Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/9d5feb-beda-4147-9d83-c9ad37f94cd7/1/AOLDNzGtylfcwzsvuCM_wDiwlek.mft
File: AOLDNzGtylfcwzsvuCM_wDiwlek.mft (raw, json)
Hash identifier: 2F8vKTOz458uVdwhkcSWOMFlqi6PIu0qg7RLBRNG2Zk=
Subject key identifier: 82:EA:5E:33:2F:7C:6C:CF:7A:6C:F1:1B:42:C4:95:32:7A:F0:93:49
Authority key identifier: 00:E2:C3:37:31:AD:CA:57:DC:C3:3B:2F:B8:23:3F:C0:38:B0:95:E9
Certificate issuer: /CN=00e2c33731adca57dcc33b2fb8233fc038b095e9
Certificate serial: 019FAA50A2F23ED26F516EB67104B13855A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AOLDNzGtylfcwzsvuCM_wDiwlek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/9d5feb-beda-4147-9d83-c9ad37f94cd7/1/AOLDNzGtylfcwzsvuCM_wDiwlek.mft
Manifest number: 1512
Signing time: Tue 28 Jul 2026 20:00:39 +0000
Manifest this update: Tue 28 Jul 2026 20:00:39 +0000
Manifest next update: Wed 29 Jul 2026 20:00:39 +0000
Files and hashes: 1: 6tZKYli0xFjSrMTaPxgthKbfu_g.roa (hash: lqL9qb+FKGUxGrpBLb7Tf9OnZbQiDT4OvdfFGjgah0c=)
2: AOLDNzGtylfcwzsvuCM_wDiwlek.crl (hash: H836qzjM27qZRH0Aeo0dI3CEyfRROmGCd5k7R29C1ic=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/9d5feb-beda-4147-9d83-c9ad37f94cd7/1/AOLDNzGtylfcwzsvuCM_wDiwlek.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/9d5feb-beda-4147-9d83-c9ad37f94cd7/1/AOLDNzGtylfcwzsvuCM_wDiwlek.mft
rsync://rpki.ripe.net/repository/DEFAULT/AOLDNzGtylfcwzsvuCM_wDiwlek.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 20:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:50:a2:f2:3e:d2:6f:51:6e:b6:71:04:b1:38:55:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00e2c33731adca57dcc33b2fb8233fc038b095e9
Validity
Not Before: Jul 28 20:00:39 2026 GMT
Not After : Jul 29 20:00:39 2026 GMT
Subject: CN=82ea5e332f7c6ccf7a6cf11b42c495327af09349
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:d8:0a:b1:aa:bc:a3:22:85:77:f3:86:9e:fd:
e6:6c:38:7f:76:60:73:51:d6:df:65:de:c0:a9:8e:
a6:45:38:94:d7:f1:90:12:14:f2:22:84:e4:a2:03:
fd:5f:0a:ef:b9:9d:fe:5f:7d:ef:a8:fb:b7:58:a0:
ea:35:b6:33:70:75:e9:b4:42:0d:f6:b4:b8:60:15:
c9:e9:81:21:3a:92:5a:b0:4b:1e:96:1d:23:30:0f:
bd:5b:79:01:b8:87:02:fa:b2:32:58:0f:f8:d3:43:
86:ec:50:86:5f:37:52:5f:c5:80:27:27:15:54:c3:
83:a0:a4:63:f7:79:37:1c:f9:d6:a7:c2:4b:4c:d3:
b0:47:b0:02:e9:92:bc:c8:3a:a4:a0:94:b9:24:b9:
c5:4d:5a:2d:f2:57:92:ee:82:a0:d1:88:53:57:4c:
94:55:40:4c:5a:76:e8:30:b3:a2:f6:5a:67:49:08:
dc:af:28:e4:4d:c8:b1:b5:e1:19:e8:e9:81:73:46:
4c:7b:d2:d3:7a:31:3d:d6:88:fd:b1:f6:ab:1e:4f:
a8:fb:b9:12:a3:2d:75:89:24:46:8a:81:67:cf:c0:
f9:94:3a:95:fc:4c:ee:84:c7:0b:35:85:8c:28:d9:
55:c2:d3:58:51:43:0e:97:b0:5e:c4:f0:7c:04:b3:
49:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:EA:5E:33:2F:7C:6C:CF:7A:6C:F1:1B:42:C4:95:32:7A:F0:93:49
X509v3 Authority Key Identifier:
keyid:00:E2:C3:37:31:AD:CA:57:DC:C3:3B:2F:B8:23:3F:C0:38:B0:95:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AOLDNzGtylfcwzsvuCM_wDiwlek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/9d5feb-beda-4147-9d83-c9ad37f94cd7/1/AOLDNzGtylfcwzsvuCM_wDiwlek.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/9d5feb-beda-4147-9d83-c9ad37f94cd7/1/AOLDNzGtylfcwzsvuCM_wDiwlek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:39:2f:21:e1:af:dc:cd:77:e2:db:1a:37:b4:7b:1e:70:04:
fd:96:4c:4c:97:4a:c6:1f:14:24:59:f6:6c:5e:50:36:4c:84:
38:53:b0:c5:e4:2b:9a:e0:94:13:5b:c8:37:e8:dc:ec:d8:7c:
5a:ea:a7:55:c6:29:b0:a5:dd:37:f3:fc:0e:fa:03:dd:3d:d3:
98:04:6e:ac:67:e1:5c:6c:bc:a7:1f:fe:60:87:01:70:30:5b:
63:c4:7e:9f:75:99:49:18:86:1e:2e:f9:45:ff:1b:48:9c:c7:
1b:de:37:c3:62:3b:73:eb:d3:b5:22:87:cf:37:41:6a:0f:90:
5a:b0:49:51:b8:14:0c:80:48:78:4e:06:82:ba:bc:42:cd:a6:
47:a2:62:7d:eb:1b:a3:ab:95:0b:9a:9d:b3:18:bb:e0:07:a7:
8a:5d:9b:5a:f3:cc:7d:b2:0c:53:68:5d:fa:60:94:fa:d1:3f:
9e:c8:0e:5c:fe:a1:55:c5:d4:6c:16:64:43:b3:39:bb:53:ca:
a8:08:34:ea:90:b9:50:d9:20:2a:81:08:8c:9d:2d:f3:db:dc:
4c:1f:a0:73:10:a8:b5:43:32:1e:9d:a6:04:4c:00:21:c2:cd:
d4:95:30:76:6a:e0:d8:ec:90:54:ae:30:fb:c6:82:91:b2:3d:
1a:e1:eb:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 00:52:56 2026 by rpki-client