: CN=d8b053da4d0b7e50bbd14d97c6db6bd2402d4e17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:2a:47:48:88:44:01:92:17:13:49:52:f7:55:
4d:86:bb:38:57:dd:02:aa:cf:83:ee:b1:88:e8:37:
09:1b:47:fd:a2:8f:a3:a1:70:2b:61:a1:f0:fb:1e:
3d:6d:16:d5:66:ed:a3:c3:5c:be:80:08:14:77:36:
7f:75:62:e1:67:53:d8:46:34:8c:b9:39:67:e4:53:
c4:37:23:3c:ef:95:4d:da:d9:1c:0a:33:d9:a1:29:
06:78:ea:bc:02:b6:de:54:63:f4:62:89:7e:78:b1:
d3:48:ba:93:7c:4f:5d:2b:fd:5b:a6:0a:32:b4:1a:
d3:cc:33:fd:c8:64:8e:7a:69:4c:3b:a7:98:86:d4:
97:56:12:83:27:e8:6a:3b:8d:b3:63:36:fc:63:c8:
71:41:af:f2:35:6e:12:61:0a:e0:40:16:35:cf:1f:
63:d4:1d:08:50:67:72:ca:e3:bd:47:a5:ac:aa:28:
eb:4e:48:f6:7e:47:d6:b9:79:5d:a0:75:f6:ab:2a:
76:ef:0f:49:f1:fe:4f:87:c5:9f:c5:d3:55:23:4e:
5f:9d:1d:38:1f:5b:81:1d:33:c1:cd:22:26:d3:62:
2e:62:16:77:66:ad:ef:29:51:88:23:8e:f0:73:50:
81:e0:1f:3a:7a:ee:b0:89:66:85:5d:89:e6:d8:64:
b4:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:B0:53:DA:4D:0B:7E:50:BB:D1:4D:97:C6:DB:6B:D2:40:2D:4E:17
X509v3 Authority Key Identifier:
keyid:00:E0:B4:EA:F9:C1:07:91:F3:53:BA:98:7D:E2:36:0A:13:84:17:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AOC06vnBB5HzU7qYfeI2ChOEF70.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/210043-5afe-456f-b3f8-dc027432e5a5/1/AOC06vnBB5HzU7qYfeI2ChOEF70.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/210043-5afe-456f-b3f8-dc027432e5a5/1/AOC06vnBB5HzU7qYfeI2ChOEF70.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:01:20:f6:7f:46:c9:77:6f:ad:79:77:3a:c9:42:9c:40:d9:
9c:fb:10:cd:4c:2d:f1:b9:a7:e4:99:5b:a8:70:af:4c:ee:e9:
79:f6:7a:c9:af:62:df:9c:c1:65:a4:6f:ec:59:9b:23:ea:d6:
a2:13:f2:5d:3f:8b:d8:14:08:b1:a2:90:96:b0:6d:b3:90:b4:
92:8b:73:ae:47:d3:b0:8b:bb:a8:ed:84:32:66:bf:56:58:20:
68:d3:51:01:8e:0b:30:40:8f:98:81:51:f1:ef:60:8b:ca:1a:
19:e9:da:cb:a7:52:2f:47:cc:1c:b9:57:91:6f:a4:b5:87:96:
ce:cb:df:99:f6:3c:0f:ab:a1:fb:c1:fc:2e:09:76:1b:94:fa:
55:9f:bb:c1:4a:f5:16:7e:5a:e1:36:94:37:4e:c0:28:52:67:
63:05:d7:94:61:6a:f1:04:58:05:96:c7:c1:b0:cf:51:18:dc:
9c:48:71:82:9c:2f:df:99:5e:fb:a8:3f:90:58:2d:7d:e5:d3:
c2:e0:65:54:eb:e5:25:78:45:19:1c:43:36:99:e9:d0:46:55:
64:66:a1:a4:52:c7:9e:09:d9:d5:14:1b:f5:c5:7a:73:9e:91:
88:72:66:fe:b9:3c:1a:de:fe:c3:2d:e7:a5:c2:0d:36:3d:63:
10:72:d8:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:10:26 2026 by rpki-client