Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/e8101a-240f-4e32-a097-27c273a60788/1/AoNhMH79nzq-_mm9FN4OG9YLbmo.mft
File: AoNhMH79nzq-_mm9FN4OG9YLbmo.mft (raw, json)
Hash identifier: jZt8CLrLQKm05Asitad6Gk0oSOTCkxVsI984k35ANlE=
Subject key identifier: 64:42:A9:72:BB:CB:C4:AF:02:F5:30:57:23:E3:90:23:35:D9:EA:46
Authority key identifier: 02:83:61:30:7E:FD:9F:3A:BE:FE:69:BD:14:DE:0E:1B:D6:0B:6E:6A
Certificate issuer: /CN=028361307efd9f3abefe69bd14de0e1bd60b6e6a
Certificate serial: 019F9022EA8833091B7FA149CCB3BD8ACA57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AoNhMH79nzq-_mm9FN4OG9YLbmo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/e8101a-240f-4e32-a097-27c273a60788/1/AoNhMH79nzq-_mm9FN4OG9YLbmo.mft
Manifest number: 19C8
Signing time: Thu 23 Jul 2026 18:00:34 +0000
Manifest this update: Thu 23 Jul 2026 18:00:34 +0000
Manifest next update: Fri 24 Jul 2026 18:00:34 +0000
Files and hashes: 1: AoNhMH79nzq-_mm9FN4OG9YLbmo.crl (hash: lLXFWaC8aKI0dY2Lz4/IUzDD0TMHkDyR7BTOP0wbFfo=)
2: _xkuMQSwRHi0DljPKAluJEXoLPg.roa (hash: EUEHOabmEGDXpaBHpO2MNJv0dJd+g7oEzMzEMIadnt8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/e8101a-240f-4e32-a097-27c273a60788/1/AoNhMH79nzq-_mm9FN4OG9YLbmo.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/e8101a-240f-4e32-a097-27c273a60788/1/AoNhMH79nzq-_mm9FN4OG9YLbmo.mft
rsync://rpki.ripe.net/repository/DEFAULT/AoNhMH79nzq-_mm9FN4OG9YLbmo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:22:ea:88:33:09:1b:7f:a1:49:cc:b3:bd:8a:ca:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=028361307efd9f3abefe69bd14de0e1bd60b6e6a
Validity
Not Before: Jul 23 18:00:34 2026 GMT
Not After : Jul 24 18:00:34 2026 GMT
Subject: CN=6442a972bbcbc4af02f5305723e3902335d9ea46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:f1:e5:66:53:ee:71:4f:6c:21:fb:c4:05:50:
1d:07:d9:c3:43:e3:56:df:b0:52:11:55:a9:92:ed:
ca:d9:d8:9e:71:9f:6e:69:86:24:6a:2e:c1:ff:18:
55:c2:a1:62:8e:fe:ac:98:fd:bc:25:ab:53:ce:e0:
71:79:ec:a9:b0:ff:40:ef:cd:2a:d7:24:54:0c:a9:
d0:48:17:45:cd:24:42:c1:42:07:e0:07:25:36:31:
7c:22:2d:48:66:39:52:61:84:84:90:e2:3f:64:20:
2d:19:b0:22:af:4f:a2:35:e5:05:7c:04:40:3f:b3:
41:18:30:41:a4:55:e3:93:b5:58:06:75:21:83:5b:
1c:ee:36:d4:f8:72:92:8a:7a:16:61:fd:2a:81:7c:
60:74:67:ea:52:94:3a:16:ff:f8:f2:27:09:d9:f9:
fd:36:45:3d:1e:ac:44:21:41:c5:e6:29:74:fd:19:
f2:5e:d8:09:04:e1:9f:e7:15:77:c7:52:9e:ba:66:
db:62:0d:03:87:71:02:33:03:3b:88:cb:48:2f:f2:
94:11:97:8b:9c:15:6f:88:e7:0c:56:41:00:ab:0d:
20:9e:25:00:ea:b0:8c:25:85:ba:2a:7e:d7:7b:d4:
ae:4d:25:6e:3d:0a:dd:42:9b:4a:d5:71:48:8f:ff:
61:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:42:A9:72:BB:CB:C4:AF:02:F5:30:57:23:E3:90:23:35:D9:EA:46
X509v3 Authority Key Identifier:
