Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/17/d301cd-f513-4995-9d55-1b38b02245c1/1/ao33d2sW0oLgTGluJYqk-fnOnJg.mft
File: ao33d2sW0oLgTGluJYqk-fnOnJg.mft (raw, json)
Hash identifier: TY7ZBHy4jrsjUohCg9rU/IbCl8i9EM22INsj3Mowfac=
Subject key identifier: DC:E8:D8:C3:57:76:42:63:85:8A:F6:DA:AF:C8:5D:E0:AF:62:01:D4
Authority key identifier: 6A:8D:F7:77:6B:16:D2:82:E0:4C:69:6E:25:8A:A4:F9:F9:CE:9C:98
Certificate issuer: /CN=6a8df7776b16d282e04c696e258aa4f9f9ce9c98
Certificate serial: 01A15063CA653DC60649443AA395D6956D25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ao33d2sW0oLgTGluJYqk-fnOnJg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/d301cd-f513-4995-9d55-1b38b02245c1/1/ao33d2sW0oLgTGluJYqk-fnOnJg.mft
Manifest number: 0E9F
Signing time: Sun 18 Oct 2026 19:01:19 +0000
Manifest this update: Sun 18 Oct 2026 19:01:19 +0000
Manifest next update: Mon 19 Oct 2026 19:01:19 +0000
Files and hashes: 1: GmFXXmDlxbUAsewZb2XP6yyDi4w.roa (hash: t86pSAuRTeL1p9o68CyCCsghXoQGwpFAgB1l7sjE7zs=)
2: ao33d2sW0oLgTGluJYqk-fnOnJg.crl (hash: GkwJGZEbQeFkp+aM2rC7sQV6zLPf7Nus2fZ7Dy7Tb6I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/d301cd-f513-4995-9d55-1b38b02245c1/1/ao33d2sW0oLgTGluJYqk-fnOnJg.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/d301cd-f513-4995-9d55-1b38b02245c1/1/ao33d2sW0oLgTGluJYqk-fnOnJg.mft
rsync://rpki.ripe.net/repository/DEFAULT/ao33d2sW0oLgTGluJYqk-fnOnJg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 19 Oct 2026 17:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:50:63:ca:65:3d:c6:06:49:44:3a:a3:95:d6:95:6d:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a8df7776b16d282e04c696e258aa4f9f9ce9c98
Validity
Not Before: Oct 18 19:01:19 2026 GMT
Not After : Oct 19 19:01:19 2026 GMT
Subject: CN=dce8d8c357764263858af6daafc85de0af6201d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:e1:13:1e:9e:6a:20:38:7c:b7:fb:c0:5b:70:
6a:26:f8:ec:f3:c5:1e:ea:a5:70:79:9c:c6:1b:ab:
d8:66:ac:85:49:ff:bb:61:d2:25:96:98:14:a6:8d:
f4:61:19:23:f3:bc:27:02:4c:87:d3:ce:c7:b0:25:
70:4e:15:78:cc:10:91:78:1f:e4:d6:6c:5e:5e:bc:
97:5f:5d:c4:98:ab:4e:d7:eb:b8:d3:21:71:b2:6e:
76:4c:9e:59:95:fb:39:81:d6:b8:3c:b4:05:50:f4:
10:3a:f3:72:da:c6:f7:a0:27:a5:da:91:c8:79:ea:
94:e3:21:41:52:56:ee:1f:51:55:b0:10:bd:d6:ef:
39:d8:c9:66:68:b2:3a:88:71:e4:33:0e:67:92:01:
db:76:d6:64:e9:ce:39:b1:7b:81:c6:50:79:dc:b6:
b5:3f:3a:46:c1:26:f1:2f:28:39:65:8b:41:36:a2:
96:29:17:7a:91:07:57:77:7d:50:5b:c5:16:6d:0e:
66:3c:94:65:39:b6:1d:83:8e:e7:b3:c9:9f:c4:08:
77:2e:2b:8d:c3:60:9b:01:79:30:68:01:02:51:e7:
37:3c:06:aa:1f:6e:05:8d:b6:a5:b4:20:6d:67:d6:
43:22:67:ed:92:a8:7f:66:a1:98:23:71:b2:81:6d:
00:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:E8:D8:C3:57:76:42:63:85:8A:F6:DA:AF:C8:5D:E0:AF:62:01:D4
X509v3 Authority Key Identifier:
keyid:6A:8D:F7:77:6B:16:D2:82:E0:4C:69:6E:25:8A:A4:F9:F9:CE:9C:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ao33d2sW0oLgTGluJYqk-fnOnJg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/d301cd-f513-4995-9d55-1b38b02245c1/1/ao33d2sW0oLgTGluJYqk-fnOnJg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/d301cd-f513-4995-9d55-1b38b02245c1/1/ao33d2sW0oLgTGluJYqk-fnOnJg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:12:88:bc:6a:52:1b:01:0e:b9:7d:d1:aa:af:78:b8:ca:3c:
83:65:0a:52:7c:c9:ab:38:9f:44:cb:c3:18:93:97:4f:b5:2c:
61:a6:9c:ea:cd:96:4e:87:06:57:c3:1d:23:3a:dc:c7:85:d1:
b5:2d:61:40:be:2f:b8:a3:71:a6:51:69:d4:ac:84:ea:34:30:
48:4e:70:68:37:01:a2:1a:e3:92:21:81:46:54:25:84:0f:1a:
e0:a1:72:6b:41:a3:66:5b:60:ff:87:de:88:39:6f:02:45:0e:
9c:b1:d0:1a:22:63:4e:8b:ae:81:4f:be:f2:6a:87:7b:87:74:
9a:77:18:6a:ba:55:79:9a:11:81:4d:59:a3:c0:93:58:a8:b7:
e9:d7:c6:06:39:f6:69:67:50:b3:ff:92:f2:15:1b:d6:73:cd:
e2:10:86:0d:86:c2:96:00:1b:e4:af:d4:89:83:54:7c:6d:62:
96:a4:9b:57:0a:d0:1c:be:89:1d:8e:26:24:df:58:23:c3:2b:
be:45:c8:09:f9:e9:21:76:3e:91:60:92:05:c2:b0:8f:61:55:
34:26:9f:b2:a6:2e:14:88:d9:e7:89:6b:a4:f1:7c:24:44:ec:
b0:2b:db:de:c7:e8:04:85:ae:34:60:19:b7:52:13:a0:ec:1c:
f2:49:4a:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 03:48:41 2026 by rpki-client