Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/17/d301cd-f513-4995-9d55-1b38b02245c1/1/ao33d2sW0oLgTGluJYqk-fnOnJg.mft
File: ao33d2sW0oLgTGluJYqk-fnOnJg.mft (raw, json)
Hash identifier: 37VnKtMMI+G3u6UUKe/AuF1lGaNj41Ys5oZu4u9T3CI=
Subject key identifier: 4D:25:10:C8:03:B9:87:20:82:C4:90:D4:02:96:7F:F7:D1:2F:AC:89
Authority key identifier: 6A:8D:F7:77:6B:16:D2:82:E0:4C:69:6E:25:8A:A4:F9:F9:CE:9C:98
Certificate issuer: /CN=6a8df7776b16d282e04c696e258aa4f9f9ce9c98
Certificate serial: 01A13D137800BF5F229D640127B72E19D9EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ao33d2sW0oLgTGluJYqk-fnOnJg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/d301cd-f513-4995-9d55-1b38b02245c1/1/ao33d2sW0oLgTGluJYqk-fnOnJg.mft
Manifest number: 0E95
Signing time: Thu 15 Oct 2026 01:00:48 +0000
Manifest this update: Thu 15 Oct 2026 01:00:48 +0000
Manifest next update: Fri 16 Oct 2026 01:00:48 +0000
Files and hashes: 1: GmFXXmDlxbUAsewZb2XP6yyDi4w.roa (hash: t86pSAuRTeL1p9o68CyCCsghXoQGwpFAgB1l7sjE7zs=)
2: ao33d2sW0oLgTGluJYqk-fnOnJg.crl (hash: M172vAwTZJ4LMgmDod/0RACcp9IawXT3WI2EZX8CU3E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/d301cd-f513-4995-9d55-1b38b02245c1/1/ao33d2sW0oLgTGluJYqk-fnOnJg.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/d301cd-f513-4995-9d55-1b38b02245c1/1/ao33d2sW0oLgTGluJYqk-fnOnJg.mft
rsync://rpki.ripe.net/repository/DEFAULT/ao33d2sW0oLgTGluJYqk-fnOnJg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 23:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3d:13:78:00:bf:5f:22:9d:64:01:27:b7:2e:19:d9:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a8df7776b16d282e04c696e258aa4f9f9ce9c98
Validity
Not Before: Oct 15 01:00:48 2026 GMT
Not After : Oct 16 01:00:48 2026 GMT
Subject: CN=4d2510c803b9872082c490d402967ff7d12fac89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:5b:26:35:2c:24:a5:d7:35:61:7a:72:11:7a:
85:96:fe:92:be:1d:73:34:c7:41:ab:35:32:d7:a4:
93:ad:b1:03:4d:69:d7:3e:d5:e0:aa:98:f4:9c:4a:
07:a0:b9:17:5d:d4:de:58:b0:99:d7:5e:90:ff:1c:
87:c3:db:49:7d:f8:86:30:32:b8:26:f3:62:b1:1c:
7a:33:23:0b:f4:38:c1:24:8a:4c:ee:eb:e5:1a:9d:
75:ec:b0:33:e0:91:c3:42:7d:a7:17:45:5e:1b:8f:
48:8f:18:72:aa:c0:0d:e3:86:4d:89:aa:7a:0e:38:
60:47:bd:f0:07:0f:5d:1d:0e:84:4d:4b:fb:49:7e:
d1:9c:69:42:53:ad:a2:14:71:7c:7f:2b:fb:0d:9e:
fb:32:2e:c3:95:2f:84:02:52:2c:a0:9a:39:c1:f9:
27:36:b3:6a:ec:5a:92:d7:53:5b:2a:bb:27:09:da:
e7:13:c0:3e:79:53:1d:69:b5:2d:c6:ae:c0:36:85:
b7:34:92:cd:fe:ee:2e:42:98:24:50:1e:b4:25:df:
7d:2b:20:47:50:99:24:8a:9c:c8:d1:df:f6:2c:0f:
5c:44:77:05:be:f3:3d:57:65:a9:7d:07:91:44:3f:
8f:eb:da:02:6c:9f:bb:32:9c:04:91:b2:b4:9f:1b:
74:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:25:10:C8:03:B9:87:20:82:C4:90:D4:02:96:7F:F7:D1:2F:AC:89
X509v3 Authority Key Identifier:
keyid:6A:8D:F7:77:6B:16:D2:82:E0:4C:69:6E:25:8A:A4:F9:F9:CE:9C:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ao33d2sW0oLgTGluJYqk-fnOnJg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/d301cd-f513-4995-9d55-1b38b02245c1/1/ao33d2sW0oLgTGluJYqk-fnOnJg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/d301cd-f513-4995-9d55-1b38b02245c1/1/ao33d2sW0oLgTGluJYqk-fnOnJg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:8e:39:94:87:46:e0:5d:a8:71:38:99:e6:30:a5:a7:4a:79:
17:2e:f1:fe:29:fe:3d:9f:8f:07:ff:d5:a7:d0:6e:5c:52:f8:
4f:90:6c:24:9f:7b:04:a8:28:6e:13:93:3c:f9:6e:9e:06:97:
da:39:00:d4:4f:3d:0c:82:27:a3:31:74:22:9a:38:25:a5:93:
e1:69:ee:39:16:c9:d5:a7:89:04:14:e3:bf:2f:7a:da:29:26:
9a:a2:b1:70:ce:9e:64:d3:80:34:72:1c:2a:cd:f4:f9:2d:be:
1a:58:f1:0a:a1:4d:3c:b6:ff:98:97:a1:2d:ab:56:15:8a:e1:
e8:34:05:14:1e:e9:59:a3:e7:65:9e:98:49:dd:06:1b:32:d0:
bb:a7:5e:24:5e:53:1a:91:15:a1:8c:65:58:3f:05:eb:9a:30:
6b:d6:3f:84:8d:46:10:25:ad:b2:17:6d:26:82:07:5b:9a:45:
a7:53:6b:95:04:81:9d:a4:7b:60:ce:19:15:88:69:79:99:78:
47:35:f2:77:1a:e5:21:14:0f:b9:31:f0:49:92:ca:2b:d3:6c:
6c:30:52:4f:5c:b6:5d:2a:03:3e:b9:6a:21:87:f5:78:49:37:
6d:8d:67:96:ef:30:81:78:88:ea:8e:a3:e5:35:04:b4:81:bc:
9b:5a:c8:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 07:32:55 2026 by rpki-client