
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6f/d07435-750e-4f1a-bf78-6ed8ac7b52bf/1/AosRDxmx_lSJjpWJr8Y_kDdJ3_U.mft
File: AosRDxmx_lSJjpWJr8Y_kDdJ3_U.mft (raw, json)
Hash identifier: vQ5H6v9b59ndn5xopVywCUmpgBEuKo4ZjFf3PSfIuCo=
Subject key identifier: FB:BF:91:4A:E2:A0:EF:25:88:FF:69:D3:EC:1A:D9:3D:14:B9:22:CA
Authority key identifier: 02:8B:11:0F:19:B1:FE:54:89:8E:95:89:AF:C6:3F:90:37:49:DF:F5
Certificate issuer: /CN=028b110f19b1fe54898e9589afc63f903749dff5
Certificate serial: 01A040F2A51A68A097A3F7E26594BC8D4249
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AosRDxmx_lSJjpWJr8Y_kDdJ3_U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/d07435-750e-4f1a-bf78-6ed8ac7b52bf/1/AosRDxmx_lSJjpWJr8Y_kDdJ3_U.mft
Manifest number: 54
Signing time: Thu 27 Aug 2026 02:00:38 +0000
Manifest this update: Thu 27 Aug 2026 02:00:38 +0000
Manifest next update: Fri 28 Aug 2026 02:00:38 +0000
Files and hashes: 1: AosRDxmx_lSJjpWJr8Y_kDdJ3_U.crl (hash: YacTWb6qr3hGtJeKbrrWaTlptaq6tKL2E9QLoUgYS4o=)
2: _IpDACBsZMbScuGMBl89ukS0we8.roa (hash: XGdoR2Dqje9kO00dw3KBe8qTky3l0qaCLX0c+Z0GJ58=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/d07435-750e-4f1a-bf78-6ed8ac7b52bf/1/AosRDxmx_lSJjpWJr8Y_kDdJ3_U.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/d07435-750e-4f1a-bf78-6ed8ac7b52bf/1/AosRDxmx_lSJjpWJr8Y_kDdJ3_U.mft
rsync://rpki.ripe.net/repository/DEFAULT/AosRDxmx_lSJjpWJr8Y_kDdJ3_U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 20:12:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:40:f2:a5:1a:68:a0:97:a3:f7:e2:65:94:bc:8d:42:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=028b110f19b1fe54898e9589afc63f903749dff5
Validity
Not Before: Aug 27 02:00:38 2026 GMT
Not After : Aug 28 02:00:38 2026 GMT
Subject: CN=fbbf914ae2a0ef2588ff69d3ec1ad93d14b922ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:6e:90:0e:bf:c7:a3:f7:19:8c:35:e9:bf:f9:
e8:c6:a2:61:7f:9c:8e:ed:16:50:b2:f4:06:fe:67:
ef:23:ee:6f:5a:9a:d4:8a:a5:76:b5:08:1e:3d:02:
e5:39:44:2e:7d:6f:47:53:8c:d0:6d:74:26:09:9d:
98:87:dd:ba:c2:7e:a3:f5:be:be:38:09:fd:10:46:
7e:08:5b:97:3c:22:32:18:d3:52:6f:6b:8a:5a:d3:
5e:0b:ea:2e:6c:92:d7:79:06:bc:4f:a0:9d:38:f4:
4a:56:06:07:bb:84:95:78:48:b1:7f:19:d6:0e:53:
a8:a0:20:68:44:bc:c8:cf:96:20:ff:99:fa:70:2d:
e5:77:8c:73:31:0f:70:70:60:ed:41:b7:e2:86:b4:
0c:c1:35:3b:c5:b1:0b:61:c5:e1:52:f1:ee:27:d0:
9c:41:ab:aa:8c:59:08:a1:e3:3c:b8:47:31:72:57:
79:6d:c9:7b:5e:0b:1f:83:50:f5:30:bd:46:e6:bb:
49:81:08:f3:e2:34:76:9c:96:1f:ef:c1:2a:2c:8d:
3d:4e:d0:db:fd:f8:5b:dd:95:bd:b8:8c:3a:ef:55:
e6:48:5b:17:f2:47:f5:c8:79:41:8d:3f:5c:14:69:
f4:7e:3a:49:0e:40:40:81:00:56:db:5f:16:ed:78:
1c:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:BF:91:4A:E2:A0:EF:25:88:FF:69:D3:EC:1A:D9:3D:14:B9:22:CA
X509v3 Authority Key Identifier:
keyid:02:8B:11:0F:19:B1:FE:54:89:8E:95:89:AF:C6:3F:90:37:49:DF:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AosRDxmx_lSJjpWJr8Y_kDdJ3_U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/d07435-750e-4f1a-bf78-6ed8ac7b52bf/1/AosRDxmx_lSJjpWJr8Y_kDdJ3_U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/d07435-750e-4f1a-bf78-6ed8ac7b52bf/1/AosRDxmx_lSJjpWJr8Y_kDdJ3_U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:28:f6:16:f9:df:a5:a2:88:00:ac:c6:24:bc:f9:23:71:52:
34:ff:8d:43:d3:85:a0:88:d4:4f:90:b5:a7:bc:bc:a9:16:b9:
66:4d:d7:dc:f8:c3:39:5c:03:d4:ea:14:8a:94:1a:bf:dd:1c:
a1:39:47:6a:83:de:c9:94:30:7f:b3:30:9c:f7:69:7c:ed:09:
01:1a:80:f6:f2:1e:13:95:07:a8:a2:88:65:e8:d9:e6:d1:df:
a5:1d:45:9e:3c:c9:64:7d:e5:43:22:26:33:2a:da:13:d0:fd:
a0:01:07:74:53:95:13:9e:94:fc:64:5d:1d:0d:81:29:92:37:
0a:ee:21:a4:0e:2a:f5:02:74:6f:62:e2:86:c4:3c:26:14:87:
44:a1:81:93:22:09:d2:db:b9:41:3d:66:b7:df:e3:be:8c:2e:
e1:d4:8d:82:ec:dd:de:83:a6:a8:bf:5b:fa:54:df:d0:26:dc:
f7:28:c9:21:d4:f7:da:9e:d2:d1:24:d7:70:54:8d:96:15:7b:
6a:91:b9:54:92:90:c5:9a:27:ff:e1:77:ec:f1:0c:5d:d3:7b:
a9:88:a9:8e:43:e4:7e:51:e1:7d:b3:4f:7f:4b:b9:bb:f5:f9:
6d:a0:e6:84:e2:5b:41:10:b8:6c:e0:c5:0c:16:2c:00:e5:63:
59:d0:e1:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 04:50:29 2026 by rpki-client