Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/17/d301cd-f513-4995-9d55-1b38b02245c1/1/ao33d2sW0oLgTGluJYqk-fnOnJg.mft
File: ao33d2sW0oLgTGluJYqk-fnOnJg.mft (raw, json)
Hash identifier: hCyos09e6+8MK01pDsPPojhJcYh595sY5pmjSq6FUMM=
Subject key identifier: F4:02:43:16:F3:77:20:CF:EE:20:4A:82:73:2B:BC:09:C7:0E:16:3D
Authority key identifier: 6A:8D:F7:77:6B:16:D2:82:E0:4C:69:6E:25:8A:A4:F9:F9:CE:9C:98
Certificate issuer: /CN=6a8df7776b16d282e04c696e258aa4f9f9ce9c98
Certificate serial: 01A13F029CF5A4C3CD1B6F9BDCB72B7A67DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ao33d2sW0oLgTGluJYqk-fnOnJg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/d301cd-f513-4995-9d55-1b38b02245c1/1/ao33d2sW0oLgTGluJYqk-fnOnJg.mft
Manifest number: 0E96
Signing time: Thu 15 Oct 2026 10:01:38 +0000
Manifest this update: Thu 15 Oct 2026 10:01:38 +0000
Manifest next update: Fri 16 Oct 2026 10:01:38 +0000
Files and hashes: 1: GmFXXmDlxbUAsewZb2XP6yyDi4w.roa (hash: t86pSAuRTeL1p9o68CyCCsghXoQGwpFAgB1l7sjE7zs=)
2: ao33d2sW0oLgTGluJYqk-fnOnJg.crl (hash: xRuwV7Gf+pasEkpzeLNmuewbwMCQLVZZeNZV2BtouSM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/d301cd-f513-4995-9d55-1b38b02245c1/1/ao33d2sW0oLgTGluJYqk-fnOnJg.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/d301cd-f513-4995-9d55-1b38b02245c1/1/ao33d2sW0oLgTGluJYqk-fnOnJg.mft
rsync://rpki.ripe.net/repository/DEFAULT/ao33d2sW0oLgTGluJYqk-fnOnJg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3f:02:9c:f5:a4:c3:cd:1b:6f:9b:dc:b7:2b:7a:67:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a8df7776b16d282e04c696e258aa4f9f9ce9c98
Validity
Not Before: Oct 15 10:01:38 2026 GMT
Not After : Oct 16 10:01:38 2026 GMT
Subject: CN=f4024316f37720cfee204a82732bbc09c70e163d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:48:69:75:ec:e8:97:d1:ee:1a:8c:37:f4:68:
6e:6f:4a:56:3f:6d:65:91:00:73:54:8b:da:19:85:
85:c3:f7:53:7b:ee:a5:16:3d:44:6f:5f:54:e9:d6:
1c:36:00:a4:2a:86:68:1c:71:fa:93:32:ec:b4:af:
db:e2:23:aa:13:75:84:10:b1:a7:cf:e3:f5:9a:33:
e2:19:40:dc:f5:53:fa:93:af:43:38:04:4e:3c:33:
8d:93:5d:9d:28:a8:fd:40:3a:7f:90:2c:2e:7d:35:
77:f7:b1:21:a2:75:a7:33:cc:f2:1b:f1:63:36:20:
c9:da:3f:6e:cd:9c:31:ff:d5:1e:2e:85:88:40:ed:
b7:94:72:3b:21:c5:e5:3e:82:b0:56:9f:20:69:11:
05:69:a0:4b:d4:96:00:5f:a9:f2:2c:14:19:98:63:
b4:ad:3d:b7:9b:ef:35:59:95:3e:ae:6b:50:b4:6e:
a5:42:f1:f9:05:ae:84:57:95:b2:a6:64:2c:c8:09:
3e:1a:92:52:31:aa:45:66:e6:49:70:4f:8b:0f:8a:
86:30:c4:48:6c:7a:57:d3:f2:6a:22:c3:96:d1:3f:
4f:59:12:87:e3:17:c7:5e:21:81:53:cd:64:57:d8:
0a:fa:59:9c:70:48:e1:4d:11:91:7f:63:1a:50:98:
60:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:02:43:16:F3:77:20:CF:EE:20:4A:82:73:2B:BC:09:C7:0E:16:3D
X509v3 Authority Key Identifier:
keyid:6A:8D:F7:77:6B:16:D2:82:E0:4C:69:6E:25:8A:A4:F9:F9:CE:9C:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ao33d2sW0oLgTGluJYqk-fnOnJg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/d301cd-f513-4995-9d55-1b38b02245c1/1/ao33d2sW0oLgTGluJYqk-fnOnJg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/d301cd-f513-4995-9d55-1b38b02245c1/1/ao33d2sW0oLgTGluJYqk-fnOnJg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:34:f9:35:3f:40:eb:49:18:87:ad:c6:bb:57:2d:1b:b5:a0:
2e:9c:3a:cf:29:6f:4d:fc:71:50:fb:89:94:d9:54:dd:3f:4a:
ed:f5:d6:66:25:71:eb:d4:cf:68:9e:d0:da:3c:06:5e:d0:87:
7d:fe:05:a8:bb:52:dd:e5:28:fd:5c:78:53:0e:a9:d8:e8:8f:
cd:81:a4:63:b4:d7:29:47:ae:f5:db:98:3b:97:b6:b8:44:85:
f3:01:2c:e9:2f:60:f7:84:cd:3f:b2:2a:6f:02:2b:89:ac:41:
55:1a:6d:d3:23:2d:53:d0:ee:1e:93:52:6a:c0:3f:bd:1d:ec:
cd:3f:7e:b7:09:58:11:c7:cc:1c:37:b3:62:43:e9:64:a9:63:
16:95:56:97:91:6e:e5:06:b2:4c:c8:f3:c9:11:0b:8d:f6:3c:
19:fe:14:45:2f:f4:1f:cc:6a:23:38:2e:b5:92:24:fd:b5:fd:
4d:22:43:07:16:6f:46:3b:e7:72:21:f1:21:67:b0:f5:c5:51:
61:70:cc:03:39:11:5e:f9:e5:36:99:c5:15:da:ae:2c:db:d2:
46:e2:12:78:5d:f1:ae:fd:45:51:05:e2:b9:45:e3:42:3c:bc:
94:83:aa:fa:29:db:85:7e:cf:df:f2:91:73:1e:53:7e:4f:04:
17:2b:89:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 18:34:26 2026 by rpki-client