Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6f/d07435-750e-4f1a-bf78-6ed8ac7b52bf/1/AosRDxmx_lSJjpWJr8Y_kDdJ3_U.mft
File: AosRDxmx_lSJjpWJr8Y_kDdJ3_U.mft (raw, json)
Hash identifier: Z2xrE+fdnszfoP8IegH9/EDeItN27+U6j5hs9zAOr68=
Subject key identifier: 33:C4:64:2E:4A:B6:AA:BD:59:63:69:C7:E1:B6:3C:4B:0F:81:0F:B0
Authority key identifier: 02:8B:11:0F:19:B1:FE:54:89:8E:95:89:AF:C6:3F:90:37:49:DF:F5
Certificate issuer: /CN=028b110f19b1fe54898e9589afc63f903749dff5
Certificate serial: 01A0CBFE966E7F542914195E852DCAB200C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AosRDxmx_lSJjpWJr8Y_kDdJ3_U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/d07435-750e-4f1a-bf78-6ed8ac7b52bf/1/AosRDxmx_lSJjpWJr8Y_kDdJ3_U.mft
Manifest number: 9C
Signing time: Wed 23 Sep 2026 02:00:54 +0000
Manifest this update: Wed 23 Sep 2026 02:00:54 +0000
Manifest next update: Thu 24 Sep 2026 02:00:54 +0000
Files and hashes: 1: AosRDxmx_lSJjpWJr8Y_kDdJ3_U.crl (hash: rx5jD6H0iQmnEl6gLTR+pnzA2wvzg2imrvWtHYzTN6A=)
2: _IpDACBsZMbScuGMBl89ukS0we8.roa (hash: XGdoR2Dqje9kO00dw3KBe8qTky3l0qaCLX0c+Z0GJ58=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/d07435-750e-4f1a-bf78-6ed8ac7b52bf/1/AosRDxmx_lSJjpWJr8Y_kDdJ3_U.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/d07435-750e-4f1a-bf78-6ed8ac7b52bf/1/AosRDxmx_lSJjpWJr8Y_kDdJ3_U.mft
rsync://rpki.ripe.net/repository/DEFAULT/AosRDxmx_lSJjpWJr8Y_kDdJ3_U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 02:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cb:fe:96:6e:7f:54:29:14:19:5e:85:2d:ca:b2:00:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=028b110f19b1fe54898e9589afc63f903749dff5
Validity
Not Before: Sep 23 02:00:54 2026 GMT
Not After : Sep 24 02:00:54 2026 GMT
Subject: CN=33c4642e4ab6aabd596369c7e1b63c4b0f810fb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:d5:64:37:09:40:f7:5d:c7:28:7e:dc:8f:26:
d7:80:45:be:1f:21:92:70:f1:4f:fa:89:c9:b7:96:
57:84:1d:46:06:c9:fb:65:e0:0d:f6:e8:da:48:f2:
d8:77:41:77:55:b8:d4:0a:a9:6f:18:df:44:ee:92:
2f:81:fa:e5:4a:f5:f6:f9:f8:7f:4d:39:d4:47:88:
e6:08:46:8b:5f:72:d2:1f:29:f8:47:6d:60:9e:9b:
b6:09:c8:98:20:2b:15:08:21:8d:47:bb:44:44:07:
d2:2e:15:d0:8a:39:a3:95:e1:49:fc:cf:95:d9:b3:
55:b3:9d:c4:96:8f:fd:e4:94:c3:cc:31:78:16:85:
03:87:5a:8e:0f:23:e7:67:47:c4:ec:91:e5:f2:ca:
45:9e:11:51:6f:7b:2f:83:f1:af:dd:da:ca:1c:2b:
38:56:f5:8f:cd:37:ff:d7:98:e1:6e:b4:89:1e:f0:
2c:1c:26:ac:bb:04:ee:66:36:07:80:cf:f0:5d:23:
42:ee:5b:68:e6:94:af:24:4b:fb:05:a6:d0:53:6f:
43:d6:68:55:0f:8d:79:a2:d8:a1:44:42:f0:0d:9b:
7b:3e:06:6d:fd:e2:31:e3:4b:96:4d:22:04:88:6c:
2f:de:f8:7f:8f:33:fe:e0:f6:f0:72:97:6c:0b:1c:
e0:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:C4:64:2E:4A:B6:AA:BD:59:63:69:C7:E1:B6:3C:4B:0F:81:0F:B0
X509v3 Authority Key Identifier:
