Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/f6c862-af8b-43f3-98ad-44241fec1a9f/1/aotaN08UbXtqbcfTFujrsS3upnA.mft
File: aotaN08UbXtqbcfTFujrsS3upnA.mft (raw, json)
Hash identifier: 1Sd1q6RaRvfoHLfRBPbl3/+1sSXqRllXxWL+gK3SM9I=
Subject key identifier: A4:D4:4A:15:2C:85:5A:33:E4:FA:C5:22:C8:DD:75:FD:7D:AD:A8:DC
Authority key identifier: 6A:8B:5A:37:4F:14:6D:7B:6A:6D:C7:D3:16:E8:EB:B1:2D:EE:A6:70
Certificate issuer: /CN=6a8b5a374f146d7b6a6dc7d316e8ebb12deea670
Certificate serial: 019DB246E39E1AF8B8E588BA7ABA838638D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aotaN08UbXtqbcfTFujrsS3upnA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/f6c862-af8b-43f3-98ad-44241fec1a9f/1/aotaN08UbXtqbcfTFujrsS3upnA.mft
Manifest number: 0FA6
Signing time: Tue 21 Apr 2026 23:01:23 +0000
Manifest this update: Tue 21 Apr 2026 23:01:23 +0000
Manifest next update: Wed 22 Apr 2026 23:01:23 +0000
Files and hashes: 1: aotaN08UbXtqbcfTFujrsS3upnA.crl (hash: le+i7UdOWVY8g2OJOyNH2NWo1xsgI6AIdkhDPvSShp0=)
2: bet4fdymyOIlEb-62LJXEqjZz4M.roa (hash: z3hr8kxRBm3emLdFWmkitNGZ2vCXqhwRUzbp9y48TSg=)
3: xzOtkf3m_unGZDJuyTmOZRDo1vs.roa (hash: AqWTAJg+/JR+tTmpK3jZUrDvB6ISeUjMegyS/xS/c3s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/f6c862-af8b-43f3-98ad-44241fec1a9f/1/aotaN08UbXtqbcfTFujrsS3upnA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/f6c862-af8b-43f3-98ad-44241fec1a9f/1/aotaN08UbXtqbcfTFujrsS3upnA.mft
rsync://rpki.ripe.net/repository/DEFAULT/aotaN08UbXtqbcfTFujrsS3upnA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Apr 2026 23:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:b2:46:e3:9e:1a:f8:b8:e5:88:ba:7a:ba:83:86:38:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a8b5a374f146d7b6a6dc7d316e8ebb12deea670
Validity
Not Before: Apr 21 23:01:23 2026 GMT
Not After : Apr 22 23:01:23 2026 GMT
Subject: CN=a4d44a152c855a33e4fac522c8dd75fd7dada8dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:8f:3c:fe:d6:7c:eb:99:54:91:e7:6c:20:bb:
66:7f:e4:0f:99:00:84:cc:33:cb:66:e0:a9:ac:bb:
c0:d4:76:33:9a:89:f4:c3:c7:38:23:8d:26:77:48:
e5:10:85:3d:a7:03:f6:2e:f4:a5:a7:12:6a:a6:8f:
ed:04:db:c0:f8:9c:41:c0:e6:40:66:1a:ce:1e:b5:
fa:83:6c:14:75:58:0f:be:09:a4:70:14:61:93:d8:
bc:a3:15:5c:3a:1b:54:7d:aa:99:4a:55:7d:f6:06:
a4:70:3c:f3:27:d6:0a:48:c5:b5:93:4b:fc:2c:ac:
ca:4e:55:5e:d1:f8:7a:14:60:82:4a:9f:16:6c:1f:
f1:1f:48:32:46:04:20:89:25:1b:db:34:0d:e4:b0:
9a:cd:b5:74:2d:a5:74:f1:2b:42:b6:fb:8a:bb:47:
d7:95:5f:40:c8:c8:4d:ee:f9:42:3f:89:47:e8:bb:
58:b8:03:63:82:f4:5f:09:5e:8b:54:c9:d0:39:43:
8e:a9:4c:a9:3b:34:b8:da:3a:c1:59:c9:51:9b:00:
d2:50:58:1c:c3:51:62:bb:e5:fc:28:8c:60:7b:b8:
d9:45:0b:c8:94:0f:30:6e:b4:ca:29:a1:05:3d:5c:
17:dd:e9:f1:a7:76:e3:a0:78:cd:d4:90:72:85:aa:
a8:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:D4:4A:15:2C:85:5A:33:E4:FA:C5:22:C8:DD:75:FD:7D:AD:A8:DC
X509v3 Authority Key Identifier:
