Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/97/210043-5afe-456f-b3f8-dc027432e5a5/1/AOC06vnBB5HzU7qYfeI2ChOEF70.mft
File: AOC06vnBB5HzU7qYfeI2ChOEF70.mft (raw, json)
Hash identifier: 11TRjfkvV2UlG6vh1HFrdzzMqdVNnkx8ttZkJXakSos=
Subject key identifier: 5D:27:A6:62:80:17:56:7C:3D:59:94:44:92:DE:53:51:63:3D:07:A9
Authority key identifier: 00:E0:B4:EA:F9:C1:07:91:F3:53:BA:98:7D:E2:36:0A:13:84:17:BD
Certificate issuer: /CN=00e0b4eaf9c10791f353ba987de2360a138417bd
Certificate serial: 01A0ED084F080C6182FD10B9A6A220FD5034
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AOC06vnBB5HzU7qYfeI2ChOEF70.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/210043-5afe-456f-b3f8-dc027432e5a5/1/AOC06vnBB5HzU7qYfeI2ChOEF70.mft
Manifest number: 0CAA
Signing time: Tue 29 Sep 2026 11:58:59 +0000
Manifest this update: Tue 29 Sep 2026 11:58:59 +0000
Manifest next update: Wed 30 Sep 2026 11:58:59 +0000
Files and hashes: 1: 62RbiFwZ1_XOHrvMeuIO0qbkA1A.roa (hash: cnho+bLoMv/Bp0S5dtnd6UgwZIY4cZQKOz8bwCDVOf8=)
2: AOC06vnBB5HzU7qYfeI2ChOEF70.crl (hash: 7XVaUhCruil4HpLyItastZukQPFlxxvz6JRlyS8T4DQ=)
3: LexXkjfAE5yNq8p4TfuCEaRKHeg.roa (hash: KDlc/z2I2lAqH602iJ+p3ujK1GdvNju4aKO99XjRuPY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/210043-5afe-456f-b3f8-dc027432e5a5/1/AOC06vnBB5HzU7qYfeI2ChOEF70.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/210043-5afe-456f-b3f8-dc027432e5a5/1/AOC06vnBB5HzU7qYfeI2ChOEF70.mft
rsync://rpki.ripe.net/repository/DEFAULT/AOC06vnBB5HzU7qYfeI2ChOEF70.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 08:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ed:08:4f:08:0c:61:82:fd:10:b9:a6:a2:20:fd:50:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00e0b4eaf9c10791f353ba987de2360a138417bd
Validity
Not Before: Sep 29 11:58:59 2026 GMT
Not After : Sep 30 11:58:59 2026 GMT
Subject: CN=5d27a6628017567c3d59944492de5351633d07a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:ed:0e:a2:c9:cb:4f:e6:3b:79:48:a8:84:89:
43:b8:d5:f7:cf:b0:02:96:1c:01:55:4b:bd:02:7f:
7f:53:c3:fa:e0:ec:dc:c1:e9:c6:69:bc:35:7d:a2:
ed:06:05:37:76:6f:77:47:ca:ee:24:ab:21:32:45:
c5:cd:7e:4b:16:bc:91:ec:81:7b:9f:cd:cb:b4:1a:
5f:49:f4:d5:43:0a:84:a5:5b:9c:37:a1:5c:70:c8:
bb:96:f9:34:26:19:54:6d:f5:a4:60:5a:62:93:89:
89:0a:6f:f6:25:e9:df:9e:ba:ba:5a:2a:b4:f4:84:
75:66:8d:cb:4a:8a:a3:d9:08:04:4d:cd:d5:52:2f:
10:fc:96:c6:b5:7b:45:02:d8:b7:05:09:ad:e0:af:
d1:3d:bc:da:b8:ee:f0:8d:17:0e:43:c9:68:30:5c:
27:38:3d:c3:3e:79:bb:1c:f1:19:62:4e:b6:7f:e5:
46:ed:b9:41:c1:5b:23:b7:96:5b:2e:50:58:e0:23:
7d:fa:b3:f1:b6:84:6e:55:b3:a5:04:45:38:78:81:
71:cc:df:5c:08:93:01:3c:6b:fd:ad:75:08:40:8d:
1d:ed:7a:c3:25:26:e1:96:5a:f1:16:83:ef:d1:e6:
3b:1c:ec:55:4a:d3:ba:f9:7f:2c:d1:df:66:bf:c8:
dd:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:27:A6:62:80:17:56:7C:3D:59:94:44:92:DE:53:51:63:3D:07:A9
X509v3 Authority Key Identifier:
keyid:00:E0:B4:EA:F9:C1:07:91:F3:53:BA:98:7D:E2:36:0A:13:84:17:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AOC06vnBB5HzU7qYfeI2ChOEF70.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/210043-5afe-456f-b3f8-dc027432e5a5/1/AOC06vnBB5HzU7qYfeI2ChOEF70.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/210043-5afe-456f-b3f8-dc027432e5a5/1/AOC06vnBB5HzU7qYfeI2ChOEF70.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:ae:71:db:e9:3d:45:b8:ff:60:bf:bb:17:c7:f1:aa:e4:da:
e0:9d:15:ca:d7:9e:47:14:bb:e8:3d:72:68:e5:37:87:0a:e7:
67:fe:43:6a:86:9d:e9:6d:3a:4f:dd:de:46:30:64:b6:19:0a:
e5:82:e8:4b:12:f8:38:d9:82:07:e4:cb:92:7a:d9:2f:a9:90:
cb:60:96:38:ec:f3:3b:c1:26:7c:2c:73:21:08:e6:f3:c8:ad:
2f:7d:92:da:88:ee:d8:5c:cc:48:18:fa:2e:26:b3:8a:ce:3f:
19:b8:01:a4:a5:30:6e:5c:e9:54:82:29:2e:97:5e:67:4c:68:
74:07:82:03:cd:8d:2e:ae:00:f9:a6:58:46:fa:d6:75:11:32:
59:71:14:34:c7:b1:c0:ad:bf:99:d5:17:b4:e3:94:ec:f7:4b:
1f:99:53:3f:9a:55:d2:50:bd:0c:83:a5:e9:a1:01:00:1a:c4:
e4:0e:f8:a1:0f:dc:c9:99:8f:1d:21:db:5c:4f:cc:52:42:d6:
e5:fc:e5:e4:8a:67:98:b3:26:b1:ed:80:a8:bb:ac:d3:53:4d:
d2:f1:1a:cc:f7:9e:93:0a:05:3f:c5:50:ef:45:c3:e1:a5:21:
b9:12:0a:d7:73:02:27:0f:d5:9a:8c:db:fb:6a:0e:38:a9:46:
c9:0a:9a:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 17:35:09 2026 by rpki-client