Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/05ab60-dea6-43a3-87ef-7bfaeb195445/1/AOOwVedsnogccp7gEWSlhwsrpMk.mft
File: AOOwVedsnogccp7gEWSlhwsrpMk.mft (raw, json)
Hash identifier: 4eOfqs7VKLm0rKvAhGZX3ZITUg/9EQ/CYmUgPJHkQCE=
Subject key identifier: E3:29:3E:7B:30:63:3C:FA:0F:39:A6:1E:4E:98:2A:C4:44:1B:83:A2
Authority key identifier: 00:E3:B0:55:E7:6C:9E:88:1C:72:9E:E0:11:64:A5:87:0B:2B:A4:C9
Certificate issuer: /CN=00e3b055e76c9e881c729ee01164a5870b2ba4c9
Certificate serial: 019FAC75D9DA44C5985E697E2A385A05272D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AOOwVedsnogccp7gEWSlhwsrpMk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/05ab60-dea6-43a3-87ef-7bfaeb195445/1/AOOwVedsnogccp7gEWSlhwsrpMk.mft
Manifest number: 4E
Signing time: Wed 29 Jul 2026 06:00:32 +0000
Manifest this update: Wed 29 Jul 2026 06:00:32 +0000
Manifest next update: Thu 30 Jul 2026 06:00:32 +0000
Files and hashes: 1: AOOwVedsnogccp7gEWSlhwsrpMk.crl (hash: r66r7fvnimibP8sZGkeIgRgReZnyt9838Ky2FoueCrM=)
2: TXQspcwa_q4U4F7SmXnMEdJS514.roa (hash: JAX31rJoJv1xe2x9nCzhD+wfwz6O9nmNM3IvWJ+7fBU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/05ab60-dea6-43a3-87ef-7bfaeb195445/1/AOOwVedsnogccp7gEWSlhwsrpMk.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/05ab60-dea6-43a3-87ef-7bfaeb195445/1/AOOwVedsnogccp7gEWSlhwsrpMk.mft
rsync://rpki.ripe.net/repository/DEFAULT/AOOwVedsnogccp7gEWSlhwsrpMk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 06:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:75:d9:da:44:c5:98:5e:69:7e:2a:38:5a:05:27:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00e3b055e76c9e881c729ee01164a5870b2ba4c9
Validity
Not Before: Jul 29 06:00:32 2026 GMT
Not After : Jul 30 06:00:32 2026 GMT
Subject: CN=e3293e7b30633cfa0f39a61e4e982ac4441b83a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:8a:de:78:85:4c:73:7e:9c:6e:ed:64:c5:07:
50:27:ec:83:b3:aa:c3:b6:07:8e:28:01:5c:b9:fd:
80:87:ed:af:9a:61:91:0f:55:5e:91:1b:41:69:7f:
f4:11:75:c4:8e:4a:8d:ed:45:7c:ad:c5:8d:ce:0e:
34:3a:53:ae:af:ae:dd:fb:dd:22:b9:5c:b8:4b:48:
53:53:7e:f3:82:52:d9:be:08:c5:9c:c3:49:de:eb:
59:a1:79:db:68:eb:00:b9:de:65:82:10:21:ab:44:
8e:ed:c8:bd:62:ba:42:e4:69:bc:53:d6:8f:c4:63:
13:47:09:dd:41:df:5a:a9:d7:5f:fc:33:b7:2e:c7:
e4:c8:3d:0d:2b:5b:20:06:69:84:e5:77:34:14:35:
8e:ee:62:81:29:54:28:ff:c1:21:9d:c6:a0:fd:2e:
0b:d6:54:bd:e8:4f:13:e8:76:a0:c5:dd:79:6c:ad:
f7:4c:5f:0c:b6:12:d7:d5:98:dc:74:d4:d5:2c:07:
52:30:91:3f:ab:a7:a7:3d:73:46:75:3e:d8:fa:8f:
cb:52:e8:c2:ca:60:c0:a6:5a:74:4d:c3:2e:89:ba:
3a:8e:6c:df:8d:e7:11:2b:16:41:1a:61:33:9e:9b:
01:ed:43:91:d0:dd:03:32:bd:f0:4c:77:ce:76:ee:
70:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:29:3E:7B:30:63:3C:FA:0F:39:A6:1E:4E:98:2A:C4:44:1B:83:A2
X509v3 Authority Key Identifier:
keyid:00:E3:B0:55:E7:6C:9E:88:1C:72:9E:E0:11:64:A5:87:0B:2B:A4:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AOOwVedsnogccp7gEWSlhwsrpMk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/05ab60-dea6-43a3-87ef-7bfaeb195445/1/AOOwVedsnogccp7gEWSlhwsrpMk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/05ab60-dea6-43a3-87ef-7bfaeb195445/1/AOOwVedsnogccp7gEWSlhwsrpMk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:a5:93:7e:ec:1d:b1:44:fb:3f:af:25:e1:a0:27:3e:a9:fe:
6c:b9:2e:e9:64:e7:27:4f:12:b6:d2:12:62:1e:6b:4e:87:6f:
54:c0:bc:27:0c:80:49:d8:d0:4c:e5:8b:2c:ed:f8:4a:a9:c5:
7f:83:32:be:7c:79:9b:ec:ac:6c:8d:6a:c2:b6:1d:5b:ba:6e:
a9:03:14:92:bd:d5:10:31:4c:b7:e6:78:f6:5e:41:0d:0c:21:
70:47:f7:ee:16:f5:fa:df:a4:93:33:80:5e:dc:af:68:f7:7b:
31:49:19:c7:66:0b:1c:8b:6d:ac:47:d6:6d:26:0e:36:e7:e1:
de:e4:4b:ce:84:36:a2:f5:d4:27:9b:a4:4c:ad:f2:5f:6c:23:
fe:ae:13:eb:8a:06:45:61:45:38:b2:b0:68:dc:89:a5:d2:ba:
7a:0b:48:28:b1:82:87:0a:7a:9c:e7:9a:73:af:df:73:7a:33:
d2:34:2d:c5:2f:a2:a2:e2:95:79:d6:8c:a9:b7:45:9e:a3:6f:
26:d7:f1:6d:99:d7:8c:d8:bc:82:fe:27:46:b3:f8:c4:bd:16:
12:71:7e:cd:78:64:9e:0b:90:d3:92:71:a2:0b:da:9f:54:22:
0c:c7:14:1a:10:3f:2d:8a:2a:39:c2:37:30:11:5c:4a:7a:0e:
41:36:3c:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 11:04:58 2026 by rpki-client