Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a2/1c24ad-24b4-4c98-a659-592c0dcdaf79/1/AoOoxpomMM2Pb6cK8qU_4BnyzAc.mft
File: AoOoxpomMM2Pb6cK8qU_4BnyzAc.mft (raw, json)
Hash identifier: cST/82aO/gWFLemhSShTbeb3HnqjnbxbEhjsUkvcvDA=
Subject key identifier: D5:A9:8A:DD:2E:93:A2:CE:F3:F4:49:9E:02:37:90:05:42:D5:4F:A3
Authority key identifier: 02:83:A8:C6:9A:26:30:CD:8F:6F:A7:0A:F2:A5:3F:E0:19:F2:CC:07
Certificate issuer: /CN=0283a8c69a2630cd8f6fa70af2a53fe019f2cc07
Certificate serial: 01A0DC848A0E855A5E6103311E761E33AD28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AoOoxpomMM2Pb6cK8qU_4BnyzAc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/1c24ad-24b4-4c98-a659-592c0dcdaf79/1/AoOoxpomMM2Pb6cK8qU_4BnyzAc.mft
Manifest number: 1830
Signing time: Sat 26 Sep 2026 07:01:08 +0000
Manifest this update: Sat 26 Sep 2026 07:01:08 +0000
Manifest next update: Sun 27 Sep 2026 07:01:08 +0000
Files and hashes: 1: AoOoxpomMM2Pb6cK8qU_4BnyzAc.crl (hash: tKyVj/wLSQ+ol0TnxL91GSVpg1rEAm3AC27rFA0gOeQ=)
2: JZoFu5TMtgO6GAifQLMq6mNbzQk.roa (hash: NCchRFVvR+s9twFKa/UkTDiMQ9XBI45G1DwlByTQ0pE=)
3: aihBYA5xplYmWfW8AOuewemRnFY.roa (hash: wUPGbJwm1otYE0/5qPkx6y5JVuMAsf3lCIi1krAa/d8=)
4: gtbETOybprgnBnsdOcXReqiJdJg.roa (hash: MHBLEVDbm/5/3P4t1AJ9tw9OGawy0RxaBcMDfw8zw9M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/1c24ad-24b4-4c98-a659-592c0dcdaf79/1/AoOoxpomMM2Pb6cK8qU_4BnyzAc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/1c24ad-24b4-4c98-a659-592c0dcdaf79/1/AoOoxpomMM2Pb6cK8qU_4BnyzAc.mft
rsync://rpki.ripe.net/repository/DEFAULT/AoOoxpomMM2Pb6cK8qU_4BnyzAc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 07:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dc:84:8a:0e:85:5a:5e:61:03:31:1e:76:1e:33:ad:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0283a8c69a2630cd8f6fa70af2a53fe019f2cc07
Validity
Not Before: Sep 26 07:01:08 2026 GMT
Not After : Sep 27 07:01:08 2026 GMT
Subject: CN=d5a98add2e93a2cef3f4499e0237900542d54fa3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:60:d9:7f:45:e6:20:b1:cd:ac:72:67:1a:70:
ee:4a:3e:d9:3d:29:7e:24:e5:a0:01:c2:fc:3d:02:
5c:dc:a5:61:60:2e:23:a1:47:a3:93:54:eb:25:84:
1f:70:19:8e:38:9f:7c:58:44:b4:ce:54:6a:55:08:
48:09:91:ab:26:51:04:34:76:79:fd:a9:fa:19:bd:
d0:6a:92:fa:73:b8:c2:8a:f6:4a:bc:47:8f:3d:32:
c2:a1:47:81:a5:84:b2:cf:c4:e0:d2:d6:7f:bf:74:
3e:5f:80:f0:26:ea:13:d5:90:f9:c7:19:dd:9e:c1:
eb:1a:26:b9:6e:4c:d6:53:a4:6d:3d:dc:97:07:e5:
e6:46:27:19:c5:24:78:33:b9:b3:ae:76:60:cd:49:
de:f8:7f:04:54:63:86:d9:31:46:01:0a:58:79:e4:
b6:f9:7b:16:2b:e6:4b:2c:83:e6:d4:dd:aa:dc:9a:
e8:df:d4:bb:89:7f:37:00:50:0e:e2:22:54:91:31:
75:76:d3:92:8d:b7:1e:6b:69:6c:1d:4e:2a:24:fb:
dd:33:37:be:18:75:35:70:49:d5:35:e6:ee:06:51:
65:4c:3c:54:e2:d7:2e:6d:af:d7:57:cf:99:99:92:
ad:46:cd:98:57:7b:99:30:49:11:bf:82:1b:b2:e7:
84:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:A9:8A:DD:2E:93:A2:CE:F3:F4:49:9E:02:37:90:05:42:D5:4F:A3
X509v3 Authority Key Identifier:
keyid:02:83:A8:C6:9A:26:30:CD:8F:6F:A7:0A:F2:A5:3F:E0:19:F2:CC:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AoOoxpomMM2Pb6cK8qU_4BnyzAc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/1c24ad-24b4-4c98-a659-592c0dcdaf79/1/AoOoxpomMM2Pb6cK8qU_4BnyzAc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/1c24ad-24b4-4c98-a659-592c0dcdaf79/1/AoOoxpomMM2Pb6cK8qU_4BnyzAc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:df:cc:0b:2a:64:75:18:9b:4b:94:36:4a:5b:0c:23:3b:82:
c8:31:27:95:5e:c6:8e:43:28:2d:ce:ee:52:3e:de:78:e5:2b:
38:cd:e5:33:a3:e1:96:a9:e5:66:8f:b7:c7:cc:d4:84:f7:33:
b8:b8:a4:96:64:23:8d:90:f4:51:2e:d8:70:55:7a:50:03:0a:
5b:e7:b1:a4:68:f0:b3:fa:73:41:45:79:72:64:16:7c:96:ae:
6d:ed:79:0f:44:1c:84:16:ea:4f:42:e3:18:79:5b:63:fd:48:
76:bf:58:43:75:43:b6:31:a7:fc:ef:45:e4:57:d0:74:62:43:
ff:15:30:65:f5:8b:89:48:75:3a:24:23:e8:ca:8f:87:37:84:
ca:82:89:5c:fa:e1:d7:d5:50:b1:ab:66:8f:12:06:f1:75:37:
bd:c8:fc:2d:49:a4:11:42:89:94:12:de:aa:e6:3d:6a:8a:65:
17:f5:0b:62:88:e3:24:d8:28:01:f2:3d:6e:fe:b0:78:93:8d:
e4:28:f4:5d:f3:19:b2:10:d2:3e:04:a4:ed:23:3c:30:b6:55:
45:2e:41:cc:0d:a5:33:a8:af:ac:4e:70:59:28:fe:ea:ff:fa:
25:2c:db:8b:89:50:8b:28:2a:38:95:aa:5d:e9:c6:59:9a:af:
58:86:8c:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 15:02:52 2026 by rpki-client