Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/1c24ad-24b4-4c98-a659-592c0dcdaf79/1/AoOoxpomMM2Pb6cK8qU_4BnyzAc.mft
File: AoOoxpomMM2Pb6cK8qU_4BnyzAc.mft (raw, json)
Hash identifier: xWjPSIx7NOAgHUyZ0Q2Zrh314ZBOcHi0EqxJiEsD7Lg=
Subject key identifier: 87:6C:EF:BD:88:06:01:0B:06:CD:25:88:5C:FB:6D:15:41:8F:72:F6
Authority key identifier: 02:83:A8:C6:9A:26:30:CD:8F:6F:A7:0A:F2:A5:3F:E0:19:F2:CC:07
Certificate issuer: /CN=0283a8c69a2630cd8f6fa70af2a53fe019f2cc07
Certificate serial: 019D39AE9C377DE48B89E2D35F98BAEBA6D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AoOoxpomMM2Pb6cK8qU_4BnyzAc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/1c24ad-24b4-4c98-a659-592c0dcdaf79/1/AoOoxpomMM2Pb6cK8qU_4BnyzAc.mft
Manifest number: 164E
Signing time: Sun 29 Mar 2026 13:00:37 +0000
Manifest this update: Sun 29 Mar 2026 13:00:37 +0000
Manifest next update: Mon 30 Mar 2026 13:00:37 +0000
Files and hashes: 1: AoOoxpomMM2Pb6cK8qU_4BnyzAc.crl (hash: wtX48rPFRs7ffvbaY62/PxbeS1i/kkG/sRtHGh20WYY=)
2: JZoFu5TMtgO6GAifQLMq6mNbzQk.roa (hash: NCchRFVvR+s9twFKa/UkTDiMQ9XBI45G1DwlByTQ0pE=)
3: aihBYA5xplYmWfW8AOuewemRnFY.roa (hash: wUPGbJwm1otYE0/5qPkx6y5JVuMAsf3lCIi1krAa/d8=)
4: gtbETOybprgnBnsdOcXReqiJdJg.roa (hash: MHBLEVDbm/5/3P4t1AJ9tw9OGawy0RxaBcMDfw8zw9M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/1c24ad-24b4-4c98-a659-592c0dcdaf79/1/AoOoxpomMM2Pb6cK8qU_4BnyzAc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/1c24ad-24b4-4c98-a659-592c0dcdaf79/1/AoOoxpomMM2Pb6cK8qU_4BnyzAc.mft
rsync://rpki.ripe.net/repository/DEFAULT/AoOoxpomMM2Pb6cK8qU_4BnyzAc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:ae:9c:37:7d:e4:8b:89:e2:d3:5f:98:ba:eb:a6:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0283a8c69a2630cd8f6fa70af2a53fe019f2cc07
Validity
Not Before: Mar 29 13:00:37 2026 GMT
Not After : Mar 30 13:00:37 2026 GMT
Subject: CN=876cefbd8806010b06cd25885cfb6d15418f72f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:30:f6:dd:00:47:55:ba:d2:71:0a:ad:39:c5:
a6:bb:bd:25:62:cf:05:83:42:dc:9e:fc:6e:e2:4d:
bd:b6:5f:03:77:7c:35:0a:72:3b:bb:a6:d6:76:f4:
7c:fc:94:61:fc:72:7a:a2:f6:61:05:94:dc:37:d7:
f9:72:8f:6f:21:1d:6b:27:d4:a6:97:e1:1e:0a:fa:
5d:88:4b:53:64:4f:fe:32:ed:85:b8:2a:32:b9:7d:
0e:6f:96:eb:6e:80:9b:00:f9:33:ac:8b:ce:34:7e:
01:cc:b4:6e:00:1b:ad:39:2e:e4:d1:64:33:a5:1e:
c4:fe:b8:5f:de:b5:9c:2d:dd:a5:40:eb:71:ec:b9:
66:cf:6c:d0:24:71:5c:62:ee:65:b7:55:17:2e:86:
7b:2e:29:50:09:7b:3c:2e:c0:cf:7b:d9:fa:84:2c:
f6:7a:27:1f:d8:f9:e3:0a:88:24:6f:94:52:8d:f0:
ca:2b:c7:05:f8:24:d9:10:09:71:d3:12:12:f4:ad:
d0:e1:d1:36:23:69:19:b9:44:67:7b:8a:12:ca:22:
fa:51:d0:05:d0:7f:89:de:c5:ad:37:ff:65:f9:5b:
47:42:c6:99:01:ce:bd:ab:01:d8:8b:b1:11:9c:b0:
1f:8f:40:3b:6b:e5:77:83:d0:6b:bc:e8:0b:b5:a4:
8e:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:6C:EF:BD:88:06:01:0B:06:CD:25:88:5C:FB:6D:15:41:8F:72:F6
X509v3 Authority Key Identifier:
keyid:02:83:A8:C6:9A:26:30:CD:8F:6F:A7:0A:F2:A5:3F:E0:19:F2:CC:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AoOoxpomMM2Pb6cK8qU_4BnyzAc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/1c24ad-24b4-4c98-a659-592c0dcdaf79/1/AoOoxpomMM2Pb6cK8qU_4BnyzAc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/1c24ad-24b4-4c98-a659-592c0dcdaf79/1/AoOoxpomMM2Pb6cK8qU_4BnyzAc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:38:a1:f0:a9:b0:f5:94:46:53:46:e4:8b:d7:76:92:47:32:
5a:aa:4e:d1:22:66:d2:51:94:9f:60:66:58:43:78:a8:b3:42:
d5:6b:a3:70:ae:40:78:17:73:29:da:db:5e:27:85:c0:c3:29:
3b:01:0f:17:5e:a9:c6:00:4f:01:a0:ed:89:db:4a:f2:10:6b:
d4:53:0e:a6:2a:81:0f:3b:6f:5a:ec:78:9b:35:fe:15:1f:2c:
eb:d8:e5:9a:27:fa:d3:1f:c1:1c:1a:9a:0f:f0:8a:15:68:88:
c8:f5:31:e2:9c:12:7b:fe:f1:07:36:bb:4d:1c:af:dd:4c:16:
13:11:b9:02:78:c5:fb:c8:41:d1:3d:fe:fc:a6:fb:85:d6:5f:
d5:7c:b3:e0:17:86:d8:ac:76:80:75:7e:17:8f:3f:18:92:68:
87:9a:50:21:79:00:64:14:82:c9:19:33:a3:39:0f:82:b2:2c:
6a:1b:6f:b4:f7:67:0d:8c:72:d4:04:cc:81:16:49:9b:fe:ea:
71:b5:ba:e5:9b:25:99:57:e0:be:e6:8b:a6:a6:fb:53:73:ad:
8c:f1:78:49:53:d0:2b:66:ac:91:5d:d8:aa:db:5b:31:d1:1f:
dc:d0:48:89:0e:89:83:b8:04:d9:bf:0c:21:ce:dd:66:c4:f6:
d1:bb:cb:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 16:26:41 2026 by rpki-client