Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/e46951-8fa4-45b6-87bf-5a4b7b5e4007/1/AozMjYF4yenS_8Uy_LXNaL6qd20.mft
File: AozMjYF4yenS_8Uy_LXNaL6qd20.mft (raw, json)
Hash identifier: 7r5dWKXvoAwoN1TEfouoQElRHSYAHGB5/0/5vrBGGng=
Subject key identifier: 4A:16:29:8C:79:3F:FB:46:E1:06:48:D2:36:04:9B:73:40:84:58:F0
Authority key identifier: 02:8C:CC:8D:81:78:C9:E9:D2:FF:C5:32:FC:B5:CD:68:BE:AA:77:6D
Certificate issuer: /CN=028ccc8d8178c9e9d2ffc532fcb5cd68beaa776d
Certificate serial: 019FA260E618AD4CE783AB3EED5E6696013B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AozMjYF4yenS_8Uy_LXNaL6qd20.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/e46951-8fa4-45b6-87bf-5a4b7b5e4007/1/AozMjYF4yenS_8Uy_LXNaL6qd20.mft
Manifest number: 0418
Signing time: Mon 27 Jul 2026 07:01:27 +0000
Manifest this update: Mon 27 Jul 2026 07:01:27 +0000
Manifest next update: Tue 28 Jul 2026 07:01:27 +0000
Files and hashes: 1: AozMjYF4yenS_8Uy_LXNaL6qd20.crl (hash: BIrsBaDma5/kFE5bjItb5JpAZE/Mm/hJ4bFVwmA3kws=)
2: nmpgPMBFt9dLqNX0M81_MpAwEgA.roa (hash: 4RQmSgy56Vqmok8SF0GYYTjto7wxmhh7LR4/RfXSDMg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/e46951-8fa4-45b6-87bf-5a4b7b5e4007/1/AozMjYF4yenS_8Uy_LXNaL6qd20.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/e46951-8fa4-45b6-87bf-5a4b7b5e4007/1/AozMjYF4yenS_8Uy_LXNaL6qd20.mft
rsync://rpki.ripe.net/repository/DEFAULT/AozMjYF4yenS_8Uy_LXNaL6qd20.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 07:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a2:60:e6:18:ad:4c:e7:83:ab:3e:ed:5e:66:96:01:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=028ccc8d8178c9e9d2ffc532fcb5cd68beaa776d
Validity
Not Before: Jul 27 07:01:27 2026 GMT
Not After : Jul 28 07:01:27 2026 GMT
Subject: CN=4a16298c793ffb46e10648d236049b73408458f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:ea:e4:ae:9b:38:75:a2:ca:94:c6:b1:15:f0:
1e:c4:1f:ed:6b:11:80:06:61:82:fb:75:34:40:26:
9e:ee:a5:35:96:2c:8b:7c:6c:1f:be:49:fd:98:90:
e4:d9:a3:7f:a5:44:09:55:b4:e6:aa:75:b8:bf:22:
86:ec:8d:96:79:cd:b3:52:f4:ae:30:59:5f:71:73:
f0:b2:24:47:e9:5e:37:5b:9a:ec:44:c5:bd:8a:3c:
c1:df:a5:63:a5:df:93:e9:60:8b:b6:24:e1:fe:ac:
05:88:75:30:f1:9c:65:ec:2e:23:36:77:5d:f4:d5:
14:07:7e:e2:9f:49:e4:2a:a5:aa:bc:84:c1:ff:1c:
7c:43:75:f8:b3:02:9c:ab:da:71:8e:a3:ad:0c:1a:
f3:ae:a5:29:6a:21:b9:1f:6d:fb:ae:f2:c8:3b:93:
e6:be:23:ec:79:1c:3d:c9:51:5e:2d:04:e3:b9:d6:
b4:9d:ea:70:75:f7:2b:98:6d:4e:ae:13:e1:3b:be:
c6:d5:93:fb:35:22:db:5b:d6:e8:43:2c:1e:65:da:
8c:2f:e5:61:85:4e:3f:c7:22:18:ae:78:22:b8:75:
11:7a:7c:17:3a:bf:b9:32:b9:86:24:7b:62:1b:4c:
8f:1b:d1:fe:3f:36:25:78:a8:85:11:2b:8e:3b:68:
b9:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:16:29:8C:79:3F:FB:46:E1:06:48:D2:36:04:9B:73:40:84:58:F0
X509v3 Authority Key Identifier:
keyid:02:8C:CC:8D:81:78:C9:E9:D2:FF:C5:32:FC:B5:CD:68:BE:AA:77:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AozMjYF4yenS_8Uy_LXNaL6qd20.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/e46951-8fa4-45b6-87bf-5a4b7b5e4007/1/AozMjYF4yenS_8Uy_LXNaL6qd20.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/e46951-8fa4-45b6-87bf-5a4b7b5e4007/1/AozMjYF4yenS_8Uy_LXNaL6qd20.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:15:e5:43:c2:3c:d1:ac:fa:62:69:9d:27:9a:76:20:a4:ed:
c1:3c:32:c6:65:cc:14:c1:3f:c5:e9:e5:35:cd:2d:b0:67:f1:
99:f3:df:b9:e7:74:ec:50:02:e2:0b:8a:a4:bc:8d:d4:5e:8d:
49:cd:02:b5:06:c7:80:63:f9:52:1e:a4:3c:c1:23:15:72:a8:
3e:c7:ea:df:95:6e:92:23:c4:f7:95:ca:67:ed:02:4c:6d:72:
2a:98:de:5d:b4:88:62:e2:bf:65:a8:54:23:a1:7a:7a:0a:48:
72:b2:d3:2e:ff:d7:e6:b2:fd:c2:57:27:2f:6e:d0:95:3d:af:
24:19:f4:bb:40:e1:67:05:cc:19:be:99:f5:30:0e:a0:57:14:
5f:2a:4d:0a:ef:76:2d:c4:a4:90:f1:69:ff:78:32:ea:b7:d6:
e1:dc:82:ae:0e:20:b9:6d:9d:b2:eb:e2:9b:31:6d:9c:08:78:
29:71:39:8f:82:81:c7:2c:02:18:86:5d:ea:38:33:e7:63:d5:
a0:eb:50:05:31:a9:2e:c9:fb:f3:64:32:11:d8:db:d0:d8:39:
3a:e6:1b:4c:8b:91:28:93:a1:d0:bb:75:d8:e8:4e:18:1c:30:
ca:75:c7:11:3f:52:1e:a8:e2:b6:91:54:10:58:24:90:c2:4e:
60:f6:07:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 13:02:38 2026 by rpki-client