Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/9d5feb-beda-4147-9d83-c9ad37f94cd7/1/AOLDNzGtylfcwzsvuCM_wDiwlek.mft
File: AOLDNzGtylfcwzsvuCM_wDiwlek.mft (raw, json)
Hash identifier: xREAqgDmzelfPqzaJE50LOOnCp+0MQMiRAWSHA898Wg=
Subject key identifier: 0C:B6:C8:72:2C:16:6B:1C:3E:E7:26:D4:34:1F:13:C2:55:17:77:50
Authority key identifier: 00:E2:C3:37:31:AD:CA:57:DC:C3:3B:2F:B8:23:3F:C0:38:B0:95:E9
Certificate issuer: /CN=00e2c33731adca57dcc33b2fb8233fc038b095e9
Certificate serial: 019D992BA4F064DC7E09C1B33661DFC98448
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AOLDNzGtylfcwzsvuCM_wDiwlek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/9d5feb-beda-4147-9d83-c9ad37f94cd7/1/AOLDNzGtylfcwzsvuCM_wDiwlek.mft
Manifest number: 1400
Signing time: Fri 17 Apr 2026 02:01:07 +0000
Manifest this update: Fri 17 Apr 2026 02:01:07 +0000
Manifest next update: Sat 18 Apr 2026 02:01:07 +0000
Files and hashes: 1: 6tZKYli0xFjSrMTaPxgthKbfu_g.roa (hash: lqL9qb+FKGUxGrpBLb7Tf9OnZbQiDT4OvdfFGjgah0c=)
2: AOLDNzGtylfcwzsvuCM_wDiwlek.crl (hash: qcFKlsV4dU4dOkw8qj3lVUJUuwDW1SAzDgu0xeGLnTg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/9d5feb-beda-4147-9d83-c9ad37f94cd7/1/AOLDNzGtylfcwzsvuCM_wDiwlek.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/9d5feb-beda-4147-9d83-c9ad37f94cd7/1/AOLDNzGtylfcwzsvuCM_wDiwlek.mft
rsync://rpki.ripe.net/repository/DEFAULT/AOLDNzGtylfcwzsvuCM_wDiwlek.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:2b:a4:f0:64:dc:7e:09:c1:b3:36:61:df:c9:84:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00e2c33731adca57dcc33b2fb8233fc038b095e9
Validity
Not Before: Apr 17 02:01:07 2026 GMT
Not After : Apr 18 02:01:07 2026 GMT
Subject: CN=0cb6c8722c166b1c3ee726d4341f13c255177750
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:88:9e:33:b8:40:84:8c:4c:5b:5f:e0:02:bf:
89:5b:02:b8:2c:04:21:61:4c:8f:2c:45:a1:4d:95:
0a:69:8e:15:29:49:ed:71:ad:bb:71:8b:cb:9d:64:
ba:49:ba:a1:6f:32:ca:1d:6c:7a:61:f8:45:dd:7f:
c3:8c:39:d3:69:46:66:d7:26:d2:b8:b1:e9:87:6d:
5f:36:1e:52:41:f9:08:76:61:1a:86:f7:db:b7:10:
56:06:57:bd:12:9b:f6:3a:d9:37:a5:58:37:5d:38:
19:fa:01:0d:97:27:b3:47:e9:f5:47:26:4c:5f:af:
50:eb:02:37:30:b5:d7:bd:7a:44:a2:4f:5c:aa:c0:
ef:e0:41:ce:6f:98:c5:de:a8:22:11:0f:01:3c:a5:
36:1b:f4:ce:d4:b5:0d:6a:65:11:49:73:e5:e1:49:
d2:a9:2c:4f:af:55:83:b7:f9:17:ed:49:e1:45:a0:
5a:bb:3d:c9:82:32:6a:7f:61:4c:89:bd:e5:ea:ec:
e3:54:59:01:cf:64:02:07:7b:e8:b6:38:77:00:7c:
4e:32:2b:82:fb:10:c0:bb:9b:39:68:5d:a9:0b:52:
70:7d:83:15:08:16:b4:04:3d:13:bb:e0:62:d4:d5:
a4:ec:ff:42:32:9d:1a:40:90:64:a9:cd:52:31:fe:
80:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:B6:C8:72:2C:16:6B:1C:3E:E7:26:D4:34:1F:13:C2:55:17:77:50
X509v3 Authority Key Identifier:
keyid:00:E2:C3:37:31:AD:CA:57:DC:C3:3B:2F:B8:23:3F:C0:38:B0:95:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AOLDNzGtylfcwzsvuCM_wDiwlek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/9d5feb-beda-4147-9d83-c9ad37f94cd7/1/AOLDNzGtylfcwzsvuCM_wDiwlek.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/9d5feb-beda-4147-9d83-c9ad37f94cd7/1/AOLDNzGtylfcwzsvuCM_wDiwlek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:48:45:73:de:c2:b6:a4:ee:52:d0:ce:72:b0:f9:44:f7:d2:
08:8e:e8:84:5e:3c:31:28:e7:7c:82:a5:c5:af:9d:23:7a:00:
f0:df:3b:1e:b7:03:65:3a:4a:c6:73:cb:18:04:2e:c1:38:27:
b3:ba:d3:6e:e9:e8:f7:0a:77:00:2f:e8:49:b7:b1:50:e6:18:
c8:f4:33:da:cc:5d:43:40:ce:15:84:03:46:e2:73:2e:47:42:
13:e4:1b:17:c2:70:50:11:4f:3f:e1:10:6b:2c:3f:77:01:a1:
f2:c9:ea:01:55:2f:cb:5d:2f:af:2e:2a:66:c2:a7:b7:18:47:
c3:69:43:30:ab:3b:af:ed:e9:20:1a:f3:de:59:53:49:cf:85:
93:90:30:a1:26:68:74:c3:bf:20:b1:cd:14:a0:41:eb:48:d0:
ae:c9:1c:a1:55:0a:76:6c:a5:81:96:04:09:87:2e:9e:94:d6:
62:f3:ed:0a:b5:75:93:d7:56:1a:fc:b7:f2:ed:48:25:d0:8c:
a5:1c:6b:0c:84:a0:f5:66:93:63:76:6d:4b:93:58:b6:7e:af:
38:58:d6:f1:66:c4:10:5a:f0:ad:8a:8b:8c:e1:cb:fd:70:a0:
f5:33:35:65:b5:1c:82:9c:b9:81:64:18:88:6e:74:76:8c:83:
7f:f6:2f:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:23:45 2026 by rpki-client