Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/f6c862-af8b-43f3-98ad-44241fec1a9f/1/aotaN08UbXtqbcfTFujrsS3upnA.mft
File: aotaN08UbXtqbcfTFujrsS3upnA.mft (raw, json)
Hash identifier: pdeymEteIUD/h7sECMC1ZqqcbSF4RAfwzPfeXOc119Q=
Subject key identifier: D3:52:96:0E:28:71:8C:C3:F4:3A:27:39:89:7C:3F:36:8E:61:E4:05
Authority key identifier: 6A:8B:5A:37:4F:14:6D:7B:6A:6D:C7:D3:16:E8:EB:B1:2D:EE:A6:70
Certificate issuer: /CN=6a8b5a374f146d7b6a6dc7d316e8ebb12deea670
Certificate serial: 019FCB25B08AC3579D6C6ABC97D2F32934F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aotaN08UbXtqbcfTFujrsS3upnA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/f6c862-af8b-43f3-98ad-44241fec1a9f/1/aotaN08UbXtqbcfTFujrsS3upnA.mft
Manifest number: 10BC
Signing time: Tue 04 Aug 2026 05:01:12 +0000
Manifest this update: Tue 04 Aug 2026 05:01:12 +0000
Manifest next update: Wed 05 Aug 2026 05:01:12 +0000
Files and hashes: 1: aotaN08UbXtqbcfTFujrsS3upnA.crl (hash: Qt7/Vp0+80yUC0QPjzRpNb0x4a/O+0lo657NztTsHSo=)
2: bet4fdymyOIlEb-62LJXEqjZz4M.roa (hash: z3hr8kxRBm3emLdFWmkitNGZ2vCXqhwRUzbp9y48TSg=)
3: xzOtkf3m_unGZDJuyTmOZRDo1vs.roa (hash: AqWTAJg+/JR+tTmpK3jZUrDvB6ISeUjMegyS/xS/c3s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/f6c862-af8b-43f3-98ad-44241fec1a9f/1/aotaN08UbXtqbcfTFujrsS3upnA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/f6c862-af8b-43f3-98ad-44241fec1a9f/1/aotaN08UbXtqbcfTFujrsS3upnA.mft
rsync://rpki.ripe.net/repository/DEFAULT/aotaN08UbXtqbcfTFujrsS3upnA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 04 Aug 2026 23:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:cb:25:b0:8a:c3:57:9d:6c:6a:bc:97:d2:f3:29:34:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a8b5a374f146d7b6a6dc7d316e8ebb12deea670
Validity
Not Before: Aug 4 05:01:12 2026 GMT
Not After : Aug 5 05:01:12 2026 GMT
Subject: CN=d352960e28718cc3f43a2739897c3f368e61e405
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:63:d2:58:19:33:4f:d1:a8:f6:ca:cc:54:1a:
79:53:20:cd:41:ed:e8:ab:88:81:2d:3d:25:12:18:
26:e6:d5:28:ac:35:75:28:4b:3e:a6:2a:2f:f8:21:
6e:6c:08:78:c5:ac:04:08:63:82:b5:31:b5:de:da:
a5:0e:6f:2c:41:83:6b:25:12:de:8e:5a:5e:1b:a2:
7b:7c:fe:84:50:c9:b1:e0:54:01:38:13:d3:98:da:
78:89:60:87:c5:44:42:17:a8:34:7d:4d:68:22:c7:
d1:c5:6d:d5:19:80:0d:95:63:5b:48:95:24:35:8f:
0e:2d:25:88:cd:7e:45:1b:6a:2d:6b:4d:35:47:58:
b4:35:d2:50:2a:a6:f6:95:88:a1:70:c9:e5:42:87:
68:7b:99:fd:49:8f:d8:10:40:28:92:f7:3b:fc:6c:
4c:ed:be:a0:e9:c1:8f:71:52:e0:b7:db:61:34:76:
a4:83:14:4d:6b:5c:25:d6:8b:4f:bd:2f:ac:76:9b:
be:7b:02:c3:a8:98:1d:0d:79:21:96:bf:fe:4d:5b:
3d:2c:b2:ea:5e:ef:f3:67:22:2c:44:bf:4c:89:42:
36:ce:d3:c7:56:f7:9c:0a:5c:fb:a4:bc:ab:08:67:
f8:ae:7b:bd:61:02:58:d2:7d:c5:30:1d:c0:86:ea:
54:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:52:96:0E:28:71:8C:C3:F4:3A:27:39:89:7C:3F:36:8E:61:E4:05
X509v3 Authority Key Identifier:
