Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/476139-5661-4697-8b57-424aef67f776/1/roAO3oM7hsSM43BVZwaOuQcksI0.mft
File: roAO3oM7hsSM43BVZwaOuQcksI0.mft (raw, json)
Hash identifier: 31tRizatr9Hgr6xiac8ces17RQZPUpplvRkAoT0mm60=
Subject key identifier: 0D:C5:E0:E5:4E:42:EA:84:30:87:DF:14:42:58:E4:24:85:F1:C6:FD
Authority key identifier: AE:80:0E:DE:83:3B:86:C4:8C:E3:70:55:67:06:8E:B9:07:24:B0:8D
Certificate issuer: /CN=ae800ede833b86c48ce3705567068eb90724b08d
Certificate serial: 019E2994FF792BD895952DE64B5023337BBA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/roAO3oM7hsSM43BVZwaOuQcksI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/476139-5661-4697-8b57-424aef67f776/1/roAO3oM7hsSM43BVZwaOuQcksI0.mft
Manifest number: 010C
Signing time: Fri 15 May 2026 03:01:31 +0000
Manifest this update: Fri 15 May 2026 03:01:31 +0000
Manifest next update: Sat 16 May 2026 03:01:31 +0000
Files and hashes: 1: 7clbtE8xwhadRQ3A3fwwc0B7Xx8.asa (hash: NSE+naftLaacIKnlx//uMGVJTg2CXO0d6h3CTsIyW90=)
2: ZL2C4Xh3gk3HxtfjXSTbvl0b7Eg.roa (hash: RUoJ7koe3OvwmkZQ+5gWyWMHICJts5yQk65pg7WzrdM=)
3: roAO3oM7hsSM43BVZwaOuQcksI0.crl (hash: 6mPwI1tDqpMTkquULZucdGBfO9R2ObktsKSK+umfM2c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/476139-5661-4697-8b57-424aef67f776/1/roAO3oM7hsSM43BVZwaOuQcksI0.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/476139-5661-4697-8b57-424aef67f776/1/roAO3oM7hsSM43BVZwaOuQcksI0.mft
rsync://rpki.ripe.net/repository/DEFAULT/roAO3oM7hsSM43BVZwaOuQcksI0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 16 May 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:29:94:ff:79:2b:d8:95:95:2d:e6:4b:50:23:33:7b:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae800ede833b86c48ce3705567068eb90724b08d
Validity
Not Before: May 15 03:01:31 2026 GMT
Not After : May 16 03:01:31 2026 GMT
Subject: CN=0dc5e0e54e42ea843087df144258e42485f1c6fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:0b:4c:d1:e0:50:99:5d:aa:c0:9a:62:17:0a:
ce:ea:b5:6c:c9:64:a7:3a:52:87:b1:f0:41:28:da:
74:a2:66:9e:17:10:85:f2:9d:1d:0f:17:11:23:9b:
54:e7:b7:45:29:e9:d5:5c:f3:05:71:ac:68:61:3c:
c0:f1:57:c5:32:86:d6:72:e6:33:95:ac:ac:05:ea:
33:df:a9:dd:01:8c:68:06:81:f8:00:dd:f9:e3:3a:
87:fe:b3:0d:07:6c:c5:81:87:af:3f:a8:15:66:35:
57:47:55:a6:79:bf:c5:f6:73:63:00:6a:60:42:e5:
0e:ce:3c:21:ae:bf:22:83:d2:69:10:36:e0:11:ad:
d5:71:af:50:f5:ef:26:30:8e:b2:48:58:b4:21:87:
46:b0:10:cd:63:1f:75:07:46:47:c3:f7:33:28:aa:
f0:f6:48:31:e9:64:22:d0:45:99:72:de:80:1e:ff:
7d:5d:1b:9e:d3:b7:b7:11:94:5c:f9:55:3b:a8:9e:
3f:cf:75:69:48:f7:b2:8a:b3:fd:d4:5e:6b:6b:9a:
06:b5:b3:a5:83:b6:d0:06:52:c9:13:f7:1e:54:f7:
17:e3:3a:d2:6f:29:c5:e0:3c:1b:37:15:d7:9f:63:
b7:50:bd:df:b0:32:5f:42:90:f0:a9:10:f0:5f:2c:
34:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:C5:E0:E5:4E:42:EA:84:30:87:DF:14:42:58:E4:24:85:F1:C6:FD
X509v3 Authority Key Identifier:
keyid:AE:80:0E:DE:83:3B:86:C4:8C:E3:70:55:67:06:8E:B9:07:24:B0:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/roAO3oM7hsSM43BVZwaOuQcksI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/476139-5661-4697-8b57-424aef67f776/1/roAO3oM7hsSM43BVZwaOuQcksI0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/476139-5661-4697-8b57-424aef67f776/1/roAO3oM7hsSM43BVZwaOuQcksI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:fd:f2:a3:bd:52:cb:79:db:c0:cb:2e:ea:69:28:ba:89:20:
ed:42:1f:f9:d2:f0:8c:26:c3:d8:c2:1a:f7:b8:25:ba:e7:16:
bb:d2:f3:c3:2b:09:63:35:21:ed:3e:b6:7a:ba:0f:a7:27:71:
29:24:12:9a:25:2f:58:61:1e:42:ef:d8:29:e0:ac:74:da:04:
d2:cd:1e:a3:55:ed:fb:99:46:66:cf:b8:61:a3:80:1f:40:de:
ae:e4:32:3f:18:93:4d:e2:6c:98:32:73:9e:8a:f6:37:ef:e3:
0c:fe:b8:99:90:74:44:dd:04:92:20:28:7e:ce:10:af:e6:ce:
41:f3:45:06:a1:1f:b2:9d:66:ac:be:95:00:ec:a1:94:a7:73:
40:f0:87:38:9e:5c:a4:a6:be:0d:45:50:4a:db:c1:81:3a:0f:
9a:16:a7:85:d2:c4:61:1d:a9:6f:84:b3:f2:56:12:7a:d5:d2:
8d:c6:38:4f:ec:cf:24:b9:db:1f:c0:71:a6:c7:b1:8d:4f:7d:
26:85:b7:09:22:6f:1f:2e:54:d8:21:fb:77:e2:2f:1a:57:b7:
45:d9:1b:48:31:b9:09:93:f6:36:f3:1b:12:7d:80:04:6c:74:
76:9f:01:b3:4d:4e:d3:d0:eb:9b:b5:f1:fc:6c:1a:d1:a3:f8:
20:e1:e2:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 06:23:32 2026 by rpki-client