Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0e/79c0a9-e5e4-47c3-823f-0b8b075e86db/1/AqsBDPXBHBswaT0RQXtgz0X7Egk.mft
File: AqsBDPXBHBswaT0RQXtgz0X7Egk.mft (raw, json)
Hash identifier: mt12+9JV9MQFjAMVQM+468WifSUwPio12nCaxVfrLNw=
Subject key identifier: 8B:06:72:1B:83:AC:F2:B9:C3:C4:AF:96:E5:B8:3F:DF:B5:0D:B3:9F
Authority key identifier: 02:AB:01:0C:F5:C1:1C:1B:30:69:3D:11:41:7B:60:CF:45:FB:12:09
Certificate issuer: /CN=02ab010cf5c11c1b30693d11417b60cf45fb1209
Certificate serial: 01A0EC2ECBEC80E3BE8D159989CCA92F01DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AqsBDPXBHBswaT0RQXtgz0X7Egk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/79c0a9-e5e4-47c3-823f-0b8b075e86db/1/AqsBDPXBHBswaT0RQXtgz0X7Egk.mft
Manifest number: 1A7C
Signing time: Tue 29 Sep 2026 08:01:24 +0000
Manifest this update: Tue 29 Sep 2026 08:01:24 +0000
Manifest next update: Wed 30 Sep 2026 08:01:24 +0000
Files and hashes: 1: AqsBDPXBHBswaT0RQXtgz0X7Egk.crl (hash: 8p6a2uhvaLPqEoFFH0Fr1utybQsMOwoLLNie9EJH/DM=)
2: bBYL7KQEDz7I_rLr_vDuaXti8hI.roa (hash: /dni5j5ZVVpaXhNq2Bwi5ZZOnC1Ci4dao9Sc20SRsmE=)
3: pHyfE-IkMhxcPHPc-HwDzXsFVjQ.roa (hash: uyoFgMWyTuoY09i37tyWsmZah+QoAHk4CSzGk/eiO5Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/79c0a9-e5e4-47c3-823f-0b8b075e86db/1/AqsBDPXBHBswaT0RQXtgz0X7Egk.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/79c0a9-e5e4-47c3-823f-0b8b075e86db/1/AqsBDPXBHBswaT0RQXtgz0X7Egk.mft
rsync://rpki.ripe.net/repository/DEFAULT/AqsBDPXBHBswaT0RQXtgz0X7Egk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 08:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ec:2e:cb:ec:80:e3:be:8d:15:99:89:cc:a9:2f:01:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02ab010cf5c11c1b30693d11417b60cf45fb1209
Validity
Not Before: Sep 29 08:01:24 2026 GMT
Not After : Sep 30 08:01:24 2026 GMT
Subject: CN=8b06721b83acf2b9c3c4af96e5b83fdfb50db39f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:78:e5:71:a9:f1:61:01:02:db:59:41:1f:f8:
c5:12:b6:63:57:94:00:7d:38:07:52:6e:9e:b0:d8:
53:1e:8d:f4:eb:cd:06:56:51:91:86:ab:1e:de:e2:
ab:27:be:85:42:f0:2d:b5:47:8f:dd:23:da:81:d8:
d0:9a:7e:06:13:cb:f4:f6:91:ea:28:d0:0e:7b:6c:
2a:ce:1e:29:ea:88:59:ea:b0:69:ae:9b:7b:08:0e:
d6:07:2b:33:6b:ce:f7:df:e2:21:81:b5:ff:7d:c0:
55:d5:21:6d:07:cd:1b:0c:a5:3b:9b:85:7e:cc:87:
e4:fc:04:12:fa:6b:9f:3c:c6:57:cc:e8:5b:4c:1c:
2c:6d:5e:95:de:01:98:a1:09:55:c8:be:fd:fc:84:
4d:aa:a7:8f:4b:c6:f9:57:d4:de:0f:0a:91:e5:b6:
bb:f1:84:f5:cb:f6:d9:d6:41:ac:0c:82:d0:a1:52:
f1:b8:bd:cd:68:73:6b:ef:fc:94:07:f3:e0:8f:b6:
0a:39:ad:e4:d6:89:0b:c5:6c:11:c5:8e:98:fb:5c:
4a:2b:53:47:5e:25:65:fd:6b:ca:f6:24:14:c4:86:
36:3c:01:ce:5b:80:fb:3f:22:a5:a9:75:2f:5e:24:
ec:a3:e5:d2:43:26:09:f4:a4:ee:ff:5f:dc:1c:57:
df:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:06:72:1B:83:AC:F2:B9:C3:C4:AF:96:E5:B8:3F:DF:B5:0D:B3:9F
X509v3 Authority Key Identifier:
keyid:02:AB:01:0C:F5:C1:1C:1B:30:69:3D:11:41:7B:60:CF:45:FB:12:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AqsBDPXBHBswaT0RQXtgz0X7Egk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/79c0a9-e5e4-47c3-823f-0b8b075e86db/1/AqsBDPXBHBswaT0RQXtgz0X7Egk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/79c0a9-e5e4-47c3-823f-0b8b075e86db/1/AqsBDPXBHBswaT0RQXtgz0X7Egk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:9a:1b:73:cc:19:98:aa:04:9e:21:90:7a:e5:4f:c2:69:71:
fb:a9:9e:d2:a0:dd:89:73:af:01:5c:b9:b6:a0:9c:12:14:4c:
2a:cc:fb:d0:79:80:fe:24:f2:96:c9:ef:6b:e3:73:5f:68:6e:
56:6d:82:97:f4:87:5f:31:9a:77:ce:2b:68:9d:82:86:24:45:
20:34:9e:41:f8:0f:c5:f5:86:3e:8a:8a:0b:31:7e:fc:d6:e6:
27:cd:b2:92:4a:8d:da:50:8f:0a:cc:58:16:ab:43:28:3a:49:
0d:c3:3d:4f:a4:d9:32:bc:57:11:1e:a0:a7:0a:19:89:6b:73:
ea:82:cb:6f:69:6a:9c:56:82:47:82:e5:2a:57:5b:03:3b:e9:
77:84:17:a6:16:a8:05:27:c9:d9:64:9d:21:0b:d7:5e:e3:47:
04:4a:b0:89:42:41:ea:2e:55:bf:a7:fb:dd:65:d5:14:07:a7:
d8:31:3a:58:ce:f4:7f:f4:08:ff:5e:16:53:22:5c:a6:b6:ca:
ff:e8:d5:75:3e:5b:58:6e:25:4f:0d:99:43:ec:4b:0b:5f:07:
ab:08:37:96:61:5c:35:da:68:e5:3a:6d:6c:e7:82:96:d7:8b:
15:b0:96:54:09:f4:b6:d1:1f:d3:1b:da:90:dd:3c:a1:88:69:
88:46:a9:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 13:15:39 2026 by rpki-client