Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/b71d9f-f1da-400a-b485-04dbc9ac1444/1/ro7TO3C-bMIMifu6x3pZyjtMCTQ.mft
File: ro7TO3C-bMIMifu6x3pZyjtMCTQ.mft (raw, json)
Hash identifier: WxNSOiqxzrNp9pChwRAWtp17LWDEROMBXCI+zA0sIDk=
Subject key identifier: CD:02:2B:CC:52:03:03:60:F5:CF:35:8E:18:92:F0:E4:A4:70:38:4A
Authority key identifier: AE:8E:D3:3B:70:BE:6C:C2:0C:89:FB:BA:C7:7A:59:CA:3B:4C:09:34
Certificate issuer: /CN=ae8ed33b70be6cc20c89fbbac77a59ca3b4c0934
Certificate serial: 019D37C07169CE9162669FE7649BAF025728
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ro7TO3C-bMIMifu6x3pZyjtMCTQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/b71d9f-f1da-400a-b485-04dbc9ac1444/1/ro7TO3C-bMIMifu6x3pZyjtMCTQ.mft
Manifest number: 0D8B
Signing time: Sun 29 Mar 2026 04:00:51 +0000
Manifest this update: Sun 29 Mar 2026 04:00:51 +0000
Manifest next update: Mon 30 Mar 2026 04:00:51 +0000
Files and hashes: 1: 3GwgcAPKG43MCPD8y9300VUUE7U.roa (hash: InZ5p01xw0MRhLMDOeL96L2077Wx0d7vpVCiYPBd65g=)
2: IGazZEaa03q0gZwkZa-a01KbsAE.roa (hash: kHgUBuHcjhycij9YJiSSXrr0v5v65zQmDRpctF0dSM8=)
3: YR_Sklpw1rT1jn14ENZmY_YlgSc.roa (hash: a6i5iaFNJsMyMSeoRuHDFzGc9ROq7AMhUx/2K/zffhI=)
4: ro7TO3C-bMIMifu6x3pZyjtMCTQ.crl (hash: w2dV4bshu9RuykgKiN6Mk+I84DxYuqQ5gzHi7bQG4wU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/b71d9f-f1da-400a-b485-04dbc9ac1444/1/ro7TO3C-bMIMifu6x3pZyjtMCTQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/b71d9f-f1da-400a-b485-04dbc9ac1444/1/ro7TO3C-bMIMifu6x3pZyjtMCTQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ro7TO3C-bMIMifu6x3pZyjtMCTQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:71:69:ce:91:62:66:9f:e7:64:9b:af:02:57:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae8ed33b70be6cc20c89fbbac77a59ca3b4c0934
Validity
Not Before: Mar 29 04:00:51 2026 GMT
Not After : Mar 30 04:00:51 2026 GMT
Subject: CN=cd022bcc52030360f5cf358e1892f0e4a470384a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:f1:00:58:c9:33:e4:f4:92:4e:41:e7:fb:2f:
ca:ad:8c:9d:5e:47:35:ff:97:cb:4c:b4:0d:11:ff:
96:10:29:e5:a8:da:73:c9:7b:08:f3:39:e8:9e:f8:
f8:83:fb:ee:97:b3:bd:6d:a3:76:1c:1c:77:84:dc:
5f:7c:91:a9:f7:4d:b0:7d:45:d9:92:fc:3b:9a:fd:
8e:d0:00:74:8b:b3:f9:6f:04:66:1d:96:bc:db:91:
e8:5d:0c:eb:ec:52:7e:11:3a:48:39:bf:4d:fc:7e:
d0:ae:3a:5c:46:6e:37:5e:1f:4c:5c:19:2f:d0:bd:
30:42:5d:bd:ce:76:3b:55:f4:c1:6a:c6:02:e2:78:
9c:59:5a:c2:37:77:39:bb:90:e2:0e:56:58:8e:b1:
48:a9:2f:6c:9f:e2:d9:c1:89:6d:51:93:49:c3:ac:
d7:e8:2b:29:33:47:bc:c9:65:0f:82:ea:57:c4:74:
d8:c9:91:0e:78:11:99:6b:0d:7d:ec:00:a1:3b:38:
8b:d3:20:19:55:b8:eb:7d:03:16:54:01:61:94:03:
cb:36:07:07:10:42:b7:70:03:1c:c4:d7:b1:d1:4a:
7a:1e:45:85:94:2b:dc:b5:59:b2:75:44:6a:f6:87:
c1:76:dd:82:6a:76:19:f1:95:bb:3a:9c:90:4a:ae:
5b:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:02:2B:CC:52:03:03:60:F5:CF:35:8E:18:92:F0:E4:A4:70:38:4A
X509v3 Authority Key Identifier:
keyid:AE:8E:D3:3B:70:BE:6C:C2:0C:89:FB:BA:C7:7A:59:CA:3B:4C:09:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ro7TO3C-bMIMifu6x3pZyjtMCTQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/b71d9f-f1da-400a-b485-04dbc9ac1444/1/ro7TO3C-bMIMifu6x3pZyjtMCTQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/b71d9f-f1da-400a-b485-04dbc9ac1444/1/ro7TO3C-bMIMifu6x3pZyjtMCTQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:d3:0b:b6:c0:ff:c5:b2:c9:b2:35:bc:22:12:2f:5b:c1:d1:
ea:51:4d:42:99:b4:f7:a4:3f:08:9a:53:92:03:2b:01:f2:22:
36:37:94:10:81:76:47:5e:41:0d:f0:d4:34:89:e3:56:05:c9:
38:f5:94:02:2f:8c:ed:19:c3:24:94:25:f2:d6:00:33:c0:c7:
87:4d:db:28:91:fe:83:92:9a:92:36:f8:9f:9f:15:7b:21:ab:
3a:09:29:1f:95:cf:b9:ca:a0:2c:7d:e7:f9:eb:e1:d2:48:03:
c2:e9:f6:72:19:7b:93:a1:25:74:86:04:aa:a8:3f:db:b4:c2:
22:12:7a:6a:c0:bb:a6:e2:56:5c:7e:80:33:0c:9f:bc:04:b7:
0b:ee:3f:08:64:11:7f:13:44:d1:f0:f8:ff:96:9e:71:6f:ea:
24:18:a8:a0:5f:9f:ff:f5:6d:79:74:9b:15:e1:1f:b1:90:94:
cd:7a:7d:51:5b:26:02:ed:67:39:41:fe:a4:c3:ac:f6:5f:47:
e0:3d:c7:f2:5b:60:7c:51:f1:0d:3a:64:1a:3a:f0:4e:4a:0f:
2d:29:9d:fb:a3:28:a0:17:86:1e:43:8a:4e:9c:ea:84:b9:8a:
08:63:8f:9a:16:16:73:a0:3a:bf:da:68:78:9d:f0:f2:9f:81:
2e:20:58:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:46:44 2026 by rpki-client