Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/e8101a-240f-4e32-a097-27c273a60788/1/AoNhMH79nzq-_mm9FN4OG9YLbmo.mft
File: AoNhMH79nzq-_mm9FN4OG9YLbmo.mft (raw, json)
Hash identifier: YL7BXBwyRBO+hrsz3Ovl0vOMY7hkQtOImj2+gatwgn8=
Subject key identifier: 35:5D:F5:45:FD:C8:66:77:DB:CE:AC:0D:E3:27:03:CB:78:82:F7:33
Authority key identifier: 02:83:61:30:7E:FD:9F:3A:BE:FE:69:BD:14:DE:0E:1B:D6:0B:6E:6A
Certificate issuer: /CN=028361307efd9f3abefe69bd14de0e1bd60b6e6a
Certificate serial: 019EBF916C7ADCBC1EFC9FF6527A9FEF9D06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AoNhMH79nzq-_mm9FN4OG9YLbmo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/e8101a-240f-4e32-a097-27c273a60788/1/AoNhMH79nzq-_mm9FN4OG9YLbmo.mft
Manifest number: 195C
Signing time: Sat 13 Jun 2026 06:00:39 +0000
Manifest this update: Sat 13 Jun 2026 06:00:39 +0000
Manifest next update: Sun 14 Jun 2026 06:00:39 +0000
Files and hashes: 1: AoNhMH79nzq-_mm9FN4OG9YLbmo.crl (hash: BTkcHfFBZgAAOstmokawEPTO4DvWDk2BvBMUNeSHn6M=)
2: _xkuMQSwRHi0DljPKAluJEXoLPg.roa (hash: EUEHOabmEGDXpaBHpO2MNJv0dJd+g7oEzMzEMIadnt8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/e8101a-240f-4e32-a097-27c273a60788/1/AoNhMH79nzq-_mm9FN4OG9YLbmo.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/e8101a-240f-4e32-a097-27c273a60788/1/AoNhMH79nzq-_mm9FN4OG9YLbmo.mft
rsync://rpki.ripe.net/repository/DEFAULT/AoNhMH79nzq-_mm9FN4OG9YLbmo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:91:6c:7a:dc:bc:1e:fc:9f:f6:52:7a:9f:ef:9d:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=028361307efd9f3abefe69bd14de0e1bd60b6e6a
Validity
Not Before: Jun 13 06:00:39 2026 GMT
Not After : Jun 14 06:00:39 2026 GMT
Subject: CN=355df545fdc86677dbceac0de32703cb7882f733
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:69:48:25:b4:9a:39:f1:92:f4:00:61:11:c7:
99:a5:e7:ed:ff:46:d2:59:55:68:07:a5:1c:89:27:
d3:57:22:cf:d9:9c:07:dc:2f:f9:8d:9f:ef:d2:c9:
8d:80:e9:f3:2f:23:48:e8:46:3c:86:5e:67:fc:79:
91:1a:95:b4:cf:df:e3:bd:39:40:22:bd:f4:aa:50:
de:cf:b6:ec:1d:fb:f5:b6:39:38:93:d2:6c:18:a3:
3e:95:a7:eb:0c:62:11:3b:27:69:b1:1f:a3:db:e0:
97:17:90:e1:0c:97:20:1c:6f:34:bd:75:3d:c1:e1:
39:42:86:d0:85:61:e3:33:6c:0d:3c:3f:78:39:70:
aa:51:e2:77:d8:29:18:df:30:7c:cc:ad:23:b6:4a:
6c:5c:53:07:a6:2b:ab:64:4c:0c:a2:9c:a8:b4:ee:
65:c6:76:2a:e8:f2:e7:77:b1:e8:fa:8d:82:0a:72:
12:30:63:cf:c7:03:24:b6:6a:03:ae:f7:06:ae:a8:
cd:d1:8c:29:ca:11:3a:bf:22:b5:9e:b2:2b:30:37:
25:0e:2a:87:78:79:61:19:c8:9a:be:fd:29:32:32:
bb:c8:e2:3f:2b:f3:62:28:d0:d1:ae:e6:e4:76:44:
36:c9:25:23:51:22:b1:73:a3:cf:dd:7f:37:41:64:
49:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:5D:F5:45:FD:C8:66:77:DB:CE:AC:0D:E3:27:03:CB:78:82:F7:33
X509v3 Authority Key Identifier:
keyid:02:83:61:30:7E:FD:9F:3A:BE:FE:69:BD:14:DE:0E:1B:D6:0B:6E:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AoNhMH79nzq-_mm9FN4OG9YLbmo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/e8101a-240f-4e32-a097-27c273a60788/1/AoNhMH79nzq-_mm9FN4OG9YLbmo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/e8101a-240f-4e32-a097-27c273a60788/1/AoNhMH79nzq-_mm9FN4OG9YLbmo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:25:d0:a4:2a:a1:76:4f:96:c5:3a:52:4b:b5:f1:71:c1:e2:
1e:e2:6c:b3:f5:fd:98:44:14:87:6a:f6:34:2b:29:1c:d3:2e:
c9:17:09:a2:f8:bb:91:0c:6a:1e:f6:39:25:0b:8e:11:fc:1f:
76:ea:26:3d:a7:0f:ca:23:57:b9:7d:8e:06:b4:95:a0:28:37:
96:28:2b:93:45:5e:64:0e:31:67:6c:82:dd:0c:1d:08:8a:69:
6d:dd:62:57:6c:30:5f:cf:9c:df:34:a6:3b:3b:8f:39:88:27:
f4:a7:46:98:af:fc:a0:0f:38:83:1b:6e:a8:66:e5:89:8c:fc:
78:56:52:50:38:9b:3e:7f:94:ed:b4:2a:5c:c8:9d:3c:5b:44:
96:57:5d:1f:60:48:f6:7e:0c:c6:09:e9:e2:95:e9:68:73:c5:
70:5e:8b:3f:59:19:e8:40:de:5b:d4:9b:c4:a2:15:11:71:16:
8f:1a:95:d9:e8:6a:dc:83:9a:ca:dc:77:a8:c8:5a:20:49:bc:
ab:8c:3c:cc:fa:b3:9a:4e:60:e8:24:ae:2b:b8:c3:57:06:2c:
fa:04:37:4c:b0:94:21:9e:fe:52:5a:3f:cf:66:24:3e:ed:06:
1c:62:3a:0f:51:91:b7:d8:b9:80:f7:59:74:97:ca:19:57:5c:
02:d7:e2:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 11:05:11 2026 by rpki-client