Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9b/d6de0b-9e38-4244-b9f3-93ba820a75b7/1/aoKFGhN-YFmlwZ4lJ_OepsrXxKo.mft
File: aoKFGhN-YFmlwZ4lJ_OepsrXxKo.mft (raw, json)
Hash identifier: K+PxvPZK6lqxY1d7jXxHwJUe4CHmVk3ALnNM2ilVSVA=
Subject key identifier: 0B:94:2A:D2:99:63:78:D8:5B:18:6B:80:54:9C:70:27:3F:A6:E4:D0
Authority key identifier: 6A:82:85:1A:13:7E:60:59:A5:C1:9E:25:27:F3:9E:A6:CA:D7:C4:AA
Certificate issuer: /CN=6a82851a137e6059a5c19e2527f39ea6cad7c4aa
Certificate serial: 01A0C09F9432C05E86532E16F99C85A89F0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aoKFGhN-YFmlwZ4lJ_OepsrXxKo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/d6de0b-9e38-4244-b9f3-93ba820a75b7/1/aoKFGhN-YFmlwZ4lJ_OepsrXxKo.mft
Manifest number: DE
Signing time: Sun 20 Sep 2026 21:01:18 +0000
Manifest this update: Sun 20 Sep 2026 21:01:18 +0000
Manifest next update: Mon 21 Sep 2026 21:01:18 +0000
Files and hashes: 1: 9FkvkvYKkpvtxRzhjS2Dl3OyIC8.roa (hash: ++BWUNm5eh2q9n/GsxysekfFrNVNQyGEMNFnVvfJnvw=)
2: GmPMqm-sExPGS5qeFQnTPPpdDUg.asa (hash: auZklUf5YgGzAAHvLeEe5ft8gS41CAy8rwwpS4z5H3A=)
3: aoKFGhN-YFmlwZ4lJ_OepsrXxKo.crl (hash: QsUSFqVEP88D7xLvmjicrkaIJE2QWM9GnI3rQEEKIL8=)
4: xDdkyYp6QT-6exThNJOY2QGkx2k.roa (hash: IFSLHxTz5eB1n+A0D/T5f1vKzmvjNloM94tpDCBISCg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/d6de0b-9e38-4244-b9f3-93ba820a75b7/1/aoKFGhN-YFmlwZ4lJ_OepsrXxKo.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/d6de0b-9e38-4244-b9f3-93ba820a75b7/1/aoKFGhN-YFmlwZ4lJ_OepsrXxKo.mft
rsync://rpki.ripe.net/repository/DEFAULT/aoKFGhN-YFmlwZ4lJ_OepsrXxKo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 21:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c0:9f:94:32:c0:5e:86:53:2e:16:f9:9c:85:a8:9f:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a82851a137e6059a5c19e2527f39ea6cad7c4aa
Validity
Not Before: Sep 20 21:01:18 2026 GMT
Not After : Sep 21 21:01:18 2026 GMT
Subject: CN=0b942ad2996378d85b186b80549c70273fa6e4d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:f1:ff:86:0d:21:4f:e1:68:90:cb:9c:57:75:
0c:50:7d:7f:00:1f:9b:82:f4:1a:b0:3c:a4:14:e0:
61:25:9b:9c:b4:8c:bf:4d:ef:d3:30:33:62:bf:fe:
af:7d:be:0d:01:89:33:2f:c9:97:4a:66:0c:8d:b6:
45:ce:25:2b:10:be:cc:60:cd:c2:79:60:7a:8b:1c:
6b:58:c4:97:25:29:53:0b:5e:3e:6e:61:6b:3b:30:
4b:fd:23:2c:0a:bc:1c:fc:ef:2c:34:ba:ab:c9:c1:
fd:ad:60:22:fe:73:9b:87:fa:5a:d8:0b:5b:27:ba:
62:59:cd:00:1e:c1:7f:20:49:45:b5:24:ff:bd:c8:
fe:0e:80:af:13:86:81:1c:88:97:4c:f9:3c:81:11:
30:a5:e2:08:cd:20:eb:c4:41:8c:7f:be:34:86:24:
c0:3b:9a:59:4e:d5:5a:2a:7e:54:b4:47:59:68:35:
17:c8:df:99:a1:24:ab:32:84:5b:a4:0e:a3:3a:c3:
e3:38:a2:0f:7f:ea:2b:b4:3c:14:9d:91:5c:f9:f5:
81:82:a1:92:61:65:2b:14:30:a1:6e:56:ba:e6:8a:
2b:d8:07:05:5d:26:b8:19:59:db:9d:18:c2:97:62:
f6:8f:79:09:c3:44:7a:60:84:5f:b2:89:64:e4:38:
de:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:94:2A:D2:99:63:78:D8:5B:18:6B:80:54:9C:70:27:3F:A6:E4:D0
