Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/19d867-fd39-409e-b20a-ddcc25881128/1/AAydVUKlqozV4BmKuD_OD5RypGE.mft
File: AAydVUKlqozV4BmKuD_OD5RypGE.mft (raw, json)
Hash identifier: +M3gjHco6rHRq1691wKcroFgNPVmM0pCNeNIoA2PPrk=
Subject key identifier: 09:78:9D:74:42:DA:B2:7F:D6:F9:1A:F4:38:AE:C4:9A:BC:33:BA:00
Authority key identifier: 00:0C:9D:55:42:A5:AA:8C:D5:E0:19:8A:B8:3F:CE:0F:94:72:A4:61
Certificate issuer: /CN=000c9d5542a5aa8cd5e0198ab83fce0f9472a461
Certificate serial: 01A001DD0CC76C9832DC434FF529CC5E964D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AAydVUKlqozV4BmKuD_OD5RypGE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/19d867-fd39-409e-b20a-ddcc25881128/1/AAydVUKlqozV4BmKuD_OD5RypGE.mft
Manifest number: 0CF2
Signing time: Fri 14 Aug 2026 20:00:58 +0000
Manifest this update: Fri 14 Aug 2026 20:00:58 +0000
Manifest next update: Sat 15 Aug 2026 20:00:58 +0000
Files and hashes: 1: AAydVUKlqozV4BmKuD_OD5RypGE.crl (hash: IIDvHRtpIhONx2EsO+8A9EwSiR/NEeS3QWMSaEOg6Eo=)
2: vngLZNmfLJj1az9Fmgtss3szy7c.roa (hash: ssOKv+ps89YXTCCYgONYAdpYtqCOvvIBxQPvm7fOwUs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/19d867-fd39-409e-b20a-ddcc25881128/1/AAydVUKlqozV4BmKuD_OD5RypGE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/19d867-fd39-409e-b20a-ddcc25881128/1/AAydVUKlqozV4BmKuD_OD5RypGE.mft
rsync://rpki.ripe.net/repository/DEFAULT/AAydVUKlqozV4BmKuD_OD5RypGE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:dd:0c:c7:6c:98:32:dc:43:4f:f5:29:cc:5e:96:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=000c9d5542a5aa8cd5e0198ab83fce0f9472a461
Validity
Not Before: Aug 14 20:00:58 2026 GMT
Not After : Aug 15 20:00:58 2026 GMT
Subject: CN=09789d7442dab27fd6f91af438aec49abc33ba00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:dc:70:1f:c3:ca:70:b9:aa:d0:eb:a1:9f:d7:
96:0a:14:a3:f0:c0:91:75:75:8e:f1:de:8c:aa:37:
04:8c:77:ca:a5:05:3a:cd:7e:1c:d4:6d:03:94:ea:
39:38:7a:35:38:8b:46:97:6f:c7:af:30:6a:7b:f7:
7a:26:88:fe:c7:2b:16:aa:8a:60:7f:1f:0c:e3:e7:
52:23:8b:46:a8:52:cf:b2:e5:73:7c:b4:98:97:41:
9f:0f:e7:62:b7:51:16:e1:85:28:0a:46:01:aa:16:
c7:2d:e8:7d:5e:7a:42:a1:9b:6e:61:1f:59:f8:aa:
f1:0d:6a:36:ff:f9:ed:aa:29:7a:01:1a:b2:21:44:
90:38:e2:2c:74:ab:4c:6d:09:72:6f:66:ae:a1:f3:
1c:de:46:09:9b:2a:8b:e7:fc:ec:02:33:3a:99:bd:
66:ff:a2:d3:15:14:93:bb:6a:49:fe:b3:cc:a1:4b:
61:3e:42:65:78:6b:66:87:d1:3c:52:6c:a8:cb:ae:
9f:fb:70:d6:41:c7:71:28:86:f4:4f:a3:f3:4e:1a:
d7:2f:57:19:f6:81:b1:67:7a:83:7c:2a:93:e7:f0:
10:ae:6a:3c:27:9d:c9:3c:b9:7a:ce:c6:7b:cb:20:
bb:32:69:59:6a:cc:b6:fd:87:af:fb:72:27:3d:86:
a4:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:78:9D:74:42:DA:B2:7F:D6:F9:1A:F4:38:AE:C4:9A:BC:33:BA:00
X509v3 Authority Key Identifier:
keyid:00:0C:9D:55:42:A5:AA:8C:D5:E0:19:8A:B8:3F:CE:0F:94:72:A4:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AAydVUKlqozV4BmKuD_OD5RypGE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/19d867-fd39-409e-b20a-ddcc25881128/1/AAydVUKlqozV4BmKuD_OD5RypGE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/19d867-fd39-409e-b20a-ddcc25881128/1/AAydVUKlqozV4BmKuD_OD5RypGE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:5a:40:bb:91:a4:a7:e3:e7:e6:73:25:4a:9e:b7:cf:52:1f:
59:9e:1a:6f:17:75:f8:a2:d9:81:36:d5:19:91:f6:3e:58:3f:
50:8d:50:fe:f1:38:25:c9:51:c4:d7:33:58:28:62:17:21:27:
26:ed:f0:22:33:c4:df:73:a1:c0:02:e0:8d:2b:24:58:7d:5b:
75:11:3b:9a:5d:25:81:ca:5c:b4:99:04:d7:a3:ac:f8:eb:a9:
8a:d1:07:70:02:5b:38:8b:9d:0b:5c:75:25:00:cf:5c:93:ad:
38:a1:79:7c:eb:6e:70:fa:51:c7:41:37:10:f2:68:8f:e5:70:
55:dc:e2:cb:cf:53:8a:b4:6a:89:ff:b5:30:c7:80:4c:e7:3c:
0b:7a:58:b1:d0:12:83:a1:ea:c6:4d:99:2e:61:d7:df:ca:0a:
8f:03:60:ab:62:6c:e0:e5:cc:38:c6:54:3e:11:04:25:14:e4:
b6:29:9c:3b:47:0a:58:7d:40:1a:e7:be:c6:e7:f2:e2:67:cd:
eb:c0:cc:84:a1:ff:54:7b:63:8f:95:83:2f:7e:1c:db:58:86:
57:9b:fc:94:e8:15:09:d2:d2:35:9a:78:7f:35:1d:b5:ab:f2:
61:7f:61:40:de:36:82:39:cc:05:3d:e7:84:c1:66:91:6e:7c:
c6:3d:81:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 23:34:39 2026 by rpki-client