Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/6db797-a3d3-4241-903a-0c66840198d0/1/ao7dovIciF--ZyhiGLgxjWrSOJY.mft
File: ao7dovIciF--ZyhiGLgxjWrSOJY.mft (raw, json)
Hash identifier: 254QGkQeQUY2tQvf2fc03DjB7bZSKUpHir7GY9hp1wU=
Subject key identifier: 9D:64:FF:4A:53:64:56:9D:00:95:E5:B1:79:EE:72:B5:AA:57:B0:DC
Authority key identifier: 6A:8E:DD:A2:F2:1C:88:5F:BE:67:28:62:18:B8:31:8D:6A:D2:38:96
Certificate issuer: /CN=6a8edda2f21c885fbe67286218b8318d6ad23896
Certificate serial: 019EC1B6C47986D4EBAB0194AD0E2ACCAA30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ao7dovIciF--ZyhiGLgxjWrSOJY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/6db797-a3d3-4241-903a-0c66840198d0/1/ao7dovIciF--ZyhiGLgxjWrSOJY.mft
Manifest number: 0C14
Signing time: Sat 13 Jun 2026 16:00:40 +0000
Manifest this update: Sat 13 Jun 2026 16:00:40 +0000
Manifest next update: Sun 14 Jun 2026 16:00:40 +0000
Files and hashes: 1: IMvi_cxz_R-ayNNId6HH2kVVpAQ.roa (hash: 6IK4Qty1bIRA82kzLZxrqtFW3xfyNSEpnkEntDA5sT8=)
2: XGNpEJyZ5ofWurDz4XnNulUh5Qc.roa (hash: ApJMkAtwvgFPQPDi80cwWPLVrZBQ049k8CTijiz27yI=)
3: ao7dovIciF--ZyhiGLgxjWrSOJY.crl (hash: NlZ6NWZzvKczL0cCe8MVNVNLQITnwtcJ6Rga5WOW+X0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/6db797-a3d3-4241-903a-0c66840198d0/1/ao7dovIciF--ZyhiGLgxjWrSOJY.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/6db797-a3d3-4241-903a-0c66840198d0/1/ao7dovIciF--ZyhiGLgxjWrSOJY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ao7dovIciF--ZyhiGLgxjWrSOJY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c1:b6:c4:79:86:d4:eb:ab:01:94:ad:0e:2a:cc:aa:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a8edda2f21c885fbe67286218b8318d6ad23896
Validity
Not Before: Jun 13 16:00:40 2026 GMT
Not After : Jun 14 16:00:40 2026 GMT
Subject: CN=9d64ff4a5364569d0095e5b179ee72b5aa57b0dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:46:a9:22:65:34:8e:13:16:fa:81:7a:19:d1:
b1:24:50:7b:75:15:88:43:4b:b6:9c:8f:d9:cf:c3:
8b:14:9f:f9:dc:db:e5:95:21:3e:22:0f:92:86:fe:
e4:4f:5d:4d:83:4b:90:d1:e7:33:94:e8:3c:bf:09:
e9:bd:1b:1b:7a:76:14:a3:df:3e:50:7c:49:ab:64:
cb:b2:20:d5:c8:63:c2:32:94:e4:2c:64:de:b7:be:
d2:50:81:b0:5d:90:3b:40:7b:96:60:9d:45:30:ff:
04:b4:b6:94:b7:fc:11:d4:0c:b4:87:9e:91:c5:dc:
4d:55:4c:43:4e:25:ba:c3:4a:1d:39:65:8f:b5:42:
9b:68:17:43:df:22:13:02:4b:77:66:02:fd:d2:da:
12:a9:fb:1d:6b:48:59:1c:a3:8a:8b:d9:05:20:35:
cd:6b:d4:4a:63:d1:5c:f8:22:d2:60:99:5b:95:c9:
02:c4:5c:7c:de:b6:42:63:1b:4a:17:b8:84:e2:7f:
76:35:bb:d3:b4:9d:e6:6e:b4:02:30:bb:7b:3a:2f:
76:9d:d7:d7:57:df:0a:13:c3:3d:39:91:02:f2:1a:
bf:17:4a:04:1c:51:e1:57:32:b1:85:79:e8:eb:4b:
1d:00:5f:4e:b1:e8:10:f0:d5:26:2c:f3:a3:a1:de:
18:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:64:FF:4A:53:64:56:9D:00:95:E5:B1:79:EE:72:B5:AA:57:B0:DC
X509v3 Authority Key Identifier:
keyid:6A:8E:DD:A2:F2:1C:88:5F:BE:67:28:62:18:B8:31:8D:6A:D2:38:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ao7dovIciF--ZyhiGLgxjWrSOJY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/6db797-a3d3-4241-903a-0c66840198d0/1/ao7dovIciF--ZyhiGLgxjWrSOJY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/6db797-a3d3-4241-903a-0c66840198d0/1/ao7dovIciF--ZyhiGLgxjWrSOJY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:04:58:d6:7e:3c:a6:67:09:57:33:8e:2d:35:d6:53:30:7e:
8f:4b:a7:7d:96:94:7f:05:bb:e9:7b:02:43:9f:cd:17:39:2c:
2b:be:0f:4b:df:64:31:5b:df:7d:cd:82:84:0a:3d:d1:5e:81:
2b:cd:f2:3d:b6:83:b1:4f:ff:dc:5d:10:3f:b0:91:26:fc:45:
e8:02:6b:e8:30:71:a2:f7:cc:25:83:46:de:9d:d1:f8:86:a7:
64:a1:c6:e6:1d:d9:29:51:31:4c:bd:89:60:82:e0:01:c0:5e:
56:11:10:1f:84:38:11:84:c2:ee:89:d7:e2:33:d7:23:a2:42:
f6:34:e7:f8:ac:e1:f6:df:9b:f8:6c:39:7c:89:7a:09:04:0b:
30:8c:bb:fc:7a:15:94:85:de:1c:d8:97:6b:71:0b:d8:91:c6:
4d:6d:44:e2:9a:4b:6f:7e:c7:6f:dc:2b:0e:9e:6e:83:65:3a:
2d:71:7a:f3:2a:57:3e:32:13:03:06:d4:d8:e1:6c:6f:30:bb:
31:0c:64:51:64:cb:66:14:26:49:a8:bc:4b:5a:90:87:9c:13:
ef:61:d0:6b:e1:41:5e:2c:e6:d0:1c:cb:0b:c1:58:76:a3:4e:
11:e4:72:0a:8b:1d:a8:52:09:89:06:b3:a7:09:c0:63:37:77:
85:8f:53:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 23:30:53 2026 by rpki-client