keyid:02:8B:11:0F:19:B1:FE:54:89:8E:95:89:AF:C6:3F:90:37:49:DF:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AosRDxmx_lSJjpWJr8Y_kDdJ3_U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/d07435-750e-4f1a-bf78-6ed8ac7b52bf/1/AosRDxmx_lSJjpWJr8Y_kDdJ3_U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/d07435-750e-4f1a-bf78-6ed8ac7b52bf/1/AosRDxmx_lSJjpWJr8Y_kDdJ3_U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:6f:e2:e1:63:9d:ef:e8:c7:36:60:6d:bc:43:80:95:fc:53:
9c:c0:1b:84:3d:b2:52:82:15:3e:0a:8b:6d:27:a7:fc:4a:28:
87:48:e7:1b:ca:80:33:68:fb:35:b8:c5:e5:bc:d0:32:2f:17:
4f:0a:23:70:08:f5:7b:fa:d2:b6:ed:3d:75:17:ea:7d:3e:4f:
dd:ee:3b:bd:fd:72:98:53:8b:28:c1:eb:35:0a:a1:2b:21:54:
a9:30:03:9a:9b:d6:43:79:7b:ff:4e:35:60:b9:9b:ad:06:b7:
3e:36:d3:e8:7b:e8:19:e9:0a:15:24:c9:f5:d1:48:38:30:29:
9d:ca:16:85:f8:4b:46:e2:6a:c6:f3:ac:a8:8c:35:f8:d4:90:
e1:bd:71:6e:ee:59:1e:c0:82:0d:7e:35:8c:fe:3b:ca:69:ae:
fc:55:ad:85:cb:44:06:79:b1:5b:88:1f:3d:bf:fc:ea:d2:57:
20:3c:b1:d5:49:b5:ac:78:ba:ed:87:ad:02:55:54:7c:ef:49:
55:b1:78:a2:dc:ee:44:63:98:81:41:2c:2d:9b:89:c1:57:d1:
4e:24:e5:7b:1f:13:3f:bb:f3:e9:2d:88:e1:0d:85:e0:7d:13:
cc:ed:12:ea:ce:cb:3a:64:6b:1a:99:ad:ef:10:78:a5:8d:35:
72:76:e2:c0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDL/pZuf1QpFBlehS3KsgDAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAyOGIxMTBmMTliMWZlNTQ4OThlOTU4OWFmYzYzZjkwMzc0
OWRmZjUwHhcNMjYwOTIzMDIwMDU0WhcNMjYwOTI0MDIwMDU0WjAzMTEwLwYDVQQD
EygzM2M0NjQyZTRhYjZhYWJkNTk2MzY5YzdlMWI2M2M0YjBmODEwZmIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAstVkNwlA913HKH7cjybXgEW+HyGS
cPFP+onJt5ZXhB1GBsn7ZeAN9ujaSPLYd0F3VbjUCqlvGN9E7pIvgfrlSvX2+fh/
TTnUR4jmCEaLX3LSHyn4R21gnpu2CciYICsVCCGNR7tERAfSLhXQijmjleFJ/M+V
2bNVs53Elo/95JTDzDF4FoUDh1qODyPnZ0fE7JHl8spFnhFRb3svg/Gv3drKHCs4
VvWPzTf/15jhbrSJHvAsHCasuwTuZjYHgM/wXSNC7lto5pSvJEv7BabQU29D1mhV
D415otihRELwDZt7PgZt/eIx40uWTSIEiGwv3vh/jzP+4PbwcpdsCxzgvwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDPEZC5Ktqq9WWNpx+G2PEsPgQ+wMB8GA1UdIwQY
MBaAFAKLEQ8Zsf5UiY6Via/GP5A3Sd/1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQW9zUkR4bXhfbFNKanBXSnI4WV9rRGRKM19VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi9kMDc0MzUtNzUwZS00ZjFhLWJmNzgt
NmVkOGFjN2I1MmJmLzEvQW9zUkR4bXhfbFNKanBXSnI4WV9rRGRKM19VLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Zi9kMDc0MzUtNzUwZS00ZjFhLWJmNzgtNmVkOGFjN2I1MmJm
LzEvQW9zUkR4bXhfbFNKanBXSnI4WV9rRGRKM19VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAt2/i4WOd
7+jHNmBtvEOAlfxTnMAbhD2yUoIVPgqLbSen/Eooh0jnG8qAM2j7NbjF5bzQMi8X
TwojcAj1e/rStu09dRfqfT5P3e47vf1ymFOLKMHrNQqhKyFUqTADmpvWQ3l7/041
YLmbrQa3PjbT6HvoGekKFSTJ9dFIODApncoWhfhLRuJqxvOsqIw1+NSQ4b1xbu5Z
HsCCDX41jP47ymmu/FWthctEBnmxW4gfPb/86tJXIDyx1Um1rHi67YetAlVUfO9J
VbF4otzuRGOYgUEsLZuJwVfRTiTlex8TP7vz6S2I4Q2F4H0TzO0S6s7LOmRrGpmt
7xB4pY01cnbiwA==
-----END CERTIFICATE-----
Generated at Wed Sep 23 11:07:27 2026 by rpki-client