Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ea/9d5feb-beda-4147-9d83-c9ad37f94cd7/1/AOLDNzGtylfcwzsvuCM_wDiwlek.mft
File: AOLDNzGtylfcwzsvuCM_wDiwlek.mft (raw, json)
Hash identifier: KoJeMCiF/yWboJgYTuyjlcFV0dzqWtl/vx/+dCb5ZkU=
Subject key identifier: 3A:29:7E:68:18:DC:FA:88:41:1E:2B:6E:AF:2D:35:B1:83:A5:5D:EB
Authority key identifier: 00:E2:C3:37:31:AD:CA:57:DC:C3:3B:2F:B8:23:3F:C0:38:B0:95:E9
Certificate issuer: /CN=00e2c33731adca57dcc33b2fb8233fc038b095e9
Certificate serial: 01A0CFDB0EA05E53265137D70A99E10434ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AOLDNzGtylfcwzsvuCM_wDiwlek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/9d5feb-beda-4147-9d83-c9ad37f94cd7/1/AOLDNzGtylfcwzsvuCM_wDiwlek.mft
Manifest number: 15AA
Signing time: Wed 23 Sep 2026 20:00:34 +0000
Manifest this update: Wed 23 Sep 2026 20:00:34 +0000
Manifest next update: Thu 24 Sep 2026 20:00:34 +0000
Files and hashes: 1: 6tZKYli0xFjSrMTaPxgthKbfu_g.roa (hash: lqL9qb+FKGUxGrpBLb7Tf9OnZbQiDT4OvdfFGjgah0c=)
2: AOLDNzGtylfcwzsvuCM_wDiwlek.crl (hash: kVKZ+rRdSZM3KyurmxTR835mWraPcL9cvdPBTZlMTZk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/9d5feb-beda-4147-9d83-c9ad37f94cd7/1/AOLDNzGtylfcwzsvuCM_wDiwlek.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/9d5feb-beda-4147-9d83-c9ad37f94cd7/1/AOLDNzGtylfcwzsvuCM_wDiwlek.mft
rsync://rpki.ripe.net/repository/DEFAULT/AOLDNzGtylfcwzsvuCM_wDiwlek.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 18:27:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cf:db:0e:a0:5e:53:26:51:37:d7:0a:99:e1:04:34:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00e2c33731adca57dcc33b2fb8233fc038b095e9
Validity
Not Before: Sep 23 20:00:34 2026 GMT
Not After : Sep 24 20:00:34 2026 GMT
Subject: CN=3a297e6818dcfa88411e2b6eaf2d35b183a55deb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:33:f5:ae:e2:29:1f:19:33:ba:05:34:2e:15:
28:d8:9b:e0:f2:e1:78:fe:58:f8:46:7d:ad:52:28:
6d:d9:22:4e:c0:3c:79:c2:72:1a:97:e4:ef:fc:e0:
b2:4f:f9:b6:c8:80:1e:79:68:eb:d8:3f:af:43:5b:
d0:43:8e:17:e3:9e:e4:a2:24:3c:3e:d1:72:d2:25:
75:bb:03:39:52:4c:86:1b:70:5d:e8:06:f5:0b:22:
e9:bc:38:c7:38:44:5f:37:18:14:3e:b3:08:6b:9c:
89:f8:72:2c:a1:a4:09:78:c3:25:5f:4e:6c:d2:7b:
63:f6:63:f6:e1:47:17:5e:23:47:c4:9b:93:cd:0f:
ac:e6:f2:db:dd:8e:8e:ba:bd:30:4b:0d:b7:96:ab:
88:9c:4c:fd:82:87:28:46:c1:32:ac:4c:96:a2:f5:
e2:e5:59:09:c0:97:1c:1b:68:51:60:ff:8c:20:3f:
b2:b4:09:6f:4d:8d:c9:f4:7e:2a:2f:a5:cc:30:7e:
38:40:42:9e:85:30:2e:9d:bd:ec:b6:0a:ee:36:6a:
dd:17:a3:a5:8e:47:3a:2e:57:c9:6c:3b:c7:42:28:
6c:16:77:1a:ac:f3:7c:37:81:53:30:be:b8:f7:dc:
b5:47:86:42:6d:6c:52:1e:a9:da:59:9e:c6:12:20:
ff:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:29:7E:68:18:DC:FA:88:41:1E:2B:6E:AF:2D:35:B1:83:A5:5D:EB
X509v3 Authority Key Identifier:
keyid:00:E2:C3:37:31:AD:CA:57:DC:C3:3B:2F:B8:23:3F:C0:38:B0:95:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AOLDNzGtylfcwzsvuCM_wDiwlek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/9d5feb-beda-4147-9d83-c9ad37f94cd7/1/AOLDNzGtylfcwzsvuCM_wDiwlek.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/9d5feb-beda-4147-9d83-c9ad37f94cd7/1/AOLDNzGtylfcwzsvuCM_wDiwlek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:0c:97:bb:bc:5e:0e:34:b7:17:71:0c:84:b2:4c:e1:b8:f6:
45:73:b0:14:c8:dc:71:b9:ed:05:76:52:d1:e2:ed:03:70:aa:
fb:dc:ab:c2:c8:47:e0:0e:57:4a:b8:25:a3:1f:08:dd:22:86:
75:de:47:d3:c2:ce:aa:c7:db:65:af:fe:05:12:18:44:b5:03:
17:4e:78:ed:39:17:96:5b:fb:80:9b:41:47:3c:47:5b:1e:55:
a7:38:24:67:56:c6:0f:76:d9:5b:39:6b:9b:28:4f:16:3e:86:
80:29:df:e0:ac:ea:10:8a:e2:7c:1a:75:81:83:9d:a8:91:45:
64:37:f5:41:ed:10:c9:c4:ba:31:ce:a2:5f:d9:0b:8f:a9:5f:
e5:b4:29:40:c8:23:1f:f0:f0:82:47:75:b7:a8:51:cf:de:9e:
92:42:ec:1b:24:67:b2:b4:99:b8:6c:61:ae:07:5d:17:cd:34:
d7:2a:23:24:c1:36:4b:e4:60:9f:a9:f3:d1:40:37:a5:2c:e6:
9d:c7:26:26:72:b6:38:47:cd:09:4e:70:dd:2c:4b:46:39:be:
01:90:11:9c:d4:4d:81:d4:7f:d4:14:84:37:a2:a0:bd:cf:a3:
b4:6b:fa:b0:d6:04:87:5e:54:a0:c8:ec:b6:48:5a:d0:b7:81:
0c:24:47:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 03:52:55 2026 by rpki-client