Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/f6c862-af8b-43f3-98ad-44241fec1a9f/1/aotaN08UbXtqbcfTFujrsS3upnA.mft
File: aotaN08UbXtqbcfTFujrsS3upnA.mft (raw, json)
Hash identifier: wEKaA4VJ0bLWA3cDEF9R/TpB1HC4F+Pf8qZo1EXf2jE=
Subject key identifier: A9:0B:47:87:B7:33:23:9C:16:09:C4:D0:DA:A8:9F:80:F9:C2:57:A6
Authority key identifier: 6A:8B:5A:37:4F:14:6D:7B:6A:6D:C7:D3:16:E8:EB:B1:2D:EE:A6:70
Certificate issuer: /CN=6a8b5a374f146d7b6a6dc7d316e8ebb12deea670
Certificate serial: 019E1E6C92C83B9A2FE9B0601EAA9B79CFBD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aotaN08UbXtqbcfTFujrsS3upnA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/f6c862-af8b-43f3-98ad-44241fec1a9f/1/aotaN08UbXtqbcfTFujrsS3upnA.mft
Manifest number: 0FDE
Signing time: Tue 12 May 2026 23:01:32 +0000
Manifest this update: Tue 12 May 2026 23:01:32 +0000
Manifest next update: Wed 13 May 2026 23:01:32 +0000
Files and hashes: 1: aotaN08UbXtqbcfTFujrsS3upnA.crl (hash: b2A5vsexRK3TKi7V/Ai9beME9O/NyPvMVuLyEPiXsIc=)
2: bet4fdymyOIlEb-62LJXEqjZz4M.roa (hash: z3hr8kxRBm3emLdFWmkitNGZ2vCXqhwRUzbp9y48TSg=)
3: xzOtkf3m_unGZDJuyTmOZRDo1vs.roa (hash: AqWTAJg+/JR+tTmpK3jZUrDvB6ISeUjMegyS/xS/c3s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/f6c862-af8b-43f3-98ad-44241fec1a9f/1/aotaN08UbXtqbcfTFujrsS3upnA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/f6c862-af8b-43f3-98ad-44241fec1a9f/1/aotaN08UbXtqbcfTFujrsS3upnA.mft
rsync://rpki.ripe.net/repository/DEFAULT/aotaN08UbXtqbcfTFujrsS3upnA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:6c:92:c8:3b:9a:2f:e9:b0:60:1e:aa:9b:79:cf:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a8b5a374f146d7b6a6dc7d316e8ebb12deea670
Validity
Not Before: May 12 23:01:32 2026 GMT
Not After : May 13 23:01:32 2026 GMT
Subject: CN=a90b4787b733239c1609c4d0daa89f80f9c257a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:57:aa:11:ce:44:26:57:b8:2f:94:37:96:cd:
0d:38:2c:8e:4c:cb:c9:92:74:23:99:cd:72:81:fa:
f0:b9:01:d5:f0:c2:45:f8:1c:03:7b:15:6a:ec:e0:
ce:cf:dc:48:ed:c6:f9:6b:9a:34:96:86:fb:47:59:
d8:37:a9:54:f8:2c:8e:6f:61:b9:9c:da:d4:3a:99:
72:71:92:a2:b6:d6:70:f8:68:cf:bf:fe:dc:e3:9b:
10:79:40:64:e8:07:3b:fb:c5:c0:f5:f4:a6:10:3f:
0f:f5:15:5d:db:91:82:9a:9a:c3:81:c7:2b:46:98:
ee:b0:4e:bf:0d:3d:4b:a3:f1:0c:b0:8c:ba:e6:16:
87:86:43:24:f8:ef:fd:53:83:b7:5b:b5:40:8e:36:
2d:cc:f2:0a:be:26:60:84:1f:a4:d7:03:dd:d2:dc:
32:9b:a3:b2:f6:94:c3:64:60:63:71:90:df:89:0c:
27:c8:6b:e4:53:e4:97:91:f6:a6:69:27:3a:9b:a1:
88:b5:f2:d3:6f:aa:62:03:3c:88:40:dc:3c:b5:84:
68:5f:77:90:a9:34:07:37:fb:49:cc:ab:c6:81:bc:
10:f9:08:c6:e9:96:e4:ab:3a:c8:04:01:62:5b:91:
d1:0a:31:f7:42:39:75:16:f5:2a:65:70:eb:81:78:
41:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:0B:47:87:B7:33:23:9C:16:09:C4:D0:DA:A8:9F:80:F9:C2:57:A6
X509v3 Authority Key Identifier:
keyid:6A:8B:5A:37:4F:14:6D:7B:6A:6D:C7:D3:16:E8:EB:B1:2D:EE:A6:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aotaN08UbXtqbcfTFujrsS3upnA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/f6c862-af8b-43f3-98ad-44241fec1a9f/1/aotaN08UbXtqbcfTFujrsS3upnA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/f6c862-af8b-43f3-98ad-44241fec1a9f/1/aotaN08UbXtqbcfTFujrsS3upnA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:5b:a8:57:24:fa:36:3c:5d:e7:37:36:f9:4c:cc:32:d3:40:
04:e4:6a:03:dd:e0:c7:83:49:b8:ac:25:e5:26:e6:68:23:56:
32:ec:34:65:9d:bd:11:fd:66:07:75:4d:3c:d3:3f:b5:38:0c:
02:db:83:52:c5:38:d0:bb:41:02:1e:0a:bc:d6:d7:e1:7f:76:
c0:60:17:f5:52:48:15:cd:6f:45:46:18:fc:16:d2:54:1b:d7:
8f:c4:a5:f6:4a:62:9e:9a:02:d3:8b:e1:f0:54:c3:82:14:fd:
df:3f:89:4c:6b:48:6b:7e:76:be:a5:3b:58:91:c9:14:6f:42:
fb:7f:ae:aa:17:44:e9:7d:e4:5e:6e:56:d4:97:b7:a1:62:ca:
7d:ea:16:4b:59:40:16:6d:30:33:9e:c0:c3:3e:0a:0a:c7:13:
1d:ed:69:e6:d8:00:24:70:14:05:51:0f:85:d5:92:fc:99:ce:
c4:92:8d:0b:c7:69:81:35:56:30:77:98:88:46:f9:b2:5a:75:
2c:84:0e:d0:74:3e:74:57:5b:26:f5:4c:90:0a:2f:19:82:ec:
24:b2:50:1b:e7:c6:a5:6a:84:d2:4e:30:c2:d8:85:46:49:06:
94:3d:d0:04:ae:50:7a:49:c4:36:c8:c2:27:c6:b0:33:68:da:
68:8a:80:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:49:58 2026 by rpki-client