Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/cce012-2cb9-4be6-a1b6-d5167e6756b6/1/o_AJmtht2ENOUvjG_d7rLD7Wxso.mft
File: o_AJmtht2ENOUvjG_d7rLD7Wxso.mft (raw, json)
Hash identifier: d0ef1KQiEkfJyN2A8jgBhNvw081qo+PFhFrrBIcSfEU=
Subject key identifier: 9F:6F:90:EB:0A:86:B5:A9:A8:A5:2C:BF:77:67:4F:A6:73:F9:53:98
Authority key identifier: A3:F0:09:9A:D8:6D:D8:43:4E:52:F8:C6:FD:DE:EB:2C:3E:D6:C6:CA
Certificate issuer: /CN=a3f0099ad86dd8434e52f8c6fddeeb2c3ed6c6ca
Certificate serial: 019D37C068395446894BEAE94B085F6A25EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o_AJmtht2ENOUvjG_d7rLD7Wxso.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/cce012-2cb9-4be6-a1b6-d5167e6756b6/1/o_AJmtht2ENOUvjG_d7rLD7Wxso.mft
Manifest number: 0DBC
Signing time: Sun 29 Mar 2026 04:00:49 +0000
Manifest this update: Sun 29 Mar 2026 04:00:49 +0000
Manifest next update: Mon 30 Mar 2026 04:00:49 +0000
Files and hashes: 1: h1nd4Qn-NC3F4blTzKUQQVdDcGU.roa (hash: lz23Y5PvDIkn6cwsXMHaDyiIabMEIIObGoga2OQiexA=)
2: o_AJmtht2ENOUvjG_d7rLD7Wxso.crl (hash: 8IAqVAbeEMI11YDrGTgDUF99cbGS7jOlR96mAAsVNYw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/cce012-2cb9-4be6-a1b6-d5167e6756b6/1/o_AJmtht2ENOUvjG_d7rLD7Wxso.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/cce012-2cb9-4be6-a1b6-d5167e6756b6/1/o_AJmtht2ENOUvjG_d7rLD7Wxso.mft
rsync://rpki.ripe.net/repository/DEFAULT/o_AJmtht2ENOUvjG_d7rLD7Wxso.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:68:39:54:46:89:4b:ea:e9:4b:08:5f:6a:25:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3f0099ad86dd8434e52f8c6fddeeb2c3ed6c6ca
Validity
Not Before: Mar 29 04:00:49 2026 GMT
Not After : Mar 30 04:00:49 2026 GMT
Subject: CN=9f6f90eb0a86b5a9a8a52cbf77674fa673f95398
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:cc:cd:4f:82:01:46:2d:39:d9:12:4f:27:48:
17:41:20:a1:d5:8a:e1:4e:47:54:cd:75:c5:30:5a:
9f:ad:af:fa:9c:ea:0f:82:8e:6c:ba:98:2a:70:2e:
fb:1c:90:a3:4a:55:43:5c:91:99:0e:10:86:ce:e8:
93:c7:2f:7e:ae:c8:41:30:a1:b3:e4:48:16:43:6f:
05:d9:96:8f:b7:cc:2d:6f:3c:4f:cf:f3:a1:16:78:
fe:5e:d3:90:78:75:b1:af:c2:c0:3c:5c:94:ae:74:
73:79:04:7b:b5:ba:4b:7a:1f:f1:c2:96:ef:74:70:
30:91:92:66:91:ea:c8:1c:90:5e:a6:9c:b0:0d:e9:
3c:37:1d:d6:44:d5:90:75:03:75:c6:d6:65:9b:ec:
82:0e:30:f3:53:87:88:52:40:7f:42:6b:69:1d:4a:
f3:09:bc:d1:80:27:c1:b9:d4:ca:32:4c:df:a7:52:
2f:79:66:c9:61:51:28:8f:fc:1a:b2:87:25:e5:5b:
d4:63:ed:33:5e:d7:03:f4:5f:95:71:36:58:7c:b5:
d5:7e:ac:0a:7f:13:68:d7:79:3d:c8:3a:62:00:60:
4e:1f:cf:62:22:38:bd:8d:78:b2:94:4a:db:c8:82:
c8:58:5b:b3:37:b6:7b:7e:d0:9c:dc:ad:f9:5e:ef:
b7:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:6F:90:EB:0A:86:B5:A9:A8:A5:2C:BF:77:67:4F:A6:73:F9:53:98
X509v3 Authority Key Identifier:
keyid:A3:F0:09:9A:D8:6D:D8:43:4E:52:F8:C6:FD:DE:EB:2C:3E:D6:C6:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o_AJmtht2ENOUvjG_d7rLD7Wxso.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/cce012-2cb9-4be6-a1b6-d5167e6756b6/1/o_AJmtht2ENOUvjG_d7rLD7Wxso.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/cce012-2cb9-4be6-a1b6-d5167e6756b6/1/o_AJmtht2ENOUvjG_d7rLD7Wxso.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:64:3d:18:0c:57:9d:f1:45:ea:d1:8b:58:49:3c:35:78:3e:
d8:ff:e7:6c:4c:6f:3f:c9:fa:92:4d:4c:e5:b5:cd:e7:29:40:
99:c4:43:99:c6:3f:e5:92:bb:17:e8:bd:a5:8b:e0:61:e6:3f:
69:89:2c:51:b4:6c:1d:d4:9c:bf:53:f7:3f:93:1e:79:eb:76:
de:f0:0d:f0:55:3d:75:59:47:ce:2f:47:37:c8:65:2a:50:f9:
40:b6:87:76:08:6d:4e:04:be:b9:23:41:63:48:e3:d1:4b:c5:
1d:50:d6:44:44:2b:8a:f4:96:a0:8e:5e:6e:5c:cd:1d:aa:19:
92:64:ca:7b:8f:a1:3c:1c:61:86:29:f0:33:19:0e:f5:26:bd:
09:f7:92:97:fd:b4:84:65:22:68:bb:8a:4c:32:c4:a3:6c:23:
0e:4f:71:29:db:8d:7c:cd:1a:e0:6e:66:6e:07:f3:8b:36:30:
36:37:cf:d0:f3:5c:c7:94:be:22:8d:31:f5:27:83:e0:50:75:
30:18:e4:7d:d5:e2:53:6d:01:f4:4f:70:49:a9:a3:0a:01:b4:
93:c2:7c:b6:db:8b:79:ad:10:42:a0:fa:3f:83:5e:5a:15:9e:
93:84:09:ef:5a:a8:21:d4:8b:0f:ea:3f:84:eb:62:74:88:b6:
7c:38:1e:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:44:27 2026 by rpki-client