Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/6db797-a3d3-4241-903a-0c66840198d0/1/ao7dovIciF--ZyhiGLgxjWrSOJY.mft
File: ao7dovIciF--ZyhiGLgxjWrSOJY.mft (raw, json)
Hash identifier: SK9XRx/sb2I64KPDbqzQFa5tNaaGjHzIoGKgtPPksro=
Subject key identifier: 1E:63:4F:DA:8A:83:BA:B3:49:4F:04:38:09:44:69:47:E1:83:95:04
Authority key identifier: 6A:8E:DD:A2:F2:1C:88:5F:BE:67:28:62:18:B8:31:8D:6A:D2:38:96
Certificate issuer: /CN=6a8edda2f21c885fbe67286218b8318d6ad23896
Certificate serial: 019CAC0FE4E052C8F1E5B1E5F9764A6D51D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ao7dovIciF--ZyhiGLgxjWrSOJY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/6db797-a3d3-4241-903a-0c66840198d0/1/ao7dovIciF--ZyhiGLgxjWrSOJY.mft
Manifest number: 0AFA
Signing time: Mon 02 Mar 2026 01:00:48 +0000
Manifest this update: Mon 02 Mar 2026 01:00:48 +0000
Manifest next update: Tue 03 Mar 2026 01:00:48 +0000
Files and hashes: 1: 0Uw7FccfKNxCjGPf2hVBJgYjK_8.roa (hash: QBA3BhIvae4UDpBmnAlSgFNKaZRBT/P3+nkHLfuA2WE=)
2: 5PKpxbjzQTcMRVXd3V65NrZpjbU.roa (hash: G2QqltWnjrOjGGa9OTf7TSLmfjW8TR4ivagT+kd4cyI=)
3: XGNpEJyZ5ofWurDz4XnNulUh5Qc.roa (hash: ApJMkAtwvgFPQPDi80cwWPLVrZBQ049k8CTijiz27yI=)
4: ao7dovIciF--ZyhiGLgxjWrSOJY.crl (hash: LpvgeH+mOak0cgruK6EylPxZs2s3cSI3Is/lxg95lcg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/6db797-a3d3-4241-903a-0c66840198d0/1/ao7dovIciF--ZyhiGLgxjWrSOJY.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/6db797-a3d3-4241-903a-0c66840198d0/1/ao7dovIciF--ZyhiGLgxjWrSOJY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ao7dovIciF--ZyhiGLgxjWrSOJY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:0f:e4:e0:52:c8:f1:e5:b1:e5:f9:76:4a:6d:51:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a8edda2f21c885fbe67286218b8318d6ad23896
Validity
Not Before: Mar 2 01:00:48 2026 GMT
Not After : Mar 3 01:00:48 2026 GMT
Subject: CN=1e634fda8a83bab3494f043809446947e1839504
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:64:ae:f4:69:ad:3f:51:eb:90:6c:f5:60:c2:
d9:c2:df:12:e3:8a:f2:32:98:46:cc:a8:af:e8:f8:
65:69:c3:d3:2a:ad:14:54:c2:9b:00:22:38:6a:a3:
21:33:3c:7c:4b:64:21:3d:b0:11:11:89:44:b2:fc:
10:7d:69:b7:0b:ba:e4:61:16:45:20:91:f6:87:9a:
b7:cc:ee:fb:88:20:cb:12:68:2e:f6:89:e1:cf:2f:
2a:3f:52:4b:5a:80:a2:b7:e8:93:b9:7f:46:01:07:
f8:f8:7f:f3:64:fb:62:32:2c:5d:91:0a:a6:da:dd:
a0:2c:11:b8:dd:90:ab:57:59:d8:fc:5f:1b:a3:8a:
a2:7c:f6:1a:51:c9:b9:48:71:04:f1:10:0b:e8:61:
75:aa:20:ab:de:10:5e:84:94:f7:f8:20:7c:a3:fe:
d2:43:c9:36:ac:11:3b:fa:d6:21:3b:80:b7:e0:50:
e0:74:cd:47:92:6f:03:0a:1c:c9:cf:7e:bb:37:bb:
bb:67:34:a5:39:ca:16:65:ab:d9:e8:86:2c:10:7b:
50:ed:2c:97:57:f5:8f:17:ed:3d:54:0e:0b:61:37:
57:ed:ff:99:21:9b:41:8a:a7:60:5f:12:2c:04:72:
85:1b:c4:4c:34:5a:dd:b6:92:11:b8:af:15:78:e0:
90:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:63:4F:DA:8A:83:BA:B3:49:4F:04:38:09:44:69:47:E1:83:95:04
X509v3 Authority Key Identifier:
keyid:6A:8E:DD:A2:F2:1C:88:5F:BE:67:28:62:18:B8:31:8D:6A:D2:38:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ao7dovIciF--ZyhiGLgxjWrSOJY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/6db797-a3d3-4241-903a-0c66840198d0/1/ao7dovIciF--ZyhiGLgxjWrSOJY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/6db797-a3d3-4241-903a-0c66840198d0/1/ao7dovIciF--ZyhiGLgxjWrSOJY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:ae:88:70:0d:8d:ff:3c:1d:4f:c3:5f:3e:21:94:50:53:b0:
f0:13:3a:03:e2:d7:c4:51:d8:cd:ee:a2:15:dc:e9:68:f4:ef:
f4:b4:36:2e:42:5a:27:ec:a0:30:d2:06:5e:64:9d:ed:48:d0:
b2:0f:8a:16:46:51:a3:e6:a7:17:5e:1e:79:e7:ee:75:8c:33:
2f:de:24:3b:43:60:93:8a:40:c4:dd:8c:7b:63:05:ab:ad:8d:
94:6e:4b:41:7e:d0:9b:04:29:84:ce:64:ba:92:15:c1:7b:45:
ff:49:f5:97:52:82:c7:53:07:32:8b:d9:b8:0f:d3:b1:b9:67:
17:6e:a7:0a:0f:68:0b:64:0d:1b:89:14:7b:94:46:4f:07:13:
c1:15:fa:f8:f2:b2:11:a8:63:af:a9:5f:8e:9b:d4:da:0a:19:
46:bf:3b:ba:15:a0:ac:28:8e:23:62:db:80:56:83:fb:8b:20:
a8:50:29:72:d4:fc:7a:90:f2:75:7a:98:90:44:4d:ba:88:57:
d6:b4:fd:f3:a9:92:b1:c0:3f:03:b7:55:2d:f4:a9:4e:32:f2:
66:95:70:4a:89:0d:cf:18:09:18:00:3f:36:15:fd:56:61:4d:
1e:fa:ff:16:b7:fc:12:68:6e:ce:25:39:53:4b:84:ec:4f:c8:
f9:c9:85:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:42:36 2026 by rpki-client