Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/6db797-a3d3-4241-903a-0c66840198d0/1/ao7dovIciF--ZyhiGLgxjWrSOJY.mft
File: ao7dovIciF--ZyhiGLgxjWrSOJY.mft (raw, json)
Hash identifier: 7gMMSgzL02qmeyo5N8xYsPu0eIr1DRljcwSBSSO7CTA=
Subject key identifier: 11:C4:29:82:AB:73:86:C9:89:BD:94:C0:BC:47:6A:1E:E1:9C:78:1F
Authority key identifier: 6A:8E:DD:A2:F2:1C:88:5F:BE:67:28:62:18:B8:31:8D:6A:D2:38:96
Certificate issuer: /CN=6a8edda2f21c885fbe67286218b8318d6ad23896
Certificate serial: 01A004028C6878B42FDAF833782983F24E2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ao7dovIciF--ZyhiGLgxjWrSOJY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/6db797-a3d3-4241-903a-0c66840198d0/1/ao7dovIciF--ZyhiGLgxjWrSOJY.mft
Manifest number: 0CBC
Signing time: Sat 15 Aug 2026 06:01:10 +0000
Manifest this update: Sat 15 Aug 2026 06:01:10 +0000
Manifest next update: Sun 16 Aug 2026 06:01:10 +0000
Files and hashes: 1: 4Ju3VaQ4C6q0qWM27SQOg0xG0LY.roa (hash: CXJhJHQ7ol0fZjsffI02dL1cMgtuyDC/aOoAbGch63A=)
2: ao7dovIciF--ZyhiGLgxjWrSOJY.crl (hash: X5N9/j1KjN6l9AUvfY8PBMFq0ia7laB6wyT39OS8dT0=)
3: oA31tgyLZdN2czm4RB3Kz9g85HU.roa (hash: OyiWBOPqWwEUSj8ktxk8sZ34jz/J/+HAdPgWkshrJgs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/6db797-a3d3-4241-903a-0c66840198d0/1/ao7dovIciF--ZyhiGLgxjWrSOJY.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/6db797-a3d3-4241-903a-0c66840198d0/1/ao7dovIciF--ZyhiGLgxjWrSOJY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ao7dovIciF--ZyhiGLgxjWrSOJY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Aug 2026 06:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:04:02:8c:68:78:b4:2f:da:f8:33:78:29:83:f2:4e:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a8edda2f21c885fbe67286218b8318d6ad23896
Validity
Not Before: Aug 15 06:01:10 2026 GMT
Not After : Aug 16 06:01:10 2026 GMT
Subject: CN=11c42982ab7386c989bd94c0bc476a1ee19c781f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:b1:ca:fc:7f:0b:79:db:03:3e:e9:e2:1d:5b:
82:db:d3:ab:34:85:50:a9:b9:c3:fd:68:27:68:05:
3e:05:7f:16:b8:e1:4e:88:6a:55:0a:02:73:1f:27:
f5:bc:98:58:2f:12:1b:cf:27:80:28:f0:d1:9a:02:
ff:cb:09:af:6d:59:c9:61:ca:f6:b5:d1:45:53:79:
d7:17:db:e3:0b:98:5b:c6:ff:9a:9d:46:70:f7:2b:
18:fa:94:0c:f3:9a:25:2e:de:81:37:f4:6c:00:d6:
7f:cb:c8:45:47:1f:e4:8f:19:ea:a8:1f:c4:32:ba:
42:2e:46:48:67:9d:c5:1e:dd:e4:70:42:ff:01:12:
63:0b:8d:ed:ef:f0:62:51:54:e9:c0:c3:55:63:60:
db:47:14:dc:3c:2c:af:5e:21:62:06:f1:ef:7d:0b:
c2:f0:78:c2:18:cd:61:12:99:76:59:aa:ef:8f:6f:
99:4e:d7:df:4f:08:40:dc:fb:b3:55:f8:bf:5b:33:
98:9e:d5:11:44:5d:80:71:df:55:b6:9d:35:e1:f0:
aa:64:d5:f5:b6:7f:5f:76:67:93:98:aa:ba:32:aa:
f6:09:56:d7:11:19:b9:3c:35:97:24:14:93:f8:7d:
96:d9:d3:e7:42:5c:4a:bb:f5:52:14:2c:f3:03:6f:
90:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:C4:29:82:AB:73:86:C9:89:BD:94:C0:BC:47:6A:1E:E1:9C:78:1F
X509v3 Authority Key Identifier:
