Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/53/476139-5661-4697-8b57-424aef67f776/1/roAO3oM7hsSM43BVZwaOuQcksI0.mft
File: roAO3oM7hsSM43BVZwaOuQcksI0.mft (raw, json)
Hash identifier: 0F4pdzh+iBRLrGiShuFImDAyCO4cSWvfGD9JNBN8/Jc=
Subject key identifier: D1:02:B0:82:90:F8:4F:73:CA:B0:32:B6:60:98:C5:D8:2A:06:D1:EA
Authority key identifier: AE:80:0E:DE:83:3B:86:C4:8C:E3:70:55:67:06:8E:B9:07:24:B0:8D
Certificate issuer: /CN=ae800ede833b86c48ce3705567068eb90724b08d
Certificate serial: 01A03AB9A4F899B72026FBB2AAE2F693FEF8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/roAO3oM7hsSM43BVZwaOuQcksI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/476139-5661-4697-8b57-424aef67f776/1/roAO3oM7hsSM43BVZwaOuQcksI0.mft
Manifest number: 021F
Signing time: Tue 25 Aug 2026 21:00:39 +0000
Manifest this update: Tue 25 Aug 2026 21:00:39 +0000
Manifest next update: Wed 26 Aug 2026 21:00:39 +0000
Files and hashes: 1: 7clbtE8xwhadRQ3A3fwwc0B7Xx8.asa (hash: NSE+naftLaacIKnlx//uMGVJTg2CXO0d6h3CTsIyW90=)
2: ow2bqJhEdDegyshhSjmpEmSiWIE.roa (hash: jvnyA7cvV4BQzNY5m+pTfWf2ZrkK6vyFHIlZGwtJzpk=)
3: roAO3oM7hsSM43BVZwaOuQcksI0.crl (hash: vlpLK3H9BiwFped+v3itkkFCsPFrDZ/cu0bV+Ne7VuU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/476139-5661-4697-8b57-424aef67f776/1/roAO3oM7hsSM43BVZwaOuQcksI0.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/476139-5661-4697-8b57-424aef67f776/1/roAO3oM7hsSM43BVZwaOuQcksI0.mft
rsync://rpki.ripe.net/repository/DEFAULT/roAO3oM7hsSM43BVZwaOuQcksI0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 26 Aug 2026 14:02:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3a:b9:a4:f8:99:b7:20:26:fb:b2:aa:e2:f6:93:fe:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae800ede833b86c48ce3705567068eb90724b08d
Validity
Not Before: Aug 25 21:00:39 2026 GMT
Not After : Aug 26 21:00:39 2026 GMT
Subject: CN=d102b08290f84f73cab032b66098c5d82a06d1ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:5d:8a:ba:60:d8:fd:5d:8f:62:5e:9f:e1:0c:
e9:08:b1:21:d6:c6:1d:fd:90:26:0b:43:54:90:90:
57:c0:59:ff:47:7e:cc:a8:27:e2:eb:15:b7:db:4c:
51:12:e5:97:39:59:87:57:f7:b6:08:0e:15:53:fd:
2d:6a:a4:c4:f4:c5:54:0d:98:9b:51:f5:db:6c:d0:
3a:f3:1e:52:b3:68:5e:47:e7:d5:95:aa:11:5b:52:
7a:55:c1:95:e6:d0:17:21:82:83:98:2d:75:fb:39:
78:b4:bf:4a:83:93:1c:52:8a:81:58:03:25:9c:e6:
15:7b:fc:e7:15:ea:dc:72:5c:70:d0:78:4a:16:87:
0d:aa:1b:e7:a9:98:5b:d8:98:bb:af:38:bd:8c:0a:
2a:63:a0:3d:a2:6e:e0:c6:2d:29:7e:01:39:41:a1:
51:d0:c6:dc:b4:c0:64:d6:de:5a:0a:a8:30:62:ca:
8c:a6:a9:30:b0:b7:2b:f2:1c:41:9b:70:dc:2a:d1:
f0:d7:57:4d:3c:ae:65:eb:64:11:2d:40:fa:35:3f:
c0:65:4d:3d:d3:f2:17:85:21:85:d5:97:47:88:5f:
18:17:29:08:68:6c:ef:c0:03:1e:97:87:a0:26:7f:
c4:41:2c:c9:ad:55:66:66:e4:b1:a6:47:75:64:75:
7d:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:02:B0:82:90:F8:4F:73:CA:B0:32:B6:60:98:C5:D8:2A:06:D1:EA
X509v3 Authority Key Identifier:
keyid:AE:80:0E:DE:83:3B:86:C4:8C:E3:70:55:67:06:8E:B9:07:24:B0:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/roAO3oM7hsSM43BVZwaOuQcksI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/476139-5661-4697-8b57-424aef67f776/1/roAO3oM7hsSM43BVZwaOuQcksI0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/476139-5661-4697-8b57-424aef67f776/1/roAO3oM7hsSM43BVZwaOuQcksI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ca:93:44:36:7f:d9:b8:a1:42:91:b7:ab:0c:45:b1:38:c4:d2:
11:19:60:28:bf:aa:7f:23:a1:40:07:45:b8:c1:6c:e2:05:4a:
50:32:bc:a8:75:c7:6e:7c:b1:96:bc:91:06:8e:43:5e:c8:3d:
9a:57:d9:ed:d7:de:2d:52:9d:90:28:fb:f1:19:35:dc:79:b3:
95:40:b7:1d:ac:7c:86:2c:34:7f:f2:be:7e:f3:a2:d7:51:98:
6c:75:96:cd:a0:92:b0:a7:ba:31:1a:20:ea:b2:19:80:d7:99:
fc:35:d4:b1:6b:78:3c:97:57:0c:b0:c2:98:82:ab:94:13:88:
bd:70:e9:34:54:06:21:96:9c:af:0e:23:81:67:92:28:7c:96:
db:7f:0d:35:5e:6f:d4:0a:26:1e:6e:77:f0:70:89:10:61:91:
f7:ac:08:98:91:38:bd:57:fa:4c:52:78:4d:10:04:cb:bf:b7:
9f:c5:44:05:ad:e2:1f:5c:25:03:67:f4:07:8c:2b:22:3f:03:
aa:a3:72:89:a0:3b:5c:ce:ff:ff:99:86:88:f1:c4:13:08:57:
8b:14:df:19:eb:53:6a:02:23:e1:7e:8b:e5:60:f5:a9:1f:b5:
c4:0e:f9:b9:7f:e2:53:d0:2f:b3:70:6c:b3:0b:49:61:be:5d:
92:b5:ec:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 00:42:15 2026 by rpki-client