Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/05ab60-dea6-43a3-87ef-7bfaeb195445/1/AOOwVedsnogccp7gEWSlhwsrpMk.mft
File: AOOwVedsnogccp7gEWSlhwsrpMk.mft (raw, json)
Hash identifier: g2U0tTF7ntWcUsGtPwFrvTxv6AjdXYnYCzrNvedM9SE=
Subject key identifier: D9:00:CA:15:D8:A5:03:ED:DE:98:6A:EF:9A:26:1B:CC:39:6C:FF:8C
Authority key identifier: 00:E3:B0:55:E7:6C:9E:88:1C:72:9E:E0:11:64:A5:87:0B:2B:A4:C9
Certificate issuer: /CN=00e3b055e76c9e881c729ee01164a5870b2ba4c9
Certificate serial: 019F8F7E98280ACADF0E00D42DACD96725CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AOOwVedsnogccp7gEWSlhwsrpMk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/05ab60-dea6-43a3-87ef-7bfaeb195445/1/AOOwVedsnogccp7gEWSlhwsrpMk.mft
Manifest number: 3F
Signing time: Thu 23 Jul 2026 15:01:06 +0000
Manifest this update: Thu 23 Jul 2026 15:01:06 +0000
Manifest next update: Fri 24 Jul 2026 15:01:06 +0000
Files and hashes: 1: AOOwVedsnogccp7gEWSlhwsrpMk.crl (hash: UKBo6Nao+uHeQvzPs2YJLw/XLDxnVtdM24LVSW2TBiM=)
2: TXQspcwa_q4U4F7SmXnMEdJS514.roa (hash: JAX31rJoJv1xe2x9nCzhD+wfwz6O9nmNM3IvWJ+7fBU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/05ab60-dea6-43a3-87ef-7bfaeb195445/1/AOOwVedsnogccp7gEWSlhwsrpMk.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/05ab60-dea6-43a3-87ef-7bfaeb195445/1/AOOwVedsnogccp7gEWSlhwsrpMk.mft
rsync://rpki.ripe.net/repository/DEFAULT/AOOwVedsnogccp7gEWSlhwsrpMk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:7e:98:28:0a:ca:df:0e:00:d4:2d:ac:d9:67:25:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00e3b055e76c9e881c729ee01164a5870b2ba4c9
Validity
Not Before: Jul 23 15:01:06 2026 GMT
Not After : Jul 24 15:01:06 2026 GMT
Subject: CN=d900ca15d8a503edde986aef9a261bcc396cff8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:ba:47:8d:36:58:4c:2a:d1:f9:b6:1a:13:02:
40:69:15:a9:3c:2a:19:f1:f2:4a:ca:26:fc:c9:ad:
dd:34:db:c2:d8:99:32:da:bf:4c:f9:12:45:83:23:
89:42:07:aa:1c:f8:36:4b:26:ea:e7:b2:06:07:3f:
17:86:d9:a6:2d:6f:9a:0b:b3:ba:8d:b1:14:84:ef:
73:d0:c1:dc:a7:0b:7b:f5:c1:21:57:0e:ae:b0:55:
c2:46:cf:f7:bc:5a:0b:d6:3d:2f:9f:74:73:00:c5:
6d:69:90:02:aa:25:85:52:ee:7b:29:6e:34:bf:00:
10:10:98:b4:b8:34:42:d5:90:26:d5:40:b4:4b:1c:
70:70:28:53:75:7b:d9:92:8d:41:6a:7f:4a:30:3f:
41:88:c0:56:c6:0e:76:6f:01:db:38:03:28:b9:e3:
f2:0a:6a:d0:f5:0c:30:b2:6a:ca:8e:19:fc:e2:f3:
3d:d4:f2:59:8c:61:c3:6b:83:cf:94:b5:36:bb:e6:
aa:a8:dd:c7:89:65:a2:2a:d9:be:24:9d:01:2b:e0:
4d:20:01:1d:fb:cd:c1:b2:6c:01:33:1e:6c:de:8e:
86:eb:80:25:70:db:c0:8e:11:de:4b:16:0a:80:00:
55:17:26:03:db:ab:bb:c1:75:96:c1:ac:cf:8f:d2:
16:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:00:CA:15:D8:A5:03:ED:DE:98:6A:EF:9A:26:1B:CC:39:6C:FF:8C
X509v3 Authority Key Identifier:
keyid:00:E3:B0:55:E7:6C:9E:88:1C:72:9E:E0:11:64:A5:87:0B:2B:A4:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AOOwVedsnogccp7gEWSlhwsrpMk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/05ab60-dea6-43a3-87ef-7bfaeb195445/1/AOOwVedsnogccp7gEWSlhwsrpMk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/05ab60-dea6-43a3-87ef-7bfaeb195445/1/AOOwVedsnogccp7gEWSlhwsrpMk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:bd:76:18:ff:bb:6e:46:6f:47:69:c9:10:5b:e1:20:cd:84:
67:f8:7f:52:07:58:13:a6:24:22:59:eb:ed:e1:57:b2:88:95:
da:a7:6b:4a:b2:c3:4b:32:dc:22:85:02:7c:e5:e5:d4:af:b4:
70:31:1a:0c:0b:be:0a:55:af:b6:ad:7b:ea:78:15:1f:bc:fa:
52:b9:77:5c:87:73:03:0f:67:94:f7:73:64:76:07:a1:aa:09:
8b:6f:ea:64:df:7e:ec:31:2e:d0:23:d2:97:97:ec:0d:48:82:
74:50:12:03:1d:17:28:d0:2a:19:6b:6b:13:53:dc:a2:e6:3f:
b0:c9:33:86:a4:41:e3:71:96:21:01:19:cb:af:0c:e5:46:22:
11:de:f0:9c:ab:a7:d0:12:cd:c4:8b:49:e2:f7:0d:8d:9d:2c:
d3:38:61:95:fa:42:2d:74:f8:2c:4e:25:18:9c:e0:f8:a5:90:
0a:2d:af:ce:fa:f6:dc:ec:77:54:cc:1d:b4:90:67:b1:10:74:
2a:83:55:60:c5:40:b5:2d:b0:fe:53:fa:41:84:26:ac:4d:7c:
ef:28:e7:ed:3c:4a:4f:0b:f3:96:2e:18:83:9e:c9:53:12:45:
e1:d9:e6:c5:17:cf:3f:70:2a:49:5e:fc:ac:0b:ba:1d:84:c0:
01:f2:b6:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:30:49 2026 by rpki-client