Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/476139-5661-4697-8b57-424aef67f776/1/roAO3oM7hsSM43BVZwaOuQcksI0.mft
File: roAO3oM7hsSM43BVZwaOuQcksI0.mft (raw, json)
Hash identifier: 4J7QmKbWS3/8EGpYi9h6hEu+TLn0g3AD9hOjUYcBnUU=
Subject key identifier: DE:A0:2E:7C:3A:E7:C4:25:32:A7:59:FD:13:F7:42:22:F6:0A:89:C9
Authority key identifier: AE:80:0E:DE:83:3B:86:C4:8C:E3:70:55:67:06:8E:B9:07:24:B0:8D
Certificate issuer: /CN=ae800ede833b86c48ce3705567068eb90724b08d
Certificate serial: 019F11533B884BB3403C0178A3B4C9310DCD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/roAO3oM7hsSM43BVZwaOuQcksI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/476139-5661-4697-8b57-424aef67f776/1/roAO3oM7hsSM43BVZwaOuQcksI0.mft
Manifest number: 0184
Signing time: Mon 29 Jun 2026 03:01:35 +0000
Manifest this update: Mon 29 Jun 2026 03:01:35 +0000
Manifest next update: Tue 30 Jun 2026 03:01:35 +0000
Files and hashes: 1: 7clbtE8xwhadRQ3A3fwwc0B7Xx8.asa (hash: NSE+naftLaacIKnlx//uMGVJTg2CXO0d6h3CTsIyW90=)
2: ZL2C4Xh3gk3HxtfjXSTbvl0b7Eg.roa (hash: RUoJ7koe3OvwmkZQ+5gWyWMHICJts5yQk65pg7WzrdM=)
3: roAO3oM7hsSM43BVZwaOuQcksI0.crl (hash: f/oLIbxbv/BgcHt3ZwKQDETuWMLUeSl9j2gcJGYF2T8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/476139-5661-4697-8b57-424aef67f776/1/roAO3oM7hsSM43BVZwaOuQcksI0.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/476139-5661-4697-8b57-424aef67f776/1/roAO3oM7hsSM43BVZwaOuQcksI0.mft
rsync://rpki.ripe.net/repository/DEFAULT/roAO3oM7hsSM43BVZwaOuQcksI0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:11:53:3b:88:4b:b3:40:3c:01:78:a3:b4:c9:31:0d:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae800ede833b86c48ce3705567068eb90724b08d
Validity
Not Before: Jun 29 03:01:35 2026 GMT
Not After : Jun 30 03:01:35 2026 GMT
Subject: CN=dea02e7c3ae7c42532a759fd13f74222f60a89c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:66:5e:64:8a:87:21:f1:db:6a:0f:f6:e3:36:
b8:64:ca:cf:71:41:61:dc:06:e3:d6:ca:68:ab:1f:
cd:0e:ba:22:98:d6:ab:fc:12:9a:11:96:c4:17:48:
8f:b4:7d:07:fb:de:f3:5f:d5:22:c3:32:d3:43:4e:
39:da:ec:c6:6b:7c:bf:62:0c:2e:e5:19:99:9b:bc:
3b:e0:97:dc:1d:16:72:ac:60:91:00:d4:d7:30:f5:
28:bd:31:90:ec:d5:5b:0c:e9:87:ca:bd:99:6a:ba:
88:0e:6b:fa:69:48:a6:2d:f1:97:8c:7b:8a:0e:d9:
13:ad:26:30:cf:79:49:5e:d1:96:34:f8:58:0e:a7:
ce:e7:c1:dc:70:ff:88:02:0f:53:a7:b5:b9:0f:6b:
60:72:9a:4a:72:be:20:20:4d:cf:f5:0d:fe:58:d7:
58:94:46:c3:a1:50:f0:0f:6f:e9:71:43:00:e5:fe:
86:b3:c8:5e:71:ce:6b:ff:64:fa:3b:a3:01:ba:cc:
1c:b3:dd:3c:08:a5:7b:28:c4:d7:e2:44:b6:4a:5e:
6c:0f:97:d4:f7:13:c5:07:dc:91:ba:3e:4f:0e:95:
7a:d2:e1:49:f8:fd:12:b3:dd:3d:2d:98:d0:19:bc:
91:78:a6:cd:8d:65:b4:a0:fa:71:ed:44:13:e5:44:
cb:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:A0:2E:7C:3A:E7:C4:25:32:A7:59:FD:13:F7:42:22:F6:0A:89:C9
X509v3 Authority Key Identifier:
keyid:AE:80:0E:DE:83:3B:86:C4:8C:E3:70:55:67:06:8E:B9:07:24:B0:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/roAO3oM7hsSM43BVZwaOuQcksI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/476139-5661-4697-8b57-424aef67f776/1/roAO3oM7hsSM43BVZwaOuQcksI0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/476139-5661-4697-8b57-424aef67f776/1/roAO3oM7hsSM43BVZwaOuQcksI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:6b:4b:49:ae:29:43:cc:36:27:4b:a7:61:88:c9:f7:d1:0d:
af:35:74:64:07:c5:6b:ca:8e:06:75:b7:8d:5e:ab:f3:1c:1a:
e8:a9:e1:bd:17:61:f9:9f:d4:fc:83:88:e8:c3:f1:38:25:36:
af:4b:f8:d2:8a:8f:d9:10:d3:4a:e6:74:83:36:7a:bd:29:09:
5f:2c:64:00:ef:80:91:5e:33:28:5b:df:35:68:f1:c6:56:1b:
ab:57:bd:be:b6:75:7c:c1:d1:c0:c1:e3:29:0f:2d:13:65:17:
6e:93:a4:bf:6e:bf:8c:1d:10:4a:64:50:b6:d5:b2:60:b1:95:
d0:56:fd:99:58:f8:5f:16:8c:3b:7c:e8:4f:9c:80:a8:42:d1:
6c:fb:d7:e8:bf:d5:67:72:4a:1c:ab:30:36:6d:71:b5:7b:59:
c4:7e:97:34:66:a7:86:67:5d:8c:52:65:0a:fd:87:6c:62:3c:
48:ba:42:9a:0c:cc:27:6b:aa:3a:c0:06:74:c3:c1:8e:5c:62:
11:4d:14:d6:bd:79:a4:50:d7:5a:05:b1:a3:50:31:c1:4e:9a:
db:a0:77:e7:4e:59:ec:a2:13:49:6f:2f:a1:cb:99:53:f3:8f:
86:84:cc:43:79:86:7f:31:47:03:8a:be:00:36:28:58:a7:46:
85:a6:9e:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 11:40:10 2026 by rpki-client