keyid:02:83:61:30:7E:FD:9F:3A:BE:FE:69:BD:14:DE:0E:1B:D6:0B:6E:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AoNhMH79nzq-_mm9FN4OG9YLbmo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/e8101a-240f-4e32-a097-27c273a60788/1/AoNhMH79nzq-_mm9FN4OG9YLbmo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/e8101a-240f-4e32-a097-27c273a60788/1/AoNhMH79nzq-_mm9FN4OG9YLbmo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:97:e3:d6:07:49:f3:2c:fb:97:bc:00:66:0e:3f:c2:5d:ca:
12:b3:9e:f4:f3:24:36:75:eb:7c:33:29:22:85:54:07:f4:27:
39:45:74:c5:52:e2:b7:f9:33:c8:7c:c0:47:11:0b:ec:61:a7:
69:13:4d:97:77:d4:d5:1a:2f:2d:bb:5a:4d:14:31:8b:7e:27:
43:2c:ef:e2:71:5b:fa:8d:81:7d:00:ed:b4:1d:88:c0:5b:33:
27:d9:7f:c2:25:ec:26:6d:51:b3:1f:b5:80:02:f5:3c:0c:b7:
a5:43:5c:74:ff:24:5f:ae:95:3c:fd:d1:52:d4:74:02:e7:f8:
43:6b:10:aa:58:8c:f6:ac:cc:34:b4:87:55:a5:b3:6a:5b:7b:
7a:21:6e:b1:00:f7:e5:4a:3f:e9:87:a1:85:c5:89:26:c3:15:
b1:f5:cf:9c:50:6b:68:92:f8:9f:02:16:eb:72:97:5b:29:cf:
e4:ee:ba:25:3d:fc:54:a3:58:4c:19:aa:db:79:39:10:f1:da:
4c:42:b1:35:ff:56:28:b4:8f:e4:d2:79:95:b8:e9:c4:2f:1c:
88:ef:73:36:ff:4d:31:c3:d4:fb:04:31:d7:a1:44:89:6a:31:
d2:0d:27:45:a8:b1:04:08:7c:13:4c:8e:f6:24:22:ef:45:63:
8f:5f:df:d1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+QIuqIMwkbf6FJzLO9ispXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAyODM2MTMwN2VmZDlmM2FiZWZlNjliZDE0ZGUwZTFiZDYw
YjZlNmEwHhcNMjYwNzIzMTgwMDM0WhcNMjYwNzI0MTgwMDM0WjAzMTEwLwYDVQQD
Eyg2NDQyYTk3MmJiY2JjNGFmMDJmNTMwNTcyM2UzOTAyMzM1ZDllYTQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtvHlZlPucU9sIfvEBVAdB9nDQ+NW
37BSEVWpku3K2diecZ9uaYYkai7B/xhVwqFijv6smP28JatTzuBxeeypsP9A780q
1yRUDKnQSBdFzSRCwUIH4AclNjF8Ii1IZjlSYYSEkOI/ZCAtGbAir0+iNeUFfARA
P7NBGDBBpFXjk7VYBnUhg1sc7jbU+HKSinoWYf0qgXxgdGfqUpQ6Fv/48icJ2fn9
NkU9HqxEIUHF5il0/RnyXtgJBOGf5xV3x1KeumbbYg0Dh3ECMwM7iMtIL/KUEZeL
nBVviOcMVkEAqw0gniUA6rCMJYW6Kn7Xe9SuTSVuPQrdQptK1XFIj/9hIwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGRCqXK7y8SvAvUwVyPjkCM12epGMB8GA1UdIwQY
MBaAFAKDYTB+/Z86vv5pvRTeDhvWC25qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQW9OaE1INzluenEtX21tOUZONE9HOVlMYm1vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy9lODEwMWEtMjQwZi00ZTMyLWEwOTct
MjdjMjczYTYwNzg4LzEvQW9OaE1INzluenEtX21tOUZONE9HOVlMYm1vLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYy9lODEwMWEtMjQwZi00ZTMyLWEwOTctMjdjMjczYTYwNzg4
LzEvQW9OaE1INzluenEtX21tOUZONE9HOVlMYm1vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY5fj1gdJ
8yz7l7wAZg4/wl3KErOe9PMkNnXrfDMpIoVUB/QnOUV0xVLit/kzyHzARxEL7GGn
aRNNl3fU1RovLbtaTRQxi34nQyzv4nFb+o2BfQDttB2IwFszJ9l/wiXsJm1Rsx+1
gAL1PAy3pUNcdP8kX66VPP3RUtR0Auf4Q2sQqliM9qzMNLSHVaWzalt7eiFusQD3
5Uo/6YehhcWJJsMVsfXPnFBraJL4nwIW63KXWynP5O66JT38VKNYTBmq23k5EPHa
TEKxNf9WKLSP5NJ5lbjpxC8ciO9zNv9NMcPU+wQx16FEiWox0g0nRaixBAh8E0yO
9iQi70Vjj1/f0Q==
-----END CERTIFICATE-----
Generated at Fri Jul 24 01:23:07 2026 by rpki-client