keyid:6A:8B:5A:37:4F:14:6D:7B:6A:6D:C7:D3:16:E8:EB:B1:2D:EE:A6:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aotaN08UbXtqbcfTFujrsS3upnA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/f6c862-af8b-43f3-98ad-44241fec1a9f/1/aotaN08UbXtqbcfTFujrsS3upnA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/f6c862-af8b-43f3-98ad-44241fec1a9f/1/aotaN08UbXtqbcfTFujrsS3upnA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:17:f2:07:bb:77:e4:b7:18:42:c9:7b:35:04:f8:ec:92:51:
45:5d:b3:06:69:b0:7a:3b:3e:08:4c:fc:3f:3a:f7:6c:df:b4:
8a:2b:67:9e:f4:58:44:d8:0d:9d:8b:36:fd:5c:5a:7e:aa:0e:
ab:5d:78:62:63:91:43:4b:d5:d3:6b:1c:ed:11:bb:56:12:e8:
f4:72:b8:56:d2:5d:5c:6f:b9:02:20:1e:2c:2b:48:08:c8:ab:
0d:b3:c1:09:15:69:d3:b0:f2:ee:73:99:ca:ce:45:6c:33:84:
d0:53:64:e0:38:bd:ae:2f:22:ce:50:05:66:ea:ba:33:7a:1f:
ab:8b:52:4b:95:53:53:cb:be:3b:ef:de:fb:2f:35:0d:4c:0e:
17:dd:e6:12:b8:be:f7:a3:21:e8:1f:f5:3d:a5:e0:33:27:ce:
91:d9:42:42:2c:75:55:df:f4:fe:c9:95:4b:1b:79:2d:0a:79:
01:9f:6c:36:d2:e1:ee:4f:e4:d5:bb:36:46:82:ff:62:52:7a:
89:da:44:3a:be:1e:03:3a:48:b8:b5:85:4e:fd:9d:a7:27:a7:
83:df:a4:38:8e:87:8a:13:29:a6:d3:4a:f5:29:bb:9c:df:f7:
54:0b:5f:00:66:cc:ca:73:21:d1:a3:4e:a6:30:29:07:e1:d2:
af:fb:60:7b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ/LJbCKw1edbGq8l9LzKTT4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZhOGI1YTM3NGYxNDZkN2I2YTZkYzdkMzE2ZThlYmIxMmRl
ZWE2NzAwHhcNMjYwODA0MDUwMTEyWhcNMjYwODA1MDUwMTEyWjAzMTEwLwYDVQQD
EyhkMzUyOTYwZTI4NzE4Y2MzZjQzYTI3Mzk4OTdjM2YzNjhlNjFlNDA1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6GPSWBkzT9Go9srMVBp5UyDNQe3o
q4iBLT0lEhgm5tUorDV1KEs+piov+CFubAh4xawECGOCtTG13tqlDm8sQYNrJRLe
jlpeG6J7fP6EUMmx4FQBOBPTmNp4iWCHxURCF6g0fU1oIsfRxW3VGYANlWNbSJUk
NY8OLSWIzX5FG2ota001R1i0NdJQKqb2lYihcMnlQodoe5n9SY/YEEAokvc7/GxM
7b6g6cGPcVLgt9thNHakgxRNa1wl1otPvS+sdpu+ewLDqJgdDXkhlr/+TVs9LLLq
Xu/zZyIsRL9MiUI2ztPHVvecClz7pLyrCGf4rnu9YQJY0n3FMB3AhupUjwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNNSlg4ocYzD9DonOYl8PzaOYeQFMB8GA1UdIwQY
MBaAFGqLWjdPFG17am3H0xbo67Et7qZwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYW90YU4wOFViWHRxYmNmVEZ1anJzUzN1cG5BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC9mNmM4NjItYWY4Yi00M2YzLTk4YWQt
NDQyNDFmZWMxYTlmLzEvYW90YU4wOFViWHRxYmNmVEZ1anJzUzN1cG5BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC9mNmM4NjItYWY4Yi00M2YzLTk4YWQtNDQyNDFmZWMxYTlm
LzEvYW90YU4wOFViWHRxYmNmVEZ1anJzUzN1cG5BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADBfyB7t3
5LcYQsl7NQT47JJRRV2zBmmwejs+CEz8Pzr3bN+0iitnnvRYRNgNnYs2/VxafqoO
q114YmORQ0vV02sc7RG7VhLo9HK4VtJdXG+5AiAeLCtICMirDbPBCRVp07Dy7nOZ
ys5FbDOE0FNk4Di9ri8izlAFZuq6M3ofq4tSS5VTU8u+O+/e+y81DUwOF93mEri+
96Mh6B/1PaXgMyfOkdlCQix1Vd/0/smVSxt5LQp5AZ9sNtLh7k/k1bs2RoL/YlJ6
idpEOr4eAzpIuLWFTv2dpyeng9+kOI6HihMpptNK9Sm7nN/3VAtfAGbMynMh0aNO
pjApB+HSr/tgew==
-----END CERTIFICATE-----
Generated at Tue Aug 4 08:54:31 2026 by rpki-client