Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9a/05ab60-dea6-43a3-87ef-7bfaeb195445/1/AOOwVedsnogccp7gEWSlhwsrpMk.mft
File: AOOwVedsnogccp7gEWSlhwsrpMk.mft (raw, json)
Hash identifier: tYfZv6Q4rcY30U/5U/VGLCz1/iqAhFE1BB1cPqPpkBM=
Subject key identifier: 36:FD:9B:D9:D2:CE:4F:C9:C1:81:DB:48:AF:E9:25:6A:88:BB:7B:5B
Authority key identifier: 00:E3:B0:55:E7:6C:9E:88:1C:72:9E:E0:11:64:A5:87:0B:2B:A4:C9
Certificate issuer: /CN=00e3b055e76c9e881c729ee01164a5870b2ba4c9
Certificate serial: 01A18788D204EBBC76293BCA56458961F793
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AOOwVedsnogccp7gEWSlhwsrpMk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/05ab60-dea6-43a3-87ef-7bfaeb195445/1/AOOwVedsnogccp7gEWSlhwsrpMk.mft
Manifest number: 0144
Signing time: Thu 29 Oct 2026 12:00:53 +0000
Manifest this update: Thu 29 Oct 2026 12:00:53 +0000
Manifest next update: Fri 30 Oct 2026 12:00:53 +0000
Files and hashes: 1: AOOwVedsnogccp7gEWSlhwsrpMk.crl (hash: Os+4EEw4LaG8ZKZEy4fcLJ5xGN+imvhE3RJPgCc43Vk=)
2: TXQspcwa_q4U4F7SmXnMEdJS514.roa (hash: JAX31rJoJv1xe2x9nCzhD+wfwz6O9nmNM3IvWJ+7fBU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/05ab60-dea6-43a3-87ef-7bfaeb195445/1/AOOwVedsnogccp7gEWSlhwsrpMk.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/05ab60-dea6-43a3-87ef-7bfaeb195445/1/AOOwVedsnogccp7gEWSlhwsrpMk.mft
rsync://rpki.ripe.net/repository/DEFAULT/AOOwVedsnogccp7gEWSlhwsrpMk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 30 Oct 2026 08:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:87:88:d2:04:eb:bc:76:29:3b:ca:56:45:89:61:f7:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00e3b055e76c9e881c729ee01164a5870b2ba4c9
Validity
Not Before: Oct 29 12:00:53 2026 GMT
Not After : Oct 30 12:00:53 2026 GMT
Subject: CN=36fd9bd9d2ce4fc9c181db48afe9256a88bb7b5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:ad:bc:14:d9:1d:23:4f:d6:bd:fb:2b:0d:8d:
a0:12:28:3a:a4:3a:ac:65:c0:eb:29:ea:43:fd:cc:
a6:a6:6f:10:3f:14:f8:f5:cf:4e:8e:6e:ce:77:df:
3b:c1:15:49:08:20:0b:c0:35:fa:5e:00:ab:0c:6a:
63:10:71:bb:6f:d7:5b:1a:3f:fb:8d:e4:64:83:ca:
6b:6f:bf:58:72:a6:de:2b:fe:34:7b:04:e8:17:a6:
76:69:81:a4:51:9d:f7:32:d5:0e:c0:0e:14:14:18:
f0:08:d5:1e:94:86:ff:11:cd:cd:d7:4a:c2:fa:84:
1f:4c:20:0d:13:0e:f6:fd:fd:69:f4:b8:0e:af:12:
9c:e3:b7:71:a7:99:0b:11:db:78:5c:5d:35:3f:ac:
35:c8:0a:27:a6:46:56:83:97:3e:8a:3b:d9:88:dc:
e6:f7:4a:55:71:21:17:7a:dd:eb:4e:b7:52:b0:fd:
ed:db:50:8d:76:e1:6b:40:9d:be:06:4b:31:35:18:
cb:b7:2d:8d:be:ac:e4:bf:67:26:1a:c2:3f:e3:cd:
db:f1:56:e3:6c:14:36:a0:36:d2:5e:05:5d:3c:30:
9a:92:df:7c:5d:50:f7:8e:97:3a:d9:db:5e:b4:3f:
76:99:f0:d9:dc:8f:9a:64:48:15:54:d3:b1:4c:9c:
1b:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:FD:9B:D9:D2:CE:4F:C9:C1:81:DB:48:AF:E9:25:6A:88:BB:7B:5B
X509v3 Authority Key Identifier:
keyid:00:E3:B0:55:E7:6C:9E:88:1C:72:9E:E0:11:64:A5:87:0B:2B:A4:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AOOwVedsnogccp7gEWSlhwsrpMk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/05ab60-dea6-43a3-87ef-7bfaeb195445/1/AOOwVedsnogccp7gEWSlhwsrpMk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/05ab60-dea6-43a3-87ef-7bfaeb195445/1/AOOwVedsnogccp7gEWSlhwsrpMk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c5:fb:85:69:4a:56:99:77:7b:12:b3:c3:15:5e:d0:5f:03:33:
72:49:83:e9:bd:5a:da:85:ca:ad:eb:40:6e:c5:4b:f4:09:f1:
4f:30:ec:70:56:f7:7d:55:17:f0:d1:60:c6:80:49:4b:47:32:
dc:22:a6:66:be:21:25:ea:94:f5:62:88:35:0e:af:3b:7e:70:
38:2c:2f:08:63:a9:d0:06:01:8a:06:bf:75:29:92:45:0d:8e:
eb:9a:ff:f4:50:81:f9:dc:82:5e:6f:79:8c:fe:56:30:f7:65:
03:2b:0a:85:bd:93:00:30:95:33:db:43:69:c1:d3:2f:23:f1:
75:6b:b5:bb:b6:36:98:fa:a6:e4:11:a0:f4:8d:72:7f:91:16:
f9:a0:b5:a3:dd:bf:81:81:26:be:1d:c6:e3:a0:c0:2d:fa:de:
cc:d5:af:43:7e:a1:b7:aa:a0:49:5a:51:d6:8c:b2:63:dd:61:
a4:50:40:23:07:88:f3:49:34:7c:51:96:1b:e7:af:13:ae:96:
a5:2e:96:f0:c8:ea:20:ab:15:a7:dc:d7:c8:37:a2:9a:5c:e4:
ac:7f:fa:2d:88:f0:6d:3f:25:02:26:cd:25:1b:9d:f7:fe:44:
30:29:e7:de:b6:62:c3:bc:c3:dd:27:3c:bb:22:f0:a3:29:26:
83:5d:6e:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 15:57:25 2026 by rpki-client