Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/fcdbee-db9d-46b8-9e03-146e0b178085/1/AaDVhox6Qdb-ncvPk4BaxCy9vb8.mft
File: AaDVhox6Qdb-ncvPk4BaxCy9vb8.mft (raw, json)
Hash identifier: WI8s0alnvcVX+vTnW79z2Y3Jeo+6UKSyRk90xL/WQD4=
Subject key identifier: 17:D5:F9:8E:70:9D:9D:0E:88:BC:E7:F0:DE:78:2E:97:35:00:68:83
Authority key identifier: 01:A0:D5:86:8C:7A:41:D6:FE:9D:CB:CF:93:80:5A:C4:2C:BD:BD:BF
Certificate issuer: /CN=01a0d5868c7a41d6fe9dcbcf93805ac42cbdbdbf
Certificate serial: 019FAA50446953894AD81715649128CE03E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AaDVhox6Qdb-ncvPk4BaxCy9vb8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/fcdbee-db9d-46b8-9e03-146e0b178085/1/AaDVhox6Qdb-ncvPk4BaxCy9vb8.mft
Manifest number: 0BF4
Signing time: Tue 28 Jul 2026 20:00:14 +0000
Manifest this update: Tue 28 Jul 2026 20:00:14 +0000
Manifest next update: Wed 29 Jul 2026 20:00:14 +0000
Files and hashes: 1: AaDVhox6Qdb-ncvPk4BaxCy9vb8.crl (hash: OBxl+XvTLh/tVzmF0A/b2X9EudOzWbCgPUppOkALBNY=)
2: YEziWd2u7JNVBZhfbqD7tAgw6N0.roa (hash: MKjaPlRYWsRt/x04oa9rkmteLx1QuLJM6GSjP/NuL4c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/fcdbee-db9d-46b8-9e03-146e0b178085/1/AaDVhox6Qdb-ncvPk4BaxCy9vb8.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/fcdbee-db9d-46b8-9e03-146e0b178085/1/AaDVhox6Qdb-ncvPk4BaxCy9vb8.mft
rsync://rpki.ripe.net/repository/DEFAULT/AaDVhox6Qdb-ncvPk4BaxCy9vb8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:50:44:69:53:89:4a:d8:17:15:64:91:28:ce:03:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01a0d5868c7a41d6fe9dcbcf93805ac42cbdbdbf
Validity
Not Before: Jul 28 20:00:14 2026 GMT
Not After : Jul 29 20:00:14 2026 GMT
Subject: CN=17d5f98e709d9d0e88bce7f0de782e9735006883
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:67:cb:d0:19:a9:4a:8b:d9:0e:b7:61:d1:64:
70:80:63:c8:48:3d:72:32:3c:86:ae:bf:98:ca:3a:
7b:17:d1:1c:d1:39:1d:4f:f0:d0:d7:8b:20:9d:97:
11:43:c7:37:0a:7c:b1:db:02:89:f3:83:6e:ac:2d:
bb:a0:55:a0:3d:6e:df:87:ee:bf:61:78:e7:77:07:
bc:b3:e9:83:c9:13:83:a0:66:3d:2b:78:f8:0b:e2:
a3:8a:26:18:96:77:b2:10:0a:68:8a:83:a6:3c:fd:
4a:be:3d:17:9a:1f:84:e4:6a:0b:8a:36:56:21:0b:
b7:b0:79:07:ab:3b:ef:e6:d8:7d:e1:11:d0:91:57:
54:21:af:ab:5f:6e:3b:39:b4:af:63:e5:d0:a3:53:
79:58:d9:a8:57:0d:d4:fe:8b:6d:05:38:82:0f:c5:
a2:6f:52:2e:e4:92:5b:cc:64:34:43:bc:77:bb:ce:
27:23:fa:03:82:ab:9d:48:dd:c6:3f:0f:1b:c4:59:
28:de:74:a2:bf:89:13:6f:80:48:47:6e:fe:39:b3:
66:42:16:0d:08:3f:84:b1:24:0a:f0:69:06:6d:61:
cf:46:5e:16:2d:7e:21:ae:4c:a5:d1:a4:3a:91:6b:
ef:da:30:ab:50:2b:6d:03:f0:ca:c9:b3:8e:aa:18:
58:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:D5:F9:8E:70:9D:9D:0E:88:BC:E7:F0:DE:78:2E:97:35:00:68:83
X509v3 Authority Key Identifier:
