Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/68/9f3205-52e9-46a4-b6c2-c703522488f9/1/AoT9lBz3spS4gudNsPyXFnQ02rw.mft
File: AoT9lBz3spS4gudNsPyXFnQ02rw.mft (raw, json)
Hash identifier: 18goE0aREumnaSxWlLjpZpuAiXHtITkXsp9UnK/OyyE=
Subject key identifier: 80:3E:F0:7F:A8:6C:7F:A8:6F:15:19:15:7D:CF:A3:46:44:0A:5C:7C
Authority key identifier: 02:84:FD:94:1C:F7:B2:94:B8:82:E7:4D:B0:FC:97:16:74:34:DA:BC
Certificate issuer: /CN=0284fd941cf7b294b882e74db0fc97167434dabc
Certificate serial: 01A121659615AEA61835BB5D05B1AECD736F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AoT9lBz3spS4gudNsPyXFnQ02rw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/9f3205-52e9-46a4-b6c2-c703522488f9/1/AoT9lBz3spS4gudNsPyXFnQ02rw.mft
Manifest number: 0270
Signing time: Fri 09 Oct 2026 16:01:08 +0000
Manifest this update: Fri 09 Oct 2026 16:01:08 +0000
Manifest next update: Sat 10 Oct 2026 16:01:08 +0000
Files and hashes: 1: AoT9lBz3spS4gudNsPyXFnQ02rw.crl (hash: zUXkaRiBfC4m/L3cZnYQ5PTr+tRTDm8ZiMxFC9ty4i8=)
2: KWX40V7o8A6zMkKoIGkCmwKYmr0.roa (hash: nJ0kf2dRdOxQXbxBLcQMmLtNRpU/yw5QdnU4YcpxOtc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/9f3205-52e9-46a4-b6c2-c703522488f9/1/AoT9lBz3spS4gudNsPyXFnQ02rw.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/9f3205-52e9-46a4-b6c2-c703522488f9/1/AoT9lBz3spS4gudNsPyXFnQ02rw.mft
rsync://rpki.ripe.net/repository/DEFAULT/AoT9lBz3spS4gudNsPyXFnQ02rw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 Oct 2026 13:28:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:21:65:96:15:ae:a6:18:35:bb:5d:05:b1:ae:cd:73:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0284fd941cf7b294b882e74db0fc97167434dabc
Validity
Not Before: Oct 9 16:01:08 2026 GMT
Not After : Oct 10 16:01:08 2026 GMT
Subject: CN=803ef07fa86c7fa86f1519157dcfa346440a5c7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:04:bd:e3:0a:bd:1f:e9:58:73:53:c5:a9:f8:
f0:0c:a3:03:15:2c:6d:33:4c:fe:04:da:e2:d8:ff:
ff:bc:05:c4:a7:f0:3d:22:a3:0b:58:fe:2c:0b:34:
2d:d0:fa:f0:98:84:a2:cb:64:bd:08:14:f7:9b:4b:
fb:ff:41:60:97:70:c5:02:87:98:33:e3:e7:8c:f8:
75:23:ed:6a:76:c2:a5:d3:01:7c:2f:0f:53:8f:1d:
56:37:64:e0:d8:ef:41:88:5b:ed:c8:6b:de:0f:4d:
c7:78:46:d5:e3:18:b3:0f:6d:dd:0d:b2:4c:4f:20:
e8:e8:73:3d:2b:41:0d:eb:41:c6:9c:d3:e5:37:e5:
0f:c2:a4:0e:6b:41:2c:b4:6c:d4:2e:9d:13:13:e1:
dc:94:8d:fd:43:e5:82:fb:35:4b:9c:75:2a:79:68:
d6:48:3c:fe:ee:69:fc:83:98:c5:a3:5d:16:8e:3b:
60:2d:8a:9c:b2:3f:35:80:2d:1d:30:2c:e3:51:9a:
e6:db:43:76:ee:e6:23:6c:24:85:dd:70:30:18:14:
f2:2e:04:6f:c8:5a:25:51:65:95:50:e6:9c:f2:33:
43:43:bc:bf:76:1c:b2:dd:25:e3:fa:c1:f5:ba:47:
23:1e:be:f4:6e:50:62:29:b2:75:0a:04:a8:bb:08:
27:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:3E:F0:7F:A8:6C:7F:A8:6F:15:19:15:7D:CF:A3:46:44:0A:5C:7C
X509v3 Authority Key Identifier:
keyid:02:84:FD:94:1C:F7:B2:94:B8:82:E7:4D:B0:FC:97:16:74:34:DA:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AoT9lBz3spS4gudNsPyXFnQ02rw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/9f3205-52e9-46a4-b6c2-c703522488f9/1/AoT9lBz3spS4gudNsPyXFnQ02rw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/9f3205-52e9-46a4-b6c2-c703522488f9/1/AoT9lBz3spS4gudNsPyXFnQ02rw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:72:4f:29:d8:19:09:9a:f6:1c:6b:36:71:d1:68:6d:db:4c:
2a:18:b5:4a:05:9e:dc:0f:7e:85:9f:54:e0:4f:1c:b5:d9:82:
3f:79:d8:2a:8f:46:08:71:a9:61:3b:d2:b9:2c:e8:92:70:fe:
41:95:2b:1b:f8:74:c3:2d:63:1e:ff:aa:96:35:7d:d7:cf:8e:
8d:5b:86:31:3c:c6:5a:58:06:f8:f7:ef:5a:e6:4d:5b:ec:5c:
b3:ca:1a:f8:29:44:fd:07:67:a5:7f:c9:fe:60:1d:0c:ae:6f:
98:71:48:ff:d4:09:bf:2f:92:f9:fe:37:12:79:34:ca:60:12:
b5:0d:fc:ab:84:86:d4:c8:8e:30:c0:6f:d1:10:39:83:57:2e:
6e:ee:3c:7a:c7:26:28:1e:63:41:a3:85:da:9d:de:8c:d7:3d:
9d:33:6e:d8:1c:a6:c9:e5:95:32:fd:9b:34:38:de:ad:65:6f:
cb:a9:11:48:ba:8d:94:9c:b3:04:26:e4:e0:f2:51:06:72:38:
32:b1:e2:c3:9c:d0:85:a6:ea:4b:c3:73:6c:43:58:18:de:c6:
69:96:cc:3c:a0:2c:5e:4d:ed:77:03:57:21:4b:26:1d:7f:5d:
bb:8b:84:9c:9f:46:07:de:9a:1a:9b:21:49:f3:3f:a7:ee:42:
43:43:ba:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 23:04:41 2026 by rpki-client