Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cc/e8101a-240f-4e32-a097-27c273a60788/1/AoNhMH79nzq-_mm9FN4OG9YLbmo.mft
File: AoNhMH79nzq-_mm9FN4OG9YLbmo.mft (raw, json)
Hash identifier: lng/7qKbgAIrf/SKimtjNDlDU6xrMee/wjkVEYpgQ/k=
Subject key identifier: BE:81:7F:4B:D5:0F:75:E4:C5:C5:AB:0E:BF:AA:B7:BC:A4:77:92:C2
Authority key identifier: 02:83:61:30:7E:FD:9F:3A:BE:FE:69:BD:14:DE:0E:1B:D6:0B:6E:6A
Certificate issuer: /CN=028361307efd9f3abefe69bd14de0e1bd60b6e6a
Certificate serial: 01A0C33284F32E300BF9C03A5724210E3C56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AoNhMH79nzq-_mm9FN4OG9YLbmo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/e8101a-240f-4e32-a097-27c273a60788/1/AoNhMH79nzq-_mm9FN4OG9YLbmo.mft
Manifest number: 1A67
Signing time: Mon 21 Sep 2026 09:01:02 +0000
Manifest this update: Mon 21 Sep 2026 09:01:02 +0000
Manifest next update: Tue 22 Sep 2026 09:01:02 +0000
Files and hashes: 1: AoNhMH79nzq-_mm9FN4OG9YLbmo.crl (hash: t6Ja9NJlb5WudcPtpXBiMvh3vP0HjpVaD1oQlI2hRFk=)
2: _xkuMQSwRHi0DljPKAluJEXoLPg.roa (hash: EUEHOabmEGDXpaBHpO2MNJv0dJd+g7oEzMzEMIadnt8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/e8101a-240f-4e32-a097-27c273a60788/1/AoNhMH79nzq-_mm9FN4OG9YLbmo.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/e8101a-240f-4e32-a097-27c273a60788/1/AoNhMH79nzq-_mm9FN4OG9YLbmo.mft
rsync://rpki.ripe.net/repository/DEFAULT/AoNhMH79nzq-_mm9FN4OG9YLbmo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 09:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c3:32:84:f3:2e:30:0b:f9:c0:3a:57:24:21:0e:3c:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=028361307efd9f3abefe69bd14de0e1bd60b6e6a
Validity
Not Before: Sep 21 09:01:02 2026 GMT
Not After : Sep 22 09:01:02 2026 GMT
Subject: CN=be817f4bd50f75e4c5c5ab0ebfaab7bca47792c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:eb:f3:9c:95:9d:d7:d8:4a:10:8f:f1:23:9e:
59:d9:bf:8c:aa:af:1f:c9:83:4b:f2:67:65:33:bb:
60:68:98:38:b5:7c:b0:ee:5d:67:d9:e7:97:32:b3:
94:7d:67:aa:96:79:2d:bf:14:99:bc:36:4e:d4:e3:
7a:91:df:53:7e:d6:ab:8c:93:02:41:87:58:1b:77:
a8:c3:49:47:86:34:c2:f5:4d:26:c2:c4:78:09:98:
93:58:79:65:49:77:ba:22:53:77:7e:f2:de:32:2f:
51:bc:9f:fd:9c:25:99:fc:0f:5a:70:47:fe:94:55:
3b:39:d1:73:4b:04:48:c0:3a:ed:9f:53:00:8c:7f:
71:ae:db:3f:ec:fc:4a:8b:d5:78:68:1a:29:c5:da:
ec:e0:e1:a1:50:c3:88:d1:8a:f4:aa:d3:3b:fa:8b:
51:76:52:f0:36:07:66:2d:62:96:f9:29:ca:f4:d3:
b1:d7:e3:f7:f1:af:7e:74:b2:8b:fa:5d:7f:d0:44:
bb:37:92:29:b7:1f:ca:15:f3:69:ca:94:36:15:8b:
ac:d9:05:86:da:83:4a:94:14:23:20:17:d3:d6:55:
50:b0:60:26:41:65:1a:96:13:7c:36:ea:3c:f9:25:
d6:1d:09:ee:93:3a:0a:65:07:8b:b1:a6:2c:61:1d:
e1:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:81:7F:4B:D5:0F:75:E4:C5:C5:AB:0E:BF:AA:B7:BC:A4:77:92:C2
X509v3 Authority Key Identifier:
keyid:02:83:61:30:7E:FD:9F:3A:BE:FE:69:BD:14:DE:0E:1B:D6:0B:6E:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AoNhMH79nzq-_mm9FN4OG9YLbmo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/e8101a-240f-4e32-a097-27c273a60788/1/AoNhMH79nzq-_mm9FN4OG9YLbmo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/e8101a-240f-4e32-a097-27c273a60788/1/AoNhMH79nzq-_mm9FN4OG9YLbmo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:29:72:55:d4:af:11:3a:59:9d:35:ca:51:4f:a7:3e:d5:fc:
6b:48:ec:80:39:15:d9:ad:85:99:a9:1e:55:16:a3:92:07:81:
54:3a:6e:8d:bc:e3:2a:07:53:72:6f:bc:a8:dd:27:ef:5e:18:
af:44:93:ad:44:4b:41:c0:03:e4:b5:4e:47:6f:e1:c7:b3:42:
d8:d1:29:db:f9:9b:5c:0e:54:5f:e3:8f:32:90:e5:7f:3d:0b:
8c:29:a1:9e:7f:95:9f:43:34:3f:0f:59:08:d4:cd:10:d0:6c:
66:b6:37:9e:e6:3b:cf:4d:76:4e:cb:d1:3f:ff:35:46:78:4d:
82:11:21:9e:45:0f:c0:52:ee:16:79:b4:35:78:46:8f:c4:98:
65:3f:5e:2a:52:26:98:86:0e:0e:b5:71:26:13:ef:51:49:a7:
8a:a2:2e:ae:28:56:44:5b:0d:32:84:ae:4d:24:30:51:8f:a4:
11:7a:a9:90:86:21:3d:eb:0c:ad:3d:b6:2b:d2:13:ae:d4:62:
c6:2b:0c:2b:33:db:c3:eb:8c:1b:91:57:2f:f7:e3:99:c3:b1:
77:2c:cd:e6:95:3e:22:06:42:4b:84:c9:3e:ec:fe:fb:4b:63:
6b:e9:89:28:38:7a:19:9c:68:69:26:2c:37:0a:a3:8c:48:f3:
46:c6:c7:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 21:23:24 2026 by rpki-client