Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a2/1c24ad-24b4-4c98-a659-592c0dcdaf79/1/AoOoxpomMM2Pb6cK8qU_4BnyzAc.mft
File: AoOoxpomMM2Pb6cK8qU_4BnyzAc.mft (raw, json)
Hash identifier: IosYV+s0dzvq5UkvdX9nhIINAurqtTpf8TViV4nGQJE=
Subject key identifier: E3:68:56:1C:61:E8:26:4A:11:9D:87:1A:E7:78:4E:DD:5A:B4:52:3D
Authority key identifier: 02:83:A8:C6:9A:26:30:CD:8F:6F:A7:0A:F2:A5:3F:E0:19:F2:CC:07
Certificate issuer: /CN=0283a8c69a2630cd8f6fa70af2a53fe019f2cc07
Certificate serial: 01A18864E2B0E952E763CBF5D3A99E7D7280
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AoOoxpomMM2Pb6cK8qU_4BnyzAc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/1c24ad-24b4-4c98-a659-592c0dcdaf79/1/AoOoxpomMM2Pb6cK8qU_4BnyzAc.mft
Manifest number: 1889
Signing time: Thu 29 Oct 2026 16:01:15 +0000
Manifest this update: Thu 29 Oct 2026 16:01:15 +0000
Manifest next update: Fri 30 Oct 2026 16:01:15 +0000
Files and hashes: 1: AoOoxpomMM2Pb6cK8qU_4BnyzAc.crl (hash: 4SfrxgNJrDztw0J9B30yzem/1VQhUKHYnoMufpaxK7c=)
2: JZoFu5TMtgO6GAifQLMq6mNbzQk.roa (hash: NCchRFVvR+s9twFKa/UkTDiMQ9XBI45G1DwlByTQ0pE=)
3: aihBYA5xplYmWfW8AOuewemRnFY.roa (hash: wUPGbJwm1otYE0/5qPkx6y5JVuMAsf3lCIi1krAa/d8=)
4: gtbETOybprgnBnsdOcXReqiJdJg.roa (hash: MHBLEVDbm/5/3P4t1AJ9tw9OGawy0RxaBcMDfw8zw9M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/1c24ad-24b4-4c98-a659-592c0dcdaf79/1/AoOoxpomMM2Pb6cK8qU_4BnyzAc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/1c24ad-24b4-4c98-a659-592c0dcdaf79/1/AoOoxpomMM2Pb6cK8qU_4BnyzAc.mft
rsync://rpki.ripe.net/repository/DEFAULT/AoOoxpomMM2Pb6cK8qU_4BnyzAc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 30 Oct 2026 16:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:88:64:e2:b0:e9:52:e7:63:cb:f5:d3:a9:9e:7d:72:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0283a8c69a2630cd8f6fa70af2a53fe019f2cc07
Validity
Not Before: Oct 29 16:01:15 2026 GMT
Not After : Oct 30 16:01:15 2026 GMT
Subject: CN=e368561c61e8264a119d871ae7784edd5ab4523d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:4f:15:72:af:6e:73:a9:38:09:4f:35:81:2f:
0b:26:37:c9:f9:65:a2:7b:f9:11:ee:ef:41:b9:67:
85:cd:ee:69:5e:b2:88:39:ba:90:83:00:fd:b5:cb:
e0:d4:a3:6f:35:a7:73:3d:40:90:15:83:39:6d:e1:
18:78:13:43:03:da:13:07:98:f2:86:59:61:4d:0f:
d0:0b:f3:ac:65:6e:6c:cf:37:58:7e:1f:d9:7f:25:
53:35:2a:4e:be:55:82:ef:c6:f4:34:89:79:df:36:
37:22:d1:a3:09:9c:19:7f:62:e0:11:6c:66:fa:77:
2e:0e:3d:13:b3:13:6f:da:49:7c:4a:6a:a1:7b:84:
d6:50:86:36:77:73:56:95:26:85:b6:15:73:d7:da:
69:e4:97:b1:d3:8f:02:dd:08:d5:33:40:37:3d:b2:
ff:12:ce:52:60:58:21:04:e0:19:15:cd:36:c0:b9:
97:63:a9:39:14:72:44:90:24:9f:ec:05:27:3b:b7:
08:4d:25:2d:06:53:a0:92:28:d1:07:c3:2f:9f:79:
7b:c8:da:80:ac:f7:ef:9b:b9:fb:87:e1:4b:18:e5:
05:25:d4:67:ec:1b:d9:05:c6:99:e9:1b:c9:e6:34:
97:2a:d2:87:22:06:66:ee:9c:4d:84:5b:5d:d7:52:
be:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:68:56:1C:61:E8:26:4A:11:9D:87:1A:E7:78:4E:DD:5A:B4:52:3D
X509v3 Authority Key Identifier:
keyid:02:83:A8:C6:9A:26:30:CD:8F:6F:A7:0A:F2:A5:3F:E0:19:F2:CC:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AoOoxpomMM2Pb6cK8qU_4BnyzAc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/1c24ad-24b4-4c98-a659-592c0dcdaf79/1/AoOoxpomMM2Pb6cK8qU_4BnyzAc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/1c24ad-24b4-4c98-a659-592c0dcdaf79/1/AoOoxpomMM2Pb6cK8qU_4BnyzAc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:51:72:fc:4d:60:c7:0f:ed:2f:62:de:f3:37:68:b6:b5:4c:
e3:50:6c:35:bb:ed:82:83:44:62:56:36:84:1f:b3:9b:8e:8d:
d7:10:e9:db:d1:75:88:3e:5c:a1:e1:70:e1:a5:ae:79:ae:1c:
32:a4:ac:0d:3f:50:bc:6d:38:ea:20:1f:ea:a3:b0:2e:12:96:
2b:ab:9f:49:c3:4d:44:51:35:ab:36:15:40:7b:8f:70:a6:31:
d6:99:1f:2f:79:d9:82:5f:01:17:03:9d:74:8f:a8:5b:d0:5b:
60:5e:2a:0c:9e:9f:76:04:05:95:98:6b:56:30:a5:d8:0d:a3:
e2:6d:47:6c:20:d0:18:fa:e7:28:f6:de:40:25:a5:90:3a:78:
cd:fe:dd:a2:15:15:d9:de:46:6f:58:ef:81:87:67:94:29:1e:
06:67:66:70:fc:1c:69:15:e7:0b:1a:f6:68:f6:3b:ec:97:65:
84:38:4e:61:f8:a9:d9:20:a8:94:b3:30:e0:d2:4c:f6:36:65:
99:f6:28:d3:f1:89:07:c8:d0:7d:42:46:a1:b4:4f:58:03:0c:
e4:9a:5c:fe:3d:5c:b5:d0:c3:0b:5d:36:b5:14:07:59:e3:55:
45:79:2e:73:9b:cd:19:3f:05:1f:99:c5:e3:f6:35:1c:78:ea:
dc:8a:19:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 02:46:33 2026 by rpki-client