Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/fcdbee-db9d-46b8-9e03-146e0b178085/1/AaDVhox6Qdb-ncvPk4BaxCy9vb8.mft
File: AaDVhox6Qdb-ncvPk4BaxCy9vb8.mft (raw, json)
Hash identifier: vSZuz9j93AQR0ZP6ZNU1Pnx+CRr4maMMYllwwy4HGAI=
Subject key identifier: 53:FF:A7:29:DB:49:CA:36:50:74:58:89:E0:D5:4A:94:FD:B7:AA:54
Authority key identifier: 01:A0:D5:86:8C:7A:41:D6:FE:9D:CB:CF:93:80:5A:C4:2C:BD:BD:BF
Certificate issuer: /CN=01a0d5868c7a41d6fe9dcbcf93805ac42cbdbdbf
Certificate serial: 019CABA25979CC743424D70FC50080167D3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AaDVhox6Qdb-ncvPk4BaxCy9vb8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/fcdbee-db9d-46b8-9e03-146e0b178085/1/AaDVhox6Qdb-ncvPk4BaxCy9vb8.mft
Manifest number: 0A67
Signing time: Sun 01 Mar 2026 23:01:09 +0000
Manifest this update: Sun 01 Mar 2026 23:01:09 +0000
Manifest next update: Mon 02 Mar 2026 23:01:09 +0000
Files and hashes: 1: AaDVhox6Qdb-ncvPk4BaxCy9vb8.crl (hash: 6FQeb5bWD6zriQ2hF04HmwFwUil6safsYDcTcr2vDrQ=)
2: YEziWd2u7JNVBZhfbqD7tAgw6N0.roa (hash: MKjaPlRYWsRt/x04oa9rkmteLx1QuLJM6GSjP/NuL4c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/fcdbee-db9d-46b8-9e03-146e0b178085/1/AaDVhox6Qdb-ncvPk4BaxCy9vb8.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/fcdbee-db9d-46b8-9e03-146e0b178085/1/AaDVhox6Qdb-ncvPk4BaxCy9vb8.mft
rsync://rpki.ripe.net/repository/DEFAULT/AaDVhox6Qdb-ncvPk4BaxCy9vb8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:a2:59:79:cc:74:34:24:d7:0f:c5:00:80:16:7d:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01a0d5868c7a41d6fe9dcbcf93805ac42cbdbdbf
Validity
Not Before: Mar 1 23:01:09 2026 GMT
Not After : Mar 2 23:01:09 2026 GMT
Subject: CN=53ffa729db49ca3650745889e0d54a94fdb7aa54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:bd:23:e9:06:8d:6c:7a:4a:ad:bc:a7:f6:1b:
5d:1e:3c:68:1d:cf:f0:d0:0f:a1:2d:6a:c6:f6:6b:
8d:01:ea:a4:36:5c:ac:2c:cf:90:d8:16:40:97:94:
9b:f9:ee:d3:6c:27:3d:56:5a:89:1a:0d:b0:fa:1b:
b1:e4:2d:f2:41:3f:6b:22:4d:86:6d:f8:53:97:f6:
59:53:4e:6a:ba:a7:ff:2b:ce:08:fc:d4:56:e0:81:
2b:12:5d:3b:41:55:48:ac:fb:43:13:ad:4e:5c:2d:
e1:d1:5c:c0:03:f5:87:1f:29:ba:4c:f9:92:1d:2a:
b9:21:57:dc:37:e5:c3:3b:d5:d6:8c:c4:d0:7f:a7:
b1:91:16:1c:47:29:8d:40:5f:b6:90:e4:f9:67:fa:
b8:c9:f1:33:c4:7a:66:1c:8d:df:f3:01:d2:fa:75:
45:1c:8f:fc:d6:31:a3:bc:1b:ee:bb:8f:4a:27:93:
5f:a2:c1:21:32:74:f0:92:47:e0:23:8b:34:2c:03:
04:97:87:19:c5:2b:e7:7a:75:88:4e:97:23:b6:7e:
0c:17:ed:5a:16:95:7d:80:ad:b2:b2:b9:ad:c8:82:
d5:61:bb:ae:67:6f:ad:be:1d:3c:f6:04:6e:12:d5:
b4:da:fb:e4:36:fc:7e:9b:19:06:ab:ab:ad:bb:86:
47:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:FF:A7:29:DB:49:CA:36:50:74:58:89:E0:D5:4A:94:FD:B7:AA:54
X509v3 Authority Key Identifier:
