Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/46/cadd6e-65c6-44da-9ee9-efea65dc3020/1/AoXs_ogqAqGVABRSSDMybJ7V0D0.mft
File: AoXs_ogqAqGVABRSSDMybJ7V0D0.mft (raw, json)
Hash identifier: jBqCqhhBNOzqQhoPMgNzb5lZ6qVFfL+WvGnS4vIbq34=
Subject key identifier: 2B:20:7D:40:93:C2:B4:4A:0B:ED:5C:51:41:6C:A1:97:9D:2D:39:ED
Authority key identifier: 02:85:EC:FE:88:2A:02:A1:95:00:14:52:48:33:32:6C:9E:D5:D0:3D
Certificate issuer: /CN=0285ecfe882a02a1950014524833326c9ed5d03d
Certificate serial: 01A0BEB0B98463B24F8721AF689444B05841
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AoXs_ogqAqGVABRSSDMybJ7V0D0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/cadd6e-65c6-44da-9ee9-efea65dc3020/1/AoXs_ogqAqGVABRSSDMybJ7V0D0.mft
Manifest number: DC
Signing time: Sun 20 Sep 2026 12:00:47 +0000
Manifest this update: Sun 20 Sep 2026 12:00:47 +0000
Manifest next update: Mon 21 Sep 2026 12:00:47 +0000
Files and hashes: 1: AoXs_ogqAqGVABRSSDMybJ7V0D0.crl (hash: b7J9vDnc6y0cqCdM2o0J4zp14uO1nMujx29aIQ2ljTY=)
2: gELtUXmcMpXkfU-ruzwBQq4A7Jw.asa (hash: 24wkmPQWoqZNRgCVS5rExhMXF8yP0+BcQiBXM5iYW9Q=)
3: iYTyASUWDKAaro_VtHzd5V1NW_k.asa (hash: 2dfsEYfXwhAKl0La6hBxTYJuJnYLE7CaYUYv30nw4zs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/cadd6e-65c6-44da-9ee9-efea65dc3020/1/AoXs_ogqAqGVABRSSDMybJ7V0D0.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/cadd6e-65c6-44da-9ee9-efea65dc3020/1/AoXs_ogqAqGVABRSSDMybJ7V0D0.mft
rsync://rpki.ripe.net/repository/DEFAULT/AoXs_ogqAqGVABRSSDMybJ7V0D0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 12:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:be:b0:b9:84:63:b2:4f:87:21:af:68:94:44:b0:58:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0285ecfe882a02a1950014524833326c9ed5d03d
Validity
Not Before: Sep 20 12:00:47 2026 GMT
Not After : Sep 21 12:00:47 2026 GMT
Subject: CN=2b207d4093c2b44a0bed5c51416ca1979d2d39ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:ea:e9:d1:21:b9:88:c4:d1:a8:f9:91:18:74:
7f:db:63:4a:ac:e1:e9:af:48:67:3c:f8:a2:6f:d3:
de:61:5c:3c:bf:f6:4b:81:1f:5d:6e:1e:e2:c8:83:
ad:b5:5a:1b:56:37:82:0a:9c:6b:2c:d6:76:f4:41:
6f:90:68:c1:d6:49:f4:99:22:2e:4e:43:a6:e1:38:
79:0e:a0:6e:de:33:d9:4c:a6:c2:f3:6f:bd:bc:16:
c1:39:d0:e3:af:ce:ad:2e:5e:c2:6b:2b:2b:c1:a3:
31:6a:31:09:06:86:fb:d1:c0:d1:c0:4e:b1:fb:1f:
d9:bc:d2:af:9e:ce:a9:4b:75:02:ca:f2:45:0a:1e:
b1:5b:18:a3:05:f8:aa:d4:02:e1:ea:8e:25:9a:56:
b1:c4:3d:08:0b:4d:d6:a9:3d:d9:fc:47:1e:e6:ec:
dc:30:13:d6:5c:44:13:05:3a:1d:09:09:cf:7e:50:
48:9a:15:c1:4e:40:ab:36:d0:c9:36:8f:3c:b2:cc:
7c:d2:27:58:dd:4b:48:53:e1:74:df:9a:ff:84:be:
98:d3:b6:56:42:3d:57:c5:19:82:f7:ce:e9:ca:e5:
e5:f5:8f:45:4c:e3:f4:2d:ed:2b:dd:57:f2:a3:5b:
cd:11:9a:d2:8c:24:8d:94:72:db:9e:12:00:b9:97:
a8:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:20:7D:40:93:C2:B4:4A:0B:ED:5C:51:41:6C:A1:97:9D:2D:39:ED
X509v3 Authority Key Identifier:
keyid:02:85:EC:FE:88:2A:02:A1:95:00:14:52:48:33:32:6C:9E:D5:D0:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AoXs_ogqAqGVABRSSDMybJ7V0D0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/cadd6e-65c6-44da-9ee9-efea65dc3020/1/AoXs_ogqAqGVABRSSDMybJ7V0D0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/cadd6e-65c6-44da-9ee9-efea65dc3020/1/AoXs_ogqAqGVABRSSDMybJ7V0D0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:b4:35:50:0e:70:54:d8:5f:98:20:6f:64:07:ab:d7:62:a8:
3b:cb:1a:cb:14:0f:23:7f:14:02:4e:a8:5e:c9:75:07:ba:cc:
5c:df:73:8a:ab:8a:10:c1:0b:4a:c7:25:24:2f:95:d2:f3:a5:
72:2e:5a:8d:7b:10:78:7b:ad:d0:41:46:a4:94:92:f2:8c:02:
66:40:8e:42:d9:af:f0:7a:79:a9:a1:8b:f7:f3:1a:3f:3e:02:
62:5c:b5:e2:64:0e:00:75:55:2e:20:6d:17:a1:0b:45:5b:f5:
8c:55:cb:99:3b:84:b5:39:c0:c0:c3:18:ec:e2:4b:bc:22:9d:
40:58:93:26:d7:fa:e4:2d:c5:23:10:1a:61:5a:37:99:44:1e:
2f:6b:60:04:16:a7:57:0d:79:ae:46:bd:65:f2:13:a9:bd:96:
c6:3c:4b:25:18:32:7b:07:4c:2d:5e:32:83:7c:0b:70:0e:cb:
17:7a:ba:60:36:ee:38:c8:51:04:dd:65:b5:a7:2b:44:77:43:
de:33:3f:d4:17:74:2f:82:61:85:3e:4f:97:b4:56:c5:c3:34:
71:63:34:f2:03:93:e6:d2:84:65:c3:87:94:41:ac:2a:9e:40:
e7:b3:f5:eb:3b:8f:a6:ee:81:2f:b2:5b:9b:6a:73:7b:4c:21:
81:d0:87:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 23:14:27 2026 by rpki-client