Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/53/476139-5661-4697-8b57-424aef67f776/1/roAO3oM7hsSM43BVZwaOuQcksI0.mft
File: roAO3oM7hsSM43BVZwaOuQcksI0.mft (raw, json)
Hash identifier: uLv+AcWw8k9Dhp4+iqiZ8hPc0GbMJ6qoYdRDabuzGYs=
Subject key identifier: E1:B8:79:9C:81:7C:07:7E:DC:1B:DC:ED:7F:25:15:BF:B7:36:B4:BB
Authority key identifier: AE:80:0E:DE:83:3B:86:C4:8C:E3:70:55:67:06:8E:B9:07:24:B0:8D
Certificate issuer: /CN=ae800ede833b86c48ce3705567068eb90724b08d
Certificate serial: 01A0BE0C21837B5B3646ED5F1739DD8BB97A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/roAO3oM7hsSM43BVZwaOuQcksI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/476139-5661-4697-8b57-424aef67f776/1/roAO3oM7hsSM43BVZwaOuQcksI0.mft
Manifest number: 0263
Signing time: Sun 20 Sep 2026 09:01:01 +0000
Manifest this update: Sun 20 Sep 2026 09:01:01 +0000
Manifest next update: Mon 21 Sep 2026 09:01:01 +0000
Files and hashes: 1: 7clbtE8xwhadRQ3A3fwwc0B7Xx8.asa (hash: NSE+naftLaacIKnlx//uMGVJTg2CXO0d6h3CTsIyW90=)
2: ow2bqJhEdDegyshhSjmpEmSiWIE.roa (hash: jvnyA7cvV4BQzNY5m+pTfWf2ZrkK6vyFHIlZGwtJzpk=)
3: roAO3oM7hsSM43BVZwaOuQcksI0.crl (hash: f1YUA49rY8QqzSc/ALmfihgnSetp/KDKUJgtOEHkXi8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/476139-5661-4697-8b57-424aef67f776/1/roAO3oM7hsSM43BVZwaOuQcksI0.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/476139-5661-4697-8b57-424aef67f776/1/roAO3oM7hsSM43BVZwaOuQcksI0.mft
rsync://rpki.ripe.net/repository/DEFAULT/roAO3oM7hsSM43BVZwaOuQcksI0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 05:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:be:0c:21:83:7b:5b:36:46:ed:5f:17:39:dd:8b:b9:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae800ede833b86c48ce3705567068eb90724b08d
Validity
Not Before: Sep 20 09:01:01 2026 GMT
Not After : Sep 21 09:01:01 2026 GMT
Subject: CN=e1b8799c817c077edc1bdced7f2515bfb736b4bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fd:3b:97:18:d6:13:3e:94:26:cf:08:83:c6:b3:
4f:36:39:9f:07:c6:b5:3b:b4:f9:87:5a:b6:3e:8b:
16:f9:fd:49:66:bb:67:b0:9d:12:5e:87:b1:fa:82:
40:e5:36:e5:69:c6:9c:ca:18:bd:82:6b:ce:7e:20:
75:33:f6:c4:11:b0:bc:af:e9:8f:50:c4:e6:c4:d0:
d5:cf:27:08:4f:4f:ff:3f:bc:ec:28:d2:9d:d5:05:
95:b5:c3:d6:c9:c1:36:47:99:11:e0:81:81:b4:c0:
c9:cd:d0:24:c2:ce:87:94:2a:63:58:d9:47:45:38:
41:1a:e8:18:89:41:1e:77:72:77:c5:4f:04:21:86:
28:d3:a4:ba:cb:1a:32:86:9f:d5:83:e0:07:8a:af:
b4:98:30:ae:06:a7:ed:3d:c1:a2:87:5a:b8:fd:ce:
e4:13:4f:77:b6:6a:d9:cb:ae:c5:9b:74:71:27:87:
72:06:21:4f:ed:84:63:40:b6:25:16:ca:54:c0:ee:
14:91:0e:57:bd:e4:8f:0e:7d:a3:78:f7:97:76:3b:
2b:3e:de:af:2e:c7:ea:b7:bb:95:43:24:12:5c:ca:
67:3a:d6:b4:0d:9e:5c:97:61:38:4b:54:ac:35:a5:
01:2b:49:3b:fb:2c:57:04:54:b6:16:fd:d6:ac:69:
4e:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:B8:79:9C:81:7C:07:7E:DC:1B:DC:ED:7F:25:15:BF:B7:36:B4:BB
X509v3 Authority Key Identifier:
keyid:AE:80:0E:DE:83:3B:86:C4:8C:E3:70:55:67:06:8E:B9:07:24:B0:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/roAO3oM7hsSM43BVZwaOuQcksI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/476139-5661-4697-8b57-424aef67f776/1/roAO3oM7hsSM43BVZwaOuQcksI0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/476139-5661-4697-8b57-424aef67f776/1/roAO3oM7hsSM43BVZwaOuQcksI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:ae:23:31:9b:09:74:5e:25:00:89:5e:94:75:a6:75:42:ff:
db:f7:1a:48:be:04:30:69:43:8f:2f:f5:fc:05:76:eb:ba:f8:
b9:dd:0c:e2:5d:8c:e5:ac:6f:d0:f7:35:3a:f6:64:63:c5:cd:
7c:ec:57:9e:85:d3:fd:39:7e:40:b9:f4:55:5e:7c:d8:60:56:
12:35:2e:a4:33:d2:6f:26:62:73:dd:00:17:28:25:2e:ea:ac:
d4:f5:eb:e1:d5:1e:da:27:b2:b2:26:81:ac:fb:2d:de:ba:c8:
fd:68:48:f1:b2:39:6a:f3:90:12:25:fd:4b:69:9e:7b:9e:1d:
02:60:86:e3:5a:d1:5f:f9:4a:a7:4e:10:92:fc:09:36:98:a1:
e0:64:e4:33:23:05:de:ab:48:df:f5:c5:ef:de:5e:e7:bc:91:
47:41:11:bd:2f:e2:7b:7a:95:e8:b6:6d:01:b2:b3:2b:80:fd:
e4:62:f8:47:97:79:a0:e0:8e:b6:cc:e4:3b:d1:e9:e2:8f:ce:
1b:d0:95:01:1a:3a:09:bf:27:e2:fe:dd:1a:cc:ee:37:9f:69:
53:83:80:b5:c6:76:e1:f2:85:10:18:a9:1b:b0:a9:01:37:7a:
d4:5d:c2:54:cc:b1:29:c8:6b:0a:d0:22:c1:61:27:d2:4e:af:
b3:d5:54:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 13:09:18 2026 by rpki-client