Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/53/476139-5661-4697-8b57-424aef67f776/1/roAO3oM7hsSM43BVZwaOuQcksI0.mft
File: roAO3oM7hsSM43BVZwaOuQcksI0.mft (raw, json)
Hash identifier: Moob192qNEdGuOjkeNQHD69sJKR4JJg4jh9Gg873TKQ=
Subject key identifier: 17:E5:98:E9:31:85:86:2E:A2:F3:92:54:A5:E1:6B:A1:B1:9E:2C:0D
Authority key identifier: AE:80:0E:DE:83:3B:86:C4:8C:E3:70:55:67:06:8E:B9:07:24:B0:8D
Certificate issuer: /CN=ae800ede833b86c48ce3705567068eb90724b08d
Certificate serial: 01A17B4DBD93C5A0921540EA18519A539208
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/roAO3oM7hsSM43BVZwaOuQcksI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/476139-5661-4697-8b57-424aef67f776/1/roAO3oM7hsSM43BVZwaOuQcksI0.mft
Manifest number: 02C5
Signing time: Tue 27 Oct 2026 03:00:54 +0000
Manifest this update: Tue 27 Oct 2026 03:00:54 +0000
Manifest next update: Wed 28 Oct 2026 03:00:54 +0000
Files and hashes: 1: 7clbtE8xwhadRQ3A3fwwc0B7Xx8.asa (hash: NSE+naftLaacIKnlx//uMGVJTg2CXO0d6h3CTsIyW90=)
2: ow2bqJhEdDegyshhSjmpEmSiWIE.roa (hash: jvnyA7cvV4BQzNY5m+pTfWf2ZrkK6vyFHIlZGwtJzpk=)
3: roAO3oM7hsSM43BVZwaOuQcksI0.crl (hash: Gid3ZqV6mOrvEmVeIUGf3MK7gpRqX4T4bK0HQtCnTts=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/476139-5661-4697-8b57-424aef67f776/1/roAO3oM7hsSM43BVZwaOuQcksI0.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/476139-5661-4697-8b57-424aef67f776/1/roAO3oM7hsSM43BVZwaOuQcksI0.mft
rsync://rpki.ripe.net/repository/DEFAULT/roAO3oM7hsSM43BVZwaOuQcksI0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 03:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7b:4d:bd:93:c5:a0:92:15:40:ea:18:51:9a:53:92:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae800ede833b86c48ce3705567068eb90724b08d
Validity
Not Before: Oct 27 03:00:54 2026 GMT
Not After : Oct 28 03:00:54 2026 GMT
Subject: CN=17e598e93185862ea2f39254a5e16ba1b19e2c0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:a0:14:ea:52:6a:be:b4:71:1a:46:b0:9b:3e:
74:1b:97:58:32:57:ec:0e:fa:d2:83:b2:34:a6:90:
d5:4a:c5:bf:6b:e7:32:20:be:7a:ce:f5:76:95:41:
b9:2c:b6:3c:e8:df:67:a0:6b:15:ee:e6:75:b6:84:
af:73:5f:07:6d:3c:d6:31:42:f9:4a:b7:d1:a4:f5:
32:ff:5d:01:55:a4:0c:fc:a2:36:36:22:a3:08:63:
53:e6:63:71:39:39:74:8d:07:2d:0b:fd:ca:a6:36:
33:d6:52:cb:66:53:08:e9:11:db:cf:d1:6f:06:39:
78:e4:5c:f6:74:f6:5d:42:e6:e5:bd:cd:17:78:d3:
05:11:40:c0:19:cc:34:ec:1a:ea:e7:0b:f9:b2:e6:
1a:4d:67:39:f3:c4:e5:0f:44:74:e6:9c:15:e0:f1:
f5:27:12:33:9f:66:63:36:13:9c:56:56:ae:7a:f2:
ac:a0:08:c6:8d:f5:50:ac:e4:ef:e5:87:71:45:04:
83:de:76:c2:86:ab:a3:93:74:d1:84:a5:94:e4:e0:
fd:40:53:48:7d:1b:c5:e0:5d:4a:42:e7:e1:85:f6:
17:e6:c5:e2:54:2f:13:d1:25:0a:82:22:5b:36:1b:
b9:90:52:ff:17:43:ab:28:a9:cf:34:96:72:98:4b:
e7:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:E5:98:E9:31:85:86:2E:A2:F3:92:54:A5:E1:6B:A1:B1:9E:2C:0D
X509v3 Authority Key Identifier:
keyid:AE:80:0E:DE:83:3B:86:C4:8C:E3:70:55:67:06:8E:B9:07:24:B0:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/roAO3oM7hsSM43BVZwaOuQcksI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/476139-5661-4697-8b57-424aef67f776/1/roAO3oM7hsSM43BVZwaOuQcksI0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/476139-5661-4697-8b57-424aef67f776/1/roAO3oM7hsSM43BVZwaOuQcksI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:c6:24:ac:0d:6c:b0:ec:df:c4:d8:b1:7b:fc:4d:f2:2e:bc:
da:c6:d2:fd:6c:e7:16:5c:4d:c7:85:7a:b2:57:7d:66:84:5a:
35:4b:73:cc:b2:7e:c4:67:40:61:cf:cd:49:7d:65:28:31:49:
c3:bf:81:c4:9a:56:3e:fa:be:45:75:ad:66:f0:8b:00:80:90:
0a:04:e7:89:02:12:31:fa:da:bf:6e:f1:ba:3a:19:00:73:3d:
ab:ea:e7:8a:ac:71:8d:78:a5:fb:c0:fb:ae:0b:da:73:de:bd:
5a:37:4f:e8:be:56:54:f2:4c:b8:dc:61:b2:dd:03:df:82:aa:
34:4a:59:08:27:46:1d:14:2f:45:eb:0a:96:8d:9a:b2:3a:57:
96:59:2d:d1:14:4e:38:03:31:73:77:6b:97:48:a8:d0:45:92:
2e:6f:75:17:ad:15:c9:f9:93:5a:0b:58:b7:08:de:af:2c:10:
c2:e5:3a:8f:c3:39:87:53:22:0f:09:71:12:e3:ce:e2:88:cf:
87:d5:9a:1a:78:41:08:d2:8a:66:d5:ab:01:e8:2f:46:f2:c9:
e3:a1:99:86:95:ce:61:98:02:bc:aa:7c:69:62:fc:05:d8:11:
09:8b:be:a3:f9:95:b7:91:30:c0:4b:bb:de:bd:db:98:07:56:
ab:8e:4d:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 11:56:44 2026 by rpki-client