Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cc/e8101a-240f-4e32-a097-27c273a60788/1/AoNhMH79nzq-_mm9FN4OG9YLbmo.mft
File: AoNhMH79nzq-_mm9FN4OG9YLbmo.mft (raw, json)
Hash identifier: WKuBrUro8ekAkQelTDfh5KuqeVOSMYqH4IzoPcai26I=
Subject key identifier: AF:21:03:45:38:06:A5:C5:23:5F:8F:F4:1F:81:E5:5E:8B:EE:93:7C
Authority key identifier: 02:83:61:30:7E:FD:9F:3A:BE:FE:69:BD:14:DE:0E:1B:D6:0B:6E:6A
Certificate issuer: /CN=028361307efd9f3abefe69bd14de0e1bd60b6e6a
Certificate serial: 01A0D494677A5E00167BEB1393BB3913D5D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AoNhMH79nzq-_mm9FN4OG9YLbmo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/e8101a-240f-4e32-a097-27c273a60788/1/AoNhMH79nzq-_mm9FN4OG9YLbmo.mft
Manifest number: 1A70
Signing time: Thu 24 Sep 2026 18:01:30 +0000
Manifest this update: Thu 24 Sep 2026 18:01:30 +0000
Manifest next update: Fri 25 Sep 2026 18:01:30 +0000
Files and hashes: 1: AoNhMH79nzq-_mm9FN4OG9YLbmo.crl (hash: J+LP5vC8LNzqwdfaxTW9tt+DJdycTBoVk1UYrGZ6LS4=)
2: _xkuMQSwRHi0DljPKAluJEXoLPg.roa (hash: EUEHOabmEGDXpaBHpO2MNJv0dJd+g7oEzMzEMIadnt8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/e8101a-240f-4e32-a097-27c273a60788/1/AoNhMH79nzq-_mm9FN4OG9YLbmo.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/e8101a-240f-4e32-a097-27c273a60788/1/AoNhMH79nzq-_mm9FN4OG9YLbmo.mft
rsync://rpki.ripe.net/repository/DEFAULT/AoNhMH79nzq-_mm9FN4OG9YLbmo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d4:94:67:7a:5e:00:16:7b:eb:13:93:bb:39:13:d5:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=028361307efd9f3abefe69bd14de0e1bd60b6e6a
Validity
Not Before: Sep 24 18:01:30 2026 GMT
Not After : Sep 25 18:01:30 2026 GMT
Subject: CN=af2103453806a5c5235f8ff41f81e55e8bee937c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:97:c6:c4:ce:35:b0:21:63:d1:15:66:6d:3c:
b0:a8:85:40:a5:8d:f9:de:67:80:b5:3f:bb:f3:6f:
ec:f6:c0:6e:c8:b3:50:39:b5:80:90:f9:a3:a7:88:
28:88:fd:71:10:92:be:01:27:68:d2:d7:a9:1e:b1:
5b:b9:7b:74:5f:da:d7:b4:4d:4f:7f:ad:a1:16:e1:
c7:84:94:3b:88:43:95:34:3b:ee:51:30:1d:de:ee:
77:00:e3:fd:65:47:2b:95:6d:18:51:f3:e4:d9:67:
e1:d6:c5:56:f6:af:64:00:f1:f8:5d:51:1f:ec:69:
1b:4f:a8:e2:6f:1c:10:49:e5:30:98:ef:ad:08:e3:
8a:e3:f7:4f:12:d5:56:ff:10:c8:10:12:12:3b:cb:
65:67:54:d5:51:77:f7:8d:77:16:08:91:f8:be:1a:
2f:0e:13:90:e7:51:c2:83:1f:e8:7e:93:22:d1:56:
5e:19:b4:b6:67:0d:55:c9:f0:bb:f4:86:e8:9f:22:
ef:20:93:0e:10:b1:ad:38:7e:f8:00:f6:0d:6b:4d:
07:ed:7e:72:54:9d:b1:93:be:49:63:87:38:6f:bb:
47:44:93:9b:89:3b:94:db:9f:d5:dc:8f:cc:66:23:
fb:87:e6:6e:17:8d:69:9f:67:ce:ae:58:65:f3:6d:
34:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:21:03:45:38:06:A5:C5:23:5F:8F:F4:1F:81:E5:5E:8B:EE:93:7C
X509v3 Authority Key Identifier:
keyid:02:83:61:30:7E:FD:9F:3A:BE:FE:69:BD:14:DE:0E:1B:D6:0B:6E:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AoNhMH79nzq-_mm9FN4OG9YLbmo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/e8101a-240f-4e32-a097-27c273a60788/1/AoNhMH79nzq-_mm9FN4OG9YLbmo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/e8101a-240f-4e32-a097-27c273a60788/1/AoNhMH79nzq-_mm9FN4OG9YLbmo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:c1:94:2d:99:d4:7b:4f:80:88:b9:fa:7e:f4:de:cd:0c:7f:
c9:ce:92:75:25:40:46:6c:26:ae:69:57:fd:1b:96:67:11:50:
27:1c:a7:32:2e:f1:7d:7b:6d:67:d2:74:c4:7c:33:51:47:c1:
1e:32:24:36:34:05:d9:7f:3d:c1:16:ff:94:83:44:b0:f7:ce:
bc:10:cc:21:7d:07:f5:a3:52:43:97:05:d8:e2:9e:8e:2c:23:
b5:92:47:69:c8:3a:44:78:82:94:3c:7b:94:b6:54:a8:c3:b1:
43:50:5a:12:21:fd:97:b7:25:c9:6f:6a:84:db:5d:e2:cc:78:
c2:d5:2a:fb:80:e1:c4:60:d8:07:87:7f:35:b0:05:6b:f3:dc:
72:7e:16:26:02:ac:90:0a:33:b3:18:c1:ea:9e:17:b5:6b:ae:
71:95:26:39:59:c9:f8:44:1a:15:98:e5:17:ab:4d:b0:cc:e1:
b7:78:c1:12:b3:ae:04:b0:02:a1:18:63:f2:36:3b:25:54:1f:
bd:5c:f4:bc:11:f9:f2:28:76:d7:f9:95:1d:49:f2:a1:d5:40:
66:67:23:42:73:0e:bd:fb:f0:bd:57:50:48:62:bd:83:0f:0d:
ad:82:b6:cc:13:45:03:d3:0b:75:15:67:be:e5:2b:20:2d:a3:
fb:13:88:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 01:07:37 2026 by rpki-client