Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/74/e46951-8fa4-45b6-87bf-5a4b7b5e4007/1/AozMjYF4yenS_8Uy_LXNaL6qd20.mft
File: AozMjYF4yenS_8Uy_LXNaL6qd20.mft (raw, json)
Hash identifier: 1CdkUl3PwQgRE9i00tIi4RZHRF3wLl48YW7wFDlzck4=
Subject key identifier: 16:7F:BA:E5:81:B5:DB:B9:F4:E3:22:75:7A:0B:EF:1F:7B:9B:8A:8A
Authority key identifier: 02:8C:CC:8D:81:78:C9:E9:D2:FF:C5:32:FC:B5:CD:68:BE:AA:77:6D
Certificate issuer: /CN=028ccc8d8178c9e9d2ffc532fcb5cd68beaa776d
Certificate serial: 01A08C0CD033920640A95337822EE782493F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AozMjYF4yenS_8Uy_LXNaL6qd20.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/e46951-8fa4-45b6-87bf-5a4b7b5e4007/1/AozMjYF4yenS_8Uy_LXNaL6qd20.mft
Manifest number: 0491
Signing time: Thu 10 Sep 2026 16:00:44 +0000
Manifest this update: Thu 10 Sep 2026 16:00:44 +0000
Manifest next update: Fri 11 Sep 2026 16:00:44 +0000
Files and hashes: 1: AozMjYF4yenS_8Uy_LXNaL6qd20.crl (hash: C/DgM9j/2a//Twv0MWYD5UiQF3l5TiWPpeZ96DMq3pk=)
2: nmpgPMBFt9dLqNX0M81_MpAwEgA.roa (hash: 4RQmSgy56Vqmok8SF0GYYTjto7wxmhh7LR4/RfXSDMg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/e46951-8fa4-45b6-87bf-5a4b7b5e4007/1/AozMjYF4yenS_8Uy_LXNaL6qd20.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/e46951-8fa4-45b6-87bf-5a4b7b5e4007/1/AozMjYF4yenS_8Uy_LXNaL6qd20.mft
rsync://rpki.ripe.net/repository/DEFAULT/AozMjYF4yenS_8Uy_LXNaL6qd20.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8c:0c:d0:33:92:06:40:a9:53:37:82:2e:e7:82:49:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=028ccc8d8178c9e9d2ffc532fcb5cd68beaa776d
Validity
Not Before: Sep 10 16:00:44 2026 GMT
Not After : Sep 11 16:00:44 2026 GMT
Subject: CN=167fbae581b5dbb9f4e322757a0bef1f7b9b8a8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:40:5e:09:d8:3b:d4:78:b2:52:9b:bc:38:93:
27:80:4e:96:8c:7d:13:8d:9a:a9:53:a5:11:8b:d1:
e3:ae:47:87:99:f5:5d:45:b9:29:4b:f7:41:28:a0:
85:e0:f0:0a:ee:20:c4:68:cb:6f:b9:b5:01:3f:35:
53:34:01:6a:08:a1:71:81:63:7c:6e:a9:94:fb:17:
96:bb:88:27:0d:09:d2:3f:08:f3:8a:48:8f:84:9f:
60:73:84:30:c4:3f:a0:ac:3c:42:f4:26:33:52:d0:
51:fb:64:a5:4c:9f:da:cc:91:ef:1d:a3:76:dd:5a:
80:62:ae:fb:0a:3d:66:50:f3:32:61:98:40:35:6f:
6e:3c:7f:b4:ad:8f:fb:65:11:ea:b3:55:f8:06:53:
83:73:6f:88:89:dc:9c:10:79:05:6f:80:38:2f:7d:
b1:f1:38:b8:73:38:e3:55:4b:4c:18:a7:72:a1:24:
0e:74:66:59:07:9d:bb:27:d4:8d:87:b1:30:0b:25:
15:89:12:20:73:d6:64:a4:07:00:f8:a5:0a:27:16:
70:b0:5f:ca:c8:3d:da:2a:e9:f3:42:24:da:d1:58:
75:91:b5:ae:f7:08:42:1d:7e:0c:e7:41:55:cc:0e:
b9:8f:2c:7c:ff:49:fc:8a:46:67:30:f6:f7:62:61:
9a:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:7F:BA:E5:81:B5:DB:B9:F4:E3:22:75:7A:0B:EF:1F:7B:9B:8A:8A
X509v3 Authority Key Identifier:
keyid:02:8C:CC:8D:81:78:C9:E9:D2:FF:C5:32:FC:B5:CD:68:BE:AA:77:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AozMjYF4yenS_8Uy_LXNaL6qd20.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/e46951-8fa4-45b6-87bf-5a4b7b5e4007/1/AozMjYF4yenS_8Uy_LXNaL6qd20.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/e46951-8fa4-45b6-87bf-5a4b7b5e4007/1/AozMjYF4yenS_8Uy_LXNaL6qd20.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:b2:4b:29:05:7c:02:3e:8d:bd:a5:65:44:76:03:b2:1b:e4:
69:0d:59:79:20:f5:99:b2:fb:01:f4:79:77:f5:ad:cf:48:78:
30:80:11:85:9a:58:e2:cf:4b:ae:b6:bc:94:0c:0f:9c:29:25:
7d:b5:44:2b:58:26:de:b6:ae:39:6d:2c:9b:85:01:cd:b3:a5:
b9:38:ae:0c:6e:8d:6d:67:9c:48:23:02:66:b7:50:21:e3:f3:
60:9b:9f:0b:de:ea:2c:85:de:8d:3a:fe:29:2d:6d:de:fc:ec:
6d:04:51:70:fa:87:6f:c7:79:26:96:23:c1:d4:9a:15:f0:01:
ee:96:47:2e:39:27:f9:b5:80:c8:ab:81:54:f1:36:79:9c:32:
ad:a5:66:b0:e3:39:ca:ec:63:8d:8a:8c:50:6a:fb:47:08:60:
f7:bb:32:2d:a3:96:13:41:e8:f2:f9:22:64:f6:f6:e6:af:b9:
af:ef:76:a2:2a:c1:7a:80:2f:4f:6b:87:f6:66:c2:55:30:04:
73:f3:aa:83:25:bb:d6:c0:1e:8d:32:e8:f7:5b:46:78:97:8f:
33:61:d7:12:7d:b2:14:14:32:7e:4a:d7:78:3e:b4:02:19:c2:
b9:24:79:a1:49:f1:dd:3e:c2:61:f9:ab:60:93:e1:61:b2:21:
58:68:af:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 21:58:28 2026 by rpki-client