keyid:01:A0:D5:86:8C:7A:41:D6:FE:9D:CB:CF:93:80:5A:C4:2C:BD:BD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AaDVhox6Qdb-ncvPk4BaxCy9vb8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/fcdbee-db9d-46b8-9e03-146e0b178085/1/AaDVhox6Qdb-ncvPk4BaxCy9vb8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/fcdbee-db9d-46b8-9e03-146e0b178085/1/AaDVhox6Qdb-ncvPk4BaxCy9vb8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:64:d6:9c:b7:f7:4a:be:17:fd:5f:7d:fa:d8:ff:8f:b8:f4:
c2:1e:a4:cf:4d:b3:f5:4b:b6:cc:25:73:70:6d:0e:66:1e:18:
19:2b:1d:8a:d0:95:09:3b:dc:21:41:b0:25:d3:c6:9a:f5:46:
98:10:ab:0d:43:6c:d3:ad:63:9b:7a:ca:ca:44:e3:6c:81:56:
21:58:14:a2:7f:f5:7a:c6:44:4a:80:6d:53:a6:09:99:b5:fb:
72:69:4b:62:6c:a0:bb:15:65:44:18:8b:87:9d:37:61:e7:e2:
a3:68:cb:1d:8e:6a:cb:e4:cc:ea:19:6a:2b:ec:b4:3a:5e:1c:
34:8c:b1:d4:a1:f8:27:4e:f4:7b:4d:15:e6:a1:90:a8:28:0d:
9d:16:2b:64:12:8c:78:69:f4:da:9e:f0:6e:4e:c6:bc:cc:20:
a9:09:66:b5:11:f9:72:b7:39:3c:c6:89:03:1c:dc:69:cc:c7:
91:a1:85:fa:64:1e:71:b0:e1:ee:68:cc:d3:56:0e:00:d8:4d:
21:0a:b7:d1:08:19:30:29:4c:6c:df:2c:5b:ec:bc:f9:26:e2:
d0:fb:e3:6a:7c:3b:ec:bc:d1:ed:c9:f9:b8:24:f3:89:0b:20:
43:b1:ea:e1:60:d9:89:7b:a8:48:82:17:86:f0:34:41:96:0e:
4e:3a:ba:78
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+qUERpU4lK2BcVZJEozgPpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAxYTBkNTg2OGM3YTQxZDZmZTlkY2JjZjkzODA1YWM0MmNi
ZGJkYmYwHhcNMjYwNzI4MjAwMDE0WhcNMjYwNzI5MjAwMDE0WjAzMTEwLwYDVQQD
EygxN2Q1Zjk4ZTcwOWQ5ZDBlODhiY2U3ZjBkZTc4MmU5NzM1MDA2ODgzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw2fL0BmpSovZDrdh0WRwgGPISD1y
MjyGrr+Yyjp7F9Ec0TkdT/DQ14sgnZcRQ8c3Cnyx2wKJ84NurC27oFWgPW7fh+6/
YXjndwe8s+mDyRODoGY9K3j4C+KjiiYYlneyEApoioOmPP1Kvj0Xmh+E5GoLijZW
IQu3sHkHqzvv5th94RHQkVdUIa+rX247ObSvY+XQo1N5WNmoVw3U/ottBTiCD8Wi
b1Iu5JJbzGQ0Q7x3u84nI/oDgqudSN3GPw8bxFko3nSiv4kTb4BIR27+ObNmQhYN
CD+EsSQK8GkGbWHPRl4WLX4hrkyl0aQ6kWvv2jCrUCttA/DKybOOqhhYfwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBfV+Y5wnZ0OiLzn8N54Lpc1AGiDMB8GA1UdIwQY
MBaAFAGg1YaMekHW/p3Lz5OAWsQsvb2/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQWFEVmhveDZRZGItbmN2UGs0QmF4Q3k5dmI4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS9mY2RiZWUtZGI5ZC00NmI4LTllMDMt
MTQ2ZTBiMTc4MDg1LzEvQWFEVmhveDZRZGItbmN2UGs0QmF4Q3k5dmI4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS9mY2RiZWUtZGI5ZC00NmI4LTllMDMtMTQ2ZTBiMTc4MDg1
LzEvQWFEVmhveDZRZGItbmN2UGs0QmF4Q3k5dmI4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXmTWnLf3
Sr4X/V99+tj/j7j0wh6kz02z9Uu2zCVzcG0OZh4YGSsditCVCTvcIUGwJdPGmvVG
mBCrDUNs061jm3rKykTjbIFWIVgUon/1esZESoBtU6YJmbX7cmlLYmyguxVlRBiL
h503Yefio2jLHY5qy+TM6hlqK+y0Ol4cNIyx1KH4J070e00V5qGQqCgNnRYrZBKM
eGn02p7wbk7GvMwgqQlmtRH5crc5PMaJAxzcaczHkaGF+mQecbDh7mjM01YOANhN
IQq30QgZMClMbN8sW+y8+Sbi0Pvjanw77LzR7cn5uCTziQsgQ7Hq4WDZiXuoSIIX
hvA0QZYOTjq6eA==
-----END CERTIFICATE-----
Generated at Tue Jul 28 21:54:47 2026 by rpki-client