Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/fcdbee-db9d-46b8-9e03-146e0b178085/1/AaDVhox6Qdb-ncvPk4BaxCy9vb8.mft
File: AaDVhox6Qdb-ncvPk4BaxCy9vb8.mft (raw, json)
Hash identifier: k9ZXJ7eNknhElm7c3otWpF6+lyvpSOFa90nk9W1hso8=
Subject key identifier: 05:2F:99:39:42:A4:A7:F1:89:12:91:FB:C4:BD:E0:7F:B1:BB:CA:AB
Authority key identifier: 01:A0:D5:86:8C:7A:41:D6:FE:9D:CB:CF:93:80:5A:C4:2C:BD:BD:BF
Certificate issuer: /CN=01a0d5868c7a41d6fe9dcbcf93805ac42cbdbdbf
Certificate serial: 019F178BEE3F78CD6F3D58C76FD3C2293CF1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AaDVhox6Qdb-ncvPk4BaxCy9vb8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/fcdbee-db9d-46b8-9e03-146e0b178085/1/AaDVhox6Qdb-ncvPk4BaxCy9vb8.mft
Manifest number: 0BA8
Signing time: Tue 30 Jun 2026 08:01:14 +0000
Manifest this update: Tue 30 Jun 2026 08:01:14 +0000
Manifest next update: Wed 01 Jul 2026 08:01:14 +0000
Files and hashes: 1: AaDVhox6Qdb-ncvPk4BaxCy9vb8.crl (hash: taFJ0bv9Y3d4mq6R1SjzIKsARY0aSzrWoiYESIHA16k=)
2: YEziWd2u7JNVBZhfbqD7tAgw6N0.roa (hash: MKjaPlRYWsRt/x04oa9rkmteLx1QuLJM6GSjP/NuL4c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/fcdbee-db9d-46b8-9e03-146e0b178085/1/AaDVhox6Qdb-ncvPk4BaxCy9vb8.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/fcdbee-db9d-46b8-9e03-146e0b178085/1/AaDVhox6Qdb-ncvPk4BaxCy9vb8.mft
rsync://rpki.ripe.net/repository/DEFAULT/AaDVhox6Qdb-ncvPk4BaxCy9vb8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 08:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:17:8b:ee:3f:78:cd:6f:3d:58:c7:6f:d3:c2:29:3c:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01a0d5868c7a41d6fe9dcbcf93805ac42cbdbdbf
Validity
Not Before: Jun 30 08:01:14 2026 GMT
Not After : Jul 1 08:01:14 2026 GMT
Subject: CN=052f993942a4a7f1891291fbc4bde07fb1bbcaab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:cb:b9:74:fe:99:da:25:9d:b8:92:4a:3d:83:
9b:67:f7:55:3b:86:87:5b:de:0d:5c:75:5c:79:01:
3f:78:49:87:33:93:ef:f6:59:56:95:e3:b3:37:bf:
64:a5:ab:6e:f6:da:64:5e:8d:53:63:6a:23:92:cc:
38:4d:9b:47:cb:90:5a:a4:ca:01:ab:0e:27:c8:b8:
aa:79:35:6e:f1:c8:bc:89:21:6b:2d:7e:67:d9:b0:
fa:d7:dd:66:de:a7:0d:04:e9:8d:73:ca:73:04:94:
26:0d:eb:91:ad:21:11:f6:10:96:56:63:3b:13:67:
0a:ea:86:e9:e0:1d:35:a2:3a:f6:14:a3:f7:5d:a5:
db:c6:dd:04:fe:4e:c1:cf:9e:a8:81:cf:7f:8e:7e:
53:da:08:da:e0:a3:13:19:37:4d:82:26:b5:93:58:
09:7a:c7:19:cc:1f:56:b6:a4:9d:65:de:62:40:32:
ed:a7:92:f2:0b:f3:37:d4:e1:b5:9c:50:f9:23:a2:
eb:9c:aa:3a:78:b6:dd:a0:4f:23:15:d2:d6:00:6d:
a1:2a:be:14:49:4a:5d:7c:2e:0c:64:8e:d9:94:6a:
a5:24:eb:3a:96:e9:72:95:3f:a7:c3:00:4e:9b:bb:
0d:7e:40:66:b4:52:7e:69:64:7c:a4:cd:69:5c:6f:
f8:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:2F:99:39:42:A4:A7:F1:89:12:91:FB:C4:BD:E0:7F:B1:BB:CA:AB
X509v3 Authority Key Identifier:
keyid:01:A0:D5:86:8C:7A:41:D6:FE:9D:CB:CF:93:80:5A:C4:2C:BD:BD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AaDVhox6Qdb-ncvPk4BaxCy9vb8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/fcdbee-db9d-46b8-9e03-146e0b178085/1/AaDVhox6Qdb-ncvPk4BaxCy9vb8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/fcdbee-db9d-46b8-9e03-146e0b178085/1/AaDVhox6Qdb-ncvPk4BaxCy9vb8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:bd:f7:1f:e2:34:a4:c2:e5:e9:1b:c1:ae:37:75:8a:bd:cb:
de:77:c2:68:f0:22:70:46:37:62:ac:a7:9e:0a:af:fb:05:62:
a5:21:01:8a:26:4b:f0:26:60:e2:59:e0:20:f1:cf:97:5d:4e:
d0:35:18:dc:41:99:7e:fe:06:d0:c4:ba:f8:2d:ef:4b:8f:79:
6e:01:97:79:a8:ee:72:98:92:8f:47:e5:73:1d:da:c3:1e:87:
40:54:fe:6d:f3:6a:db:38:1c:d5:66:bf:bf:84:33:3b:a0:f6:
d5:cb:84:16:73:0a:88:37:8e:9b:a6:be:e1:cc:d3:23:ca:44:
bf:bc:54:25:1c:48:57:3b:96:2b:bf:b8:56:2a:7d:8d:23:64:
ce:ce:30:89:6b:3a:5d:02:d4:fb:bc:a4:37:da:58:84:00:2d:
83:9a:66:d7:e1:dc:3c:8e:cc:29:5a:14:a0:19:e7:a2:0a:ed:
62:a5:dd:07:ae:31:18:17:b7:ab:db:51:ca:b9:64:97:b5:1f:
f1:71:85:76:ab:fa:b7:9e:fb:b3:2d:3c:a8:0f:31:d8:57:ff:
96:41:44:11:3a:0d:48:40:1b:c4:ec:da:fd:d7:0d:8c:d1:bd:
2c:3d:7e:16:ab:32:f6:f7:b6:96:61:ee:e3:99:58:4c:90:3e:
6f:cc:56:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:18:12 2026 by rpki-client