Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/28/40a1e5-7d2a-48d6-a50e-f96fb4ea7e70/1/aom7lPpf5QmM7X4hUpoL2G48TY0.mft
File: aom7lPpf5QmM7X4hUpoL2G48TY0.mft (raw, json)
Hash identifier: z4E3fbeeZWf8Bk4y9jDpIHVAWCSvv5WyUmouehJb2pw=
Subject key identifier: CE:C7:CB:84:D3:29:33:32:B9:F0:BF:AF:DF:A2:79:A2:18:D4:36:D5
Authority key identifier: 6A:89:BB:94:FA:5F:E5:09:8C:ED:7E:21:52:9A:0B:D8:6E:3C:4D:8D
Certificate issuer: /CN=6a89bb94fa5fe5098ced7e21529a0bd86e3c4d8d
Certificate serial: 01A11D51EB629696B574BE264DA46F74EF30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aom7lPpf5QmM7X4hUpoL2G48TY0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/40a1e5-7d2a-48d6-a50e-f96fb4ea7e70/1/aom7lPpf5QmM7X4hUpoL2G48TY0.mft
Manifest number: 010D
Signing time: Thu 08 Oct 2026 21:01:10 +0000
Manifest this update: Thu 08 Oct 2026 21:01:10 +0000
Manifest next update: Fri 09 Oct 2026 21:01:10 +0000
Files and hashes: 1: 3g9vEIvZ3Ad22o1OnOmjkYKrx-Y.roa (hash: dwEr+ygUTjcoJhBqeNSDCT0jVemskxaLd88sjFgcW5c=)
2: WjZ-lIR7MyhCZaOyQOqTaGg93bc.roa (hash: 9r+bJWO2ypdWBvTMrN/txM30uqxsJdCMbt8zxX7CLS8=)
3: aom7lPpf5QmM7X4hUpoL2G48TY0.crl (hash: jhEoepfob1rlFTp+yZk3Z38Y6h2tvtmYmJ8Y4JwUVjU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/40a1e5-7d2a-48d6-a50e-f96fb4ea7e70/1/aom7lPpf5QmM7X4hUpoL2G48TY0.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/40a1e5-7d2a-48d6-a50e-f96fb4ea7e70/1/aom7lPpf5QmM7X4hUpoL2G48TY0.mft
rsync://rpki.ripe.net/repository/DEFAULT/aom7lPpf5QmM7X4hUpoL2G48TY0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 Oct 2026 21:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:1d:51:eb:62:96:96:b5:74:be:26:4d:a4:6f:74:ef:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a89bb94fa5fe5098ced7e21529a0bd86e3c4d8d
Validity
Not Before: Oct 8 21:01:10 2026 GMT
Not After : Oct 9 21:01:10 2026 GMT
Subject: CN=cec7cb84d3293332b9f0bfafdfa279a218d436d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:a6:7b:d1:89:42:63:0c:7c:d2:da:73:96:c0:
d7:35:a8:c0:d3:d4:f8:06:39:d4:c2:2e:e5:5e:9e:
dd:05:28:47:5e:cb:31:d0:aa:31:56:42:5c:90:6f:
a9:c5:b2:62:c7:11:e2:ad:cd:60:3b:d3:53:d7:53:
81:a4:0f:b0:9d:46:d9:d5:4e:7f:51:39:25:be:5c:
08:df:df:c4:93:98:a3:ea:6f:bf:c1:8c:ff:fe:43:
28:bd:8a:89:2e:86:9a:85:76:98:23:77:ca:8a:b1:
8a:0a:f0:35:af:96:94:32:80:b4:80:f3:b8:d9:a3:
da:29:94:62:f7:c7:65:fb:1f:66:b0:9d:21:13:17:
df:b2:ea:36:d4:39:f3:7b:77:f7:ca:e8:d5:12:1b:
44:7d:12:3f:da:88:01:cc:04:a2:6f:02:64:ec:88:
0d:90:54:95:44:4b:64:0a:73:ad:47:26:4c:0c:c4:
be:f3:92:82:b9:8c:4b:94:1a:fd:92:b3:76:51:0f:
f9:84:94:f0:54:7d:54:58:8b:77:17:9f:c7:81:a9:
b8:b6:8d:b6:32:66:92:ba:22:48:ec:5b:cc:fa:2a:
2c:57:4a:76:53:77:28:06:d3:e2:6f:1e:a5:29:b1:
6b:b0:62:48:ac:5e:bb:c3:19:19:5a:ff:1b:26:8b:
70:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:C7:CB:84:D3:29:33:32:B9:F0:BF:AF:DF:A2:79:A2:18:D4:36:D5
X509v3 Authority Key Identifier:
keyid:6A:89:BB:94:FA:5F:E5:09:8C:ED:7E:21:52:9A:0B:D8:6E:3C:4D:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aom7lPpf5QmM7X4hUpoL2G48TY0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/40a1e5-7d2a-48d6-a50e-f96fb4ea7e70/1/aom7lPpf5QmM7X4hUpoL2G48TY0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/40a1e5-7d2a-48d6-a50e-f96fb4ea7e70/1/aom7lPpf5QmM7X4hUpoL2G48TY0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:60:76:1d:7f:a6:24:dc:1d:9b:f3:be:69:16:6d:89:71:44:
ec:d6:8a:ae:35:26:55:f3:77:0d:d0:b4:72:94:8d:d3:6a:e0:
5c:55:45:ab:34:27:0d:ab:8b:10:5c:b2:8d:87:39:17:a5:dc:
c3:c7:d7:c1:a6:96:b1:1f:ba:73:f0:09:b4:f5:55:e3:7d:01:
2f:9c:5b:4f:8f:da:82:b7:9a:52:e4:49:90:a8:00:aa:a9:80:
78:27:f8:33:32:c0:fe:d7:bc:cb:1f:ce:be:66:c1:21:9a:b7:
b1:22:33:36:a7:f3:7e:2f:be:a9:0d:72:63:13:9e:0c:4f:d9:
f6:4c:62:e5:f5:56:8e:c6:08:8b:c1:4d:b8:7d:d2:0a:9d:55:
a5:d0:28:57:17:a4:3b:db:ab:67:59:2a:8e:e6:88:aa:48:ba:
49:a7:fd:96:10:98:5e:48:6f:95:b6:9b:b4:42:d5:0a:1a:34:
4b:f5:50:59:8b:30:b9:ab:67:bc:8d:9f:3a:3c:14:81:b6:cb:
74:60:d0:1d:a7:40:0d:e0:2f:71:1d:ce:db:08:b7:55:87:14:
a7:1e:3a:6c:43:30:4b:d0:f6:fe:5a:75:ad:83:9a:e5:61:e7:
6d:70:01:d3:5a:1b:c2:e0:44:ae:bf:d4:7e:93:c5:1c:26:ce:
84:34:d1:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 06:31:49 2026 by rpki-client