Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/e8101a-240f-4e32-a097-27c273a60788/1/AoNhMH79nzq-_mm9FN4OG9YLbmo.mft
File: AoNhMH79nzq-_mm9FN4OG9YLbmo.mft (raw, json)
Hash identifier: QYjOp/8ffDSd0qbAWkPxb2u29p5xObYk69sf5TyW5dc=
Subject key identifier: BC:48:09:4A:DE:94:93:05:62:83:28:EF:F7:6C:6B:33:1E:93:5D:C4
Authority key identifier: 02:83:61:30:7E:FD:9F:3A:BE:FE:69:BD:14:DE:0E:1B:D6:0B:6E:6A
Certificate issuer: /CN=028361307efd9f3abefe69bd14de0e1bd60b6e6a
Certificate serial: 019F1867FBE4DA5F3375722871E41FAAA313
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AoNhMH79nzq-_mm9FN4OG9YLbmo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/e8101a-240f-4e32-a097-27c273a60788/1/AoNhMH79nzq-_mm9FN4OG9YLbmo.mft
Manifest number: 198A
Signing time: Tue 30 Jun 2026 12:01:35 +0000
Manifest this update: Tue 30 Jun 2026 12:01:35 +0000
Manifest next update: Wed 01 Jul 2026 12:01:35 +0000
Files and hashes: 1: AoNhMH79nzq-_mm9FN4OG9YLbmo.crl (hash: VUkI27abYANJT7NfdWhHp8He3L5OlKa/ZB0ZOCR63lI=)
2: _xkuMQSwRHi0DljPKAluJEXoLPg.roa (hash: EUEHOabmEGDXpaBHpO2MNJv0dJd+g7oEzMzEMIadnt8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/e8101a-240f-4e32-a097-27c273a60788/1/AoNhMH79nzq-_mm9FN4OG9YLbmo.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/e8101a-240f-4e32-a097-27c273a60788/1/AoNhMH79nzq-_mm9FN4OG9YLbmo.mft
rsync://rpki.ripe.net/repository/DEFAULT/AoNhMH79nzq-_mm9FN4OG9YLbmo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 12:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:67:fb:e4:da:5f:33:75:72:28:71:e4:1f:aa:a3:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=028361307efd9f3abefe69bd14de0e1bd60b6e6a
Validity
Not Before: Jun 30 12:01:35 2026 GMT
Not After : Jul 1 12:01:35 2026 GMT
Subject: CN=bc48094ade949305628328eff76c6b331e935dc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:69:3a:58:c0:3c:7b:95:10:20:80:01:c8:77:
3c:72:2e:11:07:23:d1:50:c4:56:2c:86:6a:db:9e:
4c:28:2c:10:55:5e:e2:8c:4e:93:a2:f4:ce:0f:e4:
84:bc:2d:33:ed:b6:ec:b1:f7:fa:1f:85:f2:20:14:
8b:41:36:5a:18:5b:fe:ff:39:ea:4d:be:b1:77:c4:
11:ad:2b:b5:56:ba:f6:bd:5c:dd:2d:97:c0:94:53:
fe:12:a1:7f:ef:34:b8:4d:76:dc:74:ba:83:ab:6c:
e5:32:5a:0c:42:e9:4f:17:ee:61:76:25:c5:d4:7e:
d8:3f:43:38:84:a2:42:13:28:b1:4e:c6:c5:d0:55:
ed:15:08:0a:30:5d:70:77:35:57:07:a1:d4:a3:59:
37:79:00:8c:3b:ef:d1:48:17:4c:40:97:f4:58:3b:
a5:7f:2d:bb:75:c4:87:e1:a5:42:83:cc:6e:df:4c:
0a:b2:24:1c:91:fc:7d:62:f3:da:ba:ba:4f:d9:f7:
6c:93:67:05:6b:2e:05:6e:ba:c5:1a:a5:a0:88:51:
1d:c6:d3:bb:26:de:21:de:d7:55:36:67:a8:57:97:
90:e8:72:0c:82:10:e7:64:10:8a:85:7b:14:d6:22:
af:fb:c8:45:e3:b5:85:4a:38:17:c9:13:99:aa:96:
1d:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:48:09:4A:DE:94:93:05:62:83:28:EF:F7:6C:6B:33:1E:93:5D:C4
X509v3 Authority Key Identifier:
keyid:02:83:61:30:7E:FD:9F:3A:BE:FE:69:BD:14:DE:0E:1B:D6:0B:6E:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AoNhMH79nzq-_mm9FN4OG9YLbmo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/e8101a-240f-4e32-a097-27c273a60788/1/AoNhMH79nzq-_mm9FN4OG9YLbmo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/e8101a-240f-4e32-a097-27c273a60788/1/AoNhMH79nzq-_mm9FN4OG9YLbmo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:c0:25:63:8d:97:97:ee:f2:6a:fa:c3:49:ef:eb:f4:31:3c:
a7:39:fa:6e:21:65:19:39:09:d2:45:f9:ca:25:3c:27:8f:6a:
df:9a:6a:38:a6:9f:b0:0f:38:32:60:b4:bb:42:ff:3c:ad:f5:
12:a2:ff:f4:16:59:dd:92:ad:44:64:f7:19:09:74:fe:05:96:
72:84:30:53:a1:30:8d:8f:9a:6b:d7:5c:37:5d:f6:5c:3a:11:
08:88:3f:8c:d1:29:f7:9f:ad:1a:f1:fe:d8:5b:d1:b2:5c:3d:
af:b2:42:ab:58:da:aa:64:5c:1a:c3:e7:77:20:cc:16:58:62:
5c:eb:4d:8d:55:c8:fe:e1:b2:e7:aa:42:da:a7:cf:19:8f:21:
9e:03:b7:ef:b0:54:ec:14:23:71:ef:4f:4e:bb:d6:db:77:af:
e9:cf:af:a0:66:59:e4:6b:d4:15:a6:1a:da:ff:79:79:2d:77:
24:3e:37:57:45:88:03:54:4c:26:d6:10:5b:a2:24:27:a1:d0:
52:49:98:1e:1f:3f:47:fc:a1:b5:80:c8:77:7e:74:a8:8b:23:
91:3e:86:56:7e:ba:db:82:7d:c6:dd:e4:70:db:80:89:06:1b:
b2:73:b9:9d:50:c9:50:47:32:76:16:cd:d6:69:ff:c6:c2:53:
b4:c1:d4:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 19:16:27 2026 by rpki-client