Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/68/9f3205-52e9-46a4-b6c2-c703522488f9/1/AoT9lBz3spS4gudNsPyXFnQ02rw.mft
File: AoT9lBz3spS4gudNsPyXFnQ02rw.mft (raw, json)
Hash identifier: mJVeZ9Pn1+OH9Yr+UUtifa7ojOOXGIdlINd5652CAas=
Subject key identifier: 52:D6:52:2B:3F:8F:2F:F1:20:2E:C9:8A:8C:1F:35:33:B5:53:B5:CA
Authority key identifier: 02:84:FD:94:1C:F7:B2:94:B8:82:E7:4D:B0:FC:97:16:74:34:DA:BC
Certificate issuer: /CN=0284fd941cf7b294b882e74db0fc97167434dabc
Certificate serial: 01A17C28CE0030F6B0AE5EA075B0D666E59F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AoT9lBz3spS4gudNsPyXFnQ02rw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/9f3205-52e9-46a4-b6c2-c703522488f9/1/AoT9lBz3spS4gudNsPyXFnQ02rw.mft
Manifest number: 029F
Signing time: Tue 27 Oct 2026 07:00:11 +0000
Manifest this update: Tue 27 Oct 2026 07:00:11 +0000
Manifest next update: Wed 28 Oct 2026 07:00:11 +0000
Files and hashes: 1: AoT9lBz3spS4gudNsPyXFnQ02rw.crl (hash: ygxNrv5V2GA/GawQjDv4hmnzsxG6Oko+saOdqFFbr3Y=)
2: KWX40V7o8A6zMkKoIGkCmwKYmr0.roa (hash: nJ0kf2dRdOxQXbxBLcQMmLtNRpU/yw5QdnU4YcpxOtc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/9f3205-52e9-46a4-b6c2-c703522488f9/1/AoT9lBz3spS4gudNsPyXFnQ02rw.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/9f3205-52e9-46a4-b6c2-c703522488f9/1/AoT9lBz3spS4gudNsPyXFnQ02rw.mft
rsync://rpki.ripe.net/repository/DEFAULT/AoT9lBz3spS4gudNsPyXFnQ02rw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7c:28:ce:00:30:f6:b0:ae:5e:a0:75:b0:d6:66:e5:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0284fd941cf7b294b882e74db0fc97167434dabc
Validity
Not Before: Oct 27 07:00:11 2026 GMT
Not After : Oct 28 07:00:11 2026 GMT
Subject: CN=52d6522b3f8f2ff1202ec98a8c1f3533b553b5ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:c7:e1:30:68:c5:d0:1a:4d:d7:ef:43:e2:92:
c5:06:7f:ef:40:ad:6a:6a:39:6a:11:c6:12:ef:61:
80:9a:27:b1:75:3f:39:37:8d:16:c9:30:ee:8c:cc:
01:5f:66:2b:cf:7e:cb:1b:6b:79:f5:5d:d9:5e:65:
fc:9e:8e:64:ce:4c:2f:3d:d0:e0:97:64:91:22:7e:
f4:a3:01:21:23:a5:5d:21:55:8f:65:71:ae:2c:a4:
bf:30:ab:df:ce:94:e2:64:bf:0b:69:a4:d7:91:ec:
e3:39:af:b9:49:48:7e:12:86:a4:09:48:79:83:9b:
f3:55:f5:74:d2:dd:89:fc:a3:4c:4d:8f:62:67:15:
df:5d:03:ac:9b:04:5b:4c:44:3d:ce:ce:9a:66:bd:
0b:4e:c5:68:87:97:03:f2:df:73:5d:8d:78:6d:7a:
1a:fb:e9:88:b4:0f:4d:58:b7:16:5d:4b:3e:f7:3a:
8b:a0:01:02:41:c2:e3:fd:0c:77:40:6a:fa:60:bb:
be:e8:05:68:10:2f:42:35:fa:96:fb:fc:53:c1:02:
38:95:0d:94:1c:7d:10:3b:6a:28:f3:8c:a1:c4:23:
5a:9e:7d:eb:1c:62:0b:b8:77:66:40:32:ff:e2:bc:
15:37:2d:31:47:8b:64:50:ca:c9:48:a9:cd:c1:42:
ad:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:D6:52:2B:3F:8F:2F:F1:20:2E:C9:8A:8C:1F:35:33:B5:53:B5:CA
X509v3 Authority Key Identifier:
keyid:02:84:FD:94:1C:F7:B2:94:B8:82:E7:4D:B0:FC:97:16:74:34:DA:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AoT9lBz3spS4gudNsPyXFnQ02rw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/9f3205-52e9-46a4-b6c2-c703522488f9/1/AoT9lBz3spS4gudNsPyXFnQ02rw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/9f3205-52e9-46a4-b6c2-c703522488f9/1/AoT9lBz3spS4gudNsPyXFnQ02rw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:d2:16:ba:c0:90:ef:0f:d3:51:a1:a7:c0:cb:2d:a1:1d:ca:
26:cc:6d:a0:53:58:e7:00:c9:5b:df:ee:2d:3c:7b:54:83:b1:
4a:8d:ad:42:05:1b:52:dc:58:c5:78:d8:34:cf:6d:a1:a7:69:
ff:06:68:82:e7:91:d4:4b:f8:25:bc:59:e3:c7:79:3c:99:14:
86:f5:f3:10:8f:42:97:de:8e:d6:a5:28:b4:79:26:fe:ac:4f:
72:e6:18:9a:ce:60:16:eb:91:e5:f8:bd:f1:e8:ea:72:a0:27:
dc:bd:ce:4a:c0:d3:ae:3b:89:20:79:a6:0e:87:ad:5c:ff:25:
89:73:71:a8:6c:34:a7:17:cb:45:43:ec:fa:fe:64:ad:bd:56:
db:b7:9d:c1:01:d3:d8:90:42:7d:e7:62:59:a5:8d:31:7c:92:
5c:74:1b:40:9f:f0:28:72:a8:40:08:2e:89:d9:88:48:fa:09:
ba:3d:0a:cf:0d:a3:a1:ca:10:6e:ae:1d:f5:0d:01:f1:64:ff:
ff:2f:4e:45:f2:c9:81:88:a2:52:7d:ce:e7:12:ca:75:da:ff:
9b:1a:76:20:72:99:bc:1b:7f:08:fd:d1:36:02:a3:3d:00:7d:
de:49:06:69:70:fe:48:ec:fa:ef:04:9b:8e:2a:80:0d:1f:ff:
71:74:9b:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 11:12:20 2026 by rpki-client