Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7d/bf6049-8d1d-4be8-9f57-8bab78de32c9/1/AoB-CGMQPwkS5-AkeBHRZ3l9gQc.mft
File: AoB-CGMQPwkS5-AkeBHRZ3l9gQc.mft (raw, json)
Hash identifier: yr+qt2+kMYpfjFuPImjriTkDj+jaaj/6O28Kc4ei6ak=
Subject key identifier: 41:99:8B:44:64:B2:7A:07:8C:EC:58:12:E7:DA:25:E3:E5:37:13:84
Authority key identifier: 02:80:7E:08:63:10:3F:09:12:E7:E0:24:78:11:D1:67:79:7D:81:07
Certificate issuer: /CN=02807e0863103f0912e7e0247811d167797d8107
Certificate serial: 01A10EB9E80B366809B8A13D5D35B195AF27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AoB-CGMQPwkS5-AkeBHRZ3l9gQc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/bf6049-8d1d-4be8-9f57-8bab78de32c9/1/AoB-CGMQPwkS5-AkeBHRZ3l9gQc.mft
Manifest number: 0E4B
Signing time: Tue 06 Oct 2026 01:00:26 +0000
Manifest this update: Tue 06 Oct 2026 01:00:26 +0000
Manifest next update: Wed 07 Oct 2026 01:00:26 +0000
Files and hashes: 1: 3a84f201VVV4zHV1iyP0KTsgDGc.roa (hash: Os2FOe6eOEdxwn4fXwRkDsov2wYvxoS0GMS6wsZRSdo=)
2: AoB-CGMQPwkS5-AkeBHRZ3l9gQc.crl (hash: 6atLcB//U2lZTcflJzJjOyslwhz9A6TTUR//JCDZT4Y=)
3: l-6nzd356yZWqDEY9DG-Da5JKys.roa (hash: OR4c0rfMD7ZWa8BaNFc1YAW9kkgFhCHBU/rMA3THGI4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/bf6049-8d1d-4be8-9f57-8bab78de32c9/1/AoB-CGMQPwkS5-AkeBHRZ3l9gQc.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/bf6049-8d1d-4be8-9f57-8bab78de32c9/1/AoB-CGMQPwkS5-AkeBHRZ3l9gQc.mft
rsync://rpki.ripe.net/repository/DEFAULT/AoB-CGMQPwkS5-AkeBHRZ3l9gQc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 Oct 2026 23:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:0e:b9:e8:0b:36:68:09:b8:a1:3d:5d:35:b1:95:af:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02807e0863103f0912e7e0247811d167797d8107
Validity
Not Before: Oct 6 01:00:26 2026 GMT
Not After : Oct 7 01:00:26 2026 GMT
Subject: CN=41998b4464b27a078cec5812e7da25e3e5371384
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:4d:36:41:87:2a:ac:09:c6:0b:e5:42:76:b7:
6d:55:fb:65:62:64:d2:30:6e:d9:c0:02:65:a4:31:
cc:46:12:6e:90:f1:89:a2:59:a2:9a:cf:ee:ae:5f:
7a:c0:f9:0a:93:6f:a2:cd:21:84:66:3c:77:35:55:
6b:24:c0:4c:a9:bb:15:18:54:20:b9:89:76:c2:3c:
b9:4a:bd:aa:6b:d4:96:21:48:56:40:1d:c3:15:9b:
35:28:37:e8:d7:d9:e9:c9:c2:b3:fc:3a:fa:2a:41:
f0:0e:96:31:26:41:72:80:f1:7e:43:92:6a:b1:a4:
db:fb:31:4e:8d:f4:8e:44:2b:29:53:88:05:db:c1:
2d:7a:16:e1:1c:2c:60:11:ea:16:ff:04:85:e5:66:
f1:5e:f7:c3:b2:91:2d:4f:14:d2:79:07:f0:0a:92:
6e:b5:9e:d1:44:47:a6:94:ba:af:9b:74:46:fa:98:
95:4e:71:0b:25:e9:77:59:c2:98:5a:26:62:a2:35:
c2:39:e1:37:f4:68:4c:54:fd:21:fd:8e:57:41:d6:
94:72:af:82:1f:8e:32:2f:b4:0c:cf:e8:cc:ef:4a:
16:f5:90:98:77:10:b2:71:74:9b:56:45:bf:ae:97:
fc:4c:9f:e9:ea:f1:58:c2:47:5f:b8:be:79:0f:a3:
ef:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:99:8B:44:64:B2:7A:07:8C:EC:58:12:E7:DA:25:E3:E5:37:13:84
X509v3 Authority Key Identifier:
keyid:02:80:7E:08:63:10:3F:09:12:E7:E0:24:78:11:D1:67:79:7D:81:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AoB-CGMQPwkS5-AkeBHRZ3l9gQc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/bf6049-8d1d-4be8-9f57-8bab78de32c9/1/AoB-CGMQPwkS5-AkeBHRZ3l9gQc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/bf6049-8d1d-4be8-9f57-8bab78de32c9/1/AoB-CGMQPwkS5-AkeBHRZ3l9gQc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c9:f6:5a:11:c0:de:33:aa:95:e7:1b:72:14:c4:70:98:da:48:
9a:f8:bc:cf:af:95:ae:aa:7f:53:4d:03:1b:d5:82:4d:a3:55:
7b:ba:48:a1:f9:01:ca:f0:44:cd:31:f1:95:5f:59:b7:29:35:
ff:43:48:1f:d7:d1:b5:53:1c:16:b9:56:82:12:b5:6c:fd:23:
36:a2:3d:ac:a9:ac:9e:4e:57:76:d2:60:70:f1:08:c9:d6:1f:
85:24:12:7e:3f:22:be:0c:62:e2:d6:6a:71:7c:3a:4e:d5:c1:
54:76:09:3a:f8:d5:16:98:c4:a5:6e:d0:91:b7:bd:42:98:2a:
0e:ff:fd:4e:87:06:2c:f9:f9:e7:e4:e5:eb:fd:03:94:33:81:
32:da:74:a1:78:d6:5d:af:94:64:a2:13:65:6e:81:c7:0d:c4:
72:e3:d1:89:97:3c:7b:97:70:a4:d9:31:45:41:bb:89:a5:b8:
4e:f1:53:a6:06:ec:37:5a:cd:da:bf:2e:db:76:bc:e2:5a:97:
af:8d:49:05:af:ec:09:29:62:c6:65:35:38:6e:d9:f2:44:14:
fd:b0:7f:10:d8:c0:b5:6e:66:92:46:6f:93:99:d4:3e:9d:1f:
7e:0c:0b:87:bf:7f:b7:2f:ba:83:c5:1e:81:61:7d:f5:40:52:
00:fe:e5:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 11:33:51 2026 by rpki-client