Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/476139-5661-4697-8b57-424aef67f776/1/roAO3oM7hsSM43BVZwaOuQcksI0.mft
File: roAO3oM7hsSM43BVZwaOuQcksI0.mft (raw, json)
Hash identifier: 3KtCSixxQM3hhPNnp4wKEPvN9ysrCV0/GBS18GF2i+A=
Subject key identifier: 5E:EA:A1:5C:CA:0A:AB:47:70:A8:2A:F7:62:45:B1:74:E0:2E:86:D0
Authority key identifier: AE:80:0E:DE:83:3B:86:C4:8C:E3:70:55:67:06:8E:B9:07:24:B0:8D
Certificate issuer: /CN=ae800ede833b86c48ce3705567068eb90724b08d
Certificate serial: 019CA9EBA16B3108263DDE2B3AD115857565
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/roAO3oM7hsSM43BVZwaOuQcksI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/476139-5661-4697-8b57-424aef67f776/1/roAO3oM7hsSM43BVZwaOuQcksI0.mft
Manifest number: 43
Signing time: Sun 01 Mar 2026 15:01:57 +0000
Manifest this update: Sun 01 Mar 2026 15:01:57 +0000
Manifest next update: Mon 02 Mar 2026 15:01:57 +0000
Files and hashes: 1: ZL2C4Xh3gk3HxtfjXSTbvl0b7Eg.roa (hash: RUoJ7koe3OvwmkZQ+5gWyWMHICJts5yQk65pg7WzrdM=)
2: roAO3oM7hsSM43BVZwaOuQcksI0.crl (hash: OeVJd/EUfRBEOyDW79TnwdEg25thERooOzprz3fHYgc=)
3: xjRDHoH9VVkWUDWO-Ry0GGyawd4.asa (hash: pNAcDhF+yibOyjLObi256DsJ9lWEYID4S1FBHePgXgs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/476139-5661-4697-8b57-424aef67f776/1/roAO3oM7hsSM43BVZwaOuQcksI0.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/476139-5661-4697-8b57-424aef67f776/1/roAO3oM7hsSM43BVZwaOuQcksI0.mft
rsync://rpki.ripe.net/repository/DEFAULT/roAO3oM7hsSM43BVZwaOuQcksI0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:eb:a1:6b:31:08:26:3d:de:2b:3a:d1:15:85:75:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae800ede833b86c48ce3705567068eb90724b08d
Validity
Not Before: Mar 1 15:01:57 2026 GMT
Not After : Mar 2 15:01:57 2026 GMT
Subject: CN=5eeaa15cca0aab4770a82af76245b174e02e86d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:49:fc:55:37:c6:fc:9c:a8:4a:92:13:17:ab:
e2:58:33:fc:61:38:ec:8a:da:cc:94:32:f7:18:39:
2a:79:ea:c0:ed:2a:1d:5b:4f:48:93:72:1f:e8:f4:
df:14:ba:9b:18:8e:82:7e:14:e0:be:0d:f0:e1:21:
90:b1:15:20:f8:bc:66:54:e8:76:78:d7:44:0a:53:
df:1e:57:5b:bb:1a:6f:a2:31:87:e4:8d:af:16:e0:
68:de:58:18:ad:e0:75:9c:4d:3e:11:69:30:95:aa:
a1:ad:af:f2:7b:bb:52:ef:b3:ed:d3:36:75:9b:fb:
1d:6e:a8:54:38:26:ce:ff:bd:55:7f:8b:96:ab:16:
f1:cd:02:23:63:61:48:e5:39:29:51:ca:c5:21:fe:
9a:c9:b3:da:2d:86:57:1e:2f:03:d8:66:84:6d:87:
9f:e4:6f:2c:6e:d7:12:bc:ab:87:1e:f1:20:35:8a:
aa:64:28:3b:41:9f:84:a3:70:0b:95:4b:0d:dc:c2:
7a:bf:32:9d:f1:be:02:eb:56:35:b9:41:95:b7:06:
71:5f:e2:70:51:db:d8:27:32:c9:2b:33:9a:3f:4e:
c3:12:dc:50:8e:7a:02:bb:e8:90:f7:76:ce:21:9f:
12:bd:83:7d:25:b4:ef:b2:e4:d2:57:9e:6c:a3:31:
33:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:EA:A1:5C:CA:0A:AB:47:70:A8:2A:F7:62:45:B1:74:E0:2E:86:D0
X509v3 Authority Key Identifier:
keyid:AE:80:0E:DE:83:3B:86:C4:8C:E3:70:55:67:06:8E:B9:07:24:B0:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/roAO3oM7hsSM43BVZwaOuQcksI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/476139-5661-4697-8b57-424aef67f776/1/roAO3oM7hsSM43BVZwaOuQcksI0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/476139-5661-4697-8b57-424aef67f776/1/roAO3oM7hsSM43BVZwaOuQcksI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c8:d8:18:e9:24:1f:83:af:e5:61:07:02:da:37:7f:de:6e:ff:
36:23:db:16:ab:d9:ef:a6:6f:b7:f5:36:e9:10:b6:a1:0d:5f:
75:7e:51:7f:df:e2:50:e1:d8:c4:25:29:5f:2a:ed:03:fe:1a:
e9:c8:e6:13:81:19:85:76:e5:a9:10:55:17:c1:7b:3e:e8:40:
fe:ee:d9:90:b5:6c:8f:b7:18:89:a0:46:ff:f5:23:54:11:51:
42:a6:dd:c8:61:86:62:33:b9:31:22:91:3d:92:81:28:8e:66:
95:2c:4d:62:f7:13:e6:ef:c9:3f:94:ae:a5:3d:a6:f5:ed:5c:
1e:1c:9a:37:df:3f:39:06:d5:22:51:9d:df:87:8e:2e:c0:eb:
58:f0:bb:7d:d6:b1:7a:cc:a7:68:54:51:d4:fe:c4:d9:b2:e7:
20:8e:66:4f:62:45:8c:18:eb:1e:45:45:78:e3:6e:87:9f:f1:
c1:3f:68:87:e5:0c:09:09:58:6e:bd:95:58:88:0a:a9:9b:5d:
47:70:c9:07:51:74:3c:c8:e0:6c:b0:d6:84:58:ad:48:66:11:
e5:a5:88:cc:bb:66:99:79:48:88:04:e7:fc:5f:5a:95:97:9a:
19:6c:be:f0:99:99:65:75:d3:f8:ab:38:76:32:3d:b3:a0:94:
f4:b0:7b:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:50:28 2026 by rpki-client