Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4a/6db797-a3d3-4241-903a-0c66840198d0/1/ao7dovIciF--ZyhiGLgxjWrSOJY.mft
File: ao7dovIciF--ZyhiGLgxjWrSOJY.mft (raw, json)
Hash identifier: nN68XaDvSsrgfNyQBJPMrFK9DvQ12/Sw1zlNBPHQxVo=
Subject key identifier: 7A:43:02:44:9F:08:63:D5:DD:38:3C:47:DE:B3:5B:27:CC:D3:C3:C6
Authority key identifier: 6A:8E:DD:A2:F2:1C:88:5F:BE:67:28:62:18:B8:31:8D:6A:D2:38:96
Certificate issuer: /CN=6a8edda2f21c885fbe67286218b8318d6ad23896
Certificate serial: 01A112602BD27CFAAF4004BD8B7003092729
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ao7dovIciF--ZyhiGLgxjWrSOJY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/6db797-a3d3-4241-903a-0c66840198d0/1/ao7dovIciF--ZyhiGLgxjWrSOJY.mft
Manifest number: 0D48
Signing time: Tue 06 Oct 2026 18:00:54 +0000
Manifest this update: Tue 06 Oct 2026 18:00:54 +0000
Manifest next update: Wed 07 Oct 2026 18:00:54 +0000
Files and hashes: 1: 4Ju3VaQ4C6q0qWM27SQOg0xG0LY.roa (hash: CXJhJHQ7ol0fZjsffI02dL1cMgtuyDC/aOoAbGch63A=)
2: ao7dovIciF--ZyhiGLgxjWrSOJY.crl (hash: Z1clFl4WUKV+b5+xZwAHk/XqxP7OsQAyC/2DYrovZ8E=)
3: oA31tgyLZdN2czm4RB3Kz9g85HU.roa (hash: OyiWBOPqWwEUSj8ktxk8sZ34jz/J/+HAdPgWkshrJgs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/6db797-a3d3-4241-903a-0c66840198d0/1/ao7dovIciF--ZyhiGLgxjWrSOJY.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/6db797-a3d3-4241-903a-0c66840198d0/1/ao7dovIciF--ZyhiGLgxjWrSOJY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ao7dovIciF--ZyhiGLgxjWrSOJY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 Oct 2026 18:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:12:60:2b:d2:7c:fa:af:40:04:bd:8b:70:03:09:27:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a8edda2f21c885fbe67286218b8318d6ad23896
Validity
Not Before: Oct 6 18:00:54 2026 GMT
Not After : Oct 7 18:00:54 2026 GMT
Subject: CN=7a4302449f0863d5dd383c47deb35b27ccd3c3c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:6d:36:96:79:36:9d:4a:44:aa:30:31:52:80:
84:5b:90:ad:47:d7:88:60:a8:c9:61:54:b0:f7:15:
b4:ea:73:67:a2:24:4f:db:87:e2:b7:0e:a8:42:09:
56:7d:b4:70:13:ae:a7:7a:66:2a:b7:3e:bb:2b:db:
93:25:ab:80:5b:04:2a:42:6a:f3:71:12:c5:af:0c:
b4:40:4c:af:eb:d0:8d:6c:bc:4f:e2:14:a1:41:ef:
b3:cd:f0:a8:50:c3:24:68:50:fc:c2:9a:8e:ba:10:
ed:4e:de:3a:5d:f3:71:c7:d7:f6:78:6d:7e:d6:49:
65:88:c0:bd:88:3e:33:c5:d9:2d:a5:8a:e9:6b:e9:
2f:20:ef:b9:37:c0:33:73:94:f8:f3:5d:a2:f3:55:
3c:6f:58:4a:fc:fc:87:e8:3d:d1:1b:e3:8a:78:41:
a2:11:0a:84:6a:53:c2:63:d5:c8:db:e3:2a:d6:47:
d4:2a:eb:6f:0b:6a:dd:80:26:8d:d8:d7:8a:7d:87:
80:68:50:80:be:e3:3e:37:ce:e6:54:0a:ec:91:ec:
dc:b7:dc:b0:c8:63:4e:40:b5:ba:78:74:2b:40:b9:
cd:ce:c1:76:49:38:a6:ea:fc:2d:12:bb:d5:c6:ff:
65:25:6c:a5:5f:8d:ac:5b:c8:84:5d:20:ea:89:52:
81:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:43:02:44:9F:08:63:D5:DD:38:3C:47:DE:B3:5B:27:CC:D3:C3:C6
X509v3 Authority Key Identifier:
keyid:6A:8E:DD:A2:F2:1C:88:5F:BE:67:28:62:18:B8:31:8D:6A:D2:38:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ao7dovIciF--ZyhiGLgxjWrSOJY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/6db797-a3d3-4241-903a-0c66840198d0/1/ao7dovIciF--ZyhiGLgxjWrSOJY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/6db797-a3d3-4241-903a-0c66840198d0/1/ao7dovIciF--ZyhiGLgxjWrSOJY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:f1:9c:71:55:88:b7:00:9a:35:87:38:ce:a8:17:6a:86:8d:
73:fe:c7:ac:d0:c2:19:2c:33:2c:13:30:f1:a8:29:61:50:44:
b5:1c:4b:69:d1:4b:03:91:e7:b0:c6:64:b3:f1:c8:46:47:38:
15:da:ac:77:d3:2e:02:5d:ef:55:f2:58:50:fe:fe:e9:ac:85:
a7:0a:93:ec:a9:db:37:54:b3:3e:cc:f8:df:f2:37:a5:a0:a0:
0d:81:1d:4a:36:e6:0b:37:f8:a5:fc:a7:66:07:d3:ba:97:8c:
1c:11:07:e9:4e:a3:cb:03:ac:ec:4d:d6:8e:fe:2b:e8:2b:4c:
4b:0c:ec:83:c6:27:26:be:a3:d4:25:0b:58:55:99:6a:b1:fb:
ee:c1:c0:23:57:cd:71:d6:c3:5f:fb:c9:86:6f:9d:5d:64:03:
71:bb:51:86:dc:9b:cb:74:7b:ba:9e:e4:54:4f:e1:00:eb:08:
00:40:86:e8:95:78:23:cc:cd:74:91:66:b3:ca:16:0d:5c:61:
81:39:74:d1:9f:73:9b:54:07:ad:4a:06:1e:2c:e1:d3:98:0f:
f7:61:63:7a:1d:e9:01:94:0a:fa:05:dc:7b:b4:8d:f3:a0:68:
30:12:79:56:0d:b3:77:ce:7f:ff:75:2b:d6:72:43:da:a0:9d:
c7:91:a2:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 00:33:55 2026 by rpki-client