Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/e8101a-240f-4e32-a097-27c273a60788/1/AoNhMH79nzq-_mm9FN4OG9YLbmo.mft
File: AoNhMH79nzq-_mm9FN4OG9YLbmo.mft (raw, json)
Hash identifier: pvtGLpR8jciFb+QIluuO12VuZ6mOHalVWlT2VH78MvM=
Subject key identifier: 85:5E:7B:FD:08:F2:8E:48:95:31:C2:11:13:8D:95:6D:7E:CC:86:09
Authority key identifier: 02:83:61:30:7E:FD:9F:3A:BE:FE:69:BD:14:DE:0E:1B:D6:0B:6E:6A
Certificate issuer: /CN=028361307efd9f3abefe69bd14de0e1bd60b6e6a
Certificate serial: 01A0002591FC77A603E3070C1547AEA1CBED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AoNhMH79nzq-_mm9FN4OG9YLbmo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/e8101a-240f-4e32-a097-27c273a60788/1/AoNhMH79nzq-_mm9FN4OG9YLbmo.mft
Manifest number: 1A02
Signing time: Fri 14 Aug 2026 12:00:57 +0000
Manifest this update: Fri 14 Aug 2026 12:00:57 +0000
Manifest next update: Sat 15 Aug 2026 12:00:57 +0000
Files and hashes: 1: AoNhMH79nzq-_mm9FN4OG9YLbmo.crl (hash: FJjGRWzgXLc7LcLjlVmzGKQS0PFBTc0sEVE6Pz0f+uk=)
2: _xkuMQSwRHi0DljPKAluJEXoLPg.roa (hash: EUEHOabmEGDXpaBHpO2MNJv0dJd+g7oEzMzEMIadnt8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/e8101a-240f-4e32-a097-27c273a60788/1/AoNhMH79nzq-_mm9FN4OG9YLbmo.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/e8101a-240f-4e32-a097-27c273a60788/1/AoNhMH79nzq-_mm9FN4OG9YLbmo.mft
rsync://rpki.ripe.net/repository/DEFAULT/AoNhMH79nzq-_mm9FN4OG9YLbmo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 12:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:00:25:91:fc:77:a6:03:e3:07:0c:15:47:ae:a1:cb:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=028361307efd9f3abefe69bd14de0e1bd60b6e6a
Validity
Not Before: Aug 14 12:00:57 2026 GMT
Not After : Aug 15 12:00:57 2026 GMT
Subject: CN=855e7bfd08f28e489531c211138d956d7ecc8609
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:65:1a:af:63:b2:a0:94:e8:d0:08:23:be:4c:
6d:85:f5:c4:79:58:3f:83:e8:5a:f6:c9:a1:23:aa:
84:a8:71:ae:7d:de:8c:84:55:09:bd:60:46:7d:22:
55:fc:e8:c4:3c:8b:6c:9c:8a:65:f6:ce:4e:d4:e6:
0e:5c:a0:76:22:2f:4d:9d:b1:cd:56:b8:01:24:d9:
f8:e0:ab:43:77:ca:8e:4f:74:31:eb:72:9d:9a:a7:
40:bc:8e:03:f2:75:d8:78:78:00:8e:57:e9:3f:a6:
c6:91:d3:ad:57:23:d1:c6:56:9a:48:f4:b0:be:e2:
5e:ea:28:b6:d9:42:61:5a:b2:c2:76:82:74:14:40:
3b:9e:59:04:dc:ca:ea:03:87:c6:b4:c8:b8:6a:9a:
1a:d0:eb:85:55:3b:d3:83:d3:85:83:e0:19:b4:9d:
ed:64:39:9d:23:b5:f3:96:b7:cb:e6:26:45:9a:4f:
fc:e7:b6:6b:0c:ac:dd:ac:c8:de:dd:55:8c:46:52:
4b:fb:bd:47:94:ef:13:34:51:29:3a:ae:39:d7:8d:
0c:b9:d9:35:2e:18:f8:c2:23:09:a2:bb:30:11:df:
1b:a0:43:43:90:e2:5d:d5:2a:49:98:1d:f9:24:75:
2d:34:bd:cb:12:53:89:37:90:a5:8f:67:b8:18:8d:
de:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:5E:7B:FD:08:F2:8E:48:95:31:C2:11:13:8D:95:6D:7E:CC:86:09
X509v3 Authority Key Identifier:
keyid:02:83:61:30:7E:FD:9F:3A:BE:FE:69:BD:14:DE:0E:1B:D6:0B:6E:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AoNhMH79nzq-_mm9FN4OG9YLbmo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/e8101a-240f-4e32-a097-27c273a60788/1/AoNhMH79nzq-_mm9FN4OG9YLbmo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/e8101a-240f-4e32-a097-27c273a60788/1/AoNhMH79nzq-_mm9FN4OG9YLbmo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:bb:70:1a:1e:f2:35:d0:5b:68:78:e7:83:ea:8e:f2:d4:86:
74:e3:df:54:0e:19:bb:84:95:19:b2:8a:ca:26:6a:40:d5:4c:
b3:47:88:4a:03:aa:31:b2:d9:b6:9c:17:b6:ff:9a:18:19:d2:
9a:f4:b5:13:7c:25:a3:cb:3d:f9:12:53:bd:c0:72:e6:f3:09:
9b:05:8d:03:fa:7d:06:ec:e4:f8:72:49:25:34:ce:aa:49:7d:
3c:73:f5:54:65:39:f1:79:f4:47:f7:15:a3:5e:c8:47:73:86:
b9:9e:f9:de:d0:c1:5c:e1:6b:b5:f4:62:20:db:54:07:8d:33:
c6:2f:87:54:7e:95:c7:51:7e:53:49:8a:34:fd:2e:51:6c:cf:
9c:fa:e6:b9:c4:c7:41:42:13:59:26:15:45:88:b4:97:d2:7a:
ae:a3:df:1f:2f:a5:c0:e9:c7:c7:d9:76:64:bf:bd:ba:0d:09:
e8:21:03:a7:22:45:f7:87:b8:ca:b5:4b:22:f3:50:89:09:0c:
03:97:ef:18:55:7c:79:d8:45:31:80:0a:d0:c6:4e:24:bd:7c:
46:63:ba:e2:e1:0c:58:80:b1:95:81:02:76:8a:ed:17:17:6f:
39:c1:8d:1d:34:e9:63:c8:a0:9d:14:b2:0d:e5:75:8f:ee:43:
35:a3:77:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:24:34 2026 by rpki-client