keyid:6A:8E:DD:A2:F2:1C:88:5F:BE:67:28:62:18:B8:31:8D:6A:D2:38:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ao7dovIciF--ZyhiGLgxjWrSOJY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/6db797-a3d3-4241-903a-0c66840198d0/1/ao7dovIciF--ZyhiGLgxjWrSOJY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/6db797-a3d3-4241-903a-0c66840198d0/1/ao7dovIciF--ZyhiGLgxjWrSOJY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:f2:3e:48:a8:da:34:d8:e0:3a:be:55:24:5d:20:c0:f2:97:
a3:74:d2:15:57:a0:54:ac:5b:a2:a9:b2:45:48:b8:52:26:8c:
6e:d1:33:bc:83:0f:bf:ee:b1:a6:2a:b8:fd:b8:33:96:9a:25:
b2:6d:df:5f:7c:b3:ca:f8:91:c9:a0:77:b1:bb:ca:54:08:72:
29:b6:17:98:d8:b9:20:a5:dd:94:c4:37:c2:e5:93:e0:b1:92:
3d:5b:dd:cf:84:fd:c8:11:ef:8c:cb:2e:a7:d0:e3:e9:92:d1:
fc:ba:11:bd:ba:ac:c1:bc:9d:2e:d3:3d:20:85:3e:1b:47:24:
59:d2:f3:ba:48:4f:8a:5e:fe:e4:35:de:ef:f4:d7:d8:71:39:
25:b2:29:d9:50:34:8d:5e:18:14:09:b2:ab:61:83:e5:f0:67:
97:f8:93:5c:14:2f:4a:ff:49:a9:20:06:cf:9c:4f:58:a7:29:
9d:f7:2e:fa:0a:7e:07:db:88:fe:ec:11:0f:ab:ce:fc:13:8b:
81:14:7f:1f:f7:8c:8e:b7:4f:f7:b9:b8:04:bd:89:cd:88:dd:
a5:67:cb:eb:0a:33:3c:21:bc:ba:36:83:0e:66:88:a1:8f:a5:
49:b2:2b:74:52:43:bd:5a:32:f9:ee:fb:0f:8e:c4:01:b1:33:
c9:83:7e:59
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaAEAoxoeLQv2vgzeCmD8k4uMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZhOGVkZGEyZjIxYzg4NWZiZTY3Mjg2MjE4YjgzMThkNmFk
MjM4OTYwHhcNMjYwODE1MDYwMTEwWhcNMjYwODE2MDYwMTEwWjAzMTEwLwYDVQQD
EygxMWM0Mjk4MmFiNzM4NmM5ODliZDk0YzBiYzQ3NmExZWUxOWM3ODFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp7HK/H8LedsDPuniHVuC29OrNIVQ
qbnD/WgnaAU+BX8WuOFOiGpVCgJzHyf1vJhYLxIbzyeAKPDRmgL/ywmvbVnJYcr2
tdFFU3nXF9vjC5hbxv+anUZw9ysY+pQM85olLt6BN/RsANZ/y8hFRx/kjxnqqB/E
MrpCLkZIZ53FHt3kcEL/ARJjC43t7/BiUVTpwMNVY2DbRxTcPCyvXiFiBvHvfQvC
8HjCGM1hEpl2Warvj2+ZTtffTwhA3PuzVfi/WzOYntURRF2Acd9Vtp014fCqZNX1
tn9fdmeTmKq6Mqr2CVbXERm5PDWXJBST+H2W2dPnQlxKu/VSFCzzA2+QEwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBHEKYKrc4bJib2UwLxHah7hnHgfMB8GA1UdIwQY
MBaAFGqO3aLyHIhfvmcoYhi4MY1q0jiWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYW83ZG92SWNpRi0tWnloaUdMZ3hqV3JTT0pZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS82ZGI3OTctYTNkMy00MjQxLTkwM2Et
MGM2Njg0MDE5OGQwLzEvYW83ZG92SWNpRi0tWnloaUdMZ3hqV3JTT0pZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS82ZGI3OTctYTNkMy00MjQxLTkwM2EtMGM2Njg0MDE5OGQw
LzEvYW83ZG92SWNpRi0tWnloaUdMZ3hqV3JTT0pZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOvI+SKja
NNjgOr5VJF0gwPKXo3TSFVegVKxboqmyRUi4UiaMbtEzvIMPv+6xpiq4/bgzlpol
sm3fX3yzyviRyaB3sbvKVAhyKbYXmNi5IKXdlMQ3wuWT4LGSPVvdz4T9yBHvjMsu
p9Dj6ZLR/LoRvbqswbydLtM9IIU+G0ckWdLzukhPil7+5DXe7/TX2HE5JbIp2VA0
jV4YFAmyq2GD5fBnl/iTXBQvSv9JqSAGz5xPWKcpnfcu+gp+B9uI/uwRD6vO/BOL
gRR/H/eMjrdP97m4BL2JzYjdpWfL6wozPCG8ujaDDmaIoY+lSbIrdFJDvVoy+e77
D47EAbEzyYN+WQ==
-----END CERTIFICATE-----
Generated at Sat Aug 15 13:46:32 2026 by rpki-client