Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cc/e8101a-240f-4e32-a097-27c273a60788/1/AoNhMH79nzq-_mm9FN4OG9YLbmo.mft
File: AoNhMH79nzq-_mm9FN4OG9YLbmo.mft (raw, json)
Hash identifier: sFJ1xzRzPma1A41x4pCtJytjUsQbWEJUCFlT0NwWRQo=
Subject key identifier: A0:A7:6D:75:55:FD:53:42:C1:99:37:EE:74:13:FD:A2:D3:B1:68:44
Authority key identifier: 02:83:61:30:7E:FD:9F:3A:BE:FE:69:BD:14:DE:0E:1B:D6:0B:6E:6A
Certificate issuer: /CN=028361307efd9f3abefe69bd14de0e1bd60b6e6a
Certificate serial: 01A13ECBBD2008AC74EA48F234F3A2687850
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AoNhMH79nzq-_mm9FN4OG9YLbmo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/e8101a-240f-4e32-a097-27c273a60788/1/AoNhMH79nzq-_mm9FN4OG9YLbmo.mft
Manifest number: 1AA7
Signing time: Thu 15 Oct 2026 09:01:41 +0000
Manifest this update: Thu 15 Oct 2026 09:01:41 +0000
Manifest next update: Fri 16 Oct 2026 09:01:41 +0000
Files and hashes: 1: AoNhMH79nzq-_mm9FN4OG9YLbmo.crl (hash: 1vGK9IoKrt51WMk1ituOME/Mrl9p1C40WramHQtS830=)
2: _xkuMQSwRHi0DljPKAluJEXoLPg.roa (hash: EUEHOabmEGDXpaBHpO2MNJv0dJd+g7oEzMzEMIadnt8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/e8101a-240f-4e32-a097-27c273a60788/1/AoNhMH79nzq-_mm9FN4OG9YLbmo.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/e8101a-240f-4e32-a097-27c273a60788/1/AoNhMH79nzq-_mm9FN4OG9YLbmo.mft
rsync://rpki.ripe.net/repository/DEFAULT/AoNhMH79nzq-_mm9FN4OG9YLbmo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 09:01:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3e:cb:bd:20:08:ac:74:ea:48:f2:34:f3:a2:68:78:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=028361307efd9f3abefe69bd14de0e1bd60b6e6a
Validity
Not Before: Oct 15 09:01:41 2026 GMT
Not After : Oct 16 09:01:41 2026 GMT
Subject: CN=a0a76d7555fd5342c19937ee7413fda2d3b16844
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:8f:c7:1e:53:ec:29:85:21:d4:93:66:e3:d1:
5c:63:c1:dd:2a:9b:2c:cc:78:4c:07:7e:4c:b9:98:
67:e3:e5:9f:ef:a8:ae:90:fa:f1:35:26:09:1a:13:
b1:26:ea:bd:e7:5a:9f:72:20:0d:29:92:86:d4:64:
58:54:73:93:2c:35:35:ca:71:60:20:66:93:1e:1f:
ef:0b:af:ad:83:8e:a8:de:79:7e:04:62:41:c3:4c:
3e:ca:1d:d0:35:4f:76:65:8c:a9:24:28:d3:77:0e:
8b:62:da:10:1b:f1:b4:74:59:9b:e9:55:a4:86:2a:
0f:55:fa:03:69:6f:5e:5b:90:f8:b1:48:f5:e7:4f:
8a:52:7c:a4:22:cc:e2:82:e2:89:bf:2b:3b:f3:46:
54:21:66:b8:d8:cd:64:a2:f2:8c:c5:ef:5e:4d:cf:
15:00:dd:e3:6e:b8:e0:2a:c5:29:ef:23:95:07:fd:
b6:be:41:cf:8f:d4:38:52:a1:12:cf:cd:46:2a:81:
22:f7:63:4a:2f:ba:4f:0e:da:4e:f2:7e:a9:3b:fc:
fb:a3:e6:1b:cf:2d:98:7c:63:52:3a:d7:32:b2:2c:
3f:39:1a:94:a9:60:95:a4:b7:05:2c:d1:57:38:fa:
0c:9e:87:ac:71:e7:5b:7f:6f:27:27:76:5e:46:a8:
11:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:A7:6D:75:55:FD:53:42:C1:99:37:EE:74:13:FD:A2:D3:B1:68:44
X509v3 Authority Key Identifier:
keyid:02:83:61:30:7E:FD:9F:3A:BE:FE:69:BD:14:DE:0E:1B:D6:0B:6E:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AoNhMH79nzq-_mm9FN4OG9YLbmo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/e8101a-240f-4e32-a097-27c273a60788/1/AoNhMH79nzq-_mm9FN4OG9YLbmo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/e8101a-240f-4e32-a097-27c273a60788/1/AoNhMH79nzq-_mm9FN4OG9YLbmo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:d8:48:a6:e6:44:5d:37:0b:ea:c9:9a:62:57:b6:65:2b:e1:
a9:af:6f:ff:2b:82:80:30:9f:aa:e0:e5:36:8f:69:50:4e:47:
ae:f3:38:2e:3e:c3:4f:16:3f:e5:6d:a7:7b:2a:68:20:bd:ba:
cc:d1:58:11:72:47:a8:7b:1a:d9:0b:b1:fb:dd:39:3d:3d:24:
16:7a:70:5f:80:2d:8a:62:48:10:d8:b2:dd:70:0e:68:1b:1e:
0a:fa:65:81:be:b0:97:fe:43:ad:97:94:e4:a3:db:24:3c:63:
36:1b:3b:8e:76:d5:df:cd:84:e2:f6:3f:59:0c:e2:40:46:1c:
2c:d2:ae:60:fd:05:f7:52:cf:4e:09:93:5e:e7:1c:6e:6f:ec:
2d:c0:31:b6:07:dd:f8:ec:17:d7:4e:12:54:33:ce:7a:2a:6a:
cd:0b:b5:c4:3c:8b:cd:05:eb:c0:7c:b5:87:45:a6:b9:e1:18:
50:3f:74:11:80:92:d7:ba:ef:91:31:02:1a:7c:d3:5f:f1:e2:
08:2f:c6:83:12:3c:70:e6:d2:4c:64:82:2f:22:99:84:3a:49:
85:4e:d0:c8:36:c2:c1:ed:fa:97:f7:c7:6d:00:f0:12:2c:4e:
f6:8b:f7:3b:43:78:9f:0e:a5:98:bd:fc:c4:07:cd:22:24:cc:
28:5b:2e:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 20:51:13 2026 by rpki-client