Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/f6c862-af8b-43f3-98ad-44241fec1a9f/1/aotaN08UbXtqbcfTFujrsS3upnA.mft
File: aotaN08UbXtqbcfTFujrsS3upnA.mft (raw, json)
Hash identifier: ask5ZABSwiz+syIjFfCzDnN6DfB+KaUMnDgSSUbVmGI=
Subject key identifier: B7:5A:E9:62:7E:70:4E:09:5B:A0:84:2E:AC:E8:85:7B:6B:8E:97:5D
Authority key identifier: 6A:8B:5A:37:4F:14:6D:7B:6A:6D:C7:D3:16:E8:EB:B1:2D:EE:A6:70
Certificate issuer: /CN=6a8b5a374f146d7b6a6dc7d316e8ebb12deea670
Certificate serial: 019EBEB5A4E507AE9FC790E342E391593475
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aotaN08UbXtqbcfTFujrsS3upnA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/f6c862-af8b-43f3-98ad-44241fec1a9f/1/aotaN08UbXtqbcfTFujrsS3upnA.mft
Manifest number: 1031
Signing time: Sat 13 Jun 2026 02:00:35 +0000
Manifest this update: Sat 13 Jun 2026 02:00:35 +0000
Manifest next update: Sun 14 Jun 2026 02:00:35 +0000
Files and hashes: 1: aotaN08UbXtqbcfTFujrsS3upnA.crl (hash: p668334N1F/Lir5x3Sdp2GS/l6Fuq14V3324UJdx8Mg=)
2: bet4fdymyOIlEb-62LJXEqjZz4M.roa (hash: z3hr8kxRBm3emLdFWmkitNGZ2vCXqhwRUzbp9y48TSg=)
3: xzOtkf3m_unGZDJuyTmOZRDo1vs.roa (hash: AqWTAJg+/JR+tTmpK3jZUrDvB6ISeUjMegyS/xS/c3s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/f6c862-af8b-43f3-98ad-44241fec1a9f/1/aotaN08UbXtqbcfTFujrsS3upnA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/f6c862-af8b-43f3-98ad-44241fec1a9f/1/aotaN08UbXtqbcfTFujrsS3upnA.mft
rsync://rpki.ripe.net/repository/DEFAULT/aotaN08UbXtqbcfTFujrsS3upnA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:be:b5:a4:e5:07:ae:9f:c7:90:e3:42:e3:91:59:34:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a8b5a374f146d7b6a6dc7d316e8ebb12deea670
Validity
Not Before: Jun 13 02:00:35 2026 GMT
Not After : Jun 14 02:00:35 2026 GMT
Subject: CN=b75ae9627e704e095ba0842eace8857b6b8e975d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:8d:03:6d:ed:89:85:6e:ab:c5:4f:70:27:dd:
e7:68:a9:2d:aa:0b:f4:3c:f2:59:62:62:88:a7:f9:
82:72:22:8c:0a:46:78:e7:64:85:44:43:e8:86:83:
24:3c:52:ef:d5:c5:c0:9d:6c:82:12:75:85:3f:40:
5d:62:a9:25:2a:51:e5:2a:f1:09:f8:4e:9c:63:3c:
b5:7f:69:13:9d:4f:83:92:ab:e0:b4:e4:5b:df:3a:
8e:45:89:f2:0d:8b:d7:f0:3c:e5:00:ae:f1:7e:a6:
81:42:68:06:05:2b:50:4e:b5:9b:e6:55:76:3e:12:
31:cf:3a:5c:4a:15:ab:79:81:c9:85:22:3c:03:6d:
8f:2b:88:7f:16:59:0f:d5:66:b5:d0:f3:4c:0f:9b:
e5:c7:f0:9a:52:eb:a4:a9:23:4e:f5:e7:12:1f:ac:
a3:31:85:0e:39:44:8c:78:41:ed:a9:39:5c:27:cf:
47:e5:5f:ee:df:65:bd:e8:bb:e0:31:a8:22:c8:50:
b0:4d:d5:fd:4e:c0:e2:4d:93:69:dd:43:4b:31:de:
da:d2:16:81:0d:6c:7d:fe:f8:e1:cd:44:6b:a8:64:
06:3b:f4:8b:f7:72:c8:e5:15:17:b3:4d:86:9e:32:
ca:93:1b:73:9d:57:d7:0a:ac:81:58:34:6a:5c:9f:
dc:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:5A:E9:62:7E:70:4E:09:5B:A0:84:2E:AC:E8:85:7B:6B:8E:97:5D
X509v3 Authority Key Identifier:
keyid:6A:8B:5A:37:4F:14:6D:7B:6A:6D:C7:D3:16:E8:EB:B1:2D:EE:A6:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aotaN08UbXtqbcfTFujrsS3upnA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/f6c862-af8b-43f3-98ad-44241fec1a9f/1/aotaN08UbXtqbcfTFujrsS3upnA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/f6c862-af8b-43f3-98ad-44241fec1a9f/1/aotaN08UbXtqbcfTFujrsS3upnA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:ca:5f:56:4c:05:fd:06:ee:66:a1:66:07:5e:db:c1:bf:13:
82:ba:87:d6:f9:f0:d7:ae:d7:d7:c7:4f:5c:8d:d1:65:32:d4:
a9:c2:13:6f:c9:8b:9e:c0:b3:81:3d:59:90:ec:0a:2f:63:d2:
00:ee:cc:7e:6b:81:ff:eb:f3:0c:6d:ac:0d:fc:a6:b9:0e:3e:
9c:17:12:67:ab:20:14:03:78:6f:31:9e:0e:87:88:96:56:41:
76:63:d0:1f:6d:6b:36:2c:ea:6b:34:d6:82:00:f2:9e:4a:81:
40:5e:3a:da:39:af:96:58:63:33:bc:91:88:e8:87:ac:7c:67:
58:6c:05:8e:cc:6a:3e:46:a9:c4:63:27:fa:22:d0:0b:4c:46:
66:8e:e0:8b:03:19:81:a2:53:0a:5d:24:36:78:f9:6d:dd:33:
97:02:6e:58:a7:8a:6a:d5:a2:6e:94:2b:42:1c:a7:23:ab:c8:
0a:a5:40:a9:3d:b6:24:2d:04:2b:dd:9e:56:1b:ac:5c:f8:26:
f4:07:bf:d3:e0:ec:aa:c7:50:35:03:6f:bf:7a:aa:98:5a:9c:
16:d9:fd:55:82:d3:a6:1c:58:ab:c6:d2:69:d4:e6:bd:bb:78:
45:fe:e3:4b:bb:14:fc:d0:65:39:d0:8f:a5:d9:57:ef:63:17:
39:27:d3:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:59:32 2026 by rpki-client