Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9a/05ab60-dea6-43a3-87ef-7bfaeb195445/1/AOOwVedsnogccp7gEWSlhwsrpMk.mft
File: AOOwVedsnogccp7gEWSlhwsrpMk.mft (raw, json)
Hash identifier: GzsbYa6b+YrYhOLazKa/fM9LW4UwzVv5KYKe8EvCyOk=
Subject key identifier: BF:55:BC:64:FD:4A:80:C0:AA:DD:E1:65:EB:D9:22:D8:63:16:61:81
Authority key identifier: 00:E3:B0:55:E7:6C:9E:88:1C:72:9E:E0:11:64:A5:87:0B:2B:A4:C9
Certificate issuer: /CN=00e3b055e76c9e881c729ee01164a5870b2ba4c9
Certificate serial: 01A0C28E39164D65AE0F692CE0610E73DE25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AOOwVedsnogccp7gEWSlhwsrpMk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/05ab60-dea6-43a3-87ef-7bfaeb195445/1/AOOwVedsnogccp7gEWSlhwsrpMk.mft
Manifest number: DE
Signing time: Mon 21 Sep 2026 06:01:35 +0000
Manifest this update: Mon 21 Sep 2026 06:01:35 +0000
Manifest next update: Tue 22 Sep 2026 06:01:35 +0000
Files and hashes: 1: AOOwVedsnogccp7gEWSlhwsrpMk.crl (hash: 9BYw+gDDJbUGvhj4RRynhteSeYpoNgRVJiFx7mzV/f4=)
2: TXQspcwa_q4U4F7SmXnMEdJS514.roa (hash: JAX31rJoJv1xe2x9nCzhD+wfwz6O9nmNM3IvWJ+7fBU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/05ab60-dea6-43a3-87ef-7bfaeb195445/1/AOOwVedsnogccp7gEWSlhwsrpMk.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/05ab60-dea6-43a3-87ef-7bfaeb195445/1/AOOwVedsnogccp7gEWSlhwsrpMk.mft
rsync://rpki.ripe.net/repository/DEFAULT/AOOwVedsnogccp7gEWSlhwsrpMk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c2:8e:39:16:4d:65:ae:0f:69:2c:e0:61:0e:73:de:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00e3b055e76c9e881c729ee01164a5870b2ba4c9
Validity
Not Before: Sep 21 06:01:35 2026 GMT
Not After : Sep 22 06:01:35 2026 GMT
Subject: CN=bf55bc64fd4a80c0aadde165ebd922d863166181
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:16:26:00:89:88:4d:67:81:f5:13:1e:4e:2d:
f1:32:fd:7c:cf:22:32:19:2b:2a:f3:cf:1a:04:c4:
90:02:37:97:41:12:e4:4f:34:80:6d:3f:3b:4c:5d:
5e:0c:1c:bb:0d:4f:82:94:c1:15:88:d8:7a:6e:12:
4f:f6:e0:43:2a:10:4d:c6:1a:08:19:47:6d:48:46:
71:9b:5c:eb:4e:cb:0e:bc:87:27:41:2d:d5:2f:79:
5f:3e:d2:85:2e:70:7c:52:65:0b:f1:6b:f7:f2:b5:
86:5a:26:c3:78:3c:fb:da:7e:46:d9:b7:c3:37:fe:
97:ae:07:16:34:d5:bb:ce:84:b3:6e:91:e0:8f:00:
5d:05:49:c6:86:7c:6a:20:16:45:a9:4e:11:f3:87:
2d:ac:88:44:b4:5b:ab:6e:f9:32:4f:8f:9a:6d:8c:
5f:a4:e1:8d:21:93:5a:00:ff:f0:f7:fd:83:9d:f7:
ad:37:2e:a2:6e:da:7d:e5:48:27:20:c3:91:3b:b9:
40:ac:92:17:b1:3f:ce:cf:33:6a:13:bf:ab:10:a5:
fa:be:75:66:1c:4c:94:0d:1a:70:80:cb:5d:d3:0e:
8b:6d:30:de:c0:1d:9d:8f:f7:42:65:17:a5:e3:b7:
ca:0e:90:55:df:52:bb:87:a7:53:30:97:75:9a:29:
65:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:55:BC:64:FD:4A:80:C0:AA:DD:E1:65:EB:D9:22:D8:63:16:61:81
X509v3 Authority Key Identifier:
keyid:00:E3:B0:55:E7:6C:9E:88:1C:72:9E:E0:11:64:A5:87:0B:2B:A4:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AOOwVedsnogccp7gEWSlhwsrpMk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/05ab60-dea6-43a3-87ef-7bfaeb195445/1/AOOwVedsnogccp7gEWSlhwsrpMk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/05ab60-dea6-43a3-87ef-7bfaeb195445/1/AOOwVedsnogccp7gEWSlhwsrpMk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:9c:b7:46:b2:44:88:cf:c7:1a:86:f1:b0:09:91:a1:e7:cd:
73:39:b1:2a:0e:3a:e6:e5:fc:41:ab:f6:34:51:6c:d4:13:12:
d3:a2:57:d0:41:a6:6b:6e:d9:ab:30:32:1c:5f:f1:5e:fb:1b:
c3:28:0d:e5:cb:58:ae:28:a4:84:74:41:a5:79:54:42:fa:52:
a9:e9:78:7e:36:d6:58:e4:5b:d8:49:c0:c2:f4:6b:70:76:96:
c8:c5:95:e2:fa:01:48:65:34:8e:cd:c0:53:e3:44:9c:4b:99:
60:eb:2f:8c:a9:0d:85:ba:33:83:9e:cf:0a:da:f6:1d:21:ce:
03:c6:23:35:47:48:8e:95:e1:b9:6f:41:e5:33:e9:e9:2c:72:
89:4f:0a:52:da:67:17:59:a7:8c:72:06:e4:14:6a:c2:ba:b5:
09:28:ab:91:1c:bc:b8:f3:61:db:9d:9a:94:0d:8d:e1:f4:a9:
8f:39:a0:02:78:8a:76:01:d6:48:5e:75:5c:3b:28:93:d7:21:
75:b2:eb:f7:f5:c6:18:d3:f5:f2:b4:c8:79:62:c9:65:90:ac:
8a:03:ee:c3:93:71:be:e2:ab:32:b5:fd:df:72:6f:f1:ee:fd:
f5:de:bb:35:34:5b:49:e1:1c:41:5a:57:cd:13:e6:18:b9:77:
4b:09:3c:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 11:09:32 2026 by rpki-client