Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f0/46238a-a19a-4915-8a47-a0cd141513cb/1/AOezY1s9V4VgNwpYMDz81c2SkQU.mft
File: AOezY1s9V4VgNwpYMDz81c2SkQU.mft (raw, json)
Hash identifier: HUxx+P4M8ZBM8QWyVjyqMM+EhKpDoOnecKZRYEotUnc=
Subject key identifier: C9:A9:27:9A:A8:4B:2C:00:33:3B:18:97:3B:6A:4D:29:2D:F8:0E:46
Authority key identifier: 00:E7:B3:63:5B:3D:57:85:60:37:0A:58:30:3C:FC:D5:CD:92:91:05
Certificate issuer: /CN=00e7b3635b3d578560370a58303cfcd5cd929105
Certificate serial: 01A13DB7C926415E54669E17ABB0E1D999EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AOezY1s9V4VgNwpYMDz81c2SkQU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/46238a-a19a-4915-8a47-a0cd141513cb/1/AOezY1s9V4VgNwpYMDz81c2SkQU.mft
Manifest number: 11B6
Signing time: Thu 15 Oct 2026 04:00:16 +0000
Manifest this update: Thu 15 Oct 2026 04:00:16 +0000
Manifest next update: Fri 16 Oct 2026 04:00:16 +0000
Files and hashes: 1: AOezY1s9V4VgNwpYMDz81c2SkQU.crl (hash: DAZcPpr5yvs2Pncw80pPIbgnhd3oCL2hW3hFHkEApQQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/46238a-a19a-4915-8a47-a0cd141513cb/1/AOezY1s9V4VgNwpYMDz81c2SkQU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/46238a-a19a-4915-8a47-a0cd141513cb/1/AOezY1s9V4VgNwpYMDz81c2SkQU.mft
rsync://rpki.ripe.net/repository/DEFAULT/AOezY1s9V4VgNwpYMDz81c2SkQU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 04:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3d:b7:c9:26:41:5e:54:66:9e:17:ab:b0:e1:d9:99:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00e7b3635b3d578560370a58303cfcd5cd929105
Validity
Not Before: Oct 15 04:00:16 2026 GMT
Not After : Oct 16 04:00:16 2026 GMT
Subject: CN=c9a9279aa84b2c00333b18973b6a4d292df80e46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:d7:2e:40:58:58:2d:21:4e:3d:1a:97:10:53:
ce:e3:97:9c:c2:d8:3a:d3:a1:96:a7:03:e8:29:e7:
b9:7b:b5:4d:dd:cd:43:19:3e:79:71:ce:01:ab:fa:
85:39:25:32:d7:19:31:43:06:66:44:4a:bd:e6:14:
a3:9f:ff:07:05:78:09:a8:bf:d4:f8:73:75:1d:85:
f0:b7:25:77:e9:97:e7:8e:e7:01:cf:06:eb:6b:49:
e4:84:5d:2a:46:b1:86:43:4e:f5:ac:c0:2f:f9:aa:
29:72:c6:99:38:dc:c5:a7:b8:94:8f:be:8e:c0:82:
6a:8f:0a:e2:a3:cc:42:59:af:41:2f:15:74:09:ed:
a4:10:22:fd:89:d0:63:a2:75:22:e0:0a:1f:6b:37:
81:3d:61:cb:ab:68:b5:85:dc:8c:50:67:bb:69:56:
f2:62:37:49:b8:9f:d3:eb:3b:15:0a:11:d0:61:51:
40:4f:2a:f6:6d:a4:90:73:a0:19:fa:1e:60:ae:60:
1f:78:4d:0c:e0:4a:0c:b6:52:f5:bb:c5:62:bb:7b:
98:d9:27:1a:03:e5:b0:ad:72:fd:45:1c:d7:76:15:
d8:f3:a1:ee:c4:2e:f2:67:c2:97:f0:1f:c9:c6:ca:
45:a9:e9:43:57:6f:41:9b:5f:86:f8:1f:1b:3d:16:
5b:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:A9:27:9A:A8:4B:2C:00:33:3B:18:97:3B:6A:4D:29:2D:F8:0E:46
X509v3 Authority Key Identifier:
keyid:00:E7:B3:63:5B:3D:57:85:60:37:0A:58:30:3C:FC:D5:CD:92:91:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AOezY1s9V4VgNwpYMDz81c2SkQU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/46238a-a19a-4915-8a47-a0cd141513cb/1/AOezY1s9V4VgNwpYMDz81c2SkQU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/46238a-a19a-4915-8a47-a0cd141513cb/1/AOezY1s9V4VgNwpYMDz81c2SkQU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:24:23:02:53:7b:ba:ce:55:f8:30:d3:cc:3a:c9:ec:23:80:
80:14:1f:4f:e4:0c:4a:35:15:2f:5b:f5:98:10:de:d8:cd:3c:
ac:7e:fc:f4:41:fa:8a:1f:cb:c9:27:9c:fd:0e:57:e2:35:db:
88:1b:e7:58:b0:21:66:05:36:20:ba:38:c4:6f:3c:78:a9:b2:
f7:66:d4:0f:f7:e4:5c:ef:60:d3:17:36:4e:35:0f:c4:cc:69:
14:e4:60:0d:cc:97:6b:10:e9:ec:d0:0a:69:b2:cc:ac:c3:eb:
23:c3:72:93:4f:c3:e1:d8:44:2d:29:34:15:67:73:cb:1b:9b:
f0:de:73:32:7d:c1:8e:8b:42:4f:15:b8:8b:0c:fc:bb:76:89:
b9:c3:df:8f:d4:2e:f6:ad:e2:47:5b:40:b5:22:67:b1:dc:0c:
9a:69:9c:31:08:d8:6f:f8:13:5f:8f:7d:46:d2:36:df:85:a9:
0f:07:ce:66:4e:df:d1:2f:f4:34:de:e5:11:d0:fc:23:1a:ad:
e3:d3:9e:04:71:d7:10:f7:86:2e:10:0f:dd:51:2f:9c:28:c8:
01:35:d5:ac:2e:03:bd:62:e3:4b:fb:22:f9:69:f5:d1:a9:a5:
b6:73:26:20:2e:8d:d0:57:1b:34:e4:88:26:a5:1a:a9:6f:35:
15:6f:56:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 12:39:11 2026 by rpki-client