keyid:01:A0:D5:86:8C:7A:41:D6:FE:9D:CB:CF:93:80:5A:C4:2C:BD:BD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AaDVhox6Qdb-ncvPk4BaxCy9vb8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/fcdbee-db9d-46b8-9e03-146e0b178085/1/AaDVhox6Qdb-ncvPk4BaxCy9vb8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/fcdbee-db9d-46b8-9e03-146e0b178085/1/AaDVhox6Qdb-ncvPk4BaxCy9vb8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:d0:de:a5:7a:63:53:94:87:73:7c:05:93:62:00:60:e1:7f:
11:d5:3a:ee:ac:bb:bd:24:34:07:85:71:c5:7d:5e:af:d8:86:
9d:13:82:30:de:e4:ca:09:b2:8f:3d:b2:06:a2:c7:79:23:42:
86:88:a9:fb:6f:8f:48:90:b2:f9:9e:34:bb:00:be:89:c7:ac:
26:0b:3e:96:89:b9:42:47:4b:aa:15:64:29:58:5e:17:35:cd:
3f:e3:21:d4:93:9c:94:82:76:ac:82:5a:87:ed:9a:e7:06:1f:
73:74:35:8d:f7:9a:02:da:a9:fb:c5:81:f6:3d:b1:7d:81:6b:
58:f9:0c:6b:a4:24:6d:bb:95:54:99:05:ec:1a:c1:28:49:84:
6a:f9:1a:8b:88:6a:ab:64:25:dc:48:76:90:be:9c:1c:91:c0:
62:de:f8:c0:8d:73:f7:cb:22:2d:8b:15:4e:af:b7:d7:42:13:
83:f9:c3:c6:42:74:0a:9c:ad:33:04:1a:f7:41:41:59:2e:17:
fd:2d:cd:0b:27:ad:41:46:b5:e0:2d:c2:d5:48:77:06:f9:ec:
4e:9e:b1:00:8c:a2:25:64:c6:a3:9d:1c:44:62:e7:47:1b:d3:
c2:70:8b:55:cf:85:ac:d1:00:9a:e4:95:f0:a7:58:b0:b0:ef:
a9:70:e9:5f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyroll5zHQ0JNcPxQCAFn08MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAxYTBkNTg2OGM3YTQxZDZmZTlkY2JjZjkzODA1YWM0MmNi
ZGJkYmYwHhcNMjYwMzAxMjMwMTA5WhcNMjYwMzAyMjMwMTA5WjAzMTEwLwYDVQQD
Eyg1M2ZmYTcyOWRiNDljYTM2NTA3NDU4ODllMGQ1NGE5NGZkYjdhYTU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwL0j6QaNbHpKrbyn9htdHjxoHc/w
0A+hLWrG9muNAeqkNlysLM+Q2BZAl5Sb+e7TbCc9VlqJGg2w+hux5C3yQT9rIk2G
bfhTl/ZZU05quqf/K84I/NRW4IErEl07QVVIrPtDE61OXC3h0VzAA/WHHym6TPmS
HSq5IVfcN+XDO9XWjMTQf6exkRYcRymNQF+2kOT5Z/q4yfEzxHpmHI3f8wHS+nVF
HI/81jGjvBvuu49KJ5NfosEhMnTwkkfgI4s0LAMEl4cZxSvnenWITpcjtn4MF+1a
FpV9gK2ysrmtyILVYbuuZ2+tvh089gRuEtW02vvkNvx+mxkGq6utu4ZHCQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFP/pynbSco2UHRYieDVSpT9t6pUMB8GA1UdIwQY
MBaAFAGg1YaMekHW/p3Lz5OAWsQsvb2/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQWFEVmhveDZRZGItbmN2UGs0QmF4Q3k5dmI4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS9mY2RiZWUtZGI5ZC00NmI4LTllMDMt
MTQ2ZTBiMTc4MDg1LzEvQWFEVmhveDZRZGItbmN2UGs0QmF4Q3k5dmI4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS9mY2RiZWUtZGI5ZC00NmI4LTllMDMtMTQ2ZTBiMTc4MDg1
LzEvQWFEVmhveDZRZGItbmN2UGs0QmF4Q3k5dmI4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEActDepXpj
U5SHc3wFk2IAYOF/EdU67qy7vSQ0B4VxxX1er9iGnROCMN7kygmyjz2yBqLHeSNC
hoip+2+PSJCy+Z40uwC+icesJgs+lom5QkdLqhVkKVheFzXNP+Mh1JOclIJ2rIJa
h+2a5wYfc3Q1jfeaAtqp+8WB9j2xfYFrWPkMa6QkbbuVVJkF7BrBKEmEavkai4hq
q2Ql3Eh2kL6cHJHAYt74wI1z98siLYsVTq+310ITg/nDxkJ0CpytMwQa90FBWS4X
/S3NCyetQUa14C3C1Uh3BvnsTp6xAIyiJWTGo50cRGLnRxvTwnCLVc+FrNEAmuSV
8KdYsLDvqXDpXw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 03:27:51 2026 by rpki-client