Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/6db797-a3d3-4241-903a-0c66840198d0/1/ao7dovIciF--ZyhiGLgxjWrSOJY.mft
File: ao7dovIciF--ZyhiGLgxjWrSOJY.mft (raw, json)
Hash identifier: eiwenFQheqeQXCDdP8tWTbG1JfZlTwhpxnEqF4QuFr4=
Subject key identifier: FF:16:3C:3F:4B:2E:AE:5F:BD:D8:EC:E2:47:25:D2:D8:82:C5:9E:1F
Authority key identifier: 6A:8E:DD:A2:F2:1C:88:5F:BE:67:28:62:18:B8:31:8D:6A:D2:38:96
Certificate issuer: /CN=6a8edda2f21c885fbe67286218b8318d6ad23896
Certificate serial: 019FAB63B1A569A2FA568CBC58401184D654
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ao7dovIciF--ZyhiGLgxjWrSOJY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/6db797-a3d3-4241-903a-0c66840198d0/1/ao7dovIciF--ZyhiGLgxjWrSOJY.mft
Manifest number: 0C8D
Signing time: Wed 29 Jul 2026 01:01:05 +0000
Manifest this update: Wed 29 Jul 2026 01:01:05 +0000
Manifest next update: Thu 30 Jul 2026 01:01:05 +0000
Files and hashes: 1: IMvi_cxz_R-ayNNId6HH2kVVpAQ.roa (hash: 6IK4Qty1bIRA82kzLZxrqtFW3xfyNSEpnkEntDA5sT8=)
2: XGNpEJyZ5ofWurDz4XnNulUh5Qc.roa (hash: ApJMkAtwvgFPQPDi80cwWPLVrZBQ049k8CTijiz27yI=)
3: ao7dovIciF--ZyhiGLgxjWrSOJY.crl (hash: RFdbRFbg9SaJHwcJSQIYgumsjd1hfK1QvQcVfwj5xFs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/6db797-a3d3-4241-903a-0c66840198d0/1/ao7dovIciF--ZyhiGLgxjWrSOJY.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/6db797-a3d3-4241-903a-0c66840198d0/1/ao7dovIciF--ZyhiGLgxjWrSOJY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ao7dovIciF--ZyhiGLgxjWrSOJY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:63:b1:a5:69:a2:fa:56:8c:bc:58:40:11:84:d6:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a8edda2f21c885fbe67286218b8318d6ad23896
Validity
Not Before: Jul 29 01:01:05 2026 GMT
Not After : Jul 30 01:01:05 2026 GMT
Subject: CN=ff163c3f4b2eae5fbdd8ece24725d2d882c59e1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:bd:41:fd:ff:7f:02:f9:b1:6f:50:c5:e7:c0:
b4:3a:5f:5c:2d:b0:23:3c:a3:8d:44:9c:6b:02:de:
4c:f3:3a:fd:b7:62:b8:67:b0:09:5c:a0:75:39:c3:
ce:b3:76:5c:eb:43:27:35:a1:6d:08:a6:0d:eb:55:
a9:4e:17:66:14:0b:c4:8d:c5:6e:68:cc:c3:cf:ba:
8f:2b:e7:25:23:d5:73:8a:11:ba:54:dd:6c:7f:aa:
78:90:ff:b8:3f:ea:bd:e5:2d:fd:6a:23:2b:c5:b2:
f3:df:29:aa:d5:7d:2d:37:7f:10:9f:b8:de:7a:de:
10:1f:49:54:69:b6:d4:9d:9e:7e:4d:28:9b:21:5c:
30:e5:92:e1:e5:fd:eb:b9:1d:70:fd:be:8b:89:98:
67:0f:15:75:6c:b2:59:55:f9:7a:a7:f2:31:d7:4d:
cb:d4:58:6c:e7:26:c6:a6:11:6c:f5:97:90:c1:52:
81:1f:4f:e1:86:41:3e:31:48:77:36:53:f1:14:6f:
62:ff:fd:15:4a:8c:15:13:bd:b9:04:7f:db:5c:a4:
3c:f6:45:fb:c7:18:80:ed:1e:eb:78:b8:cc:7e:16:
69:6a:06:57:a0:55:12:56:a5:32:6d:c6:44:c1:dc:
08:5b:38:f2:8b:fc:d5:1b:fe:58:f7:93:30:59:09:
d3:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:16:3C:3F:4B:2E:AE:5F:BD:D8:EC:E2:47:25:D2:D8:82:C5:9E:1F
X509v3 Authority Key Identifier:
keyid:6A:8E:DD:A2:F2:1C:88:5F:BE:67:28:62:18:B8:31:8D:6A:D2:38:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ao7dovIciF--ZyhiGLgxjWrSOJY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/6db797-a3d3-4241-903a-0c66840198d0/1/ao7dovIciF--ZyhiGLgxjWrSOJY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/6db797-a3d3-4241-903a-0c66840198d0/1/ao7dovIciF--ZyhiGLgxjWrSOJY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:73:91:65:fa:18:91:33:3e:c7:48:55:c8:99:28:c6:0d:e8:
b4:41:f4:d9:79:fa:6d:45:49:98:71:18:e5:7c:b6:6f:3b:5c:
85:4a:6a:f0:e3:72:f8:58:7f:f0:4c:d0:67:e1:6d:d7:b2:a2:
7e:d7:f3:52:a0:34:91:2a:cb:da:52:41:5a:00:71:43:12:5a:
5e:84:94:4e:19:19:a5:ad:f9:30:0f:9b:6c:d3:11:47:92:ae:
48:87:36:22:9a:7d:31:6e:f6:be:8f:02:02:55:00:79:73:b6:
79:f7:40:62:72:a2:cf:e8:ae:23:19:eb:94:93:13:b9:e2:10:
b5:2f:47:d2:b7:8e:1d:ca:51:97:2f:a9:14:41:8b:79:a7:34:
e2:ab:06:26:b3:34:f7:2b:a7:b1:16:55:bf:38:fc:36:68:77:
b4:19:a1:21:e1:a1:7a:d1:24:33:60:64:fb:0a:16:99:85:11:
e4:f5:37:4d:a3:eb:57:0d:38:22:e0:c5:fa:da:fe:c2:12:64:
76:56:41:d6:8d:68:ef:e4:6b:71:e9:bd:a3:d7:d0:c4:f6:12:
4d:d5:a6:94:63:1a:31:33:49:3e:0c:64:5d:2b:15:a9:8e:74:
e2:c1:10:a1:5b:57:c2:8f:ea:01:89:86:1f:81:40:ca:fc:ed:
03:f6:66:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 09:43:59 2026 by rpki-client