Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9a/05ab60-dea6-43a3-87ef-7bfaeb195445/1/AOOwVedsnogccp7gEWSlhwsrpMk.mft
File: AOOwVedsnogccp7gEWSlhwsrpMk.mft (raw, json)
Hash identifier: UfNgcja24VYwX52KqnQ7p+H4xA0FS9JUdCGKKdKLVNA=
Subject key identifier: DC:11:C9:21:14:EB:D9:28:78:A0:55:F4:71:91:BB:15:C6:B2:51:66
Authority key identifier: 00:E3:B0:55:E7:6C:9E:88:1C:72:9E:E0:11:64:A5:87:0B:2B:A4:C9
Certificate issuer: /CN=00e3b055e76c9e881c729ee01164a5870b2ba4c9
Certificate serial: 01A08C7A9655AA81E7271350EB50ABC48DBC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AOOwVedsnogccp7gEWSlhwsrpMk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/05ab60-dea6-43a3-87ef-7bfaeb195445/1/AOOwVedsnogccp7gEWSlhwsrpMk.mft
Manifest number: C2
Signing time: Thu 10 Sep 2026 18:00:39 +0000
Manifest this update: Thu 10 Sep 2026 18:00:39 +0000
Manifest next update: Fri 11 Sep 2026 18:00:39 +0000
Files and hashes: 1: AOOwVedsnogccp7gEWSlhwsrpMk.crl (hash: 5AUyDpIcd9FrMGKVuvqa7/krN3Whr1JgmZtjBTcH+BY=)
2: TXQspcwa_q4U4F7SmXnMEdJS514.roa (hash: JAX31rJoJv1xe2x9nCzhD+wfwz6O9nmNM3IvWJ+7fBU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/05ab60-dea6-43a3-87ef-7bfaeb195445/1/AOOwVedsnogccp7gEWSlhwsrpMk.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/05ab60-dea6-43a3-87ef-7bfaeb195445/1/AOOwVedsnogccp7gEWSlhwsrpMk.mft
rsync://rpki.ripe.net/repository/DEFAULT/AOOwVedsnogccp7gEWSlhwsrpMk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8c:7a:96:55:aa:81:e7:27:13:50:eb:50:ab:c4:8d:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00e3b055e76c9e881c729ee01164a5870b2ba4c9
Validity
Not Before: Sep 10 18:00:39 2026 GMT
Not After : Sep 11 18:00:39 2026 GMT
Subject: CN=dc11c92114ebd92878a055f47191bb15c6b25166
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:a1:28:8d:f3:27:06:ad:3c:12:4c:05:82:20:
8e:83:7a:ad:96:f1:62:aa:d4:7a:fe:2d:57:99:96:
07:11:72:22:ee:33:e5:5f:88:d6:68:5b:2a:66:f7:
f2:e5:73:39:3e:13:ac:3f:31:59:e8:8e:cf:f8:5d:
d4:ce:9e:d7:09:c6:9b:a8:de:70:d7:f1:06:95:e2:
ca:01:32:e9:16:6e:b2:00:7e:e9:c1:13:4a:38:5e:
f4:c7:fc:f2:76:f0:05:1f:c8:23:8a:d6:6c:40:54:
18:d5:2a:15:e3:cd:fe:e8:ec:d1:35:77:c2:cc:89:
ea:1b:c5:d9:46:75:55:53:fc:0a:00:3f:9b:ab:c5:
69:54:41:1b:be:a5:f6:16:a2:26:ce:a2:fb:5a:14:
4b:a7:da:5a:23:5b:86:29:fe:46:5f:34:0f:89:99:
99:a4:8a:c5:41:90:d9:c4:ec:f0:f4:f6:43:4c:f0:
19:6f:cf:b8:3f:5d:52:2e:ed:01:5d:ae:69:45:e7:
da:85:31:e4:6d:a3:df:57:2c:e5:2d:d0:eb:4e:3a:
f6:37:8d:56:34:5f:5e:bb:5e:19:61:8d:97:1b:83:
95:7f:e4:9e:b3:3e:34:c3:97:f4:bf:e2:fb:8e:2d:
54:24:69:19:d3:6e:d0:a3:55:58:93:27:09:d2:96:
8b:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:11:C9:21:14:EB:D9:28:78:A0:55:F4:71:91:BB:15:C6:B2:51:66
X509v3 Authority Key Identifier:
keyid:00:E3:B0:55:E7:6C:9E:88:1C:72:9E:E0:11:64:A5:87:0B:2B:A4:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AOOwVedsnogccp7gEWSlhwsrpMk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/05ab60-dea6-43a3-87ef-7bfaeb195445/1/AOOwVedsnogccp7gEWSlhwsrpMk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/05ab60-dea6-43a3-87ef-7bfaeb195445/1/AOOwVedsnogccp7gEWSlhwsrpMk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:d9:86:25:2f:63:5d:40:fa:c3:22:a8:65:fe:bd:7d:73:de:
79:1b:98:f2:d9:4d:11:7d:5e:fe:f2:31:a1:8d:90:eb:fc:28:
76:1d:67:47:2f:76:65:f3:b6:d5:6d:94:6a:9d:5a:3c:56:81:
d9:a6:8d:f5:6e:6f:ad:f9:9e:17:ca:e0:4f:6d:f9:25:8e:ea:
88:ff:32:4c:7a:77:9b:52:d5:ee:43:3f:44:1c:5c:d4:cf:84:
38:7e:9e:47:e0:22:6b:e2:e7:49:e7:a7:b9:56:32:12:2b:72:
62:7b:a8:99:5b:e1:b8:d5:ed:5a:ec:6b:d3:1a:de:74:1a:8d:
72:d5:7b:a1:c9:0e:63:e6:8c:3c:af:2e:bb:dd:44:5d:92:42:
43:1b:65:03:cf:eb:e9:1d:d5:e0:69:ec:38:29:f5:d0:36:a1:
2b:03:dd:8e:17:79:c8:ec:b2:45:c1:52:6c:0e:6c:6b:1d:8a:
ba:41:15:52:38:1e:4a:f5:fb:4a:7f:cc:9e:ca:f6:a8:bd:9d:
84:95:1e:bc:3f:f4:2f:83:8c:f7:6a:06:35:b5:1d:0c:92:c6:
c6:dc:32:13:22:c9:57:21:38:8e:89:98:6d:6f:b5:71:98:ce:
f0:d9:6a:2e:ac:d3:df:48:93:ba:a1:09:77:1c:af:2b:d3:0f:
b3:a3:bf:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 21:40:32 2026 by rpki-client