Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/bf6049-8d1d-4be8-9f57-8bab78de32c9/1/AoB-CGMQPwkS5-AkeBHRZ3l9gQc.mft
File: AoB-CGMQPwkS5-AkeBHRZ3l9gQc.mft (raw, json)
Hash identifier: aia6ree8BkEqSs4V/sFqJ7bfODUgpmNc7RbP1vv+qcU=
Subject key identifier: 7A:03:CF:F2:6E:F8:77:C4:75:8D:0E:96:B0:AE:3F:EC:28:03:3E:88
Authority key identifier: 02:80:7E:08:63:10:3F:09:12:E7:E0:24:78:11:D1:67:79:7D:81:07
Certificate issuer: /CN=02807e0863103f0912e7e0247811d167797d8107
Certificate serial: 019E2926E2A603452A0FCC84E6BD30FEE79E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AoB-CGMQPwkS5-AkeBHRZ3l9gQc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/bf6049-8d1d-4be8-9f57-8bab78de32c9/1/AoB-CGMQPwkS5-AkeBHRZ3l9gQc.mft
Manifest number: 0CCB
Signing time: Fri 15 May 2026 01:01:14 +0000
Manifest this update: Fri 15 May 2026 01:01:14 +0000
Manifest next update: Sat 16 May 2026 01:01:14 +0000
Files and hashes: 1: 3a84f201VVV4zHV1iyP0KTsgDGc.roa (hash: Os2FOe6eOEdxwn4fXwRkDsov2wYvxoS0GMS6wsZRSdo=)
2: AoB-CGMQPwkS5-AkeBHRZ3l9gQc.crl (hash: 6BTVvMpOrU6GORXmVes5AtphISRgtrkHD9zeGeZFif8=)
3: l-6nzd356yZWqDEY9DG-Da5JKys.roa (hash: OR4c0rfMD7ZWa8BaNFc1YAW9kkgFhCHBU/rMA3THGI4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/bf6049-8d1d-4be8-9f57-8bab78de32c9/1/AoB-CGMQPwkS5-AkeBHRZ3l9gQc.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/bf6049-8d1d-4be8-9f57-8bab78de32c9/1/AoB-CGMQPwkS5-AkeBHRZ3l9gQc.mft
rsync://rpki.ripe.net/repository/DEFAULT/AoB-CGMQPwkS5-AkeBHRZ3l9gQc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 16 May 2026 01:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:29:26:e2:a6:03:45:2a:0f:cc:84:e6:bd:30:fe:e7:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02807e0863103f0912e7e0247811d167797d8107
Validity
Not Before: May 15 01:01:14 2026 GMT
Not After : May 16 01:01:14 2026 GMT
Subject: CN=7a03cff26ef877c4758d0e96b0ae3fec28033e88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:22:81:38:e9:4b:76:cc:22:4d:67:54:14:7f:
2f:2e:c3:12:d7:0b:d0:09:58:98:9f:23:c1:70:d4:
3e:48:b8:e8:d0:ab:fc:62:e4:e0:e5:7f:0c:c3:ef:
d0:e7:20:99:6e:d0:eb:0c:2f:74:26:7c:7f:40:1a:
6d:92:60:f6:26:9f:22:a7:05:5e:b5:0d:f1:ed:ea:
33:88:be:db:a5:6c:d5:a3:2f:60:c0:d7:ec:d0:c7:
08:40:33:de:63:a1:a0:3f:5c:0d:92:e1:b7:8f:57:
9d:0e:66:e7:80:bb:18:dd:98:62:c4:5e:d2:54:74:
1b:dd:af:d4:44:db:60:01:f5:3d:09:68:3b:2a:a9:
69:32:0c:14:65:33:35:59:76:c4:9a:74:59:28:c7:
fe:a7:ce:d2:fd:5d:3e:7f:33:3d:6b:cb:75:39:ca:
8c:52:ad:74:e8:94:bd:b8:9f:ca:fb:97:de:ba:58:
c2:a8:da:e0:7b:79:7a:27:b9:40:6a:1f:0c:e6:66:
7c:02:69:2e:f7:8c:c4:6a:ec:f7:68:ee:e7:7b:5f:
d7:1a:b4:92:8e:53:95:48:bd:09:6d:37:3d:ef:24:
02:95:17:47:89:8a:57:0c:94:1b:aa:02:3c:6a:45:
d7:e0:f2:a9:a6:f7:61:eb:77:61:23:13:39:ff:9b:
6d:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:03:CF:F2:6E:F8:77:C4:75:8D:0E:96:B0:AE:3F:EC:28:03:3E:88
X509v3 Authority Key Identifier:
keyid:02:80:7E:08:63:10:3F:09:12:E7:E0:24:78:11:D1:67:79:7D:81:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AoB-CGMQPwkS5-AkeBHRZ3l9gQc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/bf6049-8d1d-4be8-9f57-8bab78de32c9/1/AoB-CGMQPwkS5-AkeBHRZ3l9gQc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/bf6049-8d1d-4be8-9f57-8bab78de32c9/1/AoB-CGMQPwkS5-AkeBHRZ3l9gQc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:e7:13:97:01:a4:9b:09:50:45:80:56:d9:f7:92:19:17:4b:
ed:a1:38:dd:da:76:65:ce:64:4a:99:b1:b4:11:42:2b:2c:6f:
6f:54:a5:18:7e:fd:5d:6b:fa:0a:83:9e:0e:78:92:27:8c:9d:
cc:00:4b:e3:62:9d:82:45:75:80:cc:eb:9c:ef:81:1d:e0:de:
ea:69:a3:9a:2a:f1:4a:d9:dd:d5:bb:29:d8:ba:7b:64:27:d6:
61:a7:de:07:43:af:a6:92:23:d1:e4:aa:38:bb:87:14:8f:2b:
25:7b:12:9d:21:3e:df:c8:ef:0c:c9:b3:11:39:f8:2a:b4:fb:
1d:e9:ee:de:fd:f5:0f:39:21:ce:ce:db:da:30:4e:0f:0a:2d:
a6:0c:f2:ab:2a:f8:37:c2:8d:66:45:bc:6d:b8:41:d9:16:25:
d2:89:40:c7:f1:e9:b3:34:a0:7e:b5:94:c1:96:dc:4d:48:cf:
29:82:a4:a6:8c:86:8c:fa:1d:da:b5:9c:16:3e:4f:86:c4:42:
71:29:d0:2c:15:7c:de:6e:47:fa:d1:0d:f2:a5:69:cd:9b:4f:
b7:05:15:26:de:06:cf:cd:93:27:ab:09:d4:08:ee:7b:76:d1:
d8:14:a8:95:82:e8:8f:80:aa:b0:ab:b8:5e:9c:a3:ba:69:73:
1f:14:00:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 11:17:32 2026 by rpki-client