Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/9f3205-52e9-46a4-b6c2-c703522488f9/1/AoT9lBz3spS4gudNsPyXFnQ02rw.mft
File: AoT9lBz3spS4gudNsPyXFnQ02rw.mft (raw, json)
Hash identifier: RxjFdI56qglxii6+6uMPcZ3aTtCK6xki4J3Yx+iKilA=
Subject key identifier: 33:89:65:C6:FD:4A:BD:C8:79:D1:85:51:A7:FB:90:7B:57:03:4B:47
Authority key identifier: 02:84:FD:94:1C:F7:B2:94:B8:82:E7:4D:B0:FC:97:16:74:34:DA:BC
Certificate issuer: /CN=0284fd941cf7b294b882e74db0fc97167434dabc
Certificate serial: 019F9F2807C2ACB29EC3D4EA3649DC2FBD0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AoT9lBz3spS4gudNsPyXFnQ02rw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/9f3205-52e9-46a4-b6c2-c703522488f9/1/AoT9lBz3spS4gudNsPyXFnQ02rw.mft
Manifest number: 01A8
Signing time: Sun 26 Jul 2026 16:00:28 +0000
Manifest this update: Sun 26 Jul 2026 16:00:28 +0000
Manifest next update: Mon 27 Jul 2026 16:00:28 +0000
Files and hashes: 1: AoT9lBz3spS4gudNsPyXFnQ02rw.crl (hash: OYPjVfCsNe3kMq0fW2MsrfrsHH8UVLUDdzu6o1+Zbbw=)
2: KWX40V7o8A6zMkKoIGkCmwKYmr0.roa (hash: nJ0kf2dRdOxQXbxBLcQMmLtNRpU/yw5QdnU4YcpxOtc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/9f3205-52e9-46a4-b6c2-c703522488f9/1/AoT9lBz3spS4gudNsPyXFnQ02rw.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/9f3205-52e9-46a4-b6c2-c703522488f9/1/AoT9lBz3spS4gudNsPyXFnQ02rw.mft
rsync://rpki.ripe.net/repository/DEFAULT/AoT9lBz3spS4gudNsPyXFnQ02rw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 14:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:9f:28:07:c2:ac:b2:9e:c3:d4:ea:36:49:dc:2f:bd:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0284fd941cf7b294b882e74db0fc97167434dabc
Validity
Not Before: Jul 26 16:00:28 2026 GMT
Not After : Jul 27 16:00:28 2026 GMT
Subject: CN=338965c6fd4abdc879d18551a7fb907b57034b47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:98:32:99:14:0e:48:0a:04:7f:f0:8c:ad:f4:
3f:c1:c6:56:5d:e7:5a:8b:db:95:b7:eb:87:15:7d:
f8:68:bc:fa:16:71:c9:9a:fd:19:c3:d7:b4:d8:0a:
95:4b:b5:cc:07:ae:5e:0b:00:86:25:7a:43:9b:ba:
16:49:ea:3a:dc:7f:b7:38:34:9d:96:41:08:45:2c:
e3:a6:95:7a:16:46:bc:2b:4b:e9:03:7b:0f:07:5c:
2c:5c:b9:92:ef:73:1c:f3:3e:7a:d0:b1:4b:2c:bc:
42:62:2d:f5:e1:91:a6:28:eb:c3:a4:ae:47:ca:3a:
f0:6f:5f:dc:17:c6:1d:7b:08:df:02:87:e4:1b:f6:
88:61:af:53:d0:03:38:c3:2b:58:8c:a0:d4:b9:93:
c8:c6:a1:88:58:ee:83:37:92:69:4a:fc:49:76:ec:
ca:9c:5d:0e:b7:e7:97:ad:22:7e:2b:b5:bf:f4:69:
12:cf:19:a7:f3:20:8a:61:d7:fa:e7:fd:f1:00:a4:
18:8d:5e:25:c7:8c:0f:27:81:2c:09:92:0a:8e:c5:
2f:4e:b3:69:1a:1f:d2:32:a6:ce:af:b4:02:74:3b:
ad:0e:15:25:9a:20:09:6c:b5:59:91:5c:01:79:cd:
c8:9c:5a:a0:f5:e6:b3:b9:70:cc:11:47:bd:b2:f0:
74:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:89:65:C6:FD:4A:BD:C8:79:D1:85:51:A7:FB:90:7B:57:03:4B:47
X509v3 Authority Key Identifier:
