Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/397b5c-8fc8-4b56-b603-358145d9a81d/1/aO_MqEmPXSbBIK802EbAKB_2Ka8.mft
File: aO_MqEmPXSbBIK802EbAKB_2Ka8.mft (raw, json)
Hash identifier: +Lk4+S0dZkt3zwdZrmnRrEyTNsEa8e0FuU2G8fXs9gY=
Subject key identifier: A6:01:FD:8F:06:EF:DE:24:F9:6F:E8:0F:13:FE:DA:74:59:B6:17:FA
Authority key identifier: 68:EF:CC:A8:49:8F:5D:26:C1:20:AF:34:D8:46:C0:28:1F:F6:29:AF
Certificate issuer: /CN=68efcca8498f5d26c120af34d846c0281ff629af
Certificate serial: 019D3977AF287200C62082D928E75F808249
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aO_MqEmPXSbBIK802EbAKB_2Ka8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/397b5c-8fc8-4b56-b603-358145d9a81d/1/aO_MqEmPXSbBIK802EbAKB_2Ka8.mft
Manifest number: 12FF
Signing time: Sun 29 Mar 2026 12:00:38 +0000
Manifest this update: Sun 29 Mar 2026 12:00:38 +0000
Manifest next update: Mon 30 Mar 2026 12:00:38 +0000
Files and hashes: 1: MbLIlykrQYjYoxOxJX_Xi7Q0gqo.roa (hash: JZAWsqEaWoolF2K9I8eqAWU5dEjO9ZBoN8vPUph4Lm8=)
2: aO_MqEmPXSbBIK802EbAKB_2Ka8.crl (hash: +vpHewI1BPdew2KC06XyjdANx5Ury5Rqjvz1JWG7/nQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/397b5c-8fc8-4b56-b603-358145d9a81d/1/aO_MqEmPXSbBIK802EbAKB_2Ka8.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/397b5c-8fc8-4b56-b603-358145d9a81d/1/aO_MqEmPXSbBIK802EbAKB_2Ka8.mft
rsync://rpki.ripe.net/repository/DEFAULT/aO_MqEmPXSbBIK802EbAKB_2Ka8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:77:af:28:72:00:c6:20:82:d9:28:e7:5f:80:82:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68efcca8498f5d26c120af34d846c0281ff629af
Validity
Not Before: Mar 29 12:00:38 2026 GMT
Not After : Mar 30 12:00:38 2026 GMT
Subject: CN=a601fd8f06efde24f96fe80f13feda7459b617fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:96:41:05:d1:33:45:ff:46:38:1b:e7:3b:29:
9e:1e:49:dd:e3:d8:c0:1d:17:1f:45:cb:f9:8c:d2:
50:c9:29:b4:c6:8a:ac:12:bd:db:87:09:cb:51:fb:
43:53:b1:95:bc:63:e8:08:c3:22:e0:87:a5:e2:72:
23:ae:b7:79:81:6d:76:15:15:48:9c:fc:d7:f5:c3:
a1:e7:8a:5c:1d:48:30:51:19:dd:65:ac:62:c6:72:
1a:a5:4d:da:6a:bc:8e:bb:18:14:07:3a:b8:c2:db:
7a:4a:c0:b8:eb:33:74:c1:99:ec:d0:5e:09:7d:4c:
b5:21:b9:84:d5:fb:24:cc:9f:8d:23:05:9d:a0:fa:
cd:d4:f8:37:fa:f9:fc:d2:87:c8:10:16:52:93:c5:
62:a2:ba:0c:7e:dc:d4:50:d5:1f:a5:16:2a:cc:dd:
45:91:e7:b4:09:5d:cd:d9:b3:fa:01:69:78:ec:06:
8f:40:9d:7a:bc:16:bc:21:98:2f:7f:e0:36:a6:7c:
39:5c:d0:ae:6b:0a:7b:6a:2c:d4:7c:b0:75:df:0e:
9d:72:e1:7f:27:5b:11:42:84:d9:e4:7e:cd:16:da:
e2:e8:62:46:90:73:06:ea:c0:47:ea:ca:a6:e7:f0:
43:98:eb:2f:99:14:65:77:8c:cc:57:cc:25:fa:8d:
d6:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:01:FD:8F:06:EF:DE:24:F9:6F:E8:0F:13:FE:DA:74:59:B6:17:FA
X509v3 Authority Key Identifier:
keyid:68:EF:CC:A8:49:8F:5D:26:C1:20:AF:34:D8:46:C0:28:1F:F6:29:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aO_MqEmPXSbBIK802EbAKB_2Ka8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/397b5c-8fc8-4b56-b603-358145d9a81d/1/aO_MqEmPXSbBIK802EbAKB_2Ka8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/397b5c-8fc8-4b56-b603-358145d9a81d/1/aO_MqEmPXSbBIK802EbAKB_2Ka8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:92:c9:60:c6:47:e7:95:91:88:9f:c8:a3:37:b9:fd:9d:03:
a8:2b:c3:12:ac:ee:f4:4d:79:e1:7c:71:5c:2b:99:25:96:3d:
e1:c8:de:9f:9e:cb:4d:e3:f9:62:12:9f:24:29:23:05:f1:ad:
2a:02:7f:2a:9d:10:c7:95:d4:dd:77:49:88:e5:e9:6b:c7:68:
31:33:ca:8a:ab:15:c6:a0:b0:28:b2:b5:72:3c:c5:a8:3e:45:
b4:51:20:e4:3f:36:e9:84:0f:87:3b:cb:b6:6d:6e:df:29:bd:
27:f3:82:5d:fa:c1:dd:96:ce:e1:71:e0:bc:4e:ac:b5:ee:72:
7d:bc:54:32:60:65:6a:f7:44:f2:0b:dd:1a:b6:98:01:12:5a:
5b:52:e4:62:87:d9:4b:55:15:cc:60:3d:02:eb:01:c6:d8:9a:
66:20:ab:e4:ad:b3:e8:ac:24:c4:67:d4:86:49:17:c3:18:e5:
8c:5c:c1:f3:8f:4c:1a:96:b9:b1:7f:89:87:db:c6:72:11:cd:
28:23:42:17:2b:0c:53:5a:88:8e:8f:13:aa:ad:80:ae:d5:e3:
b3:70:7d:f1:ed:07:e7:ca:d2:bd:e7:2a:d9:44:4f:51:9c:2f:
f6:59:f9:35:91:12:74:a5:86:64:10:86:b7:2e:3e:43:aa:90:
95:36:c3:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:02:00 2026 by rpki-client