Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9a/05ab60-dea6-43a3-87ef-7bfaeb195445/1/AOOwVedsnogccp7gEWSlhwsrpMk.mft
File: AOOwVedsnogccp7gEWSlhwsrpMk.mft (raw, json)
Hash identifier: KgXuBOkHrQlH6lqdcNCNJ4PXazm8f2OGk+YoKLvvaPk=
Subject key identifier: 55:13:24:14:FC:4A:96:81:C1:9D:E8:D3:BB:00:EB:58:7D:A8:B4:D8
Authority key identifier: 00:E3:B0:55:E7:6C:9E:88:1C:72:9E:E0:11:64:A5:87:0B:2B:A4:C9
Certificate issuer: /CN=00e3b055e76c9e881c729ee01164a5870b2ba4c9
Certificate serial: 01A0CE2452EFA43D9D42EC294BF2C6C4457A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AOOwVedsnogccp7gEWSlhwsrpMk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/05ab60-dea6-43a3-87ef-7bfaeb195445/1/AOOwVedsnogccp7gEWSlhwsrpMk.mft
Manifest number: E4
Signing time: Wed 23 Sep 2026 12:01:22 +0000
Manifest this update: Wed 23 Sep 2026 12:01:22 +0000
Manifest next update: Thu 24 Sep 2026 12:01:22 +0000
Files and hashes: 1: AOOwVedsnogccp7gEWSlhwsrpMk.crl (hash: bq3nRZpTGPixOrBj926wpanuzWb107xiXTn5S+BYTwI=)
2: TXQspcwa_q4U4F7SmXnMEdJS514.roa (hash: JAX31rJoJv1xe2x9nCzhD+wfwz6O9nmNM3IvWJ+7fBU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/05ab60-dea6-43a3-87ef-7bfaeb195445/1/AOOwVedsnogccp7gEWSlhwsrpMk.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/05ab60-dea6-43a3-87ef-7bfaeb195445/1/AOOwVedsnogccp7gEWSlhwsrpMk.mft
rsync://rpki.ripe.net/repository/DEFAULT/AOOwVedsnogccp7gEWSlhwsrpMk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 12:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ce:24:52:ef:a4:3d:9d:42:ec:29:4b:f2:c6:c4:45:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00e3b055e76c9e881c729ee01164a5870b2ba4c9
Validity
Not Before: Sep 23 12:01:22 2026 GMT
Not After : Sep 24 12:01:22 2026 GMT
Subject: CN=55132414fc4a9681c19de8d3bb00eb587da8b4d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:ac:f5:64:e3:5a:29:6a:75:53:ab:f3:0c:d2:
da:5f:92:bb:3c:4a:5d:6b:1f:99:ab:a5:3b:5a:3f:
b5:7a:fb:9b:79:02:5b:10:4c:95:38:b2:e1:6d:c2:
de:11:e0:f6:4a:f7:cd:5b:56:dc:98:fc:3d:36:75:
46:e9:8a:1d:e9:ff:c6:f2:f9:b5:0c:c6:92:6b:ba:
cb:cb:0f:b5:5e:d5:1c:a4:d7:54:6e:99:73:9a:91:
49:df:c8:af:40:7f:c0:65:87:56:0a:8a:5c:3d:fd:
a4:4b:23:e6:74:33:ad:b2:2c:6c:d3:0d:1d:d4:a7:
a0:5c:fa:3e:0d:a6:29:65:55:4e:65:be:f3:b8:d2:
a5:6f:db:9d:8f:d3:71:a4:d3:6a:e4:10:c8:1e:e6:
09:3c:8f:a9:d4:c6:e8:55:bd:7e:bc:50:21:39:c7:
59:2c:d4:0a:4a:0f:ad:45:2a:ae:0a:7a:18:52:c5:
fa:a1:ba:9e:6b:45:a5:47:56:47:b4:1c:fc:55:d2:
b0:55:0b:b1:07:85:d4:45:2d:bb:47:17:03:7d:ca:
ef:df:1d:c4:3b:84:08:ce:b9:c2:ca:d6:1b:c0:c4:
ea:c9:10:af:1f:ac:20:e2:4b:11:39:60:14:4b:4d:
93:01:ec:63:9b:12:d3:23:22:8c:17:f7:66:35:55:
8e:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:13:24:14:FC:4A:96:81:C1:9D:E8:D3:BB:00:EB:58:7D:A8:B4:D8
X509v3 Authority Key Identifier:
keyid:00:E3:B0:55:E7:6C:9E:88:1C:72:9E:E0:11:64:A5:87:0B:2B:A4:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AOOwVedsnogccp7gEWSlhwsrpMk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/05ab60-dea6-43a3-87ef-7bfaeb195445/1/AOOwVedsnogccp7gEWSlhwsrpMk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/05ab60-dea6-43a3-87ef-7bfaeb195445/1/AOOwVedsnogccp7gEWSlhwsrpMk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:65:b6:4b:9c:73:c9:a3:f9:17:8d:ef:f0:e1:ff:21:39:dd:
0e:e5:b9:10:b5:61:d1:16:c4:da:23:70:1d:76:43:d5:a5:a6:
3a:34:db:03:30:2d:61:9a:1f:e9:1e:6e:2b:dc:9a:31:a4:f6:
6c:43:05:5d:81:ce:e6:16:4a:89:7a:99:1e:68:16:fb:ff:f3:
25:30:fc:b1:9a:f4:23:64:70:a5:76:1c:46:9d:31:de:8c:22:
f7:e9:11:77:e1:2b:58:35:8a:86:dd:2c:8e:f1:e3:fc:57:0d:
10:99:82:d9:1d:b0:0f:9a:ac:bc:7e:96:09:94:ef:3b:fa:cd:
a0:bf:e8:97:d6:23:67:4f:f8:75:ca:ad:d2:3c:cc:00:14:a3:
67:14:d9:68:9a:05:99:09:34:0e:ec:35:b2:db:56:54:04:a8:
23:cd:86:0a:ca:65:c5:1b:2b:a1:68:7b:64:a7:e8:b2:38:58:
44:4a:47:17:09:07:9e:ec:4a:d4:b4:93:b7:b2:78:fd:c2:2b:
03:da:79:8f:17:81:aa:8c:d8:91:75:e5:3d:d3:2d:8c:e1:e5:
f3:16:b4:e9:04:a9:64:09:ba:3a:7b:46:b9:20:e1:6a:f5:76:
83:b3:16:e0:9a:2e:b1:df:78:3f:d3:26:63:22:3e:86:c4:70:
eb:73:e8:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 22:19:26 2026 by rpki-client