Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/6db797-a3d3-4241-903a-0c66840198d0/1/ao7dovIciF--ZyhiGLgxjWrSOJY.mft
File: ao7dovIciF--ZyhiGLgxjWrSOJY.mft (raw, json)
Hash identifier: KA1gA+qtwfwDCXviBOJwB9iK3OAhuFaWQGSdmrC0Uxk=
Subject key identifier: 57:51:CC:A6:9E:E9:F3:17:01:9C:50:3E:55:55:34:68:19:EC:7D:5D
Authority key identifier: 6A:8E:DD:A2:F2:1C:88:5F:BE:67:28:62:18:B8:31:8D:6A:D2:38:96
Certificate issuer: /CN=6a8edda2f21c885fbe67286218b8318d6ad23896
Certificate serial: 019D38D3BB184C25536101326A0357BE4752
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ao7dovIciF--ZyhiGLgxjWrSOJY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/6db797-a3d3-4241-903a-0c66840198d0/1/ao7dovIciF--ZyhiGLgxjWrSOJY.mft
Manifest number: 0B45
Signing time: Sun 29 Mar 2026 09:01:33 +0000
Manifest this update: Sun 29 Mar 2026 09:01:33 +0000
Manifest next update: Mon 30 Mar 2026 09:01:33 +0000
Files and hashes: 1: IMvi_cxz_R-ayNNId6HH2kVVpAQ.roa (hash: 6IK4Qty1bIRA82kzLZxrqtFW3xfyNSEpnkEntDA5sT8=)
2: XGNpEJyZ5ofWurDz4XnNulUh5Qc.roa (hash: ApJMkAtwvgFPQPDi80cwWPLVrZBQ049k8CTijiz27yI=)
3: ao7dovIciF--ZyhiGLgxjWrSOJY.crl (hash: vZrXg+eOOMBoUYkXhqZRA2luHOMF7Zyqmgl4uRzgX8o=)
4: rTBbbKqOoDleztbkH5gCUuaaskA.roa (hash: RwwqIDHdfQieX8PTWUMnN4JTqKEHqM2AaHzXNkqy1/Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/6db797-a3d3-4241-903a-0c66840198d0/1/ao7dovIciF--ZyhiGLgxjWrSOJY.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/6db797-a3d3-4241-903a-0c66840198d0/1/ao7dovIciF--ZyhiGLgxjWrSOJY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ao7dovIciF--ZyhiGLgxjWrSOJY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:bb:18:4c:25:53:61:01:32:6a:03:57:be:47:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a8edda2f21c885fbe67286218b8318d6ad23896
Validity
Not Before: Mar 29 09:01:33 2026 GMT
Not After : Mar 30 09:01:33 2026 GMT
Subject: CN=5751cca69ee9f317019c503e5555346819ec7d5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:88:50:c4:e8:c8:6a:4f:39:78:18:1a:d4:42:
1d:7b:54:33:5c:23:2a:47:e2:fa:41:27:b9:65:fa:
fd:6e:0a:f6:9a:8a:89:95:96:f9:8e:10:5f:54:64:
a9:bf:6a:58:82:ef:7e:95:ef:37:9b:2e:23:0b:e4:
ef:1a:92:91:11:17:e9:e5:b0:8b:45:9d:22:0e:08:
55:79:18:b2:b8:e9:94:3c:86:14:c7:38:62:9e:ee:
e2:3d:d1:fa:3f:76:f0:de:a3:b0:93:27:7c:a8:db:
14:6f:e2:a1:3f:19:f1:46:6b:07:9b:52:3a:b8:8c:
82:31:36:6e:f9:23:e1:e2:e8:88:05:81:16:3a:60:
cd:b0:eb:3d:2c:55:f2:47:74:02:ae:1f:46:6c:58:
77:5d:69:b2:aa:4e:d3:57:a1:55:ff:d3:84:ea:00:
0f:ab:17:58:f2:4e:09:0c:d5:35:76:16:9e:39:f9:
7a:e6:3e:43:1f:6a:92:f2:be:2a:e2:40:25:2f:22:
6e:d0:38:44:f9:6d:44:e9:c8:eb:7d:80:5a:9d:06:
63:1a:e5:5c:84:56:c1:17:da:65:71:e8:03:0d:f4:
46:ec:d0:bd:07:b0:b0:32:40:dd:44:4b:06:c7:d3:
dd:17:4e:76:95:a4:7d:bf:8b:19:80:fe:f8:e4:1b:
2c:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:51:CC:A6:9E:E9:F3:17:01:9C:50:3E:55:55:34:68:19:EC:7D:5D
X509v3 Authority Key Identifier:
