Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ea/9d5feb-beda-4147-9d83-c9ad37f94cd7/1/AOLDNzGtylfcwzsvuCM_wDiwlek.mft
File: AOLDNzGtylfcwzsvuCM_wDiwlek.mft (raw, json)
Hash identifier: lDp9Uw9PmVH8AUzyHKjXvHZG+IWLGTuIlpP/IXYXxCk=
Subject key identifier: 2D:56:B6:14:6A:E8:4B:DD:D9:79:43:99:16:E0:DB:34:F3:89:DC:73
Authority key identifier: 00:E2:C3:37:31:AD:CA:57:DC:C3:3B:2F:B8:23:3F:C0:38:B0:95:E9
Certificate issuer: /CN=00e2c33731adca57dcc33b2fb8233fc038b095e9
Certificate serial: 01A0CA0FEF21FD6360C80FC05379C7100DB4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AOLDNzGtylfcwzsvuCM_wDiwlek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/9d5feb-beda-4147-9d83-c9ad37f94cd7/1/AOLDNzGtylfcwzsvuCM_wDiwlek.mft
Manifest number: 15A7
Signing time: Tue 22 Sep 2026 17:00:36 +0000
Manifest this update: Tue 22 Sep 2026 17:00:36 +0000
Manifest next update: Wed 23 Sep 2026 17:00:36 +0000
Files and hashes: 1: 6tZKYli0xFjSrMTaPxgthKbfu_g.roa (hash: lqL9qb+FKGUxGrpBLb7Tf9OnZbQiDT4OvdfFGjgah0c=)
2: AOLDNzGtylfcwzsvuCM_wDiwlek.crl (hash: MgAejPsUd2+MWaMU/DtyB2x+jQfDIFDrnz6yPCENW9I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/9d5feb-beda-4147-9d83-c9ad37f94cd7/1/AOLDNzGtylfcwzsvuCM_wDiwlek.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/9d5feb-beda-4147-9d83-c9ad37f94cd7/1/AOLDNzGtylfcwzsvuCM_wDiwlek.mft
rsync://rpki.ripe.net/repository/DEFAULT/AOLDNzGtylfcwzsvuCM_wDiwlek.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 17:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ca:0f:ef:21:fd:63:60:c8:0f:c0:53:79:c7:10:0d:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00e2c33731adca57dcc33b2fb8233fc038b095e9
Validity
Not Before: Sep 22 17:00:36 2026 GMT
Not After : Sep 23 17:00:36 2026 GMT
Subject: CN=2d56b6146ae84bddd979439916e0db34f389dc73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:d5:7f:19:9e:17:00:d4:49:55:c6:a4:f6:77:
a5:80:0c:a1:d6:be:66:eb:d4:b5:35:85:e9:c1:66:
d3:d1:77:51:aa:fe:69:fd:fc:08:2a:f1:7f:5d:42:
58:e2:89:66:8d:da:b7:df:00:66:a6:b1:98:6a:a8:
6d:a6:e7:29:76:dd:9f:2b:cc:ef:5d:cb:80:8f:61:
98:0e:b5:1b:b4:94:cc:1c:af:81:71:99:60:e9:01:
3b:e1:04:ae:0a:02:7e:cf:76:89:5a:cb:97:b7:9a:
50:9c:1a:41:19:ba:22:67:2a:f2:39:df:4d:fd:90:
69:4d:2b:87:81:91:a2:1f:a6:cf:30:36:e6:e1:d1:
8b:e9:73:d2:91:00:08:92:71:90:8d:1b:d3:26:00:
8c:c0:ad:35:67:3c:77:4e:49:a3:16:17:67:13:58:
a2:6c:2d:72:48:6f:d4:6e:d4:80:12:14:15:20:4e:
ff:e1:ba:5d:ea:55:85:75:cf:fe:79:a3:f4:2d:0e:
d5:a7:d0:17:41:1b:34:2a:6d:96:5b:67:c7:ff:9d:
91:f8:2c:54:06:8a:ec:5d:ef:dd:99:31:6b:58:6d:
be:c5:68:72:0c:09:fc:f8:34:e3:58:6f:d3:96:da:
8c:4a:4e:04:f1:54:d2:a3:b9:18:30:39:e4:c9:e9:
ef:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:56:B6:14:6A:E8:4B:DD:D9:79:43:99:16:E0:DB:34:F3:89:DC:73
X509v3 Authority Key Identifier:
