Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ea/9d5feb-beda-4147-9d83-c9ad37f94cd7/1/AOLDNzGtylfcwzsvuCM_wDiwlek.mft
File: AOLDNzGtylfcwzsvuCM_wDiwlek.mft (raw, json)
Hash identifier: 0qHK7lEnjTdei8ObkierNZ+1j85hurVFSC767BAilp0=
Subject key identifier: 71:29:10:26:B7:AA:59:C2:B9:F8:BB:09:80:60:D2:F4:1D:AC:C6:55
Authority key identifier: 00:E2:C3:37:31:AD:CA:57:DC:C3:3B:2F:B8:23:3F:C0:38:B0:95:E9
Certificate issuer: /CN=00e2c33731adca57dcc33b2fb8233fc038b095e9
Certificate serial: 01A13FDDE4ABC9B7909162DB9682D8956559
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AOLDNzGtylfcwzsvuCM_wDiwlek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/9d5feb-beda-4147-9d83-c9ad37f94cd7/1/AOLDNzGtylfcwzsvuCM_wDiwlek.mft
Manifest number: 15E4
Signing time: Thu 15 Oct 2026 14:01:08 +0000
Manifest this update: Thu 15 Oct 2026 14:01:08 +0000
Manifest next update: Fri 16 Oct 2026 14:01:08 +0000
Files and hashes: 1: 6tZKYli0xFjSrMTaPxgthKbfu_g.roa (hash: lqL9qb+FKGUxGrpBLb7Tf9OnZbQiDT4OvdfFGjgah0c=)
2: AOLDNzGtylfcwzsvuCM_wDiwlek.crl (hash: 34KnugrP+wUMNHoCQ9S401trcjtRb2h3DI2pj7E8+Xs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/9d5feb-beda-4147-9d83-c9ad37f94cd7/1/AOLDNzGtylfcwzsvuCM_wDiwlek.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/9d5feb-beda-4147-9d83-c9ad37f94cd7/1/AOLDNzGtylfcwzsvuCM_wDiwlek.mft
rsync://rpki.ripe.net/repository/DEFAULT/AOLDNzGtylfcwzsvuCM_wDiwlek.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3f:dd:e4:ab:c9:b7:90:91:62:db:96:82:d8:95:65:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00e2c33731adca57dcc33b2fb8233fc038b095e9
Validity
Not Before: Oct 15 14:01:08 2026 GMT
Not After : Oct 16 14:01:08 2026 GMT
Subject: CN=71291026b7aa59c2b9f8bb098060d2f41dacc655
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:91:e9:08:0b:e1:01:80:e3:b4:82:f3:ba:52:
3c:66:3b:e5:81:48:04:22:56:35:fc:61:96:fc:21:
0e:bf:ce:0b:4a:e8:27:fe:42:ce:cb:55:d9:b7:82:
c0:aa:5f:34:c6:22:dc:02:64:0d:18:cc:af:66:28:
11:d6:34:23:f4:19:7f:b4:a5:0e:59:01:03:12:f1:
0c:07:ef:60:91:30:d4:2f:29:cc:f6:e6:ef:a1:b9:
2e:dc:30:8e:58:b6:58:ac:e2:a8:8e:27:e0:4a:c6:
43:1e:79:6d:21:4e:30:cb:06:d2:65:12:17:9b:d2:
0b:85:21:6b:6b:ad:1d:88:2c:c9:1d:c6:6d:39:74:
53:f1:78:aa:fe:2c:51:ac:2e:8b:36:5e:38:dc:08:
e9:8b:d9:58:28:3c:90:7a:1e:99:bb:c6:64:a9:72:
73:ab:ee:93:8e:b0:53:b9:8a:b6:0b:2b:6a:e3:f6:
78:a5:7b:5f:bc:b1:e5:e4:bd:65:1c:34:8a:0f:47:
6d:54:79:95:ae:78:f2:c7:60:74:5a:36:6c:4b:ce:
69:39:a2:3e:5e:ac:d8:54:f7:45:54:86:c9:d8:19:
8c:ca:2e:6e:90:39:f9:f9:6f:3c:f7:d6:5d:a9:b4:
32:6d:50:d1:26:90:97:6a:1f:d1:6e:58:bc:f4:35:
df:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:29:10:26:B7:AA:59:C2:B9:F8:BB:09:80:60:D2:F4:1D:AC:C6:55
X509v3 Authority Key Identifier:
keyid:00:E2:C3:37:31:AD:CA:57:DC:C3:3B:2F:B8:23:3F:C0:38:B0:95:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AOLDNzGtylfcwzsvuCM_wDiwlek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/9d5feb-beda-4147-9d83-c9ad37f94cd7/1/AOLDNzGtylfcwzsvuCM_wDiwlek.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/9d5feb-beda-4147-9d83-c9ad37f94cd7/1/AOLDNzGtylfcwzsvuCM_wDiwlek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:8f:3d:c8:4a:2a:66:6c:cf:6d:9e:9f:f2:57:90:f5:87:90:
80:c0:e9:49:8e:5f:0f:c0:37:2d:34:41:aa:39:21:c5:17:8e:
a5:b7:6c:da:c0:86:46:8a:10:53:19:1d:8a:0b:82:ce:d1:f3:
68:72:b3:47:c0:1d:e3:2a:4a:56:31:bf:39:58:3a:1a:c6:75:
e6:5f:74:e9:f0:d0:fc:11:3c:1e:bc:d1:de:19:52:88:31:a3:
0e:30:9d:56:96:f6:16:51:a5:37:82:bd:e7:4c:0c:ca:42:8d:
86:47:d2:12:13:15:57:88:a3:09:5d:f2:4c:66:a9:31:01:cb:
ce:d9:48:29:c8:92:f6:5c:13:c5:41:c4:cb:0d:2a:0d:7e:c9:
67:af:e5:7d:e3:e4:57:74:e0:8c:f0:20:92:ed:cd:01:e5:02:
73:8d:46:f0:22:51:a8:97:54:31:3e:d0:f5:49:50:85:6a:6d:
c0:b2:29:95:cb:09:1f:21:3f:80:71:3f:08:c3:21:5c:a0:ae:
57:59:15:ea:95:62:f7:3c:ac:ad:6d:56:93:83:d8:9b:26:c5:
3a:aa:2a:a4:23:0b:70:19:fb:90:dd:a7:58:e5:00:9c:8e:9a:
a5:e9:17:4a:dd:66:8f:67:30:c7:35:4a:f8:e2:f8:be:e7:c6:
b8:45:89:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 17:47:02 2026 by rpki-client