
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/d49d52-50b1-4948-b1f7-055a9cad8df7/1/Ao_fcZ1HoQAzRRqDOEptto29Ww8.mft
File: Ao_fcZ1HoQAzRRqDOEptto29Ww8.mft (raw, json)
Hash identifier: y52s51aM2mTQWKtN1WrmtQ00xs6lbvjOvMrNBXNJpH8=
Subject key identifier: 04:43:50:4A:AD:41:E8:03:9B:B5:2F:7B:D1:E6:DB:6A:33:12:29:D6
Authority key identifier: 02:8F:DF:71:9D:47:A1:00:33:45:1A:83:38:4A:6D:B6:8D:BD:5B:0F
Certificate issuer: /CN=028fdf719d47a10033451a83384a6db68dbd5b0f
Certificate serial: 019E0BF801F8EE9DBC30C3074706398E8160
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ao_fcZ1HoQAzRRqDOEptto29Ww8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/d49d52-50b1-4948-b1f7-055a9cad8df7/1/Ao_fcZ1HoQAzRRqDOEptto29Ww8.mft
Manifest number: 0F05
Signing time: Sat 09 May 2026 09:01:03 +0000
Manifest this update: Sat 09 May 2026 09:01:03 +0000
Manifest next update: Sun 10 May 2026 09:01:03 +0000
Files and hashes: 1: Ao_fcZ1HoQAzRRqDOEptto29Ww8.crl (hash: +R+WK1lRuQNqcM6v43jFvGbMyh+cFV4WSdL0kh6kp7E=)
2: wx4jf3r0v_RD4WGbwjNb9_66YeA.roa (hash: Yg61lLQnPGGlaDhOZEVebkyWouHjvzVXcfasCV97MNE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/d49d52-50b1-4948-b1f7-055a9cad8df7/1/Ao_fcZ1HoQAzRRqDOEptto29Ww8.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/d49d52-50b1-4948-b1f7-055a9cad8df7/1/Ao_fcZ1HoQAzRRqDOEptto29Ww8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ao_fcZ1HoQAzRRqDOEptto29Ww8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 May 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:0b:f8:01:f8:ee:9d:bc:30:c3:07:47:06:39:8e:81:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=028fdf719d47a10033451a83384a6db68dbd5b0f
Validity
Not Before: May 9 09:01:03 2026 GMT
Not After : May 10 09:01:03 2026 GMT
Subject: CN=0443504aad41e8039bb52f7bd1e6db6a331229d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:03:91:53:26:96:38:74:03:14:89:ce:ae:62:
87:9d:e5:c4:42:dc:d0:7e:89:bf:91:1f:3b:34:a7:
7d:59:33:d7:7c:0b:98:bf:a1:3b:35:48:83:ce:2f:
27:6c:1a:9e:a2:a0:b7:1c:92:22:4e:15:04:0e:5b:
c4:cd:b3:8f:18:31:d8:45:40:d4:fe:63:ed:7b:3c:
7e:db:f7:f2:ae:93:d7:32:13:1e:1e:90:1c:9a:d0:
43:82:ea:79:57:7a:13:29:3b:be:b9:d4:83:31:6a:
d9:13:b0:fc:04:25:4e:07:c8:b0:dd:25:13:9a:bf:
27:83:56:ca:47:7a:f0:d3:b4:fd:fa:fa:b3:8d:ee:
f6:6f:95:92:0f:ed:7f:b5:3d:06:f4:e7:e6:5e:df:
3d:b4:54:62:2d:1b:0c:c1:4f:3f:96:19:fd:92:ef:
63:86:bc:37:c3:e3:ff:71:85:92:0c:d2:fb:b7:9f:
7c:ff:14:5c:56:d3:25:71:11:48:9c:a1:1f:c2:57:
e6:9a:79:1c:6b:3c:47:9a:d7:16:e9:7a:57:c5:e1:
95:1d:b4:97:7a:79:f6:00:1d:1e:38:f0:43:a5:86:
cf:08:aa:e1:18:ad:6a:dc:2e:b0:91:0d:48:cb:9a:
52:4f:2a:5b:8e:d3:32:e9:24:65:30:cb:a1:a1:e7:
01:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:43:50:4A:AD:41:E8:03:9B:B5:2F:7B:D1:E6:DB:6A:33:12:29:D6
X509v3 Authority Key Identifier:
keyid:02:8F:DF:71:9D:47:A1:00:33:45:1A:83:38:4A:6D:B6:8D:BD:5B:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ao_fcZ1HoQAzRRqDOEptto29Ww8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/d49d52-50b1-4948-b1f7-055a9cad8df7/1/Ao_fcZ1HoQAzRRqDOEptto29Ww8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/d49d52-50b1-4948-b1f7-055a9cad8df7/1/Ao_fcZ1HoQAzRRqDOEptto29Ww8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:f2:6c:5a:15:ae:0e:9b:ee:6e:8f:93:e9:5c:19:92:48:9e:
38:74:b3:13:d6:5d:0f:e8:41:86:81:0f:72:ff:01:d9:01:58:
00:ad:de:94:68:66:b0:a7:6f:d8:48:9c:98:57:d9:cf:ac:04:
50:f1:83:f1:35:b2:d2:52:90:ee:88:f6:8f:93:aa:87:2b:63:
24:70:bb:6c:52:86:4a:17:ab:70:bd:c6:9b:17:9f:13:9a:a6:
09:84:ff:d6:cf:86:dd:03:d6:3b:e8:d9:20:fb:1c:4b:80:d6:
ef:85:0e:0d:49:66:97:59:87:48:c7:8e:bb:40:06:c7:52:ee:
f6:6f:74:49:59:47:03:8d:3f:b6:d7:71:9d:37:db:db:8d:01:
3e:05:79:b6:cf:af:21:85:d2:0e:4d:7c:5a:27:68:68:dc:c7:
4b:63:6d:72:0a:4f:cb:5a:1c:c9:d5:19:24:1c:e8:e1:3e:fb:
fc:7d:b6:ca:cd:7d:47:19:48:66:71:ca:53:21:d7:cf:ee:1f:
4e:4e:26:d2:83:b5:a9:9a:2d:9d:23:29:74:4a:ae:8d:ab:02:
db:0f:3b:51:90:ab:ae:20:1f:5d:ec:10:a6:79:ab:8c:45:a4:
e7:24:44:d8:c1:8e:58:db:c6:4b:1a:29:d2:89:31:b7:67:17:
d7:5f:5c:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 9 11:23:53 2026 by rpki-client