Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5f/b370c2-d46b-47b5-af28-645680e92fd4/1/AosCB3NxOyxT0GjjQuk_x6rfruI.mft
File: AosCB3NxOyxT0GjjQuk_x6rfruI.mft (raw, json)
Hash identifier: sfTYSqBGdGlfjSQsJaRbogGo9FOmRO4cn0/BwLnHHKQ=
Subject key identifier: DE:92:BA:B9:C6:8E:19:E2:7B:EE:A3:B7:F7:8A:3E:EB:EA:B6:87:5B
Authority key identifier: 02:8B:02:07:73:71:3B:2C:53:D0:68:E3:42:E9:3F:C7:AA:DF:AE:E2
Certificate issuer: /CN=028b020773713b2c53d068e342e93fc7aadfaee2
Certificate serial: 01A12AD6CEDFBABD54E5FA3CDFCA3C9F14FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AosCB3NxOyxT0GjjQuk_x6rfruI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/b370c2-d46b-47b5-af28-645680e92fd4/1/AosCB3NxOyxT0GjjQuk_x6rfruI.mft
Manifest number: A4
Signing time: Sun 11 Oct 2026 12:01:23 +0000
Manifest this update: Sun 11 Oct 2026 12:01:23 +0000
Manifest next update: Mon 12 Oct 2026 12:01:23 +0000
Files and hashes: 1: AosCB3NxOyxT0GjjQuk_x6rfruI.crl (hash: Dk/afHuKZGVQTgHWUYNOzmgGldZbj3tUgy2+/g2uvPI=)
2: g3EmADklwdN8SKQpyrRDpqOQn-A.asa (hash: XhAeshwtF1WxC0VdPxr/7VnAsSO7+obprfhUQB/R5ms=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/b370c2-d46b-47b5-af28-645680e92fd4/1/AosCB3NxOyxT0GjjQuk_x6rfruI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/b370c2-d46b-47b5-af28-645680e92fd4/1/AosCB3NxOyxT0GjjQuk_x6rfruI.mft
rsync://rpki.ripe.net/repository/DEFAULT/AosCB3NxOyxT0GjjQuk_x6rfruI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 12:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2a:d6:ce:df:ba:bd:54:e5:fa:3c:df:ca:3c:9f:14:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=028b020773713b2c53d068e342e93fc7aadfaee2
Validity
Not Before: Oct 11 12:01:23 2026 GMT
Not After : Oct 12 12:01:23 2026 GMT
Subject: CN=de92bab9c68e19e27beea3b7f78a3eebeab6875b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:0b:70:49:73:df:4a:a4:76:50:94:e4:6b:b4:
15:6a:7f:ce:5f:45:50:3c:ca:48:bd:5b:f4:fa:67:
41:1b:fc:81:6d:56:07:de:ab:0f:ae:1c:1c:f9:ff:
58:d6:b7:14:a1:8a:84:75:9a:0a:14:4d:a2:e9:e5:
02:3a:81:71:f5:63:82:a6:92:6e:d5:da:0a:04:5e:
6d:cb:fe:c2:27:7f:99:5b:59:ea:f7:ec:5c:9f:32:
ab:72:9f:33:12:52:ff:8b:e2:57:63:e2:a4:33:e0:
6f:51:2f:25:df:4d:7f:b1:2a:59:52:c9:fa:9e:5b:
2f:5d:d0:2d:b6:fb:88:40:7c:49:46:1f:29:88:b2:
70:0f:66:a5:47:4c:98:20:55:2f:fb:d0:cf:f9:d2:
96:dc:6b:f4:26:ec:5f:4a:16:6f:09:85:c7:48:69:
f9:1c:36:29:ca:d5:06:1e:7a:e0:16:88:12:50:a6:
87:e7:f9:4d:b2:d5:be:9d:c3:1a:54:49:14:14:24:
47:1c:e5:c3:25:d6:b1:d6:c9:21:26:bc:39:e6:c1:
18:66:bc:0b:ae:f1:6e:2b:fd:8a:6b:50:2b:92:57:
d7:3d:31:c6:23:47:86:e5:61:94:d2:a7:57:a2:d5:
ef:48:92:0c:c6:d9:da:1c:5f:6e:01:0d:cc:97:ed:
6d:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:92:BA:B9:C6:8E:19:E2:7B:EE:A3:B7:F7:8A:3E:EB:EA:B6:87:5B
X509v3 Authority Key Identifier:
keyid:02:8B:02:07:73:71:3B:2C:53:D0:68:E3:42:E9:3F:C7:AA:DF:AE:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AosCB3NxOyxT0GjjQuk_x6rfruI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b370c2-d46b-47b5-af28-645680e92fd4/1/AosCB3NxOyxT0GjjQuk_x6rfruI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b370c2-d46b-47b5-af28-645680e92fd4/1/AosCB3NxOyxT0GjjQuk_x6rfruI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:1b:31:75:3b:a7:59:9f:a2:3d:64:48:51:89:4e:e4:14:81:
91:87:72:13:22:0f:04:38:0d:14:ae:74:33:f7:a2:66:d1:8c:
3f:14:89:a4:0a:d6:6d:8f:a9:f6:ad:95:3d:87:a2:d7:75:51:
72:3f:1b:63:d7:bd:70:63:63:6e:c9:85:63:a5:8c:28:42:19:
6a:ce:9e:5f:94:f4:16:5b:b7:cf:8f:31:1c:d1:5e:67:68:8b:
26:95:52:d4:30:72:04:1e:ba:df:9b:84:8f:e1:9e:97:6c:72:
8c:e2:b5:9a:de:ca:a8:1a:df:23:90:ab:93:e4:75:ff:16:95:
10:a7:6e:d5:c0:d6:38:72:96:6a:9a:04:2d:88:6c:be:b5:e0:
3e:6c:92:38:a5:1c:cc:2e:60:42:ec:cf:43:65:7e:9b:78:e8:
92:16:b3:0b:c8:77:55:3e:47:6e:be:16:06:e0:4e:ff:c6:9e:
86:d4:2a:3d:b9:e2:12:03:de:5b:dc:1f:70:c6:52:06:c9:ad:
cc:57:21:b2:ae:54:1e:80:30:9a:ef:64:6a:46:33:ee:77:50:
e4:65:5b:a8:1f:1c:d7:07:ab:31:a7:56:3b:c9:3a:5b:01:46:
01:32:62:b9:44:f7:54:14:44:b2:90:2d:56:ad:02:fb:b4:ca:
5a:e1:43:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 16:50:42 2026 by rpki-client