Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/46238a-a19a-4915-8a47-a0cd141513cb/1/AOezY1s9V4VgNwpYMDz81c2SkQU.mft
File: AOezY1s9V4VgNwpYMDz81c2SkQU.mft (raw, json)
Hash identifier: xXBJiUgQjcRx6JxWSMRIN0qmnakbY9eZebnuU6d9tYc=
Subject key identifier: DB:31:8E:4E:C8:3E:B2:0D:2D:28:EC:C0:9D:00:51:F1:9E:A7:72:76
Authority key identifier: 00:E7:B3:63:5B:3D:57:85:60:37:0A:58:30:3C:FC:D5:CD:92:91:05
Certificate issuer: /CN=00e7b3635b3d578560370a58303cfcd5cd929105
Certificate serial: 01A00101781223BF7FAFB0BB9EB6FD62DE41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AOezY1s9V4VgNwpYMDz81c2SkQU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/46238a-a19a-4915-8a47-a0cd141513cb/1/AOezY1s9V4VgNwpYMDz81c2SkQU.mft
Manifest number: 1112
Signing time: Fri 14 Aug 2026 16:01:08 +0000
Manifest this update: Fri 14 Aug 2026 16:01:08 +0000
Manifest next update: Sat 15 Aug 2026 16:01:08 +0000
Files and hashes: 1: AOezY1s9V4VgNwpYMDz81c2SkQU.crl (hash: 6Fplgg6RhQNVG0BUhTyJ4qnDy3dB1tPRizZUEN24g0o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/46238a-a19a-4915-8a47-a0cd141513cb/1/AOezY1s9V4VgNwpYMDz81c2SkQU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/46238a-a19a-4915-8a47-a0cd141513cb/1/AOezY1s9V4VgNwpYMDz81c2SkQU.mft
rsync://rpki.ripe.net/repository/DEFAULT/AOezY1s9V4VgNwpYMDz81c2SkQU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:01:78:12:23:bf:7f:af:b0:bb:9e:b6:fd:62:de:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00e7b3635b3d578560370a58303cfcd5cd929105
Validity
Not Before: Aug 14 16:01:08 2026 GMT
Not After : Aug 15 16:01:08 2026 GMT
Subject: CN=db318e4ec83eb20d2d28ecc09d0051f19ea77276
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:f3:18:3a:1e:78:22:d1:33:56:ce:85:0e:49:
3e:80:fe:78:f0:93:5d:dd:c2:85:3a:c6:3a:11:4c:
4b:30:06:60:24:98:d3:70:61:41:67:37:96:46:8e:
7f:a5:d0:c8:32:e5:d4:92:7e:f4:17:0b:93:09:a2:
16:82:89:4b:9b:32:18:e5:0d:05:08:13:2b:db:08:
aa:d9:b7:b8:13:15:01:f7:db:42:a9:fa:14:b7:6c:
1e:d1:ac:cf:2c:b9:da:a0:29:8e:72:d7:81:6a:5a:
52:75:27:cd:d0:b9:77:d3:b9:6f:4c:05:1c:dc:29:
2c:73:69:bb:6b:c5:ad:24:41:3f:47:de:55:00:3d:
27:96:1b:3d:7f:65:9e:67:af:7e:14:17:a0:a2:72:
ff:b3:6d:c6:50:e7:9b:a4:e8:0a:92:4c:05:d6:37:
3b:10:d4:7a:13:45:2f:f6:46:95:a0:a3:f3:d3:ea:
12:c2:e4:3e:68:11:ef:40:34:71:e3:9f:6f:38:f1:
4f:e7:65:25:62:dc:b5:18:88:fc:7e:37:f4:43:bd:
06:8b:4d:13:c2:60:9d:e3:a6:54:c6:ed:b2:0f:c2:
7e:92:85:4d:57:b2:ee:4d:26:fd:91:66:62:c0:49:
49:1f:dd:f3:ec:23:fe:d0:b4:43:99:38:b7:6c:32:
b0:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:31:8E:4E:C8:3E:B2:0D:2D:28:EC:C0:9D:00:51:F1:9E:A7:72:76
X509v3 Authority Key Identifier:
keyid:00:E7:B3:63:5B:3D:57:85:60:37:0A:58:30:3C:FC:D5:CD:92:91:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AOezY1s9V4VgNwpYMDz81c2SkQU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/46238a-a19a-4915-8a47-a0cd141513cb/1/AOezY1s9V4VgNwpYMDz81c2SkQU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/46238a-a19a-4915-8a47-a0cd141513cb/1/AOezY1s9V4VgNwpYMDz81c2SkQU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:a9:72:f1:9e:c0:bc:53:94:25:5d:a2:05:0f:85:bd:9c:fb:
84:6f:6c:86:00:aa:eb:72:26:2c:78:7c:47:0b:f9:f5:4a:86:
01:a3:7d:ab:4b:ad:92:24:c0:bf:80:c3:6c:54:35:64:39:cd:
5e:04:81:2c:16:7c:c1:c4:52:93:c0:76:cc:26:a2:2b:10:71:
df:b4:33:58:a8:14:21:96:f9:61:f0:6f:e9:11:35:03:cc:3c:
dc:38:ce:88:c3:87:e7:1b:86:35:90:56:06:41:18:7a:5f:03:
73:13:0f:31:cd:80:cd:f9:80:45:d0:3f:19:51:cd:ce:c1:e9:
13:ff:a2:c9:97:f5:63:bf:f1:a1:f4:fb:95:95:25:b8:71:1e:
0d:4e:b9:27:7a:52:5a:b2:5c:bd:17:0b:4e:04:0e:73:3f:23:
38:75:41:dc:16:8e:3d:ef:51:76:ff:e0:1d:48:c7:1e:d4:db:
7c:92:17:78:e1:b1:30:cd:69:94:75:61:8e:71:30:bb:a5:ee:
15:48:b4:71:1e:79:91:02:65:ae:58:cd:11:26:ef:5b:b3:0c:
55:66:13:0a:a7:ce:c6:08:f0:d9:43:15:c1:76:2f:a7:df:53:
6e:de:5a:c1:fa:98:75:60:cb:a0:c5:6e:b6:98:8e:d8:13:5b:
64:5a:18:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 23:37:02 2026 by rpki-client