Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/f6c862-af8b-43f3-98ad-44241fec1a9f/1/aotaN08UbXtqbcfTFujrsS3upnA.mft
File: aotaN08UbXtqbcfTFujrsS3upnA.mft (raw, json)
Hash identifier: OKnrgDl9WcpjRyme/n7m6nkLlTlNTskDUfC3134qo1w=
Subject key identifier: 76:8A:5E:F0:99:25:1F:17:01:B0:D3:EC:22:48:F9:F5:49:B1:51:E2
Authority key identifier: 6A:8B:5A:37:4F:14:6D:7B:6A:6D:C7:D3:16:E8:EB:B1:2D:EE:A6:70
Certificate issuer: /CN=6a8b5a374f146d7b6a6dc7d316e8ebb12deea670
Certificate serial: 019F93248D534716CB376E67271856D92321
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aotaN08UbXtqbcfTFujrsS3upnA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/f6c862-af8b-43f3-98ad-44241fec1a9f/1/aotaN08UbXtqbcfTFujrsS3upnA.mft
Manifest number: 109F
Signing time: Fri 24 Jul 2026 08:01:13 +0000
Manifest this update: Fri 24 Jul 2026 08:01:13 +0000
Manifest next update: Sat 25 Jul 2026 08:01:13 +0000
Files and hashes: 1: aotaN08UbXtqbcfTFujrsS3upnA.crl (hash: 13HlWfrvD8/jbhJF0II+SQn1X6kfvF8Ez4qDnaCF5nY=)
2: bet4fdymyOIlEb-62LJXEqjZz4M.roa (hash: z3hr8kxRBm3emLdFWmkitNGZ2vCXqhwRUzbp9y48TSg=)
3: xzOtkf3m_unGZDJuyTmOZRDo1vs.roa (hash: AqWTAJg+/JR+tTmpK3jZUrDvB6ISeUjMegyS/xS/c3s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/f6c862-af8b-43f3-98ad-44241fec1a9f/1/aotaN08UbXtqbcfTFujrsS3upnA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/f6c862-af8b-43f3-98ad-44241fec1a9f/1/aotaN08UbXtqbcfTFujrsS3upnA.mft
rsync://rpki.ripe.net/repository/DEFAULT/aotaN08UbXtqbcfTFujrsS3upnA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:24:8d:53:47:16:cb:37:6e:67:27:18:56:d9:23:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a8b5a374f146d7b6a6dc7d316e8ebb12deea670
Validity
Not Before: Jul 24 08:01:13 2026 GMT
Not After : Jul 25 08:01:13 2026 GMT
Subject: CN=768a5ef099251f1701b0d3ec2248f9f549b151e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:7d:af:37:6a:53:f8:26:a4:6c:8e:fe:be:5a:
ca:e2:56:17:80:a9:2b:c8:b3:77:3e:70:69:37:eb:
78:fc:6e:09:ef:ce:6b:3d:54:80:c9:43:02:7a:d7:
08:e6:b4:d6:60:c5:dd:62:80:17:f9:a3:fd:5a:cd:
39:12:87:5a:d7:28:82:46:3e:6d:f1:6c:01:73:f1:
de:86:57:91:51:70:b4:e3:16:dd:82:52:f9:d9:a3:
55:2e:80:2a:c8:2f:02:87:9e:78:4c:78:57:41:19:
35:dd:92:a1:a1:20:72:09:5c:8f:86:43:7c:b4:50:
77:b7:cf:e4:64:60:a4:70:1b:fb:1b:73:24:f7:81:
49:e9:f5:3f:4f:2f:5b:a6:2b:2c:c7:e1:fa:e9:d8:
f8:0c:53:49:e5:ab:5c:80:7b:46:f4:2e:7e:7a:9b:
46:af:db:fd:47:1f:c4:2d:da:fc:5b:67:bf:50:78:
4a:7e:68:d9:4d:c2:0f:1c:55:6e:d1:1c:4e:62:43:
04:0c:69:41:b1:d2:80:44:0c:3e:ef:17:03:e5:22:
2a:0b:5d:82:68:65:81:f8:d0:58:09:05:18:88:11:
e3:a8:62:b8:37:a2:b8:64:9d:69:4b:e9:64:34:ad:
1d:8c:10:7e:7f:df:5f:c7:3d:a8:9c:29:40:27:45:
27:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:8A:5E:F0:99:25:1F:17:01:B0:D3:EC:22:48:F9:F5:49:B1:51:E2
X509v3 Authority Key Identifier:
keyid:6A:8B:5A:37:4F:14:6D:7B:6A:6D:C7:D3:16:E8:EB:B1:2D:EE:A6:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aotaN08UbXtqbcfTFujrsS3upnA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/f6c862-af8b-43f3-98ad-44241fec1a9f/1/aotaN08UbXtqbcfTFujrsS3upnA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/f6c862-af8b-43f3-98ad-44241fec1a9f/1/aotaN08UbXtqbcfTFujrsS3upnA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:31:e4:25:bc:6b:a3:3f:af:1e:d9:23:3d:1b:cd:28:fa:6e:
ef:66:0f:21:09:6b:29:8b:32:41:bf:96:41:8b:7b:9b:ab:1b:
9a:bb:98:14:6e:a6:ec:e0:e8:13:b7:92:ef:c6:26:9d:3f:e7:
3c:d1:c3:7c:9e:23:cb:60:9c:7f:c5:39:63:6f:21:b3:f2:0c:
e1:c6:37:44:d5:04:94:d9:09:14:a6:89:1d:54:63:e7:3a:87:
f8:c6:80:f0:6a:be:08:76:a1:87:9b:dc:65:0b:fd:7b:11:08:
ae:ee:82:bf:8a:e2:af:fd:62:7b:db:29:07:09:d5:a6:07:b1:
58:62:2f:e1:c3:e5:38:07:24:0d:9d:ef:f1:fc:ec:85:9d:3e:
a3:bc:cc:8a:cd:eb:0a:4d:47:e7:58:5b:63:fe:30:36:d8:58:
43:11:49:96:51:f9:6c:59:9b:e5:f4:c2:04:47:61:43:5e:a2:
04:3d:c7:28:8d:0b:3e:1b:1c:52:29:4e:b5:fc:ae:ef:8d:32:
d1:13:88:2b:2a:da:23:fe:5e:68:69:cc:4c:fe:49:29:27:26:
42:cc:3f:f6:90:b0:a5:1e:2b:10:af:e9:95:35:8b:48:d0:91:
64:97:69:ee:b8:fb:26:d7:54:fa:35:10:d2:57:14:53:d0:dd:
f8:a0:eb:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:19:55 2026 by rpki-client