Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/f6c862-af8b-43f3-98ad-44241fec1a9f/1/aotaN08UbXtqbcfTFujrsS3upnA.mft
File: aotaN08UbXtqbcfTFujrsS3upnA.mft (raw, json)
Hash identifier: eIY2Ch1QTaX5GxHsfSEu02Q3NRmVsI1N41hx7lyhm1k=
Subject key identifier: 15:6D:EF:6E:54:CF:A1:D1:CC:7F:09:8B:19:B4:15:5E:A3:DE:0B:22
Authority key identifier: 6A:8B:5A:37:4F:14:6D:7B:6A:6D:C7:D3:16:E8:EB:B1:2D:EE:A6:70
Certificate issuer: /CN=6a8b5a374f146d7b6a6dc7d316e8ebb12deea670
Certificate serial: 019EC0A3BA55385D71778B1791BC5029167B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aotaN08UbXtqbcfTFujrsS3upnA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/f6c862-af8b-43f3-98ad-44241fec1a9f/1/aotaN08UbXtqbcfTFujrsS3upnA.mft
Manifest number: 1032
Signing time: Sat 13 Jun 2026 11:00:15 +0000
Manifest this update: Sat 13 Jun 2026 11:00:15 +0000
Manifest next update: Sun 14 Jun 2026 11:00:15 +0000
Files and hashes: 1: aotaN08UbXtqbcfTFujrsS3upnA.crl (hash: Gzc0hVoAGjY8ysgzRf6HhZxiqR/ZzW4ajjKFcxg0KJc=)
2: bet4fdymyOIlEb-62LJXEqjZz4M.roa (hash: z3hr8kxRBm3emLdFWmkitNGZ2vCXqhwRUzbp9y48TSg=)
3: xzOtkf3m_unGZDJuyTmOZRDo1vs.roa (hash: AqWTAJg+/JR+tTmpK3jZUrDvB6ISeUjMegyS/xS/c3s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/f6c862-af8b-43f3-98ad-44241fec1a9f/1/aotaN08UbXtqbcfTFujrsS3upnA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/f6c862-af8b-43f3-98ad-44241fec1a9f/1/aotaN08UbXtqbcfTFujrsS3upnA.mft
rsync://rpki.ripe.net/repository/DEFAULT/aotaN08UbXtqbcfTFujrsS3upnA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c0:a3:ba:55:38:5d:71:77:8b:17:91:bc:50:29:16:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a8b5a374f146d7b6a6dc7d316e8ebb12deea670
Validity
Not Before: Jun 13 11:00:15 2026 GMT
Not After : Jun 14 11:00:15 2026 GMT
Subject: CN=156def6e54cfa1d1cc7f098b19b4155ea3de0b22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:f3:ef:c3:60:d0:ca:1e:77:74:c9:57:0f:a8:
68:52:6f:97:c4:f0:7f:98:83:95:fc:5d:55:08:4f:
d7:ab:95:50:a7:b9:8e:7e:18:e8:f0:55:4b:7f:05:
69:41:0e:a7:6e:4c:66:74:aa:13:de:73:40:ca:ba:
ce:f1:6f:1e:fb:5e:de:72:07:19:24:45:b9:2e:fd:
13:c5:e7:27:f1:aa:38:1f:b2:4c:0c:14:d7:b6:37:
ca:ce:d8:fa:ec:86:e1:19:d6:00:bb:e2:46:a3:4d:
83:43:fa:6c:35:da:6b:fa:22:07:72:5b:10:f1:50:
95:28:61:64:73:43:4d:1c:07:f2:27:44:b4:55:04:
f1:ab:1f:43:52:42:46:be:76:d0:b7:08:4f:1a:bd:
c2:df:7b:3b:be:87:2c:49:94:56:e4:0c:39:66:ed:
b0:a7:9d:bb:9a:65:65:b5:9f:0c:39:20:b3:b8:b9:
07:b4:d6:86:5b:82:76:52:b5:04:27:37:df:7d:47:
fe:09:3c:8f:ea:22:56:95:e1:19:cb:31:e9:de:02:
72:57:6b:04:10:aa:52:17:77:d7:28:70:b1:41:fb:
25:dc:9d:5d:cd:44:e5:74:b2:3f:1a:13:ba:3c:1c:
27:78:77:38:22:49:25:cd:06:9d:ff:d3:9a:87:5d:
83:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:6D:EF:6E:54:CF:A1:D1:CC:7F:09:8B:19:B4:15:5E:A3:DE:0B:22
X509v3 Authority Key Identifier:
keyid:6A:8B:5A:37:4F:14:6D:7B:6A:6D:C7:D3:16:E8:EB:B1:2D:EE:A6:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aotaN08UbXtqbcfTFujrsS3upnA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/f6c862-af8b-43f3-98ad-44241fec1a9f/1/aotaN08UbXtqbcfTFujrsS3upnA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/f6c862-af8b-43f3-98ad-44241fec1a9f/1/aotaN08UbXtqbcfTFujrsS3upnA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:b7:bc:0d:d9:45:64:c6:45:97:21:00:1e:5e:0b:57:af:df:
b3:86:36:4a:30:31:bd:4e:70:8d:97:3e:88:22:28:7b:50:6b:
93:17:80:d5:cb:ab:36:2c:22:b5:dd:39:5a:a5:65:54:cd:47:
a3:ea:c0:6b:01:dc:da:d4:b4:ad:8c:bd:d7:c6:ea:d3:1d:d3:
ee:e8:f7:a6:8b:66:96:06:69:ed:41:2c:09:79:fd:33:5d:3a:
11:55:ae:fe:0e:f2:69:9a:e1:53:37:4e:33:a1:36:3e:dc:1f:
88:f9:91:fc:a2:b4:08:18:6a:c0:c1:86:14:25:db:9c:2d:8c:
1e:1a:fc:89:54:83:ab:43:8e:ce:2a:d7:da:e0:a3:da:29:52:
03:47:1b:36:2d:0d:1b:90:34:6c:57:aa:0b:3b:c4:bc:35:49:
5e:59:97:b1:56:69:39:3c:0d:48:e4:d2:44:88:bd:76:a5:ad:
40:d8:c4:d0:3a:87:20:e2:ff:24:af:79:59:93:cd:b6:df:4c:
80:cc:64:c6:8f:0d:c5:0c:91:2a:a9:2f:58:0b:25:7f:ab:68:
d8:e7:d6:81:5c:1f:db:81:00:44:c5:52:10:70:0e:6d:be:a8:
cd:78:ec:17:45:29:97:e2:10:0b:a7:8b:20:14:13:db:49:6f:
9b:cf:b4:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 15:36:24 2026 by rpki-client