keyid:6A:8B:5A:37:4F:14:6D:7B:6A:6D:C7:D3:16:E8:EB:B1:2D:EE:A6:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aotaN08UbXtqbcfTFujrsS3upnA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/f6c862-af8b-43f3-98ad-44241fec1a9f/1/aotaN08UbXtqbcfTFujrsS3upnA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/f6c862-af8b-43f3-98ad-44241fec1a9f/1/aotaN08UbXtqbcfTFujrsS3upnA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:29:cc:ca:73:9e:0a:59:62:95:11:54:9a:c1:d8:a4:8a:06:
fe:e3:5e:51:91:dd:9c:13:df:1a:b6:7d:24:45:7a:a3:8e:bf:
ee:81:48:d6:f5:7a:99:5e:f3:f4:ff:fd:86:aa:a5:c8:53:8e:
57:2d:41:bb:d2:ca:03:12:82:dc:29:18:e2:52:0c:46:04:ae:
0e:ca:c3:42:e3:d6:67:48:36:7b:bf:ae:30:54:e6:01:59:39:
20:ab:53:a5:7b:ed:94:af:41:8c:08:ac:d0:8b:71:48:6f:76:
e2:b5:16:fa:74:df:fa:0e:78:f3:56:9c:d8:5a:19:f2:61:68:
cd:d9:ff:e7:02:5a:bc:3d:40:af:f2:91:e1:2a:ad:c3:86:52:
5f:79:60:7c:64:a3:45:f4:ea:57:9f:fa:e6:04:97:3a:db:05:
f5:02:8b:9f:f2:31:e9:4e:a3:2d:29:ac:fc:4b:d6:ad:9d:3b:
39:b5:2a:1a:1b:af:ae:1c:74:0a:a6:db:cd:30:f4:14:fe:2f:
18:bf:dc:15:e7:e8:b8:55:5b:44:e7:24:7d:46:eb:ee:71:f4:
90:09:a2:a6:eb:13:34:2b:4b:74:5b:5e:44:39:2d:2e:27:dc:
97:fc:02:c2:e6:60:e2:cf:9b:5a:ac:17:72:ab:78:b3:2d:b0:
57:5b:20:3c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2yRuOeGvi45Yi6erqDhjjSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZhOGI1YTM3NGYxNDZkN2I2YTZkYzdkMzE2ZThlYmIxMmRl
ZWE2NzAwHhcNMjYwNDIxMjMwMTIzWhcNMjYwNDIyMjMwMTIzWjAzMTEwLwYDVQQD
EyhhNGQ0NGExNTJjODU1YTMzZTRmYWM1MjJjOGRkNzVmZDdkYWRhOGRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz488/tZ865lUkedsILtmf+QPmQCE
zDPLZuCprLvA1HYzmon0w8c4I40md0jlEIU9pwP2LvSlpxJqpo/tBNvA+JxBwOZA
ZhrOHrX6g2wUdVgPvgmkcBRhk9i8oxVcOhtUfaqZSlV99gakcDzzJ9YKSMW1k0v8
LKzKTlVe0fh6FGCCSp8WbB/xH0gyRgQgiSUb2zQN5LCazbV0LaV08StCtvuKu0fX
lV9AyMhN7vlCP4lH6LtYuANjgvRfCV6LVMnQOUOOqUypOzS42jrBWclRmwDSUFgc
w1Fiu+X8KIxge7jZRQvIlA8wbrTKKaEFPVwX3enxp3bjoHjN1JByhaqoxQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKTUShUshVoz5PrFIsjddf19rajcMB8GA1UdIwQY
MBaAFGqLWjdPFG17am3H0xbo67Et7qZwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYW90YU4wOFViWHRxYmNmVEZ1anJzUzN1cG5BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC9mNmM4NjItYWY4Yi00M2YzLTk4YWQt
NDQyNDFmZWMxYTlmLzEvYW90YU4wOFViWHRxYmNmVEZ1anJzUzN1cG5BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC9mNmM4NjItYWY4Yi00M2YzLTk4YWQtNDQyNDFmZWMxYTlm
LzEvYW90YU4wOFViWHRxYmNmVEZ1anJzUzN1cG5BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnynMynOe
CllilRFUmsHYpIoG/uNeUZHdnBPfGrZ9JEV6o46/7oFI1vV6mV7z9P/9hqqlyFOO
Vy1Bu9LKAxKC3CkY4lIMRgSuDsrDQuPWZ0g2e7+uMFTmAVk5IKtTpXvtlK9BjAis
0ItxSG924rUW+nTf+g5481ac2FoZ8mFozdn/5wJavD1Ar/KR4Sqtw4ZSX3lgfGSj
RfTqV5/65gSXOtsF9QKLn/Ix6U6jLSms/EvWrZ07ObUqGhuvrhx0CqbbzTD0FP4v
GL/cFefouFVbROckfUbr7nH0kAmipusTNCtLdFteRDktLifcl/wCwuZg4s+bWqwX
cqt4sy2wV1sgPA==
-----END CERTIFICATE-----
Generated at Wed Apr 22 09:51:43 2026 by rpki-client