Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/97/210043-5afe-456f-b3f8-dc027432e5a5/1/AOC06vnBB5HzU7qYfeI2ChOEF70.mft
File: AOC06vnBB5HzU7qYfeI2ChOEF70.mft (raw, json)
Hash identifier: sumYNFYtxH6Sa4fDqoF+oZSqJEQg2dLPqS9wUMjCFSw=
Subject key identifier: 5F:DE:A9:C2:B5:2F:9B:AC:E6:69:97:21:94:59:C3:EB:4D:1B:31:31
Authority key identifier: 00:E0:B4:EA:F9:C1:07:91:F3:53:BA:98:7D:E2:36:0A:13:84:17:BD
Certificate issuer: /CN=00e0b4eaf9c10791f353ba987de2360a138417bd
Certificate serial: 01A105EE3A4AB467A22CD39F7A25243964EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AOC06vnBB5HzU7qYfeI2ChOEF70.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/210043-5afe-456f-b3f8-dc027432e5a5/1/AOC06vnBB5HzU7qYfeI2ChOEF70.mft
Manifest number: 0CB7
Signing time: Sun 04 Oct 2026 08:01:00 +0000
Manifest this update: Sun 04 Oct 2026 08:01:00 +0000
Manifest next update: Mon 05 Oct 2026 08:01:00 +0000
Files and hashes: 1: 62RbiFwZ1_XOHrvMeuIO0qbkA1A.roa (hash: cnho+bLoMv/Bp0S5dtnd6UgwZIY4cZQKOz8bwCDVOf8=)
2: AOC06vnBB5HzU7qYfeI2ChOEF70.crl (hash: /npoUpMPnLddQYMzOXWirNFRj1c8OkNQBlnsG3tVorQ=)
3: LexXkjfAE5yNq8p4TfuCEaRKHeg.roa (hash: KDlc/z2I2lAqH602iJ+p3ujK1GdvNju4aKO99XjRuPY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/210043-5afe-456f-b3f8-dc027432e5a5/1/AOC06vnBB5HzU7qYfeI2ChOEF70.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/210043-5afe-456f-b3f8-dc027432e5a5/1/AOC06vnBB5HzU7qYfeI2ChOEF70.mft
rsync://rpki.ripe.net/repository/DEFAULT/AOC06vnBB5HzU7qYfeI2ChOEF70.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 05:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:05:ee:3a:4a:b4:67:a2:2c:d3:9f:7a:25:24:39:64:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00e0b4eaf9c10791f353ba987de2360a138417bd
Validity
Not Before: Oct 4 08:01:00 2026 GMT
Not After : Oct 5 08:01:00 2026 GMT
Subject: CN=5fdea9c2b52f9bace66997219459c3eb4d1b3131
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:ab:8f:5c:3a:19:8e:eb:31:a9:fe:2a:33:f9:
cb:d8:89:75:39:05:ba:d4:ae:16:cf:23:ac:63:f5:
58:ea:43:6f:95:16:69:6e:1c:ab:85:d9:fd:d5:31:
35:b5:66:7f:da:05:24:ed:5a:25:12:b9:56:f3:0c:
33:b7:dd:70:83:6c:01:88:82:d6:09:0b:5e:91:4c:
1a:87:a8:74:9b:c3:60:2e:6d:d1:12:d6:04:5d:f5:
1e:18:d6:36:ed:6d:39:c5:d3:dc:71:1a:df:34:c8:
27:96:16:fb:60:cf:b0:0c:36:07:15:0e:43:cb:d4:
b8:95:af:cc:38:29:ef:81:c1:b5:9e:9a:07:16:a0:
73:9b:ad:d2:1a:d6:01:cf:4d:44:df:4a:94:be:ea:
7f:88:a3:57:b5:78:a2:f3:f8:0d:bb:f6:75:2c:c2:
df:d7:88:f5:f8:85:c4:ce:72:fc:e1:23:8e:04:82:
01:27:a0:0e:c4:bd:1e:21:53:ba:fe:d7:df:b6:1d:
5c:39:3e:5e:c1:02:12:bd:79:61:11:d8:6b:23:d5:
27:d9:2f:c0:5c:2b:26:48:cd:c9:0b:6d:ce:2d:c8:
ed:8f:56:2c:12:6a:c7:2b:af:dc:aa:e3:ba:54:3b:
c4:4c:11:11:66:51:ed:ed:1e:1e:a9:7b:76:bc:8a:
5d:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:DE:A9:C2:B5:2F:9B:AC:E6:69:97:21:94:59:C3:EB:4D:1B:31:31
X509v3 Authority Key Identifier:
keyid:00:E0:B4:EA:F9:C1:07:91:F3:53:BA:98:7D:E2:36:0A:13:84:17:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AOC06vnBB5HzU7qYfeI2ChOEF70.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/210043-5afe-456f-b3f8-dc027432e5a5/1/AOC06vnBB5HzU7qYfeI2ChOEF70.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/210043-5afe-456f-b3f8-dc027432e5a5/1/AOC06vnBB5HzU7qYfeI2ChOEF70.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:7e:56:ff:17:af:41:e4:11:df:a3:74:7e:2b:61:6f:eb:e4:
f5:48:32:66:86:ea:35:65:9d:53:1c:e2:68:5a:d9:1b:b0:5c:
24:ba:d0:1d:88:5e:90:87:ca:d3:da:d1:82:8a:f4:8c:77:78:
16:54:54:31:c2:05:2a:6f:51:ef:2c:f6:a1:b2:31:ca:16:3d:
92:ad:74:98:30:fb:dc:c6:6e:33:b0:8b:e0:bd:96:f5:b7:ad:
20:d1:31:49:e6:be:d1:35:a2:cc:c5:c8:c7:cc:50:7c:ab:d1:
ad:15:45:c8:17:0a:26:e0:38:33:16:d6:7c:1c:24:c1:b6:ac:
d8:42:6e:bc:69:62:b0:4e:e6:d5:45:4b:37:6c:92:07:27:c7:
eb:dd:3c:03:a7:db:e3:54:6b:eb:aa:a1:7d:54:f2:58:b8:a9:
3a:be:0e:c1:1e:97:50:eb:cd:65:16:3f:84:9a:3d:6e:05:9a:
5d:58:4f:93:b0:c2:02:fd:d9:02:e2:c3:b4:11:e0:9f:0b:c5:
b8:40:19:71:19:5e:9d:96:25:06:33:2c:93:16:9d:15:18:19:
87:eb:6a:f6:40:24:53:8c:f4:6b:b3:f5:d6:4c:b8:e6:42:d3:
26:4c:48:34:7e:1c:df:55:1d:46:13:cd:7d:45:a4:06:73:4c:
9a:6d:15:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 13:46:45 2026 by rpki-client