Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/f6c862-af8b-43f3-98ad-44241fec1a9f/1/aotaN08UbXtqbcfTFujrsS3upnA.mft
File: aotaN08UbXtqbcfTFujrsS3upnA.mft (raw, json)
Hash identifier: x252hcxlOtKotA2Y3myFulrIpeIx2tsSR+NdwfxFUQQ=
Subject key identifier: 72:7B:A0:A5:86:43:8A:71:C7:50:51:AD:C1:EC:5C:AD:A4:35:A4:CF
Authority key identifier: 6A:8B:5A:37:4F:14:6D:7B:6A:6D:C7:D3:16:E8:EB:B1:2D:EE:A6:70
Certificate issuer: /CN=6a8b5a374f146d7b6a6dc7d316e8ebb12deea670
Certificate serial: 019FAA50837D784B633F5677FA732C3A9AA1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aotaN08UbXtqbcfTFujrsS3upnA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/f6c862-af8b-43f3-98ad-44241fec1a9f/1/aotaN08UbXtqbcfTFujrsS3upnA.mft
Manifest number: 10AB
Signing time: Tue 28 Jul 2026 20:00:30 +0000
Manifest this update: Tue 28 Jul 2026 20:00:30 +0000
Manifest next update: Wed 29 Jul 2026 20:00:30 +0000
Files and hashes: 1: aotaN08UbXtqbcfTFujrsS3upnA.crl (hash: unHa52z/WF4b21Yl/qSLqJD5ORK1q1d23K8wtwwTm6w=)
2: bet4fdymyOIlEb-62LJXEqjZz4M.roa (hash: z3hr8kxRBm3emLdFWmkitNGZ2vCXqhwRUzbp9y48TSg=)
3: xzOtkf3m_unGZDJuyTmOZRDo1vs.roa (hash: AqWTAJg+/JR+tTmpK3jZUrDvB6ISeUjMegyS/xS/c3s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/f6c862-af8b-43f3-98ad-44241fec1a9f/1/aotaN08UbXtqbcfTFujrsS3upnA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/f6c862-af8b-43f3-98ad-44241fec1a9f/1/aotaN08UbXtqbcfTFujrsS3upnA.mft
rsync://rpki.ripe.net/repository/DEFAULT/aotaN08UbXtqbcfTFujrsS3upnA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:50:83:7d:78:4b:63:3f:56:77:fa:73:2c:3a:9a:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a8b5a374f146d7b6a6dc7d316e8ebb12deea670
Validity
Not Before: Jul 28 20:00:30 2026 GMT
Not After : Jul 29 20:00:30 2026 GMT
Subject: CN=727ba0a586438a71c75051adc1ec5cada435a4cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:8c:93:af:01:d4:30:71:4e:79:dd:b7:5b:58:
10:ce:b1:55:be:b1:d0:6c:f7:1b:a3:13:80:f0:5c:
16:3d:b2:76:58:0b:6e:1c:29:d9:06:2c:aa:a7:00:
01:52:aa:92:e7:df:df:24:8e:6c:e2:2b:82:0e:34:
62:14:88:85:84:43:35:a7:36:4f:f1:89:ed:e1:8b:
04:8d:2e:db:3b:ee:60:c4:c9:9f:eb:48:4d:0d:12:
0e:6d:7b:36:b1:00:ce:a0:20:50:66:08:25:28:71:
81:d6:5f:4d:d0:3b:39:e6:d0:0f:98:5b:33:e3:14:
61:90:3e:bd:eb:dc:20:9f:bf:8a:25:a8:93:3a:9e:
66:a1:ee:77:2e:0b:e3:88:e6:0a:a7:57:f4:63:c8:
b7:3f:14:dc:1c:4f:59:fe:74:e2:b2:1b:c3:28:9c:
c8:70:38:d4:5e:67:1d:29:9e:89:be:84:11:35:46:
a5:6d:d9:9b:8a:eb:f1:1e:32:2a:f5:23:94:e0:1f:
15:90:cf:2a:b9:9e:20:6a:08:04:ee:c1:0b:9f:5b:
f7:ce:25:64:c3:ac:7f:a7:c7:e2:84:d0:17:1a:13:
88:17:4f:82:21:80:d5:19:14:ac:64:d1:77:f8:66:
5f:32:36:1e:03:ca:78:7b:96:ec:9e:f8:97:d3:41:
19:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:7B:A0:A5:86:43:8A:71:C7:50:51:AD:C1:EC:5C:AD:A4:35:A4:CF
X509v3 Authority Key Identifier:
keyid:6A:8B:5A:37:4F:14:6D:7B:6A:6D:C7:D3:16:E8:EB:B1:2D:EE:A6:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aotaN08UbXtqbcfTFujrsS3upnA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/f6c862-af8b-43f3-98ad-44241fec1a9f/1/aotaN08UbXtqbcfTFujrsS3upnA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/f6c862-af8b-43f3-98ad-44241fec1a9f/1/aotaN08UbXtqbcfTFujrsS3upnA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:d4:b2:b0:dd:13:f0:7f:95:9a:02:b6:a9:ed:9e:0e:9f:be:
a5:eb:8b:f4:2c:2f:99:25:62:3c:1f:fa:ab:64:c1:cb:e3:8a:
fc:fd:51:42:2b:4a:c6:0b:89:cd:df:5b:00:9b:ea:2e:f3:f4:
a0:52:0a:b4:f1:29:a7:b6:a5:f1:2c:cf:e9:bc:57:68:4f:cc:
ea:99:37:8b:b6:81:91:c6:85:0b:bb:d1:11:3d:b7:c0:75:7b:
f3:a1:c3:92:63:a2:bc:58:58:de:f6:81:16:49:2a:86:93:f0:
a6:14:60:f7:92:69:9d:e4:24:ac:6d:5e:55:61:fe:42:31:f2:
39:a5:e2:e6:36:c0:de:96:40:06:c0:b7:45:8b:bc:98:27:65:
7a:99:29:50:f0:a7:a2:57:f3:95:21:9b:50:59:6c:c0:5e:2b:
0e:5c:6d:10:07:81:23:55:9a:d8:8b:55:a9:d8:e8:78:b2:3e:
49:80:a9:d9:7b:0d:07:f0:e1:55:41:87:32:86:fa:63:a7:43:
fa:db:83:07:9f:4f:e0:09:cc:3f:42:d4:e0:ef:97:e5:7a:fc:
6a:63:7a:7c:54:b9:d9:d8:36:9f:5b:b4:58:1f:94:92:dd:a8:
4f:4d:54:0a:26:75:35:a9:17:f3:4f:86:85:d8:ab:fc:50:dc:
cb:4b:f2:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:21:06 2026 by rpki-client