keyid:02:84:FD:94:1C:F7:B2:94:B8:82:E7:4D:B0:FC:97:16:74:34:DA:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AoT9lBz3spS4gudNsPyXFnQ02rw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/9f3205-52e9-46a4-b6c2-c703522488f9/1/AoT9lBz3spS4gudNsPyXFnQ02rw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/9f3205-52e9-46a4-b6c2-c703522488f9/1/AoT9lBz3spS4gudNsPyXFnQ02rw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:a6:d4:ec:40:59:b4:55:82:c8:d5:d2:ff:70:48:f5:7a:50:
1d:d8:1f:d3:50:75:e7:41:16:91:7c:4b:0e:b3:fd:38:a0:29:
6d:b5:51:6a:c7:5b:e5:ad:64:f8:87:95:53:58:ca:25:8c:a7:
25:e9:9f:25:7a:50:6b:2d:7a:61:6f:15:00:8d:c9:cd:2b:ad:
2d:dd:47:68:d0:b0:ac:af:ef:5d:5e:a9:f1:53:0d:bf:ae:03:
f9:21:ed:08:71:6b:61:ef:91:77:50:f0:46:1d:4f:c0:28:9d:
6a:1f:8d:60:2a:10:41:42:2d:63:af:db:3e:77:39:5b:db:ed:
8a:49:66:8d:8a:83:da:9b:4f:26:7f:d1:f1:83:2f:3b:71:16:
05:f6:ee:45:d4:d2:ac:c2:0d:5a:cf:c9:8f:6b:51:fc:a5:6d:
28:18:4a:2b:8c:2c:06:0d:d4:ae:63:2f:b7:ce:bc:ab:14:eb:
69:33:49:22:f0:b0:7d:f9:72:9f:3b:b8:46:6d:54:22:ea:e9:
93:cd:d6:75:87:5d:d1:e1:5e:f8:55:74:cc:ac:ae:aa:09:70:
63:d1:6a:13:af:79:47:93:a0:a2:ff:a2:df:14:02:7a:72:c4:
37:71:b1:cc:3d:da:21:cf:64:ed:f7:ac:a5:a0:0c:4b:32:6f:
d4:3a:73:7f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+fKAfCrLKew9TqNkncL70LMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAyODRmZDk0MWNmN2IyOTRiODgyZTc0ZGIwZmM5NzE2NzQz
NGRhYmMwHhcNMjYwNzI2MTYwMDI4WhcNMjYwNzI3MTYwMDI4WjAzMTEwLwYDVQQD
EygzMzg5NjVjNmZkNGFiZGM4NzlkMTg1NTFhN2ZiOTA3YjU3MDM0YjQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3ZgymRQOSAoEf/CMrfQ/wcZWXeda
i9uVt+uHFX34aLz6FnHJmv0Zw9e02AqVS7XMB65eCwCGJXpDm7oWSeo63H+3ODSd
lkEIRSzjppV6Fka8K0vpA3sPB1wsXLmS73Mc8z560LFLLLxCYi314ZGmKOvDpK5H
yjrwb1/cF8YdewjfAofkG/aIYa9T0AM4wytYjKDUuZPIxqGIWO6DN5JpSvxJduzK
nF0Ot+eXrSJ+K7W/9GkSzxmn8yCKYdf65/3xAKQYjV4lx4wPJ4EsCZIKjsUvTrNp
Gh/SMqbOr7QCdDutDhUlmiAJbLVZkVwBec3InFqg9eazuXDMEUe9svB0BwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDOJZcb9Sr3IedGFUaf7kHtXA0tHMB8GA1UdIwQY
MBaAFAKE/ZQc97KUuILnTbD8lxZ0NNq8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQW9UOWxCejNzcFM0Z3VkTnNQeVhGblEwMnJ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC85ZjMyMDUtNTJlOS00NmE0LWI2YzIt
YzcwMzUyMjQ4OGY5LzEvQW9UOWxCejNzcFM0Z3VkTnNQeVhGblEwMnJ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OC85ZjMyMDUtNTJlOS00NmE0LWI2YzItYzcwMzUyMjQ4OGY5
LzEvQW9UOWxCejNzcFM0Z3VkTnNQeVhGblEwMnJ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG6bU7EBZ
tFWCyNXS/3BI9XpQHdgf01B150EWkXxLDrP9OKApbbVRasdb5a1k+IeVU1jKJYyn
JemfJXpQay16YW8VAI3JzSutLd1HaNCwrK/vXV6p8VMNv64D+SHtCHFrYe+Rd1Dw
Rh1PwCidah+NYCoQQUItY6/bPnc5W9vtiklmjYqD2ptPJn/R8YMvO3EWBfbuRdTS
rMINWs/Jj2tR/KVtKBhKK4wsBg3UrmMvt868qxTraTNJIvCwfflynzu4Rm1UIurp
k83WdYdd0eFe+FV0zKyuqglwY9FqE695R5Ogov+i3xQCenLEN3GxzD3aIc9k7fes
paAMSzJv1Dpzfw==
-----END CERTIFICATE-----
Generated at Sun Jul 26 20:22:07 2026 by rpki-client