Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/b370c2-d46b-47b5-af28-645680e92fd4/1/AosCB3NxOyxT0GjjQuk_x6rfruI.mft
File: AosCB3NxOyxT0GjjQuk_x6rfruI.mft (raw, json)
Hash identifier: MknYSdTep4prVIhQF/W3phS6TvwPdm18S86p+6AGDBU=
Subject key identifier: 51:4F:B7:2C:D0:48:31:3A:1D:8E:BF:3B:B5:32:C6:23:B6:CD:1A:77
Authority key identifier: 02:8B:02:07:73:71:3B:2C:53:D0:68:E3:42:E9:3F:C7:AA:DF:AE:E2
Certificate issuer: /CN=028b020773713b2c53d068e342e93fc7aadfaee2
Certificate serial: 019FF8A3636C7E3692698A5A9A7E924AE380
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AosCB3NxOyxT0GjjQuk_x6rfruI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/b370c2-d46b-47b5-af28-645680e92fd4/1/AosCB3NxOyxT0GjjQuk_x6rfruI.mft
Manifest number: 03
Signing time: Thu 13 Aug 2026 01:01:25 +0000
Manifest this update: Thu 13 Aug 2026 01:01:25 +0000
Manifest next update: Fri 14 Aug 2026 01:01:25 +0000
Files and hashes: 1: AosCB3NxOyxT0GjjQuk_x6rfruI.crl (hash: 3LQDtoyPlsjXiGVFP4pLUejPnlJpX5tk5v34Yz7Z9UE=)
2: U4bNdKhTLh8siEHweWkdXnpGwFQ.asa (hash: SrfthbOaamoHYmnCmIs+W5bYlOH2WJD8qTtF/8BtYXM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/b370c2-d46b-47b5-af28-645680e92fd4/1/AosCB3NxOyxT0GjjQuk_x6rfruI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/b370c2-d46b-47b5-af28-645680e92fd4/1/AosCB3NxOyxT0GjjQuk_x6rfruI.mft
rsync://rpki.ripe.net/repository/DEFAULT/AosCB3NxOyxT0GjjQuk_x6rfruI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Aug 2026 01:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f8:a3:63:6c:7e:36:92:69:8a:5a:9a:7e:92:4a:e3:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=028b020773713b2c53d068e342e93fc7aadfaee2
Validity
Not Before: Aug 13 01:01:25 2026 GMT
Not After : Aug 14 01:01:25 2026 GMT
Subject: CN=514fb72cd048313a1d8ebf3bb532c623b6cd1a77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:41:a7:12:9a:f3:70:97:7a:ce:81:57:9c:f1:
67:fd:89:cf:1d:08:50:59:5a:7b:df:77:52:e5:d3:
8b:ce:e0:f8:c0:ef:47:73:6b:9a:02:28:3f:da:9e:
d3:71:ce:de:10:f5:e8:12:cb:c4:e3:68:a1:a8:b6:
ad:b2:1c:ce:27:44:54:02:aa:29:7d:3a:d9:ba:5d:
0c:8d:33:cb:8b:9b:ff:bc:6a:a9:0d:d9:29:29:69:
16:c9:f7:7e:c5:30:95:10:73:45:3f:61:d8:c7:53:
d7:07:17:ae:60:47:d6:c6:88:fd:8d:08:09:36:ca:
6d:be:27:88:ab:83:69:cf:3c:f0:95:7f:38:57:e4:
61:27:ae:d8:a2:bd:fc:83:2a:0b:6d:87:2f:ca:85:
f1:31:95:5a:c6:8e:8a:07:87:05:34:11:26:91:50:
c3:30:7a:97:b5:4d:44:71:cd:d3:f3:e3:cf:cf:5a:
42:80:2a:4b:44:8d:bc:de:6e:ca:16:ef:ef:e5:35:
09:54:37:8f:f5:6b:c3:cf:ad:08:e7:07:5f:d6:39:
10:08:9b:70:63:70:e8:d9:c1:e7:21:0f:98:23:15:
c7:9b:1f:cf:a4:aa:34:2b:bc:61:ea:3e:c1:34:8e:
2d:1d:e8:30:56:8b:ce:25:f7:64:b6:ab:2e:83:18:
1a:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:4F:B7:2C:D0:48:31:3A:1D:8E:BF:3B:B5:32:C6:23:B6:CD:1A:77
X509v3 Authority Key Identifier:
