Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/75/bb298b-3c39-49b2-abb1-11d636b56dab/1/aNogbIPVBeJUs-88dlD5-5NFNDU.mft
File: aNogbIPVBeJUs-88dlD5-5NFNDU.mft (raw, json)
Hash identifier: Id5BcYNFeq1GpwBnWVjVon+m/x1MF/QP8HjC1rngaLs=
Subject key identifier: A5:2E:85:F7:6E:0C:B5:0C:55:99:72:3A:4C:D1:A4:7A:DF:E3:50:26
Authority key identifier: 68:DA:20:6C:83:D5:05:E2:54:B3:EF:3C:76:50:F9:FB:93:45:34:35
Certificate issuer: /CN=68da206c83d505e254b3ef3c7650f9fb93453435
Certificate serial: 01A08AC364B85FD0C2B48C087C9BADE08FE3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aNogbIPVBeJUs-88dlD5-5NFNDU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/bb298b-3c39-49b2-abb1-11d636b56dab/1/aNogbIPVBeJUs-88dlD5-5NFNDU.mft
Manifest number: 0D37
Signing time: Thu 10 Sep 2026 10:00:56 +0000
Manifest this update: Thu 10 Sep 2026 10:00:56 +0000
Manifest next update: Fri 11 Sep 2026 10:00:56 +0000
Files and hashes: 1: aNogbIPVBeJUs-88dlD5-5NFNDU.crl (hash: G3F/+EH3qdxWvIg0FHsETeW84/aZeLP0NO7L5wTfm8k=)
2: tI5e6iAaAZ4nNbkpCHsMqp1-ktQ.roa (hash: A9GN5Q7BwonPYBSN1TVcg69kmzmTkS/zhmBwNF2zRqM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/bb298b-3c39-49b2-abb1-11d636b56dab/1/aNogbIPVBeJUs-88dlD5-5NFNDU.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/bb298b-3c39-49b2-abb1-11d636b56dab/1/aNogbIPVBeJUs-88dlD5-5NFNDU.mft
rsync://rpki.ripe.net/repository/DEFAULT/aNogbIPVBeJUs-88dlD5-5NFNDU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 10:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:c3:64:b8:5f:d0:c2:b4:8c:08:7c:9b:ad:e0:8f:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68da206c83d505e254b3ef3c7650f9fb93453435
Validity
Not Before: Sep 10 10:00:56 2026 GMT
Not After : Sep 11 10:00:56 2026 GMT
Subject: CN=a52e85f76e0cb50c5599723a4cd1a47adfe35026
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:e4:4d:ef:c9:99:ed:11:b2:ac:67:43:5f:03:
de:ef:30:69:46:1c:8b:71:a1:22:6e:5c:61:53:58:
03:0a:f7:1a:a7:d9:de:22:76:a4:ff:36:3a:1f:e6:
b2:85:ca:2e:f7:44:d7:36:87:d0:dd:44:da:f0:83:
0e:07:fb:84:ae:a8:01:58:a2:ae:d0:81:23:77:0a:
1e:c8:b0:7d:c6:1e:b4:33:3c:c2:7a:a7:65:2a:b2:
66:6a:b7:5e:a3:8a:e9:29:dc:d1:ce:ca:b4:87:56:
90:a5:3b:33:75:6b:05:73:c9:6f:a9:4b:f2:5e:95:
8b:44:33:d7:03:cf:39:af:2e:4d:64:1c:b2:45:f2:
ed:de:aa:2c:41:79:5b:07:4c:a8:c5:b5:58:94:be:
4e:d2:22:cb:57:81:22:1b:a4:fd:ec:ff:be:55:e8:
88:9c:82:fe:50:ab:86:38:a8:36:a4:78:55:e6:01:
9d:fb:0a:4d:9d:91:ff:91:0a:9c:5a:43:40:65:aa:
e4:7a:65:2e:c1:50:33:f6:b1:86:5c:d4:22:ec:b4:
e3:e7:01:26:44:8d:37:b7:1e:1c:ec:7a:32:e2:28:
d9:86:5e:9a:07:3e:dd:1c:2a:80:90:7a:a9:5b:39:
47:e9:77:a3:58:8d:37:60:35:54:a6:b1:ea:b8:dd:
d3:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:2E:85:F7:6E:0C:B5:0C:55:99:72:3A:4C:D1:A4:7A:DF:E3:50:26
X509v3 Authority Key Identifier:
keyid:68:DA:20:6C:83:D5:05:E2:54:B3:EF:3C:76:50:F9:FB:93:45:34:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aNogbIPVBeJUs-88dlD5-5NFNDU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/bb298b-3c39-49b2-abb1-11d636b56dab/1/aNogbIPVBeJUs-88dlD5-5NFNDU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/bb298b-3c39-49b2-abb1-11d636b56dab/1/aNogbIPVBeJUs-88dlD5-5NFNDU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:cc:cb:33:f8:d1:5f:86:4d:d7:f0:fe:a8:62:93:76:46:7b:
67:de:0c:be:2c:69:ef:9b:3b:4b:cb:0e:e8:66:a5:e6:f8:ac:
93:a9:c2:9a:5b:25:4b:80:ce:17:df:eb:9d:09:89:5a:f4:8c:
c4:c4:61:9f:ae:61:dc:4d:ea:6b:ee:ed:0b:eb:97:55:34:30:
68:a1:c5:5f:d6:78:8a:76:12:aa:14:31:d5:31:8f:aa:e4:e7:
7f:01:7d:ff:30:84:69:d9:de:eb:b8:a0:7c:b3:ae:4c:14:74:
ff:ad:a4:21:44:c6:7c:58:2e:12:54:46:46:dd:1a:8b:82:11:
9a:c6:53:3e:2c:f4:fb:a5:9c:b4:49:56:3e:73:39:ed:25:eb:
95:1f:df:3c:96:8d:24:ca:80:4d:e9:72:99:80:70:29:ef:a8:
23:b7:92:52:a1:5a:af:2c:36:23:f4:33:17:96:6e:85:c4:17:
20:6d:27:f0:88:fa:2f:dc:80:be:3a:21:34:04:da:51:5c:51:
37:ea:e2:34:a4:ab:57:aa:e7:c7:c0:37:0f:1b:62:aa:ad:2d:
4e:45:f1:3b:12:33:04:5f:ab:04:aa:17:06:cf:6b:6a:16:4f:
e0:b2:da:74:7e:fd:0e:13:34:02:e2:44:f6:0f:32:c1:3b:d2:
2a:f6:f8:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 19:13:00 2026 by rpki-client