Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/f6c862-af8b-43f3-98ad-44241fec1a9f/1/aotaN08UbXtqbcfTFujrsS3upnA.mft
File: aotaN08UbXtqbcfTFujrsS3upnA.mft (raw, json)
Hash identifier: W7wYL3dOaVD/kKceXCUy9iBnirbjsSm2XsyNqnJkzoQ=
Subject key identifier: 75:E2:00:9A:93:DC:04:18:8F:97:BC:45:2D:D5:9A:7F:F1:28:90:9D
Authority key identifier: 6A:8B:5A:37:4F:14:6D:7B:6A:6D:C7:D3:16:E8:EB:B1:2D:EE:A6:70
Certificate issuer: /CN=6a8b5a374f146d7b6a6dc7d316e8ebb12deea670
Certificate serial: 019D992B1E0AE723294A74D2E6FA01920BA3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aotaN08UbXtqbcfTFujrsS3upnA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/f6c862-af8b-43f3-98ad-44241fec1a9f/1/aotaN08UbXtqbcfTFujrsS3upnA.mft
Manifest number: 0F99
Signing time: Fri 17 Apr 2026 02:00:32 +0000
Manifest this update: Fri 17 Apr 2026 02:00:32 +0000
Manifest next update: Sat 18 Apr 2026 02:00:32 +0000
Files and hashes: 1: aotaN08UbXtqbcfTFujrsS3upnA.crl (hash: dvQJSTgNLvz2Z1UU+gU4KQnzCl57X/6UOq75TfzqpCM=)
2: bet4fdymyOIlEb-62LJXEqjZz4M.roa (hash: z3hr8kxRBm3emLdFWmkitNGZ2vCXqhwRUzbp9y48TSg=)
3: xzOtkf3m_unGZDJuyTmOZRDo1vs.roa (hash: AqWTAJg+/JR+tTmpK3jZUrDvB6ISeUjMegyS/xS/c3s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/f6c862-af8b-43f3-98ad-44241fec1a9f/1/aotaN08UbXtqbcfTFujrsS3upnA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/f6c862-af8b-43f3-98ad-44241fec1a9f/1/aotaN08UbXtqbcfTFujrsS3upnA.mft
rsync://rpki.ripe.net/repository/DEFAULT/aotaN08UbXtqbcfTFujrsS3upnA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 02:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:2b:1e:0a:e7:23:29:4a:74:d2:e6:fa:01:92:0b:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a8b5a374f146d7b6a6dc7d316e8ebb12deea670
Validity
Not Before: Apr 17 02:00:32 2026 GMT
Not After : Apr 18 02:00:32 2026 GMT
Subject: CN=75e2009a93dc04188f97bc452dd59a7ff128909d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:0a:0d:98:e0:d1:28:54:9e:e3:97:f5:bb:e7:
63:b0:f3:69:63:d0:cc:dc:38:9d:87:b0:8a:e8:47:
5d:7a:ca:a0:bc:7a:4e:fd:69:cb:b6:80:cc:f6:d2:
30:49:27:bc:59:50:b6:e8:ff:77:62:a0:ad:89:82:
48:0c:70:92:72:b1:a1:2a:3a:0f:5c:76:1d:15:cf:
b4:a5:a7:a5:e8:7d:55:c5:49:88:8b:3d:b0:23:87:
39:3f:f0:da:8b:a9:e4:5f:7f:77:c7:cf:60:79:67:
e7:ab:1b:00:5e:f1:21:86:e3:64:dc:43:12:b5:34:
8c:90:8f:2e:c9:ef:1f:68:c0:10:c5:aa:a7:40:00:
6f:f1:93:27:d2:a0:1b:61:ef:88:67:5d:7f:cf:26:
3c:a9:0d:79:e0:92:de:d9:f2:3f:0b:f8:3d:c2:6d:
25:5a:95:34:ee:e5:32:38:7f:09:b5:3b:31:2c:ce:
88:40:dd:04:6f:6b:cf:e0:c8:91:e6:cf:40:ce:ea:
e0:8c:7b:e3:03:73:fc:95:d8:b8:b0:5c:f4:1c:05:
af:b8:d9:6b:b9:9f:23:43:eb:07:5b:d8:36:53:ee:
d5:df:8c:5c:30:92:84:2a:49:15:eb:14:ca:bc:2c:
ac:68:17:e6:0c:1d:f1:0b:ac:9c:14:3f:00:d9:e6:
72:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:E2:00:9A:93:DC:04:18:8F:97:BC:45:2D:D5:9A:7F:F1:28:90:9D
X509v3 Authority Key Identifier:
keyid:6A:8B:5A:37:4F:14:6D:7B:6A:6D:C7:D3:16:E8:EB:B1:2D:EE:A6:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aotaN08UbXtqbcfTFujrsS3upnA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/f6c862-af8b-43f3-98ad-44241fec1a9f/1/aotaN08UbXtqbcfTFujrsS3upnA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/f6c862-af8b-43f3-98ad-44241fec1a9f/1/aotaN08UbXtqbcfTFujrsS3upnA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:85:07:9a:bc:a3:f6:15:33:52:bb:a1:69:48:ea:a3:85:1b:
04:ac:00:ed:c8:90:79:b8:d8:3b:8e:5f:1d:bc:c4:e4:6b:d8:
55:48:38:18:e0:b8:7a:67:1a:66:96:9b:04:94:a2:af:74:2a:
b8:5f:a8:41:f9:28:ed:10:0b:c6:1f:09:02:62:60:2c:c7:d5:
aa:27:4b:6a:50:7e:f7:8a:b1:02:6d:b5:f4:90:30:9f:db:f4:
57:54:a7:ea:69:b6:9a:2b:50:52:05:12:0d:db:64:24:1f:55:
9e:b5:80:48:cf:38:b4:b8:ce:27:82:e2:6d:5b:99:49:d0:d4:
c8:87:91:1f:16:eb:d6:ce:e7:06:a0:8e:87:da:14:3b:43:f6:
3b:1a:a0:af:17:89:80:d2:41:77:31:81:c5:1c:b5:b9:d2:b9:
c6:dc:3c:51:6b:2e:03:1b:22:0a:a8:53:69:dd:93:8d:ef:1d:
cc:08:2b:55:0f:55:35:eb:a9:14:ec:f2:d9:8f:f3:15:a0:f2:
bc:5d:35:8d:87:9f:8d:1c:85:b3:89:db:6c:2f:5a:f7:cb:51:
80:27:83:a7:e0:a8:07:86:ae:81:a9:35:ba:71:bd:dd:db:eb:
ca:96:bd:fe:96:4f:84:1e:a5:e4:a8:76:54:44:a7:d2:1c:d9:
de:9d:7b:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:53:12 2026 by rpki-client