Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f0/46238a-a19a-4915-8a47-a0cd141513cb/1/AOezY1s9V4VgNwpYMDz81c2SkQU.mft
File: AOezY1s9V4VgNwpYMDz81c2SkQU.mft (raw, json)
Hash identifier: wnWO8mTCJLACJvnoPjbSePBESpzJEfhWSVQ3S3zp7To=
Subject key identifier: 4A:C6:C2:75:60:75:B7:89:27:AE:CB:20:87:80:5F:BE:A2:A6:69:98
Authority key identifier: 00:E7:B3:63:5B:3D:57:85:60:37:0A:58:30:3C:FC:D5:CD:92:91:05
Certificate issuer: /CN=00e7b3635b3d578560370a58303cfcd5cd929105
Certificate serial: 01A1133C20386C5445F7EBC6D04C7B55BA3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AOezY1s9V4VgNwpYMDz81c2SkQU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/46238a-a19a-4915-8a47-a0cd141513cb/1/AOezY1s9V4VgNwpYMDz81c2SkQU.mft
Manifest number: 11A0
Signing time: Tue 06 Oct 2026 22:01:09 +0000
Manifest this update: Tue 06 Oct 2026 22:01:09 +0000
Manifest next update: Wed 07 Oct 2026 22:01:09 +0000
Files and hashes: 1: AOezY1s9V4VgNwpYMDz81c2SkQU.crl (hash: CT+fxupH6EeDcfXHoy3x/gE/ZxdZlav+TCrIGHKqy7I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/46238a-a19a-4915-8a47-a0cd141513cb/1/AOezY1s9V4VgNwpYMDz81c2SkQU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/46238a-a19a-4915-8a47-a0cd141513cb/1/AOezY1s9V4VgNwpYMDz81c2SkQU.mft
rsync://rpki.ripe.net/repository/DEFAULT/AOezY1s9V4VgNwpYMDz81c2SkQU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 Oct 2026 22:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:13:3c:20:38:6c:54:45:f7:eb:c6:d0:4c:7b:55:ba:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00e7b3635b3d578560370a58303cfcd5cd929105
Validity
Not Before: Oct 6 22:01:09 2026 GMT
Not After : Oct 7 22:01:09 2026 GMT
Subject: CN=4ac6c2756075b78927aecb2087805fbea2a66998
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:93:5a:ea:aa:32:ff:32:67:5a:69:1a:a5:ac:
40:40:75:54:c7:99:e6:ae:fb:4d:cf:9c:23:b2:4c:
e6:b5:97:a2:67:3f:64:f9:36:56:be:53:74:cd:9b:
c8:2b:6c:d3:4f:62:00:58:cd:13:2d:a1:c5:33:ab:
7c:a7:fe:7a:50:f4:72:ae:1d:dd:97:f8:29:26:e3:
f6:64:7d:cb:8c:9a:8e:48:df:55:32:48:bf:f7:6a:
e0:23:16:a1:17:e5:b0:04:c1:0e:eb:39:01:16:fa:
6e:be:a3:a2:08:7c:e3:6d:57:21:30:e4:f4:8b:9c:
a9:75:0e:cf:ad:9f:41:eb:7f:46:0c:14:a3:cc:99:
ca:a8:71:70:11:7b:28:91:d8:69:98:37:61:2f:ba:
5f:83:36:72:12:00:1b:37:9d:bd:ad:95:78:93:75:
dd:28:b5:4c:5a:f7:ac:a5:b0:de:3f:64:59:94:28:
da:ec:ac:60:e9:45:37:31:a5:66:88:81:a5:79:0f:
1e:79:fc:60:89:de:a0:92:2b:30:11:8a:58:18:2f:
29:60:1e:7c:70:ea:d0:d8:00:bc:31:e0:b6:d2:b2:
a5:09:0e:27:69:81:68:d1:ea:d8:18:b1:77:13:c2:
a9:23:2f:57:c5:ed:27:8a:d5:f7:7b:ac:18:34:0b:
cb:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:C6:C2:75:60:75:B7:89:27:AE:CB:20:87:80:5F:BE:A2:A6:69:98
X509v3 Authority Key Identifier:
keyid:00:E7:B3:63:5B:3D:57:85:60:37:0A:58:30:3C:FC:D5:CD:92:91:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AOezY1s9V4VgNwpYMDz81c2SkQU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/46238a-a19a-4915-8a47-a0cd141513cb/1/AOezY1s9V4VgNwpYMDz81c2SkQU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/46238a-a19a-4915-8a47-a0cd141513cb/1/AOezY1s9V4VgNwpYMDz81c2SkQU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:00:6d:9c:bb:3e:ee:f4:45:53:14:bf:12:11:35:81:b1:e8:
65:c9:46:ad:f4:20:b1:f7:ea:bb:c0:4a:24:9d:12:9c:e2:21:
b5:a5:1f:38:c7:4d:dc:00:b0:97:ff:96:06:55:da:87:d7:c7:
2b:85:5c:62:c8:ac:c6:2b:2c:db:9f:b2:13:0a:51:37:11:ba:
aa:e9:f9:e3:2a:4d:a3:a7:f9:a0:48:d8:be:ae:15:d7:20:a9:
b3:14:6b:15:60:d4:b4:3e:c1:72:60:d8:8a:89:c8:76:72:bd:
b8:22:f4:60:49:5b:29:23:7f:99:1e:94:46:38:96:a8:52:5c:
b8:95:eb:47:9f:e2:16:75:e9:13:d7:67:e1:70:75:0d:8d:f6:
67:ab:08:7d:ba:1b:d5:df:78:82:2f:44:45:4c:97:ad:54:00:
82:9a:69:fb:c6:91:51:31:89:08:ff:b7:c3:14:85:66:42:0e:
46:91:1f:e0:ef:c8:9d:c7:2a:f5:c9:89:ea:cc:0b:57:6d:a6:
4c:c5:24:ad:c2:9e:20:e6:d9:34:cb:cd:9b:c6:56:fb:38:bd:
2d:0d:d4:9c:ec:09:f4:5c:4a:17:17:10:a3:09:75:89:09:ba:
db:cc:1c:2c:5f:9c:e3:1b:04:86:96:c9:f9:7f:53:d9:18:2d:
db:eb:6a:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 04:21:18 2026 by rpki-client