Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/f6c862-af8b-43f3-98ad-44241fec1a9f/1/aotaN08UbXtqbcfTFujrsS3upnA.mft
File: aotaN08UbXtqbcfTFujrsS3upnA.mft (raw, json)
Hash identifier: acoGYwpNHW7wwTctWofx4UMRR5pnuQECtNU1SSnPe94=
Subject key identifier: A7:0C:E1:60:E4:C2:D5:69:52:75:8F:5C:50:B3:7B:D9:57:5C:A6:66
Authority key identifier: 6A:8B:5A:37:4F:14:6D:7B:6A:6D:C7:D3:16:E8:EB:B1:2D:EE:A6:70
Certificate issuer: /CN=6a8b5a374f146d7b6a6dc7d316e8ebb12deea670
Certificate serial: 019EE1791513E2BD245603B38C9FD07CA438
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aotaN08UbXtqbcfTFujrsS3upnA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/f6c862-af8b-43f3-98ad-44241fec1a9f/1/aotaN08UbXtqbcfTFujrsS3upnA.mft
Manifest number: 1043
Signing time: Fri 19 Jun 2026 20:01:09 +0000
Manifest this update: Fri 19 Jun 2026 20:01:09 +0000
Manifest next update: Sat 20 Jun 2026 20:01:09 +0000
Files and hashes: 1: aotaN08UbXtqbcfTFujrsS3upnA.crl (hash: XDo8chcAMySTbhFMVrKnfmUhLhpCv9bQLD63UQlj+Ic=)
2: bet4fdymyOIlEb-62LJXEqjZz4M.roa (hash: z3hr8kxRBm3emLdFWmkitNGZ2vCXqhwRUzbp9y48TSg=)
3: xzOtkf3m_unGZDJuyTmOZRDo1vs.roa (hash: AqWTAJg+/JR+tTmpK3jZUrDvB6ISeUjMegyS/xS/c3s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/f6c862-af8b-43f3-98ad-44241fec1a9f/1/aotaN08UbXtqbcfTFujrsS3upnA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/f6c862-af8b-43f3-98ad-44241fec1a9f/1/aotaN08UbXtqbcfTFujrsS3upnA.mft
rsync://rpki.ripe.net/repository/DEFAULT/aotaN08UbXtqbcfTFujrsS3upnA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 20 Jun 2026 19:57:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:e1:79:15:13:e2:bd:24:56:03:b3:8c:9f:d0:7c:a4:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a8b5a374f146d7b6a6dc7d316e8ebb12deea670
Validity
Not Before: Jun 19 20:01:09 2026 GMT
Not After : Jun 20 20:01:09 2026 GMT
Subject: CN=a70ce160e4c2d56952758f5c50b37bd9575ca666
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:17:fb:3a:16:4a:c6:8f:38:92:cd:2f:0c:d1:
ee:df:0c:9c:2f:45:a6:8a:06:16:cb:c4:ac:19:e3:
bc:d7:31:8a:11:ef:95:50:81:91:64:9a:9a:8d:df:
bc:46:a8:eb:d9:45:f1:21:b3:b2:1e:9c:85:94:d6:
ef:5c:0c:95:0f:a7:49:f4:7b:3c:ca:87:6c:71:4a:
1b:fb:1a:f1:21:ff:d3:9e:f1:91:36:86:10:4a:9d:
32:ef:dc:80:8b:e0:ba:9c:15:2e:30:d1:51:3a:7b:
4a:f1:9a:35:df:0a:d7:51:bd:f5:25:03:61:1c:17:
f3:60:59:df:46:28:5e:41:62:73:bf:80:db:8c:23:
fb:b1:fb:b8:44:dd:7c:d3:21:30:0a:1e:c1:5d:fe:
e5:46:fa:e2:64:cf:46:6f:7f:b7:33:42:3c:96:4d:
9f:e4:76:1b:00:2c:4f:d7:ef:49:36:bb:18:ec:e0:
a7:34:e2:74:c6:4d:8f:ef:2c:30:3e:75:fa:d6:60:
f1:ad:4b:63:2e:08:77:28:1e:82:c6:f7:4e:9b:28:
70:25:0a:cb:79:a2:f3:e7:5f:af:3e:75:41:fc:52:
c0:f3:76:a9:39:d3:90:77:70:cc:32:dc:e5:1e:25:
8f:87:9d:f8:da:94:92:c6:b4:b3:20:f2:87:d4:00:
26:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:0C:E1:60:E4:C2:D5:69:52:75:8F:5C:50:B3:7B:D9:57:5C:A6:66
X509v3 Authority Key Identifier:
keyid:6A:8B:5A:37:4F:14:6D:7B:6A:6D:C7:D3:16:E8:EB:B1:2D:EE:A6:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aotaN08UbXtqbcfTFujrsS3upnA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/f6c862-af8b-43f3-98ad-44241fec1a9f/1/aotaN08UbXtqbcfTFujrsS3upnA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/f6c862-af8b-43f3-98ad-44241fec1a9f/1/aotaN08UbXtqbcfTFujrsS3upnA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:09:09:17:96:cf:3e:79:24:cd:81:64:ed:02:12:91:05:44:
bd:6b:1e:86:f2:ea:68:3c:e7:73:1e:d6:08:8d:26:23:41:56:
da:df:6a:ba:df:24:44:a2:4e:32:fd:0f:e1:49:48:f4:da:f8:
19:f2:09:6c:99:e4:b6:a6:73:87:23:7f:4b:aa:dd:2d:33:54:
30:fe:4a:81:c9:93:71:92:e9:b9:1b:6d:8f:34:b0:a1:2f:e7:
7c:cd:01:23:9d:e3:b2:5a:a4:be:42:28:b3:20:12:7f:38:a0:
5a:2b:b2:12:a3:3a:2a:f7:8a:00:56:d0:85:f8:8b:e1:1e:a4:
fa:6f:0f:47:37:10:53:4e:2d:2a:68:50:05:37:09:b2:b0:fd:
4e:50:60:9d:d5:af:33:e7:4b:e9:8b:01:64:e1:9b:ff:31:22:
5d:38:12:5e:45:f3:c6:b0:f1:82:92:29:bc:ae:1b:88:bf:86:
55:30:7c:7a:01:03:2d:97:70:fe:ea:66:42:8a:d1:8c:71:4e:
90:c8:c4:41:5e:f0:8f:dc:60:d7:35:36:06:32:6e:08:dd:58:
16:72:b7:84:f5:fd:18:c9:56:3d:95:32:69:56:35:37:6e:ca:
ad:75:f4:1f:8f:bd:6b:dd:ff:36:6d:7a:e3:28:34:da:15:a6:
35:52:10:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 20 03:28:32 2026 by rpki-client