Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/f6c862-af8b-43f3-98ad-44241fec1a9f/1/aotaN08UbXtqbcfTFujrsS3upnA.mft
File: aotaN08UbXtqbcfTFujrsS3upnA.mft (raw, json)
Hash identifier: lvPFe3e75VJgDk6RK0xLKK7zKcCfFNXC19FNYOM2AVY=
Subject key identifier: AB:CB:DD:25:BA:06:96:BD:81:F5:4C:63:A4:B8:AA:FD:97:4A:A3:63
Authority key identifier: 6A:8B:5A:37:4F:14:6D:7B:6A:6D:C7:D3:16:E8:EB:B1:2D:EE:A6:70
Certificate issuer: /CN=6a8b5a374f146d7b6a6dc7d316e8ebb12deea670
Certificate serial: 019CA9B36CE29BA4CE546872402B208CBFFC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aotaN08UbXtqbcfTFujrsS3upnA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/f6c862-af8b-43f3-98ad-44241fec1a9f/1/aotaN08UbXtqbcfTFujrsS3upnA.mft
Manifest number: 0F1D
Signing time: Sun 01 Mar 2026 14:00:34 +0000
Manifest this update: Sun 01 Mar 2026 14:00:34 +0000
Manifest next update: Mon 02 Mar 2026 14:00:34 +0000
Files and hashes: 1: aotaN08UbXtqbcfTFujrsS3upnA.crl (hash: 2daz5jDCZ3wdhzPxPFDLvjgahyWL8jLjLoeSFd7oEHE=)
2: bet4fdymyOIlEb-62LJXEqjZz4M.roa (hash: z3hr8kxRBm3emLdFWmkitNGZ2vCXqhwRUzbp9y48TSg=)
3: xzOtkf3m_unGZDJuyTmOZRDo1vs.roa (hash: AqWTAJg+/JR+tTmpK3jZUrDvB6ISeUjMegyS/xS/c3s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/f6c862-af8b-43f3-98ad-44241fec1a9f/1/aotaN08UbXtqbcfTFujrsS3upnA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/f6c862-af8b-43f3-98ad-44241fec1a9f/1/aotaN08UbXtqbcfTFujrsS3upnA.mft
rsync://rpki.ripe.net/repository/DEFAULT/aotaN08UbXtqbcfTFujrsS3upnA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 14:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:b3:6c:e2:9b:a4:ce:54:68:72:40:2b:20:8c:bf:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a8b5a374f146d7b6a6dc7d316e8ebb12deea670
Validity
Not Before: Mar 1 14:00:34 2026 GMT
Not After : Mar 2 14:00:34 2026 GMT
Subject: CN=abcbdd25ba0696bd81f54c63a4b8aafd974aa363
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:4c:96:ea:88:2f:ab:bb:d2:fd:d3:93:43:72:
df:b4:a5:f6:1c:07:90:7e:ce:c9:1c:8c:1f:00:b0:
a0:0d:fc:f1:a8:21:4a:bd:db:85:b1:3a:bc:01:69:
16:5f:8e:e1:5f:9c:de:e7:2d:0e:c0:6b:c6:df:31:
79:7c:4e:5a:4f:73:49:18:37:95:45:eb:ab:70:7b:
b1:0f:1d:b2:c6:8d:5d:2d:91:9b:d5:89:5d:37:f5:
63:ae:05:96:b9:f2:ca:1a:fc:30:f2:b4:b1:21:28:
01:fd:5f:57:06:e1:07:bb:9f:67:07:77:94:d3:72:
a1:eb:68:8f:e3:1a:25:f4:fa:be:11:cb:31:67:e0:
d4:9c:f6:a9:96:fa:a1:72:dd:90:50:11:a4:e3:22:
2d:49:65:f8:17:4f:7e:c4:b7:60:38:2b:94:c2:ee:
80:0a:89:2a:30:3b:d2:13:05:2d:9b:bf:d7:6d:e2:
0c:eb:fd:ea:f3:64:c2:b0:8b:25:00:42:b6:9a:c3:
7b:be:cc:fe:0b:a4:74:4b:2a:d7:2a:f5:b9:28:20:
bd:a0:96:f2:99:cf:55:53:20:0c:6a:d9:5b:56:08:
60:59:5b:b5:2c:ac:a2:14:d4:f2:d6:4f:be:8d:09:
f2:63:69:ce:72:3f:a4:0a:f4:c2:60:06:3b:56:ae:
6f:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:CB:DD:25:BA:06:96:BD:81:F5:4C:63:A4:B8:AA:FD:97:4A:A3:63
X509v3 Authority Key Identifier:
keyid:6A:8B:5A:37:4F:14:6D:7B:6A:6D:C7:D3:16:E8:EB:B1:2D:EE:A6:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aotaN08UbXtqbcfTFujrsS3upnA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/f6c862-af8b-43f3-98ad-44241fec1a9f/1/aotaN08UbXtqbcfTFujrsS3upnA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/f6c862-af8b-43f3-98ad-44241fec1a9f/1/aotaN08UbXtqbcfTFujrsS3upnA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:fb:ef:c8:68:f8:10:47:cd:db:6a:33:3c:76:f3:8f:21:30:
bf:e1:61:cb:06:fc:3d:df:e2:0d:e3:eb:1d:4c:1f:0d:53:3c:
a1:62:0d:5a:ed:71:19:7f:73:a8:aa:a9:f5:9f:57:6b:96:2b:
52:0a:bd:ce:f2:16:f6:ce:ff:85:cd:67:0e:d4:dd:67:5b:aa:
0a:da:ec:c9:64:5d:cb:e4:40:ad:4f:78:b0:a2:74:69:5d:0a:
33:17:c1:6b:18:70:ae:ab:f3:30:1d:04:c3:11:a8:7d:a5:b1:
b9:09:87:bb:d3:75:d4:f7:b3:ca:32:81:4e:fd:16:1e:c1:95:
54:9a:10:ad:d5:81:11:84:b8:a3:78:db:89:3a:d9:39:4e:0a:
e0:ab:11:1c:66:fd:ad:b8:96:80:52:53:31:3c:2b:fd:9b:08:
47:03:15:01:eb:23:9b:51:85:77:dd:a7:06:b8:d4:14:a0:8f:
08:00:ff:fc:a3:50:fb:44:48:b5:54:56:65:eb:34:2e:9a:24:
15:6d:8d:a8:a3:cf:dc:77:e2:08:3a:48:60:94:ab:16:a0:4f:
be:bd:8f:6c:8d:f8:e8:a8:4f:a6:16:81:1e:9b:5a:27:30:82:
f5:2d:64:60:18:d5:23:19:68:5c:e8:05:38:a8:47:c4:b4:cf:
b4:d9:6e:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:52:49 2026 by rpki-client