Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/476139-5661-4697-8b57-424aef67f776/1/roAO3oM7hsSM43BVZwaOuQcksI0.mft
File: roAO3oM7hsSM43BVZwaOuQcksI0.mft (raw, json)
Hash identifier: +UecPKYvURxfyAd6+Tzfi25T19kt9kJTnDyo1ke8NaI=
Subject key identifier: 2E:95:89:D2:A5:6B:05:01:A4:02:A8:C3:4D:5E:0F:68:3D:61:C0:CB
Authority key identifier: AE:80:0E:DE:83:3B:86:C4:8C:E3:70:55:67:06:8E:B9:07:24:B0:8D
Certificate issuer: /CN=ae800ede833b86c48ce3705567068eb90724b08d
Certificate serial: 019D382E8572BE00FBE08272445DD9D2DAED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/roAO3oM7hsSM43BVZwaOuQcksI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/476139-5661-4697-8b57-424aef67f776/1/roAO3oM7hsSM43BVZwaOuQcksI0.mft
Manifest number: 8F
Signing time: Sun 29 Mar 2026 06:01:06 +0000
Manifest this update: Sun 29 Mar 2026 06:01:06 +0000
Manifest next update: Mon 30 Mar 2026 06:01:06 +0000
Files and hashes: 1: 7clbtE8xwhadRQ3A3fwwc0B7Xx8.asa (hash: NSE+naftLaacIKnlx//uMGVJTg2CXO0d6h3CTsIyW90=)
2: ZL2C4Xh3gk3HxtfjXSTbvl0b7Eg.roa (hash: RUoJ7koe3OvwmkZQ+5gWyWMHICJts5yQk65pg7WzrdM=)
3: roAO3oM7hsSM43BVZwaOuQcksI0.crl (hash: GAkujTu7R9hQIR2IOio1lBiyQVG4ru2APgJZFyR4zOg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/476139-5661-4697-8b57-424aef67f776/1/roAO3oM7hsSM43BVZwaOuQcksI0.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/476139-5661-4697-8b57-424aef67f776/1/roAO3oM7hsSM43BVZwaOuQcksI0.mft
rsync://rpki.ripe.net/repository/DEFAULT/roAO3oM7hsSM43BVZwaOuQcksI0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:85:72:be:00:fb:e0:82:72:44:5d:d9:d2:da:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae800ede833b86c48ce3705567068eb90724b08d
Validity
Not Before: Mar 29 06:01:06 2026 GMT
Not After : Mar 30 06:01:06 2026 GMT
Subject: CN=2e9589d2a56b0501a402a8c34d5e0f683d61c0cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:71:8c:19:6e:78:91:da:59:e6:9c:03:2b:ec:
66:b3:6a:79:b8:3d:db:66:3f:fc:df:94:4c:2c:1e:
c3:9a:4a:cf:e5:13:d0:57:0b:61:3a:0b:1a:4b:34:
f5:f0:d1:37:da:37:90:1f:6f:b3:e1:f2:50:63:5c:
a9:25:40:d1:9a:2f:f3:aa:f9:a9:cb:ff:70:6a:44:
66:bd:06:25:e6:e9:a1:24:c3:16:96:4f:c7:91:15:
de:9f:ab:02:25:e5:e3:b2:3c:7e:77:ef:d1:84:8d:
d8:78:e1:14:8e:09:b3:23:8a:5b:f8:0a:21:47:49:
70:d2:3c:c5:f8:42:e2:f5:57:4c:b4:53:4b:1c:80:
77:fc:e1:e0:b7:26:f7:70:91:7c:a9:86:16:74:e0:
bd:95:2f:1b:e4:2f:42:e2:c7:ea:e3:db:11:fa:11:
e3:2e:4a:02:4f:7f:15:fc:cc:89:b8:f9:66:e7:38:
b9:a1:1b:a1:d4:64:ba:ec:87:16:21:f5:b0:5f:24:
e7:d1:3e:cf:38:52:07:25:86:9b:8a:be:b8:ae:0c:
82:ae:35:92:49:9b:41:e5:21:b7:c9:1c:b1:c6:13:
5c:b5:08:45:c9:46:66:db:37:36:6a:f9:a6:43:c2:
6a:eb:d1:57:41:53:f7:14:52:c5:ea:fa:9c:2f:be:
a5:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:95:89:D2:A5:6B:05:01:A4:02:A8:C3:4D:5E:0F:68:3D:61:C0:CB
X509v3 Authority Key Identifier:
keyid:AE:80:0E:DE:83:3B:86:C4:8C:E3:70:55:67:06:8E:B9:07:24:B0:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/roAO3oM7hsSM43BVZwaOuQcksI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/476139-5661-4697-8b57-424aef67f776/1/roAO3oM7hsSM43BVZwaOuQcksI0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/476139-5661-4697-8b57-424aef67f776/1/roAO3oM7hsSM43BVZwaOuQcksI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:6f:23:b5:42:8c:72:d5:98:7b:8b:f8:52:09:2f:97:c7:3b:
f4:d9:f4:89:ae:18:89:6a:e9:09:c5:dd:8f:88:2d:13:b9:d0:
7b:eb:b0:06:0a:da:08:57:31:76:b4:25:2d:0e:7f:cd:f9:70:
48:0b:3d:86:34:59:b0:e9:95:30:1a:38:19:d9:5d:92:b9:64:
be:c4:ae:e8:2b:f7:24:04:ea:09:93:79:ba:1c:b6:84:0f:cf:
d7:d3:8f:5f:2c:b6:d9:c5:f6:9f:ed:3d:9f:cd:db:3a:23:52:
63:1d:e5:a5:07:a5:ca:f7:c0:d9:0d:c1:26:d3:51:f4:2f:3a:
f3:15:9f:b7:24:54:94:e4:21:43:ed:a5:b2:71:43:3e:6f:99:
9e:a0:06:ff:70:04:77:b4:b0:0c:18:8e:a2:93:9a:0c:9b:63:
1c:cd:da:aa:24:11:fe:87:ee:23:00:e8:9a:86:64:27:04:c7:
ce:bb:36:0b:b3:97:47:e6:da:b0:c0:62:9d:be:eb:64:ac:93:
3d:d4:2b:8d:28:a7:26:1c:17:85:6f:a3:a9:17:11:7c:3c:62:
eb:f0:48:c4:f9:24:35:e1:f1:70:22:9c:fb:ae:66:31:a1:61:
0f:82:b1:9f:84:ad:84:2c:be:d2:49:13:b9:5d:4a:93:ae:c3:
f0:10:af:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:28:05 2026 by rpki-client