keyid:6A:8E:DD:A2:F2:1C:88:5F:BE:67:28:62:18:B8:31:8D:6A:D2:38:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ao7dovIciF--ZyhiGLgxjWrSOJY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/6db797-a3d3-4241-903a-0c66840198d0/1/ao7dovIciF--ZyhiGLgxjWrSOJY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/6db797-a3d3-4241-903a-0c66840198d0/1/ao7dovIciF--ZyhiGLgxjWrSOJY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:6b:f5:bc:75:33:44:e6:70:94:f0:d2:c6:29:9f:e8:1b:cd:
08:fe:1f:0d:5f:74:d5:bf:d1:36:be:77:b6:b8:50:13:5a:7a:
90:ca:6a:bb:2d:13:1d:3f:4b:aa:90:e9:b9:a6:83:6f:db:24:
db:d8:87:cd:a4:69:c1:07:39:d4:98:ff:65:f2:8c:8a:3a:dc:
da:f1:c4:5a:2e:ec:80:1b:63:bd:78:14:f6:88:32:ed:cd:9e:
d2:27:dd:af:1c:c2:2b:c4:46:6b:c2:3d:9e:b1:79:e7:c4:39:
94:08:a1:8d:9c:a9:30:90:4a:a3:8b:b3:17:57:cf:92:56:7d:
1e:95:ed:69:99:3b:df:d4:7a:31:dc:5f:73:8c:22:0b:34:71:
fd:51:74:73:8a:fd:0a:de:4f:ec:62:f1:9c:61:84:00:d4:ca:
fc:e4:70:a5:34:57:9d:d0:6a:ca:24:a1:a3:5c:a3:b8:eb:6c:
86:ea:6e:7d:82:92:a7:30:8b:a5:2a:35:6e:b4:67:a3:23:50:
ec:b2:30:80:91:8e:e2:6d:74:76:b9:00:d1:7a:16:2e:2b:82:
f4:59:23:6f:9b:19:47:05:93:65:06:21:26:8f:d4:68:50:e7:
75:62:59:a0:dd:8c:b4:65:2c:57:c6:e4:9a:a3:74:e6:70:77:
9a:2b:35:86
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0407sYTCVTYQEyagNXvkdSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZhOGVkZGEyZjIxYzg4NWZiZTY3Mjg2MjE4YjgzMThkNmFk
MjM4OTYwHhcNMjYwMzI5MDkwMTMzWhcNMjYwMzMwMDkwMTMzWjAzMTEwLwYDVQQD
Eyg1NzUxY2NhNjllZTlmMzE3MDE5YzUwM2U1NTU1MzQ2ODE5ZWM3ZDVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnohQxOjIak85eBga1EIde1QzXCMq
R+L6QSe5Zfr9bgr2moqJlZb5jhBfVGSpv2pYgu9+le83my4jC+TvGpKRERfp5bCL
RZ0iDghVeRiyuOmUPIYUxzhinu7iPdH6P3bw3qOwkyd8qNsUb+KhPxnxRmsHm1I6
uIyCMTZu+SPh4uiIBYEWOmDNsOs9LFXyR3QCrh9GbFh3XWmyqk7TV6FV/9OE6gAP
qxdY8k4JDNU1dhaeOfl65j5DH2qS8r4q4kAlLyJu0DhE+W1E6cjrfYBanQZjGuVc
hFbBF9plcegDDfRG7NC9B7CwMkDdREsGx9PdF052laR9v4sZgP745BsssQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFdRzKae6fMXAZxQPlVVNGgZ7H1dMB8GA1UdIwQY
MBaAFGqO3aLyHIhfvmcoYhi4MY1q0jiWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYW83ZG92SWNpRi0tWnloaUdMZ3hqV3JTT0pZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS82ZGI3OTctYTNkMy00MjQxLTkwM2Et
MGM2Njg0MDE5OGQwLzEvYW83ZG92SWNpRi0tWnloaUdMZ3hqV3JTT0pZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS82ZGI3OTctYTNkMy00MjQxLTkwM2EtMGM2Njg0MDE5OGQw
LzEvYW83ZG92SWNpRi0tWnloaUdMZ3hqV3JTT0pZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlGv1vHUz
ROZwlPDSximf6BvNCP4fDV901b/RNr53trhQE1p6kMpquy0THT9LqpDpuaaDb9sk
29iHzaRpwQc51Jj/ZfKMijrc2vHEWi7sgBtjvXgU9ogy7c2e0ifdrxzCK8RGa8I9
nrF558Q5lAihjZypMJBKo4uzF1fPklZ9HpXtaZk739R6Mdxfc4wiCzRx/VF0c4r9
Ct5P7GLxnGGEANTK/ORwpTRXndBqyiSho1yjuOtshupufYKSpzCLpSo1brRnoyNQ
7LIwgJGO4m10drkA0XoWLiuC9Fkjb5sZRwWTZQYhJo/UaFDndWJZoN2MtGUsV8bk
mqN05nB3mis1hg==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:51:01 2026 by rpki-client