Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/7012d8-afa1-419b-8b60-35c63fa765a2/1/aqj6dcUCDNYhjPfxCd5CAmUgS6w.mft
File: aqj6dcUCDNYhjPfxCd5CAmUgS6w.mft (raw, json)
Hash identifier: G+8/w/pni7Kd+To1BsrtHjwxEGJDfiyb4bIEivRJQH4=
Subject key identifier: 09:FC:36:CA:0C:03:9E:AC:95:46:3A:70:6F:46:30:2C:F1:2E:80:F1
Authority key identifier: 6A:A8:FA:75:C5:02:0C:D6:21:8C:F7:F1:09:DE:42:02:65:20:4B:AC
Certificate issuer: /CN=6aa8fa75c5020cd6218cf7f109de420265204bac
Certificate serial: 019FAABEC5B760C377B476B273975A8D32CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aqj6dcUCDNYhjPfxCd5CAmUgS6w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/7012d8-afa1-419b-8b60-35c63fa765a2/1/aqj6dcUCDNYhjPfxCd5CAmUgS6w.mft
Manifest number: 0B14
Signing time: Tue 28 Jul 2026 22:00:56 +0000
Manifest this update: Tue 28 Jul 2026 22:00:56 +0000
Manifest next update: Wed 29 Jul 2026 22:00:56 +0000
Files and hashes: 1: CLI88VHiEhgKE-1aGQUntQikJ5Q.roa (hash: ZVHFqHEU1nz5pNZPpYsPfnWS/ZMoHolHN6V8GvVDEFc=)
2: Jl_sYXdLZY6LvwTOjI4Ivkon2zc.roa (hash: UfbfdfYRRXhEErXk2SVvIxQQ/2IYnFtsKwlFklKvl10=)
3: XRNvoKreqEdZEhJbOno-5BqPGEE.roa (hash: z4A5c3Ug9WBluQD4ssGRXcELVIDjB7HhErsV07uP9GQ=)
4: aqj6dcUCDNYhjPfxCd5CAmUgS6w.crl (hash: 0tcF2bk0rkFIhHdeCvXYXe8tAUHz4qAxoK9OvyOxS8g=)
5: cMhJe9vMQdQscfbNYoY-RkxcY2s.roa (hash: 93wi+LrRWDjLqjvMhMNKSnr4mEg4br0bsv0cTgfuNiY=)
6: i_fytzvyxwG53KWVE9QAYKkho0Y.roa (hash: 5GkZyytH7JdVjBbsZ02ixFMBkgHMmde3+fzDOBq+r/s=)
7: p6WJDUmkrZTi2ydBqJW-U5fF3Ms.roa (hash: tChmnA2OZ6ar9x3H+45dejO4Gb9P462WbOfjtPU/W8w=)
8: r_ZJyy1H5Ytar0NlqRrjDEm17lM.roa (hash: +sYf7FlHcDL4+/H52w762XwNy7Z8plqNAAGvu5Wp3Es=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/7012d8-afa1-419b-8b60-35c63fa765a2/1/aqj6dcUCDNYhjPfxCd5CAmUgS6w.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/7012d8-afa1-419b-8b60-35c63fa765a2/1/aqj6dcUCDNYhjPfxCd5CAmUgS6w.mft
rsync://rpki.ripe.net/repository/DEFAULT/aqj6dcUCDNYhjPfxCd5CAmUgS6w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 22:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:be:c5:b7:60:c3:77:b4:76:b2:73:97:5a:8d:32:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6aa8fa75c5020cd6218cf7f109de420265204bac
Validity
Not Before: Jul 28 22:00:56 2026 GMT
Not After : Jul 29 22:00:56 2026 GMT
