Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c0/f6c862-af8b-43f3-98ad-44241fec1a9f/1/aotaN08UbXtqbcfTFujrsS3upnA.mft
File: aotaN08UbXtqbcfTFujrsS3upnA.mft (raw, json)
Hash identifier: h2pPkLLLais0bbsioAHY0sHYIuQLu2hkAvBdNIx/UZ8=
Subject key identifier: 28:CB:58:89:E9:40:00:7B:E8:F5:03:AE:24:AA:C7:3D:AF:AE:9F:1C
Authority key identifier: 6A:8B:5A:37:4F:14:6D:7B:6A:6D:C7:D3:16:E8:EB:B1:2D:EE:A6:70
Certificate issuer: /CN=6a8b5a374f146d7b6a6dc7d316e8ebb12deea670
Certificate serial: 01A0E32BDC84EA55301B34358AF7568E9116
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aotaN08UbXtqbcfTFujrsS3upnA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/f6c862-af8b-43f3-98ad-44241fec1a9f/1/aotaN08UbXtqbcfTFujrsS3upnA.mft
Manifest number: 114D
Signing time: Sun 27 Sep 2026 14:01:37 +0000
Manifest this update: Sun 27 Sep 2026 14:01:37 +0000
Manifest next update: Mon 28 Sep 2026 14:01:37 +0000
Files and hashes: 1: aotaN08UbXtqbcfTFujrsS3upnA.crl (hash: cqwBYJ3THSpNy+PeuSVhFE3LGfkf9mRVVDT12TULWpA=)
2: bet4fdymyOIlEb-62LJXEqjZz4M.roa (hash: z3hr8kxRBm3emLdFWmkitNGZ2vCXqhwRUzbp9y48TSg=)
3: xzOtkf3m_unGZDJuyTmOZRDo1vs.roa (hash: AqWTAJg+/JR+tTmpK3jZUrDvB6ISeUjMegyS/xS/c3s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/f6c862-af8b-43f3-98ad-44241fec1a9f/1/aotaN08UbXtqbcfTFujrsS3upnA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/f6c862-af8b-43f3-98ad-44241fec1a9f/1/aotaN08UbXtqbcfTFujrsS3upnA.mft
rsync://rpki.ripe.net/repository/DEFAULT/aotaN08UbXtqbcfTFujrsS3upnA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 14:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e3:2b:dc:84:ea:55:30:1b:34:35:8a:f7:56:8e:91:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a8b5a374f146d7b6a6dc7d316e8ebb12deea670
Validity
Not Before: Sep 27 14:01:37 2026 GMT
Not After : Sep 28 14:01:37 2026 GMT
Subject: CN=28cb5889e940007be8f503ae24aac73dafae9f1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:a1:4c:0b:92:b8:29:ce:4a:65:9c:32:0b:79:
1a:a6:02:10:1c:6b:b8:c0:5d:68:62:0d:b6:ab:be:
b2:b3:92:83:ea:ad:a8:aa:62:fb:df:5f:17:78:5a:
0f:de:11:68:a5:2d:36:ee:10:1a:e9:90:b8:3e:9d:
44:9e:a9:1a:cc:18:2a:37:9b:8c:56:ca:82:c6:0f:
a0:87:9e:36:fc:09:76:e3:5c:51:f5:d3:5e:cd:03:
b5:f3:2e:d0:e9:65:6d:3e:1f:38:09:37:89:90:25:
1a:f6:8d:38:b4:39:4d:98:6a:4f:f7:7d:e4:71:8d:
cd:08:fe:c9:45:a7:1a:10:9a:bf:6d:e5:b1:73:47:
b8:db:34:11:b9:94:27:c2:02:c0:38:85:74:e8:ad:
d4:1f:ad:2d:53:a1:bf:4f:45:a1:e5:bb:f8:1e:2f:
bd:26:9f:ae:ff:9f:25:5e:92:7d:23:19:09:5b:d6:
0e:8e:c0:de:09:38:1f:d7:32:77:e5:37:6c:37:ed:
c8:71:d3:f1:18:e1:8d:98:5c:90:5d:95:2f:e3:4f:
c4:9e:c5:1b:09:bd:05:38:84:94:f7:91:29:27:3e:
10:51:1f:44:d1:5b:67:96:68:b1:e2:4c:b5:97:e2:
25:3d:e5:0e:e0:b2:51:f9:8f:e9:ff:5f:85:34:90:
1f:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:CB:58:89:E9:40:00:7B:E8:F5:03:AE:24:AA:C7:3D:AF:AE:9F:1C
X509v3 Authority Key Identifier:
keyid:6A:8B:5A:37:4F:14:6D:7B:6A:6D:C7:D3:16:E8:EB:B1:2D:EE:A6:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aotaN08UbXtqbcfTFujrsS3upnA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/f6c862-af8b-43f3-98ad-44241fec1a9f/1/aotaN08UbXtqbcfTFujrsS3upnA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/f6c862-af8b-43f3-98ad-44241fec1a9f/1/aotaN08UbXtqbcfTFujrsS3upnA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:24:85:f3:46:cc:f0:b6:11:2a:af:67:e9:95:85:7c:7c:41:
f0:9e:ae:8e:2a:7e:9e:93:12:44:3f:b4:06:cf:c2:4d:1d:11:
72:32:de:10:a6:2b:8c:79:d1:42:4b:cf:32:30:52:ab:78:6d:
62:62:b4:ef:21:3b:b7:bd:e7:76:b7:0d:47:fd:6c:53:ac:13:
98:e8:3d:d9:09:1b:ce:d2:91:ee:a4:0a:5b:c8:48:79:2d:3e:
6f:b1:2a:db:da:e0:31:ea:c4:16:0b:22:d7:7f:33:e1:ee:d8:
e3:d8:2d:d2:a1:b9:66:c1:79:03:49:19:45:b9:0a:05:d4:64:
1f:a9:fe:9a:92:3d:44:7c:bf:28:5b:8c:82:36:df:b0:6c:0e:
70:69:69:9e:90:88:34:ee:56:d5:9a:2a:5b:8a:6f:5e:b7:12:
d0:66:6d:bc:10:4c:a2:26:b0:a5:fc:a4:6f:00:3e:92:d9:95:
d9:bb:ad:f2:53:50:37:b2:4c:b5:98:73:10:71:7f:7a:95:90:
87:d0:e4:56:42:bc:d7:2f:42:7d:1d:7f:55:26:8c:22:c4:11:
6a:13:ec:76:f4:4f:c5:fa:5f:9b:22:90:58:bf:3f:d4:ff:24:
56:56:96:04:e6:83:2d:d8:cc:15:a9:07:37:3f:22:9d:e0:22:
81:3e:da:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 23:32:04 2026 by rpki-client