Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/28/40a1e5-7d2a-48d6-a50e-f96fb4ea7e70/1/aom7lPpf5QmM7X4hUpoL2G48TY0.mft
File: aom7lPpf5QmM7X4hUpoL2G48TY0.mft (raw, json)
Hash identifier: awpT0D0OhN1QUeqvqOnsvs0+GcmgM5T88M1+NhUJK9Y=
Subject key identifier: 52:2B:A4:23:D5:52:75:92:CE:4F:FD:A6:2D:2D:46:03:CF:0C:93:2E
Authority key identifier: 6A:89:BB:94:FA:5F:E5:09:8C:ED:7E:21:52:9A:0B:D8:6E:3C:4D:8D
Certificate issuer: /CN=6a89bb94fa5fe5098ced7e21529a0bd86e3c4d8d
Certificate serial: 01A1705D0CA6CF78C5CC174864F675F7BD68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aom7lPpf5QmM7X4hUpoL2G48TY0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/40a1e5-7d2a-48d6-a50e-f96fb4ea7e70/1/aom7lPpf5QmM7X4hUpoL2G48TY0.mft
Manifest number: 0138
Signing time: Sun 25 Oct 2026 00:01:48 +0000
Manifest this update: Sun 25 Oct 2026 00:01:48 +0000
Manifest next update: Mon 26 Oct 2026 00:01:48 +0000
Files and hashes: 1: 3g9vEIvZ3Ad22o1OnOmjkYKrx-Y.roa (hash: dwEr+ygUTjcoJhBqeNSDCT0jVemskxaLd88sjFgcW5c=)
2: WjZ-lIR7MyhCZaOyQOqTaGg93bc.roa (hash: 9r+bJWO2ypdWBvTMrN/txM30uqxsJdCMbt8zxX7CLS8=)
3: aom7lPpf5QmM7X4hUpoL2G48TY0.crl (hash: WyTfukPRJZPNX6yDEX+nWvClYnQZLc+poJyQeF25mDM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/40a1e5-7d2a-48d6-a50e-f96fb4ea7e70/1/aom7lPpf5QmM7X4hUpoL2G48TY0.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/40a1e5-7d2a-48d6-a50e-f96fb4ea7e70/1/aom7lPpf5QmM7X4hUpoL2G48TY0.mft
rsync://rpki.ripe.net/repository/DEFAULT/aom7lPpf5QmM7X4hUpoL2G48TY0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Oct 2026 23:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:70:5d:0c:a6:cf:78:c5:cc:17:48:64:f6:75:f7:bd:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a89bb94fa5fe5098ced7e21529a0bd86e3c4d8d
Validity
Not Before: Oct 25 00:01:48 2026 GMT
Not After : Oct 26 00:01:48 2026 GMT
Subject: CN=522ba423d5527592ce4ffda62d2d4603cf0c932e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:77:7f:63:eb:6c:f9:90:2d:b2:6a:81:47:fc:
16:0b:b8:28:59:38:36:fb:60:c6:54:86:7c:ef:96:
83:73:23:97:6a:4a:8d:e2:95:ce:fa:e4:35:ab:26:
1f:24:c5:81:ff:e2:39:87:40:17:5c:b4:f6:93:24:
0c:49:71:61:bb:55:46:b3:04:a6:84:8a:c6:1f:30:
59:a3:d6:39:94:4c:7b:ff:9f:33:05:49:0b:b3:ee:
dd:dc:40:e8:a7:af:59:52:80:7a:0c:64:4e:b4:8d:
1f:e8:f1:ad:66:13:48:a9:f0:1d:a8:68:25:95:61:
2d:23:f8:eb:fd:e9:64:cc:80:3c:3a:0f:c8:8c:b4:
62:d9:67:9a:c8:30:43:b2:1c:9a:4d:bf:4b:10:49:
20:c4:1f:aa:d7:71:45:44:21:09:2b:8f:53:db:51:
f3:84:3f:2b:2a:c8:15:46:66:73:09:33:22:cc:22:
7d:47:bf:86:6c:46:6c:15:98:f2:f8:bc:32:d8:58:
61:65:ca:ed:27:a2:c6:21:24:ba:a8:f2:b5:58:20:
3d:d9:d3:f1:38:4e:1d:d9:ab:2a:1b:f2:71:35:ea:
76:c0:b3:ae:52:5b:38:d4:12:ee:d1:2e:7f:ee:f7:
a8:7b:d2:fd:ee:6a:65:c2:ac:9a:99:45:4f:a2:e8:
7b:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:2B:A4:23:D5:52:75:92:CE:4F:FD:A6:2D:2D:46:03:CF:0C:93:2E
X509v3 Authority Key Identifier:
keyid:6A:89:BB:94:FA:5F:E5:09:8C:ED:7E:21:52:9A:0B:D8:6E:3C:4D:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aom7lPpf5QmM7X4hUpoL2G48TY0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/40a1e5-7d2a-48d6-a50e-f96fb4ea7e70/1/aom7lPpf5QmM7X4hUpoL2G48TY0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/40a1e5-7d2a-48d6-a50e-f96fb4ea7e70/1/aom7lPpf5QmM7X4hUpoL2G48TY0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:57:c8:34:9e:ef:8d:97:03:6b:6e:e2:0c:d8:90:7e:41:99:
a2:10:06:6b:10:6f:0f:9f:9f:21:23:e3:59:1d:66:7f:0f:06:
5a:20:cf:f2:11:b8:cd:c4:9d:c3:1a:b8:f8:8b:fe:87:5e:a4:
d0:ec:da:fd:f5:36:e6:b2:d3:d8:3f:5d:02:e5:4c:be:ec:0e:
33:50:15:7c:4d:5f:0c:a9:6a:f7:02:b5:10:82:10:21:33:1f:
b4:bf:25:5e:77:7d:9e:34:33:92:a1:9d:f6:19:7c:63:66:e1:
4b:cd:d1:ff:1f:4f:9c:f6:b9:82:09:3d:ad:cb:3b:d9:75:2b:
90:12:1a:42:a5:37:df:8b:e2:d2:65:56:dd:54:64:37:56:6b:
dd:80:fd:61:02:06:e2:75:5a:f5:58:9a:e5:d3:7c:ea:a7:d5:
6a:bc:66:32:2b:fc:a9:9c:a8:cf:1b:11:50:f5:2a:71:7a:9c:
1c:22:6f:04:67:78:1f:da:b1:02:3f:7d:43:f3:d5:a7:0d:bd:
81:79:37:a6:57:2b:a1:ab:b9:dd:14:5f:e9:c7:2f:29:3a:cd:
e4:03:a0:f1:9a:42:04:9d:dd:75:47:2b:3c:d7:07:fa:0a:56:
0a:cd:57:b3:8b:17:b9:cf:c2:21:9a:71:bd:85:47:8d:ef:17:
c5:c9:0a:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 06:07:35 2026 by rpki-client