keyid:00:E2:C3:37:31:AD:CA:57:DC:C3:3B:2F:B8:23:3F:C0:38:B0:95:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AOLDNzGtylfcwzsvuCM_wDiwlek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/9d5feb-beda-4147-9d83-c9ad37f94cd7/1/AOLDNzGtylfcwzsvuCM_wDiwlek.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/9d5feb-beda-4147-9d83-c9ad37f94cd7/1/AOLDNzGtylfcwzsvuCM_wDiwlek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:bb:50:fc:88:65:90:10:70:9b:da:e5:3f:1d:76:84:87:79:
cf:3f:22:03:0a:cc:cf:34:fc:31:9b:43:b0:4f:9f:35:0c:03:
a1:76:07:6c:4d:bd:00:42:05:bf:ad:38:ac:6d:4e:da:31:68:
21:c7:1a:b5:2a:9b:69:dc:20:ab:27:55:fa:d2:10:22:d8:12:
e9:5e:a7:2e:e2:d7:38:65:7a:ca:90:58:b0:1b:3b:42:76:bb:
46:8b:e5:09:40:79:ab:cc:41:28:7c:e9:1c:6a:42:91:af:58:
9a:ca:69:b8:ae:99:cb:3e:13:40:c5:6f:ae:3c:6b:64:fe:c6:
c5:21:9b:eb:bc:b3:11:0b:8c:ff:5f:88:12:61:83:9e:a0:69:
84:d2:d1:9e:6d:bb:88:bb:07:0b:69:bd:1b:ef:2d:68:b5:69:
a7:e0:f7:6a:69:46:a8:23:d9:b2:6e:05:9e:60:6c:8d:c3:b1:
1c:3b:21:1b:0c:d9:2a:ae:6a:95:47:8e:96:49:09:03:04:52:
6a:fa:f0:22:88:78:57:87:2c:c4:e4:06:2d:6b:6c:23:d2:14:
23:fa:ec:cb:e4:9e:ec:3e:4d:52:3d:7d:73:d9:b4:f4:b1:b3:
22:52:05:0e:aa:3a:c1:83:1e:92:29:46:c4:cc:a0:36:ca:a0:
0f:21:be:70
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDKD+8h/WNgyA/AU3nHEA20MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAwZTJjMzM3MzFhZGNhNTdkY2MzM2IyZmI4MjMzZmMwMzhi
MDk1ZTkwHhcNMjYwOTIyMTcwMDM2WhcNMjYwOTIzMTcwMDM2WjAzMTEwLwYDVQQD
EygyZDU2YjYxNDZhZTg0YmRkZDk3OTQzOTkxNmUwZGIzNGYzODlkYzczMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxNV/GZ4XANRJVcak9nelgAyh1r5m
69S1NYXpwWbT0XdRqv5p/fwIKvF/XUJY4olmjdq33wBmprGYaqhtpucpdt2fK8zv
XcuAj2GYDrUbtJTMHK+BcZlg6QE74QSuCgJ+z3aJWsuXt5pQnBpBGboiZyryOd9N
/ZBpTSuHgZGiH6bPMDbm4dGL6XPSkQAIknGQjRvTJgCMwK01Zzx3TkmjFhdnE1ii
bC1ySG/UbtSAEhQVIE7/4bpd6lWFdc/+eaP0LQ7Vp9AXQRs0Km2WW2fH/52R+CxU
BorsXe/dmTFrWG2+xWhyDAn8+DTjWG/TltqMSk4E8VTSo7kYMDnkyenvBwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC1WthRq6Evd2XlDmRbg2zTzidxzMB8GA1UdIwQY
MBaAFADiwzcxrcpX3MM7L7gjP8A4sJXpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQU9MRE56R3R5bGZjd3pzdnVDTV93RGl3bGVrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS85ZDVmZWItYmVkYS00MTQ3LTlkODMt
YzlhZDM3Zjk0Y2Q3LzEvQU9MRE56R3R5bGZjd3pzdnVDTV93RGl3bGVrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYS85ZDVmZWItYmVkYS00MTQ3LTlkODMtYzlhZDM3Zjk0Y2Q3
LzEvQU9MRE56R3R5bGZjd3pzdnVDTV93RGl3bGVrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk7tQ/Ihl
kBBwm9rlPx12hId5zz8iAwrMzzT8MZtDsE+fNQwDoXYHbE29AEIFv604rG1O2jFo
IccatSqbadwgqydV+tIQItgS6V6nLuLXOGV6ypBYsBs7Qna7RovlCUB5q8xBKHzp
HGpCka9YmsppuK6Zyz4TQMVvrjxrZP7GxSGb67yzEQuM/1+IEmGDnqBphNLRnm27
iLsHC2m9G+8taLVpp+D3amlGqCPZsm4FnmBsjcOxHDshGwzZKq5qlUeOlkkJAwRS
avrwIoh4V4csxOQGLWtsI9IUI/rsy+Se7D5NUj19c9m09LGzIlIFDqo6wYMekilG
xMygNsqgDyG+cA==
-----END CERTIFICATE-----
Generated at Wed Sep 23 02:21:31 2026 by rpki-client