Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4a/6db797-a3d3-4241-903a-0c66840198d0/1/ao7dovIciF--ZyhiGLgxjWrSOJY.mft
File: ao7dovIciF--ZyhiGLgxjWrSOJY.mft (raw, json)
Hash identifier: 2mT06v+Li+YuqKOjq1bg33TiTdGoJR1J0sRFVPB/uqo=
Subject key identifier: 87:59:B4:AE:5C:5A:36:07:3D:A3:35:9A:CE:51:93:15:89:3A:AA:74
Authority key identifier: 6A:8E:DD:A2:F2:1C:88:5F:BE:67:28:62:18:B8:31:8D:6A:D2:38:96
Certificate issuer: /CN=6a8edda2f21c885fbe67286218b8318d6ad23896
Certificate serial: 01A13CDCEAD683A444E17B712E3DA3373ED6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ao7dovIciF--ZyhiGLgxjWrSOJY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/6db797-a3d3-4241-903a-0c66840198d0/1/ao7dovIciF--ZyhiGLgxjWrSOJY.mft
Manifest number: 0D5E
Signing time: Thu 15 Oct 2026 00:01:13 +0000
Manifest this update: Thu 15 Oct 2026 00:01:13 +0000
Manifest next update: Fri 16 Oct 2026 00:01:13 +0000
Files and hashes: 1: 4Ju3VaQ4C6q0qWM27SQOg0xG0LY.roa (hash: CXJhJHQ7ol0fZjsffI02dL1cMgtuyDC/aOoAbGch63A=)
2: ao7dovIciF--ZyhiGLgxjWrSOJY.crl (hash: baoF/p4IRJ1vtOw3REvx5agvuVrTcfBqc/LuiNjF1O0=)
3: oA31tgyLZdN2czm4RB3Kz9g85HU.roa (hash: OyiWBOPqWwEUSj8ktxk8sZ34jz/J/+HAdPgWkshrJgs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/6db797-a3d3-4241-903a-0c66840198d0/1/ao7dovIciF--ZyhiGLgxjWrSOJY.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/6db797-a3d3-4241-903a-0c66840198d0/1/ao7dovIciF--ZyhiGLgxjWrSOJY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ao7dovIciF--ZyhiGLgxjWrSOJY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 23:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3c:dc:ea:d6:83:a4:44:e1:7b:71:2e:3d:a3:37:3e:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a8edda2f21c885fbe67286218b8318d6ad23896
Validity
Not Before: Oct 15 00:01:13 2026 GMT
Not After : Oct 16 00:01:13 2026 GMT
Subject: CN=8759b4ae5c5a36073da3359ace519315893aaa74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:a0:02:76:16:f3:62:ca:60:16:7b:97:36:7f:
f9:56:9e:46:3c:25:0e:c9:ab:62:f3:0b:b7:b5:59:
ff:c0:cd:c3:b1:01:fd:05:bc:4a:7b:a1:c0:ee:c1:
5f:ca:99:1c:75:85:b6:63:04:dd:18:35:84:ec:2e:
d0:fd:12:9b:df:35:eb:14:9c:92:c0:9f:ad:5d:f7:
15:96:f2:89:21:54:b3:07:09:ad:87:f8:46:c4:60:
1e:c6:3e:57:d2:89:a3:fd:3b:f9:bb:7b:05:63:b2:
aa:92:33:56:58:f6:ee:ae:36:9d:40:61:8a:87:f5:
30:e5:6e:98:df:6e:51:a9:0f:c0:a9:b6:38:c6:d7:
c0:d7:e4:5a:97:2f:99:7e:e2:46:4d:03:50:6b:a9:
3d:9b:1a:bc:91:29:78:a4:ed:13:87:7c:60:0d:a6:
c8:d6:26:d0:3a:c6:29:2d:c0:12:85:ed:0a:ae:b0:
aa:4c:01:46:0e:7b:a1:38:40:c3:7d:67:e5:ad:7c:
ca:db:f0:52:bf:a7:d2:05:8f:d2:8a:36:65:0a:81:
8f:94:c5:07:d4:fb:da:73:6e:5f:1d:85:d3:bd:99:
a4:81:63:ef:fb:da:11:4e:03:68:3b:12:cd:94:43:
ab:3c:49:12:87:ac:4c:86:d0:4d:c0:ef:13:7c:3c:
2a:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:59:B4:AE:5C:5A:36:07:3D:A3:35:9A:CE:51:93:15:89:3A:AA:74
X509v3 Authority Key Identifier:
keyid:6A:8E:DD:A2:F2:1C:88:5F:BE:67:28:62:18:B8:31:8D:6A:D2:38:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ao7dovIciF--ZyhiGLgxjWrSOJY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/6db797-a3d3-4241-903a-0c66840198d0/1/ao7dovIciF--ZyhiGLgxjWrSOJY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/6db797-a3d3-4241-903a-0c66840198d0/1/ao7dovIciF--ZyhiGLgxjWrSOJY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:f0:ff:38:c5:53:05:54:25:cb:69:fa:19:1f:e8:e3:dc:09:
f0:a4:ea:5e:ae:df:54:df:c0:d4:36:05:61:b0:69:d5:7c:98:
b5:57:a4:cf:83:6c:d6:ad:c1:9b:81:df:07:32:41:bf:b1:b5:
ee:81:d4:a7:17:9f:ae:e3:8b:5d:d0:61:34:06:cf:02:c4:9f:
9c:bb:8f:37:17:09:59:27:d8:39:0c:ac:12:12:42:31:f8:e7:
0a:76:89:1f:b9:f3:00:a0:6e:d0:17:9c:4c:3b:96:7a:50:cb:
95:1e:3a:4f:3a:a2:f3:3d:73:60:f7:14:8b:f1:71:a5:2c:dd:
09:ca:2f:11:6d:9c:27:75:47:ce:e3:90:c4:be:ae:bd:c3:06:
46:ac:f9:ec:e5:5c:28:a0:ba:81:87:ee:d2:57:d5:be:59:16:
d6:55:da:17:f0:f3:bc:17:48:fa:32:5e:ac:80:8c:87:27:ae:
a8:87:ab:be:24:9c:a8:04:d1:7a:e1:7b:ca:f2:1b:42:2e:d2:
34:ca:f2:5c:c8:6e:13:47:df:0e:f2:f0:7c:d9:60:fe:2a:aa:
78:c1:04:28:24:b3:33:8f:03:99:b5:43:e8:9e:a6:2c:39:76:
a7:2a:8d:78:78:42:9a:52:97:18:81:28:12:ad:b5:de:47:87:
07:72:38:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 08:20:07 2026 by rpki-client