Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/c18105-d90f-442f-8b1d-c20de543c0df/1/A9aopjn4iq8fQ21qILQXezjTkPw.mft
File: A9aopjn4iq8fQ21qILQXezjTkPw.mft (raw, json)
Hash identifier: jGMHF9T31ZJtjv1YgE4QaBcodi1j1wDkTr26GW38tH4=
Subject key identifier: 94:0D:CC:68:B4:40:CC:FA:BC:D0:C5:08:57:93:3B:01:8E:86:4D:99
Authority key identifier: 03:D6:A8:A6:39:F8:8A:AF:1F:43:6D:6A:20:B4:17:7B:38:D3:90:FC
Certificate issuer: /CN=03d6a8a639f88aaf1f436d6a20b4177b38d390fc
Certificate serial: 019FAA5128E2AFF0645E3FD7B1D093B5E0A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A9aopjn4iq8fQ21qILQXezjTkPw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/c18105-d90f-442f-8b1d-c20de543c0df/1/A9aopjn4iq8fQ21qILQXezjTkPw.mft
Manifest number: 06B7
Signing time: Tue 28 Jul 2026 20:01:13 +0000
Manifest this update: Tue 28 Jul 2026 20:01:13 +0000
Manifest next update: Wed 29 Jul 2026 20:01:13 +0000
Files and hashes: 1: A9aopjn4iq8fQ21qILQXezjTkPw.crl (hash: +Ok/9IWOVE0ogVUDyd5GN4fZqSRRNwvBAReCDHPVXlI=)
2: R_tuRGNyH8maQImtyJX8ka61Rts.roa (hash: CI3pZc4MmuEvMGaaRVV9hzb41var6bWscwqeDxkewRU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/c18105-d90f-442f-8b1d-c20de543c0df/1/A9aopjn4iq8fQ21qILQXezjTkPw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/c18105-d90f-442f-8b1d-c20de543c0df/1/A9aopjn4iq8fQ21qILQXezjTkPw.mft
rsync://rpki.ripe.net/repository/DEFAULT/A9aopjn4iq8fQ21qILQXezjTkPw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 20:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:51:28:e2:af:f0:64:5e:3f:d7:b1:d0:93:b5:e0:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03d6a8a639f88aaf1f436d6a20b4177b38d390fc
Validity
Not Before: Jul 28 20:01:13 2026 GMT
Not After : Jul 29 20:01:13 2026 GMT
Subject: CN=940dcc68b440ccfabcd0c50857933b018e864d99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:66:dd:2d:df:f1:75:f7:3f:a8:89:16:50:f3:
f7:7a:3b:bb:af:9c:23:73:89:14:4e:2f:71:9c:ab:
2d:5b:8b:b6:7c:f3:9f:34:86:aa:3a:03:3e:85:39:
31:33:67:e8:5f:99:28:41:03:42:32:7d:c0:87:29:
f0:35:92:a8:e9:bc:db:5e:6d:30:f9:44:95:cd:96:
9c:23:fd:5c:0a:f9:32:43:55:4c:53:63:d2:a3:74:
02:90:f0:1d:88:b9:f1:a6:6a:20:40:5a:27:d7:d7:
ee:f2:ec:b4:1c:95:ea:a9:e7:89:fe:60:6b:8e:1f:
75:ca:70:50:ed:66:94:d9:41:35:18:97:ea:4b:a2:
14:4c:4c:d8:17:3c:55:67:6a:be:23:ca:33:65:c4:
83:87:e2:ba:a8:85:a8:ec:6f:c0:aa:e6:db:8d:20:
b0:df:cc:85:a2:99:6f:bf:ba:75:8b:e5:61:7d:f9:
51:b3:bb:59:f3:cf:c7:59:ff:9f:81:43:f8:1b:d9:
aa:79:98:30:d4:86:f8:81:cb:04:fa:ce:0b:37:65:
b6:6c:f4:63:3c:e1:ac:be:4c:d1:d5:55:53:8a:d6:
0a:36:01:a0:9b:67:3b:83:87:3d:c4:56:dc:b9:71:
80:01:d8:13:83:04:5a:fd:ea:3a:7e:74:53:19:09:
93:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:0D:CC:68:B4:40:CC:FA:BC:D0:C5:08:57:93:3B:01:8E:86:4D:99
X509v3 Authority Key Identifier:
keyid:03:D6:A8:A6:39:F8:8A:AF:1F:43:6D:6A:20:B4:17:7B:38:D3:90:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A9aopjn4iq8fQ21qILQXezjTkPw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/c18105-d90f-442f-8b1d-c20de543c0df/1/A9aopjn4iq8fQ21qILQXezjTkPw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/c18105-d90f-442f-8b1d-c20de543c0df/1/A9aopjn4iq8fQ21qILQXezjTkPw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:78:e5:7b:c7:09:f2:7c:2e:a9:ae:53:27:0f:aa:ab:4e:7e:
e2:38:d9:78:b6:aa:4a:b8:51:d7:2c:89:ce:ef:88:7c:7a:cd:
50:72:b7:65:27:8f:3b:8e:0e:ed:da:ff:4d:b2:bd:62:93:28:
e3:70:94:7e:0e:2f:9a:82:44:05:05:df:35:91:96:6a:a5:9b:
40:3f:bc:40:aa:f1:90:94:eb:11:1f:9b:3f:2c:20:16:fb:29:
ca:9d:e1:19:45:2c:23:60:d5:c7:c1:6a:ee:5b:e7:24:ff:6f:
36:f4:9e:a5:e8:ba:1b:60:bd:3a:38:b6:a8:e2:07:f2:a3:ab:
0e:cc:d6:53:cf:bb:35:13:1b:85:ad:cc:c2:99:bc:c9:58:49:
57:f8:54:e5:5a:12:4a:2e:c3:b3:05:2d:71:28:d2:6e:03:82:
73:64:a0:1b:ae:c6:94:78:90:73:e9:27:1f:10:fb:c7:c9:0d:
26:49:3f:95:a4:14:f7:29:cd:1b:f8:11:2b:e5:6f:8e:2c:f6:
62:7e:bc:7a:f8:14:9a:ef:9f:00:27:47:a1:ec:38:70:6f:21:
1f:6b:fb:19:a4:90:e3:60:9d:25:9e:7c:a2:b6:ef:bf:0d:16:
b5:3d:f1:7e:0a:f1:ab:f4:87:3c:3b:ae:3a:80:8e:33:fe:6b:
b9:08:e5:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 03:37:30 2026 by rpki-client