Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/fcdbee-db9d-46b8-9e03-146e0b178085/1/AaDVhox6Qdb-ncvPk4BaxCy9vb8.mft
File: AaDVhox6Qdb-ncvPk4BaxCy9vb8.mft (raw, json)
Hash identifier: 230DUyXoqv5zgD7Or/CDKKSSngmSU9bRX18894f9g4E=
Subject key identifier: ED:13:A9:91:78:A2:5A:98:0B:D8:EA:F0:41:E8:0B:DB:05:7E:62:0D
Authority key identifier: 01:A0:D5:86:8C:7A:41:D6:FE:9D:CB:CF:93:80:5A:C4:2C:BD:BD:BF
Certificate issuer: /CN=01a0d5868c7a41d6fe9dcbcf93805ac42cbdbdbf
Certificate serial: 019D389C00BCF3A3A81A9380EEB60DF12469
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AaDVhox6Qdb-ncvPk4BaxCy9vb8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/fcdbee-db9d-46b8-9e03-146e0b178085/1/AaDVhox6Qdb-ncvPk4BaxCy9vb8.mft
Manifest number: 0AB0
Signing time: Sun 29 Mar 2026 08:00:40 +0000
Manifest this update: Sun 29 Mar 2026 08:00:40 +0000
Manifest next update: Mon 30 Mar 2026 08:00:40 +0000
Files and hashes: 1: AaDVhox6Qdb-ncvPk4BaxCy9vb8.crl (hash: WT1SGlRGCsJvk41bV5ATHDY7xoeQwsZxpqENuEyj6qk=)
2: YEziWd2u7JNVBZhfbqD7tAgw6N0.roa (hash: MKjaPlRYWsRt/x04oa9rkmteLx1QuLJM6GSjP/NuL4c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/fcdbee-db9d-46b8-9e03-146e0b178085/1/AaDVhox6Qdb-ncvPk4BaxCy9vb8.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/fcdbee-db9d-46b8-9e03-146e0b178085/1/AaDVhox6Qdb-ncvPk4BaxCy9vb8.mft
rsync://rpki.ripe.net/repository/DEFAULT/AaDVhox6Qdb-ncvPk4BaxCy9vb8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9c:00:bc:f3:a3:a8:1a:93:80:ee:b6:0d:f1:24:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01a0d5868c7a41d6fe9dcbcf93805ac42cbdbdbf
Validity
Not Before: Mar 29 08:00:40 2026 GMT
Not After : Mar 30 08:00:40 2026 GMT
Subject: CN=ed13a99178a25a980bd8eaf041e80bdb057e620d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:64:08:15:08:ca:41:a9:1e:91:a9:16:96:9d:
12:5b:03:e7:13:3d:1d:c5:26:25:70:75:09:98:6b:
b0:b5:e3:12:67:01:77:92:6c:26:a6:6a:37:c5:f2:
5f:85:00:e5:69:a6:b5:f4:ea:82:46:e1:db:9d:3a:
77:e1:6d:e8:92:97:36:3d:df:26:89:3d:ee:fa:c2:
ca:b2:51:a8:39:56:3e:37:a8:3c:5e:c4:64:82:52:
bf:22:25:c1:03:9b:89:bb:f7:78:0e:12:fe:ca:a2:
52:35:6e:8d:95:8b:4b:8c:9a:a8:22:10:7a:8f:c3:
46:4b:75:60:64:0e:db:f3:9f:d3:1c:0a:3f:16:f4:
6b:54:78:69:10:f4:4e:09:b1:13:a9:14:54:a9:c6:
8a:88:e5:af:f4:da:64:49:19:0b:9b:79:9c:e2:17:
42:28:42:c7:b7:67:d9:bb:7a:96:50:b8:fb:54:dc:
ee:6d:e5:4a:d2:78:df:c0:fa:cb:be:57:04:d1:1b:
1f:c8:52:68:a4:eb:e1:b4:d7:15:22:94:e7:6e:71:
81:10:ca:61:66:d6:30:24:22:ac:25:42:10:bd:b1:
ee:42:51:ac:f6:bd:d5:e7:34:68:6d:f6:4b:53:87:
31:12:77:11:08:02:c5:3f:b9:31:8c:1c:84:b2:77:
23:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:13:A9:91:78:A2:5A:98:0B:D8:EA:F0:41:E8:0B:DB:05:7E:62:0D
X509v3 Authority Key Identifier:
keyid:01:A0:D5:86:8C:7A:41:D6:FE:9D:CB:CF:93:80:5A:C4:2C:BD:BD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AaDVhox6Qdb-ncvPk4BaxCy9vb8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/fcdbee-db9d-46b8-9e03-146e0b178085/1/AaDVhox6Qdb-ncvPk4BaxCy9vb8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/fcdbee-db9d-46b8-9e03-146e0b178085/1/AaDVhox6Qdb-ncvPk4BaxCy9vb8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:6f:0e:a6:a5:fe:1e:c1:90:23:2b:91:9c:73:c9:c7:1d:57:
6d:63:38:e1:f2:0e:4d:86:d5:7e:1d:d3:70:1e:85:72:12:36:
3f:b6:0b:84:f9:5e:76:50:ce:84:4d:e9:bd:4a:e4:bb:10:70:
76:57:5b:f6:96:80:0d:15:52:15:bc:38:b1:22:71:8f:f6:fb:
ed:e5:b3:f4:e8:59:fd:c9:27:33:3d:b2:4b:e0:e4:22:19:d9:
0b:59:30:ea:36:39:5f:56:ec:55:61:3c:4c:90:ef:a5:d3:ee:
d8:03:ff:b0:96:cb:80:92:33:3c:3c:08:f1:9c:6d:1c:0c:d5:
32:41:01:e2:32:09:51:5f:43:e1:8b:d1:fd:63:8f:fc:30:0c:
c7:1b:dc:51:37:b8:f7:8b:fa:98:f7:06:22:14:7a:04:14:b2:
ab:9c:9c:78:c0:b3:3a:ed:b6:20:d0:f5:48:46:ad:5f:80:df:
89:dc:83:bd:d5:70:be:36:d6:7f:f4:b4:80:a7:e8:27:e5:2a:
52:3c:5b:8c:06:e8:cc:e5:fe:ee:d9:7d:7e:d4:8d:a2:33:e2:
1d:d3:45:7e:0a:a8:18:b4:c1:83:73:0b:2f:cc:5a:d8:a8:eb:
22:32:c5:3c:88:84:1d:1b:24:21:b2:07:4a:ca:69:16:2c:32:
2a:82:13:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:16:40 2026 by rpki-client