Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/e46951-8fa4-45b6-87bf-5a4b7b5e4007/1/AozMjYF4yenS_8Uy_LXNaL6qd20.mft
File: AozMjYF4yenS_8Uy_LXNaL6qd20.mft (raw, json)
Hash identifier: 6b5HnRsBnHulLmudB+wXGLth+sTtGCA2eeHeCIw3WwI=
Subject key identifier: 98:18:EA:33:98:22:6B:9D:57:F5:12:BA:B8:CB:4C:22:46:B8:8A:84
Authority key identifier: 02:8C:CC:8D:81:78:C9:E9:D2:FF:C5:32:FC:B5:CD:68:BE:AA:77:6D
Certificate issuer: /CN=028ccc8d8178c9e9d2ffc532fcb5cd68beaa776d
Certificate serial: 019CE55AE54DC39EE2676914DD9B819C3244
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AozMjYF4yenS_8Uy_LXNaL6qd20.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/e46951-8fa4-45b6-87bf-5a4b7b5e4007/1/AozMjYF4yenS_8Uy_LXNaL6qd20.mft
Manifest number: 02AD
Signing time: Fri 13 Mar 2026 04:01:05 +0000
Manifest this update: Fri 13 Mar 2026 04:01:05 +0000
Manifest next update: Sat 14 Mar 2026 04:01:05 +0000
Files and hashes: 1: AozMjYF4yenS_8Uy_LXNaL6qd20.crl (hash: RB1BrdHdUMoO4DWbGmHe/lVTo7vJrkyKhzXNvbHUo/4=)
2: nmpgPMBFt9dLqNX0M81_MpAwEgA.roa (hash: 4RQmSgy56Vqmok8SF0GYYTjto7wxmhh7LR4/RfXSDMg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/e46951-8fa4-45b6-87bf-5a4b7b5e4007/1/AozMjYF4yenS_8Uy_LXNaL6qd20.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/e46951-8fa4-45b6-87bf-5a4b7b5e4007/1/AozMjYF4yenS_8Uy_LXNaL6qd20.mft
rsync://rpki.ripe.net/repository/DEFAULT/AozMjYF4yenS_8Uy_LXNaL6qd20.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 04:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e5:5a:e5:4d:c3:9e:e2:67:69:14:dd:9b:81:9c:32:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=028ccc8d8178c9e9d2ffc532fcb5cd68beaa776d
Validity
Not Before: Mar 13 04:01:05 2026 GMT
Not After : Mar 14 04:01:05 2026 GMT
Subject: CN=9818ea3398226b9d57f512bab8cb4c2246b88a84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:53:40:7d:d3:2e:4e:a2:22:48:60:28:95:b8:
fa:4f:58:14:9a:2d:a7:73:f3:d9:c3:c1:6b:54:a9:
14:ea:de:19:b7:10:48:8a:3c:0f:14:e8:93:57:0c:
6c:47:90:91:21:87:64:76:14:cc:cd:53:1c:27:a6:
e1:ec:78:c6:04:2c:00:00:7a:d8:b1:83:ba:33:a9:
e3:ec:23:2c:b4:99:cf:99:e1:70:28:55:8b:d6:21:
68:93:d2:bc:5c:a3:a1:82:f3:dc:97:3a:4e:63:79:
95:b8:3c:f7:c5:6c:fb:59:1e:66:2e:7e:e4:15:97:
b5:4a:89:36:9e:37:ae:c1:32:a1:57:eb:9c:1a:a7:
be:5e:e8:86:f4:75:5e:ee:5d:e1:80:dd:33:10:50:
6a:73:cc:17:5f:b4:ac:f9:92:74:56:ce:b2:c4:95:
40:ca:f1:8d:80:83:41:1b:3d:05:c4:0e:6c:14:02:
e2:3b:7d:d0:00:2a:16:d2:8b:5b:a5:ef:ea:5b:e8:
59:4d:3c:30:e1:3a:8e:da:dc:74:01:2e:4a:7d:8a:
c4:90:7d:4b:55:dc:11:f3:9c:e4:da:30:27:22:b4:
6f:f1:5b:32:40:79:75:60:26:95:0c:74:32:16:7b:
d4:a3:06:6a:45:c7:68:07:50:0d:b1:54:a8:b6:6d:
6d:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:18:EA:33:98:22:6B:9D:57:F5:12:BA:B8:CB:4C:22:46:B8:8A:84
X509v3 Authority Key Identifier:
keyid:02:8C:CC:8D:81:78:C9:E9:D2:FF:C5:32:FC:B5:CD:68:BE:AA:77:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AozMjYF4yenS_8Uy_LXNaL6qd20.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/e46951-8fa4-45b6-87bf-5a4b7b5e4007/1/AozMjYF4yenS_8Uy_LXNaL6qd20.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/e46951-8fa4-45b6-87bf-5a4b7b5e4007/1/AozMjYF4yenS_8Uy_LXNaL6qd20.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:a1:b2:c4:de:e4:96:6a:94:f1:d4:d3:00:17:48:29:d0:9b:
79:23:e8:70:3b:2c:72:07:c0:f7:e7:0f:6b:e4:a5:c8:5b:a5:
bf:34:c7:60:60:91:13:4a:6e:92:1b:48:c9:6a:eb:82:5d:49:
80:cf:7f:35:ac:70:66:1f:22:ee:90:0d:d4:60:05:57:9a:a0:
2a:62:59:2a:83:f6:6b:a0:80:5e:73:40:96:cd:c4:0f:1c:5e:
b9:15:c8:89:a8:5e:ef:8d:88:d8:c9:9c:43:a9:78:95:c1:34:
38:35:cd:10:d9:7e:9e:b4:26:3d:b3:a6:cc:a7:17:a8:b4:fe:
20:fc:4c:2f:a5:a5:72:b9:e8:e5:d0:5d:2c:fd:38:c0:e1:0f:
8e:30:7a:7f:b6:be:08:91:ce:22:f6:85:70:40:cd:9e:e4:08:
64:0d:46:2e:ba:d1:82:13:da:99:f5:54:70:40:4d:72:3e:23:
a7:c6:5e:b2:1d:91:28:0d:6f:2a:c5:7d:4d:a0:36:da:0f:3a:
9b:68:40:42:81:fe:7d:fa:ae:4a:d1:2c:d8:c6:45:eb:4a:19:
d1:e9:de:6d:aa:bd:25:7c:ee:36:c0:c6:12:c9:50:25:30:91:
ff:f5:f8:b1:86:47:72:2a:91:d6:90:ea:48:7d:25:8a:8d:47:
42:a0:5f:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 11:57:25 2026 by rpki-client