Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/e8101a-240f-4e32-a097-27c273a60788/1/AoNhMH79nzq-_mm9FN4OG9YLbmo.mft
File: AoNhMH79nzq-_mm9FN4OG9YLbmo.mft (raw, json)
Hash identifier: AO4T525Fxq9fiQGkeobTkjsbdI1tqg8ROh2lTDkS2nw=
Subject key identifier: 02:85:75:2E:85:8A:46:5C:F8:CD:2F:E3:A1:BF:B8:8D:1A:CA:48:44
Authority key identifier: 02:83:61:30:7E:FD:9F:3A:BE:FE:69:BD:14:DE:0E:1B:D6:0B:6E:6A
Certificate issuer: /CN=028361307efd9f3abefe69bd14de0e1bd60b6e6a
Certificate serial: 019FA93E2FC57FA4A38530F54C6DEEF5D6B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AoNhMH79nzq-_mm9FN4OG9YLbmo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/e8101a-240f-4e32-a097-27c273a60788/1/AoNhMH79nzq-_mm9FN4OG9YLbmo.mft
Manifest number: 19D5
Signing time: Tue 28 Jul 2026 15:00:52 +0000
Manifest this update: Tue 28 Jul 2026 15:00:52 +0000
Manifest next update: Wed 29 Jul 2026 15:00:52 +0000
Files and hashes: 1: AoNhMH79nzq-_mm9FN4OG9YLbmo.crl (hash: nnO4BZ8enxnhyljt4ynNf5JDPtWDy0TDZ+enoZHlFtE=)
2: _xkuMQSwRHi0DljPKAluJEXoLPg.roa (hash: EUEHOabmEGDXpaBHpO2MNJv0dJd+g7oEzMzEMIadnt8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/e8101a-240f-4e32-a097-27c273a60788/1/AoNhMH79nzq-_mm9FN4OG9YLbmo.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/e8101a-240f-4e32-a097-27c273a60788/1/AoNhMH79nzq-_mm9FN4OG9YLbmo.mft
rsync://rpki.ripe.net/repository/DEFAULT/AoNhMH79nzq-_mm9FN4OG9YLbmo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:3e:2f:c5:7f:a4:a3:85:30:f5:4c:6d:ee:f5:d6:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=028361307efd9f3abefe69bd14de0e1bd60b6e6a
Validity
Not Before: Jul 28 15:00:52 2026 GMT
Not After : Jul 29 15:00:52 2026 GMT
Subject: CN=0285752e858a465cf8cd2fe3a1bfb88d1aca4844
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:af:58:e4:9b:60:a3:cd:01:a6:16:f6:cd:5c:
92:af:8e:f3:ab:47:02:1d:9f:3d:e7:33:25:60:78:
46:20:1b:21:72:22:8a:a5:8a:d9:b6:1f:e3:80:7d:
cb:b5:6e:48:2e:51:b8:1d:d3:e8:49:ce:3d:f2:2a:
4b:9e:65:c5:c0:a7:91:aa:e2:39:98:85:c4:b9:29:
0e:00:d8:e1:52:1c:a3:55:e4:a0:ba:4a:2a:88:dc:
62:17:78:bf:81:b3:ff:75:13:a8:bf:35:36:95:28:
f1:08:72:9d:cd:7c:30:53:05:2d:1d:29:20:2d:22:
22:b4:ca:df:ef:85:69:b8:15:a0:bb:48:c6:7e:61:
42:16:e9:66:8f:d7:e8:37:56:54:86:e7:4e:af:c9:
18:27:35:3a:7d:eb:af:6c:41:98:10:cb:03:95:26:
4d:75:d9:d3:a3:1e:82:26:14:d3:99:be:95:38:6d:
4b:e5:c7:2e:e4:b8:6a:dd:d5:1d:f1:23:32:b9:3e:
87:88:da:81:df:46:50:a4:8e:2e:24:66:9a:02:53:
be:ec:20:41:79:52:83:32:77:89:2c:a6:1c:a4:74:
05:9c:a6:53:d1:3a:84:16:95:d5:8e:76:60:5d:c0:
cc:ab:47:e2:b5:e8:28:d9:d2:0a:bd:e4:9e:8f:39:
f7:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:85:75:2E:85:8A:46:5C:F8:CD:2F:E3:A1:BF:B8:8D:1A:CA:48:44
X509v3 Authority Key Identifier:
keyid:02:83:61:30:7E:FD:9F:3A:BE:FE:69:BD:14:DE:0E:1B:D6:0B:6E:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AoNhMH79nzq-_mm9FN4OG9YLbmo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/e8101a-240f-4e32-a097-27c273a60788/1/AoNhMH79nzq-_mm9FN4OG9YLbmo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/e8101a-240f-4e32-a097-27c273a60788/1/AoNhMH79nzq-_mm9FN4OG9YLbmo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:f4:f0:03:74:ce:be:eb:e3:07:44:46:59:9d:b6:ba:24:6c:
d8:bb:92:ec:45:57:97:9a:51:fb:85:e9:8b:c3:7f:63:80:ac:
8c:2d:83:2e:99:19:14:a9:3d:21:34:20:a3:42:26:90:f9:7b:
ee:82:13:9b:eb:a0:ea:ba:ce:68:4d:a8:ac:7e:20:cb:78:1d:
e7:98:7a:b0:d4:35:a4:c9:49:29:f9:a9:4b:58:8b:aa:1d:95:
0e:90:f7:db:d1:0b:1f:45:8b:52:d4:6d:c0:24:bd:73:12:27:
e9:cd:d8:67:fb:f3:dd:ae:06:e8:63:0e:ca:26:62:a5:05:97:
58:1c:57:98:5e:3a:c5:99:9b:e7:51:53:76:e8:dc:ac:5d:46:
fa:2a:93:ee:51:b3:33:07:82:c8:f6:b9:27:77:56:ea:f2:a8:
50:e2:07:e1:67:0e:13:ce:e7:83:43:89:92:95:8c:64:63:32:
0e:d1:cd:20:01:d1:27:f1:50:df:aa:4a:f1:28:b9:2f:05:7a:
1f:d4:d3:46:3a:27:84:71:83:77:47:9a:65:6e:9e:d9:8a:99:
5a:d8:a1:3d:05:2d:e7:3d:c4:70:2d:2b:e9:0d:a1:6f:bd:39:
dd:b7:ca:5d:25:14:d5:fb:0e:28:7d:ef:1a:c1:e6:2f:08:98:
48:de:4a:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:31:42 2026 by rpki-client