Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/9d5feb-beda-4147-9d83-c9ad37f94cd7/1/AOLDNzGtylfcwzsvuCM_wDiwlek.mft
File: AOLDNzGtylfcwzsvuCM_wDiwlek.mft (raw, json)
Hash identifier: aAschr+/a9hUR+Hhe0yH1E67lRrV/LEyS7CcfbUc+fM=
Subject key identifier: BC:C6:47:CC:34:C2:72:5E:90:A1:11:BE:08:60:2B:16:0C:63:25:86
Authority key identifier: 00:E2:C3:37:31:AD:CA:57:DC:C3:3B:2F:B8:23:3F:C0:38:B0:95:E9
Certificate issuer: /CN=00e2c33731adca57dcc33b2fb8233fc038b095e9
Certificate serial: 019F8F47956A589D204B5385BBCA84FDF56E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AOLDNzGtylfcwzsvuCM_wDiwlek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/9d5feb-beda-4147-9d83-c9ad37f94cd7/1/AOLDNzGtylfcwzsvuCM_wDiwlek.mft
Manifest number: 1504
Signing time: Thu 23 Jul 2026 14:01:00 +0000
Manifest this update: Thu 23 Jul 2026 14:01:00 +0000
Manifest next update: Fri 24 Jul 2026 14:01:00 +0000
Files and hashes: 1: 6tZKYli0xFjSrMTaPxgthKbfu_g.roa (hash: lqL9qb+FKGUxGrpBLb7Tf9OnZbQiDT4OvdfFGjgah0c=)
2: AOLDNzGtylfcwzsvuCM_wDiwlek.crl (hash: /+bYqBlNIcJDYNijlGbQaDJGY9o5HMOA7y/OvXTUGR0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/9d5feb-beda-4147-9d83-c9ad37f94cd7/1/AOLDNzGtylfcwzsvuCM_wDiwlek.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/9d5feb-beda-4147-9d83-c9ad37f94cd7/1/AOLDNzGtylfcwzsvuCM_wDiwlek.mft
rsync://rpki.ripe.net/repository/DEFAULT/AOLDNzGtylfcwzsvuCM_wDiwlek.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:47:95:6a:58:9d:20:4b:53:85:bb:ca:84:fd:f5:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00e2c33731adca57dcc33b2fb8233fc038b095e9
Validity
Not Before: Jul 23 14:01:00 2026 GMT
Not After : Jul 24 14:01:00 2026 GMT
Subject: CN=bcc647cc34c2725e90a111be08602b160c632586
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:c2:67:24:f4:79:22:cc:28:20:13:32:80:34:
09:9d:18:f7:bc:9b:44:2c:f6:d2:9a:a8:70:82:42:
b1:d4:c6:98:93:3d:ad:66:9d:d5:d8:16:6b:7f:53:
0f:54:85:19:07:0f:4e:e1:30:95:d9:36:8a:9a:32:
0f:dd:c8:dd:d5:61:4e:9e:8e:69:a4:66:55:0f:e7:
f7:29:be:b5:14:60:4c:15:2a:8b:fd:c4:99:1c:84:
78:e3:9e:39:0b:68:18:59:39:e8:ac:5b:9a:36:65:
32:2b:21:98:a0:04:53:94:c7:b4:63:00:77:c5:d4:
21:55:30:57:40:92:7d:be:9f:1b:8e:fc:12:ca:be:
e8:14:6e:94:2d:58:fd:1a:e9:bd:47:93:d9:15:42:
c0:2e:81:90:69:aa:d6:ab:34:2e:f9:5e:b5:84:05:
55:54:47:4c:d4:8c:a6:9b:f1:ac:29:3b:24:60:de:
a4:e8:ef:b1:21:11:d5:4d:d2:56:e1:c0:dd:bf:fe:
ad:29:d0:8d:b1:f6:d5:d7:f3:15:66:2c:dc:3d:af:
eb:87:ed:bd:6e:3e:da:4a:79:c2:d6:94:0a:3f:6b:
d9:9a:e1:32:4d:2c:a9:d8:04:1c:2f:d3:28:7e:07:
8e:ef:da:02:13:7d:9a:2f:57:b5:0d:dc:2d:f0:6b:
ad:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:C6:47:CC:34:C2:72:5E:90:A1:11:BE:08:60:2B:16:0C:63:25:86
X509v3 Authority Key Identifier:
keyid:00:E2:C3:37:31:AD:CA:57:DC:C3:3B:2F:B8:23:3F:C0:38:B0:95:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AOLDNzGtylfcwzsvuCM_wDiwlek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/9d5feb-beda-4147-9d83-c9ad37f94cd7/1/AOLDNzGtylfcwzsvuCM_wDiwlek.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/9d5feb-beda-4147-9d83-c9ad37f94cd7/1/AOLDNzGtylfcwzsvuCM_wDiwlek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:37:3a:43:40:59:d8:8c:1a:0e:28:9e:49:1b:b7:57:d3:78:
01:e4:11:e6:c1:19:6f:20:52:33:93:a4:80:38:fd:23:e2:b7:
f4:07:25:b0:4a:cc:3d:33:d7:fe:cf:9c:23:6e:9d:3f:9f:01:
74:35:a1:64:62:97:70:d1:da:ff:52:95:c8:e5:57:67:15:ee:
f0:71:5f:95:14:71:8a:6b:7c:7a:0c:0f:73:4a:89:35:72:10:
4f:46:b2:df:94:5d:44:d8:55:bd:34:fe:69:16:33:14:58:dd:
84:d1:78:67:11:b7:b9:98:3b:aa:a3:64:e0:17:02:e0:1a:f5:
50:6d:ab:94:a1:91:65:7a:c8:ad:9b:f9:ea:20:e5:3c:b0:da:
e8:63:4a:f1:5b:81:0d:43:49:06:73:a0:e9:e1:06:02:4d:1c:
e8:1c:11:26:12:56:ac:37:32:69:74:44:7f:29:99:b7:86:1e:
d9:90:b1:f1:cc:36:e4:da:69:14:0c:20:f6:1e:fd:ed:22:48:
56:21:8b:cc:0e:e0:f0:5b:f2:43:c4:7d:de:e5:38:79:bc:e1:
66:ba:88:ee:6e:04:4c:cb:4f:6a:5b:3b:94:81:29:e9:9e:b1:
a7:f6:3a:46:e3:e7:64:80:49:8f:78:b8:bf:cc:a5:95:b4:33:
ad:48:c1:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:18:12 2026 by rpki-client