Subject: CN=09fc36ca0c039eac95463a706f46302cf12e80f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:5b:fa:ad:83:cb:ee:45:2e:6d:1c:3e:41:ee:
9d:71:cf:a9:19:11:28:d1:87:f7:00:ab:6b:e2:b6:
1a:e7:b2:09:d0:db:df:d7:8a:f6:ee:f3:77:43:77:
ea:00:48:a5:9e:68:8f:87:bd:bb:ca:09:97:dc:87:
59:45:5a:71:e0:d2:54:f0:7c:27:98:98:b2:cd:63:
55:bc:11:30:95:75:08:36:54:d4:92:42:e2:eb:65:
af:e0:ed:62:af:a2:a7:58:73:06:e7:64:52:ef:b9:
4c:6f:f4:8a:e4:14:5f:fb:9b:33:d2:0d:19:a6:77:
28:22:11:e7:6e:23:a1:fa:11:d9:9e:51:2f:6d:7d:
ca:9d:ec:f4:64:39:03:6f:e3:3a:cb:44:13:0d:56:
ad:cd:be:4f:19:02:62:ba:28:7e:55:f2:40:3d:fa:
ad:fd:5f:16:b6:59:44:81:15:8e:22:a9:5e:ef:c1:
df:ba:05:f8:ee:21:30:04:5e:14:89:9e:ee:2b:74:
da:6f:25:bf:e6:76:81:56:c5:fa:78:06:6b:6c:85:
13:57:29:ce:5c:27:76:90:8b:02:61:0f:a6:f5:ba:
b0:e3:d5:2f:b8:14:e2:18:ce:17:2d:d3:f9:df:0b:
8b:d2:86:b9:70:d4:7b:71:6b:1c:25:22:df:00:4c:
70:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:FC:36:CA:0C:03:9E:AC:95:46:3A:70:6F:46:30:2C:F1:2E:80:F1
X509v3 Authority Key Identifier:
keyid:6A:A8:FA:75:C5:02:0C:D6:21:8C:F7:F1:09:DE:42:02:65:20:4B:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aqj6dcUCDNYhjPfxCd5CAmUgS6w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/7012d8-afa1-419b-8b60-35c63fa765a2/1/aqj6dcUCDNYhjPfxCd5CAmUgS6w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/7012d8-afa1-419b-8b60-35c63fa765a2/1/aqj6dcUCDNYhjPfxCd5CAmUgS6w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:2c:cb:f7:37:54:e6:57:5b:5a:3c:bf:9d:94:87:3a:d0:ab:
94:f2:ea:55:a6:2b:49:48:c1:54:26:80:78:ef:4b:b6:4f:9f:
f0:e3:7e:5c:10:e6:7d:4e:20:43:cb:83:56:cb:68:f1:a8:a7:
3c:f6:8f:03:e8:02:2a:a6:9e:1d:bd:68:9e:87:35:3e:71:84:
85:53:97:da:ac:bc:02:62:8c:7f:e9:26:02:f5:5e:8c:18:b9:
58:93:9e:86:1d:0b:83:6f:3d:86:b2:17:16:35:e9:0b:cb:9b:
68:cd:08:84:36:0c:30:b4:03:e9:3d:57:40:fe:76:92:a9:97:
32:2d:c9:6c:82:32:43:92:cf:4a:07:ce:1d:cc:d6:be:d9:12:
e0:be:aa:34:6e:8d:d5:71:4f:fa:6b:01:d7:01:20:48:ed:15:
55:61:ec:86:52:db:dc:15:af:1b:53:79:65:52:22:d4:6a:a2:
6b:d7:b4:b1:4f:52:09:0c:00:10:dc:36:a1:63:2d:31:70:0c:
ea:a2:53:cb:a1:b5:2b:d4:0d:82:f4:54:82:cc:58:e0:7e:2f:
61:37:8d:8c:35:7a:00:92:0f:f4:41:2c:65:7f:b5:42:b7:d2:
34:43:df:bd:f1:77:61:e3:d1:fa:87:87:6c:4e:5f:77:73:64:
21:4d:84:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 00:11:16 2026 by rpki-client