keyid:02:8B:02:07:73:71:3B:2C:53:D0:68:E3:42:E9:3F:C7:AA:DF:AE:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AosCB3NxOyxT0GjjQuk_x6rfruI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b370c2-d46b-47b5-af28-645680e92fd4/1/AosCB3NxOyxT0GjjQuk_x6rfruI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b370c2-d46b-47b5-af28-645680e92fd4/1/AosCB3NxOyxT0GjjQuk_x6rfruI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:51:3d:29:94:18:a1:5e:22:fb:00:95:32:ec:e9:4d:7e:2c:
9e:84:fb:f1:cf:fa:57:a3:2a:5d:f4:43:79:49:07:9b:94:68:
c8:7c:c1:44:06:0b:93:0e:36:77:da:d1:06:0d:02:74:53:5c:
fe:4c:db:2a:64:b3:7d:23:95:ca:88:f4:34:68:06:3a:6f:75:
0e:aa:4d:bc:60:c3:be:62:51:90:3d:02:c8:38:b7:ea:c1:0b:
d6:d9:fa:68:16:54:65:b6:62:83:4d:16:05:c2:5e:1a:0f:e5:
de:28:87:0e:45:f8:d1:45:a6:67:6e:f9:e8:46:44:1a:60:7e:
f2:eb:a5:70:9b:58:36:40:65:a1:ce:da:93:de:e1:48:76:1a:
69:ea:8c:5d:5d:c6:63:0b:61:b6:c2:b6:21:8b:5f:4b:18:d3:
ea:1d:95:9d:c7:e7:5d:5b:1a:e8:28:e6:60:c8:6c:84:55:44:
61:2b:f0:92:63:92:59:cf:d4:ec:33:d9:af:26:8a:f2:f5:63:
5b:1a:b6:f0:eb:a7:7a:54:cb:89:f1:64:8e:b9:cf:e0:d4:9e:
32:64:6e:d5:fe:2f:02:8f:d8:60:c3:11:ed:78:3a:6f:50:44:
7c:2f:51:1d:05:23:f4:13:98:65:96:73:80:03:7e:a9:24:a7:
9f:37:6b:48
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ/4o2NsfjaSaYpamn6SSuOAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAyOGIwMjA3NzM3MTNiMmM1M2QwNjhlMzQyZTkzZmM3YWFk
ZmFlZTIwHhcNMjYwODEzMDEwMTI1WhcNMjYwODE0MDEwMTI1WjAzMTEwLwYDVQQD
Eyg1MTRmYjcyY2QwNDgzMTNhMWQ4ZWJmM2JiNTMyYzYyM2I2Y2QxYTc3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqEGnEprzcJd6zoFXnPFn/YnPHQhQ
WVp733dS5dOLzuD4wO9Hc2uaAig/2p7Tcc7eEPXoEsvE42ihqLatshzOJ0RUAqop
fTrZul0MjTPLi5v/vGqpDdkpKWkWyfd+xTCVEHNFP2HYx1PXBxeuYEfWxoj9jQgJ
NsptvieIq4NpzzzwlX84V+RhJ67Yor38gyoLbYcvyoXxMZVaxo6KB4cFNBEmkVDD
MHqXtU1Ecc3T8+PPz1pCgCpLRI283m7KFu/v5TUJVDeP9WvDz60I5wdf1jkQCJtw
Y3Do2cHnIQ+YIxXHmx/PpKo0K7xh6j7BNI4tHegwVovOJfdktqsugxgapQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFFPtyzQSDE6HY6/O7UyxiO2zRp3MB8GA1UdIwQY
MBaAFAKLAgdzcTssU9Bo40LpP8eq367iMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQW9zQ0IzTnhPeXhUMEdqalF1a194NnJmcnVJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi9iMzcwYzItZDQ2Yi00N2I1LWFmMjgt
NjQ1NjgwZTkyZmQ0LzEvQW9zQ0IzTnhPeXhUMEdqalF1a194NnJmcnVJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Zi9iMzcwYzItZDQ2Yi00N2I1LWFmMjgtNjQ1NjgwZTkyZmQ0
LzEvQW9zQ0IzTnhPeXhUMEdqalF1a194NnJmcnVJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASFE9KZQY
oV4i+wCVMuzpTX4snoT78c/6V6MqXfRDeUkHm5RoyHzBRAYLkw42d9rRBg0CdFNc
/kzbKmSzfSOVyoj0NGgGOm91DqpNvGDDvmJRkD0CyDi36sEL1tn6aBZUZbZig00W
BcJeGg/l3iiHDkX40UWmZ2756EZEGmB+8uulcJtYNkBloc7ak97hSHYaaeqMXV3G
YwthtsK2IYtfSxjT6h2VncfnXVsa6CjmYMhshFVEYSvwkmOSWc/U7DPZryaK8vVj
Wxq28OunelTLifFkjrnP4NSeMmRu1f4vAo/YYMMR7Xg6b1BEfC9RHQUj9BOYZZZz
gAN+qSSnnzdrSA==
-----END CERTIFICATE-----
Generated at Thu Aug 13 07:47:13 2026 by rpki-client