X509v3 Authority Key Identifier:
keyid:6A:82:85:1A:13:7E:60:59:A5:C1:9E:25:27:F3:9E:A6:CA:D7:C4:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aoKFGhN-YFmlwZ4lJ_OepsrXxKo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/d6de0b-9e38-4244-b9f3-93ba820a75b7/1/aoKFGhN-YFmlwZ4lJ_OepsrXxKo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/d6de0b-9e38-4244-b9f3-93ba820a75b7/1/aoKFGhN-YFmlwZ4lJ_OepsrXxKo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:0b:a4:93:6c:db:17:03:0d:9a:1b:53:29:43:bd:bc:8e:47:
60:6a:39:89:81:2f:74:22:05:d5:fd:f4:36:a6:71:2b:34:34:
d8:47:c8:66:3a:99:90:85:2f:f0:e2:2b:0f:83:32:2b:06:45:
e7:3b:5a:00:8a:18:33:6e:37:b8:59:1c:4b:2d:97:c5:ad:42:
de:cc:2b:d7:ef:67:13:fa:f4:7d:06:8c:9b:1b:1a:bf:f9:3e:
b3:06:23:36:2c:fb:63:cc:cb:73:44:de:f6:88:50:4e:36:92:
7f:69:80:ae:05:da:27:1d:44:93:07:43:08:97:12:43:07:dd:
b8:dd:23:f1:c2:3b:f3:8d:15:0e:8f:28:76:92:dd:f8:3d:a4:
41:65:2f:d5:3a:e9:cd:ef:19:a8:8d:5c:e0:1c:1c:98:12:6a:
15:9d:6a:53:df:89:a6:5e:60:cf:3c:4e:c6:a7:c5:42:71:77:
75:7d:c9:d9:2e:47:f1:18:84:94:6b:d9:96:fa:ec:30:c3:e1:
c0:50:eb:54:b1:36:46:f2:af:dc:84:63:c6:11:9d:23:ca:96:
7e:c8:c0:ae:bb:3b:69:58:af:58:49:ce:6b:71:4a:94:4f:01:
cf:ef:84:1d:31:0f:87:f7:07:d0:da:05:31:f6:c5:12:0b:e0:
06:8d:ec:41
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDAn5QywF6GUy4W+ZyFqJ8KMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZhODI4NTFhMTM3ZTYwNTlhNWMxOWUyNTI3ZjM5ZWE2Y2Fk
N2M0YWEwHhcNMjYwOTIwMjEwMTE4WhcNMjYwOTIxMjEwMTE4WjAzMTEwLwYDVQQD
EygwYjk0MmFkMjk5NjM3OGQ4NWIxODZiODA1NDljNzAyNzNmYTZlNGQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAofH/hg0hT+FokMucV3UMUH1/AB+b
gvQasDykFOBhJZuctIy/Te/TMDNiv/6vfb4NAYkzL8mXSmYMjbZFziUrEL7MYM3C
eWB6ixxrWMSXJSlTC14+bmFrOzBL/SMsCrwc/O8sNLqrycH9rWAi/nObh/pa2Atb
J7piWc0AHsF/IElFtST/vcj+DoCvE4aBHIiXTPk8gREwpeIIzSDrxEGMf740hiTA
O5pZTtVaKn5UtEdZaDUXyN+ZoSSrMoRbpA6jOsPjOKIPf+ortDwUnZFc+fWBgqGS
YWUrFDChbla65oor2AcFXSa4GVnbnRjCl2L2j3kJw0R6YIRfsolk5DjepQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAuUKtKZY3jYWxhrgFSccCc/puTQMB8GA1UdIwQY
MBaAFGqChRoTfmBZpcGeJSfznqbK18SqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYW9LRkdoTi1ZRm1sd1o0bEpfT2Vwc3JYeEtvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi9kNmRlMGItOWUzOC00MjQ0LWI5ZjMt
OTNiYTgyMGE3NWI3LzEvYW9LRkdoTi1ZRm1sd1o0bEpfT2Vwc3JYeEtvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yi9kNmRlMGItOWUzOC00MjQ0LWI5ZjMtOTNiYTgyMGE3NWI3
LzEvYW9LRkdoTi1ZRm1sd1o0bEpfT2Vwc3JYeEtvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJAukk2zb
FwMNmhtTKUO9vI5HYGo5iYEvdCIF1f30NqZxKzQ02EfIZjqZkIUv8OIrD4MyKwZF
5ztaAIoYM243uFkcSy2Xxa1C3swr1+9nE/r0fQaMmxsav/k+swYjNiz7Y8zLc0Te
9ohQTjaSf2mArgXaJx1EkwdDCJcSQwfduN0j8cI7840VDo8odpLd+D2kQWUv1Trp
ze8ZqI1c4BwcmBJqFZ1qU9+Jpl5gzzxOxqfFQnF3dX3J2S5H8RiElGvZlvrsMMPh
wFDrVLE2RvKv3IRjxhGdI8qWfsjArrs7aVivWEnOa3FKlE8Bz++EHTEPh/cH0NoF
MfbFEgvgBo3sQQ==
-----END CERTIFICATE-----
Generated at Mon Sep 21 08:03:46 2026 by rpki-client