Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/476139-5661-4697-8b57-424aef67f776/1/roAO3oM7hsSM43BVZwaOuQcksI0.mft
File: roAO3oM7hsSM43BVZwaOuQcksI0.mft (raw, json)
Hash identifier: /IkHFOQYMfU30InzxYXfkL/ulAn4mD7HMseaNGAGULc=
Subject key identifier: 11:0F:42:8F:FD:58:EA:22:AF:45:D0:BC:E3:BD:46:1C:C7:74:F7:DE
Authority key identifier: AE:80:0E:DE:83:3B:86:C4:8C:E3:70:55:67:06:8E:B9:07:24:B0:8D
Certificate issuer: /CN=ae800ede833b86c48ce3705567068eb90724b08d
Certificate serial: 019EBE4824F8BF7CB66CB2BEE67C4848C742
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/roAO3oM7hsSM43BVZwaOuQcksI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/476139-5661-4697-8b57-424aef67f776/1/roAO3oM7hsSM43BVZwaOuQcksI0.mft
Manifest number: 0159
Signing time: Sat 13 Jun 2026 00:00:59 +0000
Manifest this update: Sat 13 Jun 2026 00:00:59 +0000
Manifest next update: Sun 14 Jun 2026 00:00:59 +0000
Files and hashes: 1: 7clbtE8xwhadRQ3A3fwwc0B7Xx8.asa (hash: NSE+naftLaacIKnlx//uMGVJTg2CXO0d6h3CTsIyW90=)
2: ZL2C4Xh3gk3HxtfjXSTbvl0b7Eg.roa (hash: RUoJ7koe3OvwmkZQ+5gWyWMHICJts5yQk65pg7WzrdM=)
3: roAO3oM7hsSM43BVZwaOuQcksI0.crl (hash: QRR1Q0myACBXlWzV15PuULyFrJuqcnfCSIweHOUUf2w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/476139-5661-4697-8b57-424aef67f776/1/roAO3oM7hsSM43BVZwaOuQcksI0.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/476139-5661-4697-8b57-424aef67f776/1/roAO3oM7hsSM43BVZwaOuQcksI0.mft
rsync://rpki.ripe.net/repository/DEFAULT/roAO3oM7hsSM43BVZwaOuQcksI0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 00:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:be:48:24:f8:bf:7c:b6:6c:b2:be:e6:7c:48:48:c7:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae800ede833b86c48ce3705567068eb90724b08d
Validity
Not Before: Jun 13 00:00:59 2026 GMT
Not After : Jun 14 00:00:59 2026 GMT
Subject: CN=110f428ffd58ea22af45d0bce3bd461cc774f7de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:62:36:af:20:61:63:00:d7:b7:09:d2:08:c1:
a7:c7:70:c6:98:67:cb:75:08:96:bd:e4:b2:39:69:
b8:80:77:87:6a:8c:1c:3e:b1:12:d6:72:ec:77:17:
95:03:1c:ab:43:25:67:ec:c6:ce:a0:8a:14:c7:c1:
c7:dc:89:c8:7b:ed:e0:3f:be:42:07:b4:cf:bb:47:
1c:97:cb:6c:1b:7b:16:91:d5:03:57:ba:cb:e0:b9:
f3:42:cc:32:26:ef:dd:3d:f1:71:e2:37:77:9c:90:
80:31:4f:c0:ad:38:0d:e7:4d:10:9a:fd:a2:0e:2a:
d4:9a:c4:c0:63:60:04:c3:6a:ec:69:8f:f2:43:8b:
d1:35:c4:f0:0e:e1:78:d2:3d:07:64:ce:d1:1e:95:
4b:4d:4a:c2:02:e6:7b:1c:10:55:5e:3f:59:59:a2:
a5:0a:e4:e4:de:7f:01:68:28:5f:a9:58:a6:86:fc:
1a:9e:c7:68:9b:eb:23:a1:8d:9b:9d:5d:9a:79:9d:
b0:f3:ed:b0:c0:f7:92:a2:6d:d2:74:5b:12:cb:73:
f3:27:71:15:99:f1:46:e2:b8:0c:2b:b4:0f:45:1a:
9b:de:85:03:97:3b:06:0b:dc:27:fa:42:48:57:d9:
02:d6:63:78:76:7d:34:18:e3:f4:b2:f0:06:f2:a9:
b0:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:0F:42:8F:FD:58:EA:22:AF:45:D0:BC:E3:BD:46:1C:C7:74:F7:DE
X509v3 Authority Key Identifier:
keyid:AE:80:0E:DE:83:3B:86:C4:8C:E3:70:55:67:06:8E:B9:07:24:B0:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/roAO3oM7hsSM43BVZwaOuQcksI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/476139-5661-4697-8b57-424aef67f776/1/roAO3oM7hsSM43BVZwaOuQcksI0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/476139-5661-4697-8b57-424aef67f776/1/roAO3oM7hsSM43BVZwaOuQcksI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:a8:77:7a:4f:62:08:b1:57:0d:a1:18:04:6f:a2:72:3a:12:
7a:71:22:05:5b:88:0a:dc:14:60:de:c5:39:28:63:72:75:94:
5e:3c:05:cd:00:55:fc:3c:a4:ea:8e:b1:38:b6:58:1e:52:d2:
b1:fc:52:87:d8:78:73:a4:68:5e:a8:ca:2f:52:49:7f:d0:e1:
d5:32:0a:88:28:e6:b7:09:e2:c8:dd:28:d7:8f:02:29:d6:98:
17:dd:4b:88:01:d9:d2:2f:6f:a3:2c:2d:c2:55:1e:81:83:ce:
1b:37:bc:fb:7c:19:02:f3:17:8f:46:60:43:9c:2c:73:f9:19:
73:ca:dc:e3:f5:ff:38:65:c1:cb:d9:40:97:96:41:4b:97:d0:
48:83:8f:2f:18:f1:c8:d6:87:8e:f3:48:d0:18:c8:ce:f1:c0:
94:64:c5:ae:07:5a:0a:43:5f:70:85:7d:01:53:17:54:5f:4e:
3f:6f:9f:cd:04:6f:78:3e:e5:4c:75:03:ac:1d:16:dc:38:87:
b2:e1:ba:e7:f8:b5:a7:0e:73:ae:bc:9d:1b:bd:0d:14:01:d3:
a7:cb:af:e4:9e:36:1d:e9:fb:36:12:2f:c9:1b:93:4a:ba:2c:
5e:e2:d4:99:c9:7f:25:42:23:be:41:52:90:f1:d8:0a:48:84:
ac:a2:9c:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:36:30 2026 by rpki-client