Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/1c24ad-24b4-4c98-a659-592c0dcdaf79/1/AoOoxpomMM2Pb6cK8qU_4BnyzAc.mft
File: AoOoxpomMM2Pb6cK8qU_4BnyzAc.mft (raw, json)
Hash identifier: UJiLVlgO+IzfYHzf0K+ztyfVDwBF0tdTeYJuwp2N770=
Subject key identifier: 62:51:7F:FF:AE:F7:89:0D:DB:90:8E:D8:8E:92:FA:92:BB:FF:70:07
Authority key identifier: 02:83:A8:C6:9A:26:30:CD:8F:6F:A7:0A:F2:A5:3F:E0:19:F2:CC:07
Certificate issuer: /CN=0283a8c69a2630cd8f6fa70af2a53fe019f2cc07
Certificate serial: 019D9A3E76326021BF559E79D9C3DED65CAA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AoOoxpomMM2Pb6cK8qU_4BnyzAc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/1c24ad-24b4-4c98-a659-592c0dcdaf79/1/AoOoxpomMM2Pb6cK8qU_4BnyzAc.mft
Manifest number: 1680
Signing time: Fri 17 Apr 2026 07:01:17 +0000
Manifest this update: Fri 17 Apr 2026 07:01:17 +0000
Manifest next update: Sat 18 Apr 2026 07:01:17 +0000
Files and hashes: 1: AoOoxpomMM2Pb6cK8qU_4BnyzAc.crl (hash: NLO5Re+40vi4TRyEKYBWpzpH+ubDxizh4zju5DqmJlo=)
2: JZoFu5TMtgO6GAifQLMq6mNbzQk.roa (hash: NCchRFVvR+s9twFKa/UkTDiMQ9XBI45G1DwlByTQ0pE=)
3: aihBYA5xplYmWfW8AOuewemRnFY.roa (hash: wUPGbJwm1otYE0/5qPkx6y5JVuMAsf3lCIi1krAa/d8=)
4: gtbETOybprgnBnsdOcXReqiJdJg.roa (hash: MHBLEVDbm/5/3P4t1AJ9tw9OGawy0RxaBcMDfw8zw9M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/1c24ad-24b4-4c98-a659-592c0dcdaf79/1/AoOoxpomMM2Pb6cK8qU_4BnyzAc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/1c24ad-24b4-4c98-a659-592c0dcdaf79/1/AoOoxpomMM2Pb6cK8qU_4BnyzAc.mft
rsync://rpki.ripe.net/repository/DEFAULT/AoOoxpomMM2Pb6cK8qU_4BnyzAc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3e:76:32:60:21:bf:55:9e:79:d9:c3:de:d6:5c:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0283a8c69a2630cd8f6fa70af2a53fe019f2cc07
Validity
Not Before: Apr 17 07:01:17 2026 GMT
Not After : Apr 18 07:01:17 2026 GMT
Subject: CN=62517fffaef7890ddb908ed88e92fa92bbff7007
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:b7:cb:46:07:ee:19:0b:cf:a5:e1:aa:4b:b9:
33:bc:89:3f:49:c5:88:69:fc:0a:53:49:32:78:d9:
8f:75:5a:de:10:9f:52:17:65:b8:e7:08:a5:8a:b2:
b4:89:bf:46:60:44:fb:1e:a6:ce:76:9c:f1:f0:fa:
75:3a:bb:06:89:00:23:3e:d6:83:d3:85:72:4d:c4:
4f:ed:83:7e:5e:fc:58:cd:41:ed:1a:37:54:a2:cf:
9e:47:f9:45:57:2b:2b:da:c5:ba:89:b4:87:63:8d:
17:6e:ce:af:a4:c1:db:db:f3:bc:a4:56:90:06:c1:
ee:f3:cf:f2:6f:ba:0f:81:8a:59:9b:09:d6:af:f1:
5d:88:b1:46:b2:2a:b3:4c:8d:be:f3:df:d8:ad:cc:
14:45:77:fc:e2:f5:60:e6:24:ad:ab:dd:51:df:50:
05:72:a0:63:09:e8:3d:4f:80:70:b0:ee:f8:c6:0c:
dd:ca:d5:6a:bc:b6:d0:6a:80:e6:6e:14:3a:c8:68:
9c:9f:7d:7f:bb:0e:33:8a:c9:f2:43:64:ab:c4:31:
09:a7:69:be:32:5b:94:b3:ed:29:b5:dd:4e:9b:7f:
77:d6:06:a5:06:8d:91:a6:9e:d9:ab:b0:f2:03:c8:
d7:cc:dd:05:33:bb:b0:b1:3d:ad:56:49:a2:db:96:
7c:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:51:7F:FF:AE:F7:89:0D:DB:90:8E:D8:8E:92:FA:92:BB:FF:70:07
X509v3 Authority Key Identifier:
keyid:02:83:A8:C6:9A:26:30:CD:8F:6F:A7:0A:F2:A5:3F:E0:19:F2:CC:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AoOoxpomMM2Pb6cK8qU_4BnyzAc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/1c24ad-24b4-4c98-a659-592c0dcdaf79/1/AoOoxpomMM2Pb6cK8qU_4BnyzAc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/1c24ad-24b4-4c98-a659-592c0dcdaf79/1/AoOoxpomMM2Pb6cK8qU_4BnyzAc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:27:58:5a:db:d6:68:93:ab:99:c5:b3:39:0a:a6:a1:eb:b3:
e2:a8:62:df:ad:b9:bc:51:f0:01:6f:9b:7f:87:46:50:7f:1f:
05:0b:1e:d5:82:a8:58:ed:bf:98:23:75:a4:e8:f6:ee:5c:5c:
0f:30:e6:4e:2d:df:d8:30:09:74:6f:8a:f0:16:f8:54:ca:c0:
f1:7d:8b:e9:f4:a3:c6:96:e3:88:3e:a7:53:30:31:28:17:15:
95:70:73:1f:c8:1a:75:97:bb:f1:52:d2:f1:b0:27:2e:61:3c:
c3:80:d7:0a:cf:0c:15:b9:c0:aa:3f:3c:6f:dd:a1:57:b4:4c:
a2:46:60:24:92:61:c0:86:84:da:7d:48:85:d9:40:0a:0a:05:
b2:7a:e5:13:fd:ab:99:5b:79:76:30:f4:82:da:68:16:36:e4:
b7:cf:9a:2e:22:e5:95:0b:5f:eb:10:87:5a:17:d1:92:8e:12:
df:8a:5a:25:eb:db:41:d2:a6:f9:32:da:c8:a1:eb:fd:9a:2f:
70:42:a5:b4:f6:d2:43:7c:95:3b:8c:7e:e7:1d:b8:a9:98:4b:
04:2f:66:bd:d9:03:9d:eb:66:72:43:8e:de:1a:f1:ab:94:fc:
dd:2a:54:01:9c:e4:ce:be:f1:42:65:54:d6:f9:10:04:8a:7a:
74:85:2d:a8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2aPnYyYCG/VZ552cPe1lyqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAyODNhOGM2OWEyNjMwY2Q4ZjZmYTcwYWYyYTUzZmUwMTlm
MmNjMDcwHhcNMjYwNDE3MDcwMTE3WhcNMjYwNDE4MDcwMTE3WjAzMTEwLwYDVQQD
Eyg2MjUxN2ZmZmFlZjc4OTBkZGI5MDhlZDg4ZTkyZmE5MmJiZmY3MDA3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0bfLRgfuGQvPpeGqS7kzvIk/ScWI
afwKU0kyeNmPdVreEJ9SF2W45wilirK0ib9GYET7HqbOdpzx8Pp1OrsGiQAjPtaD
04VyTcRP7YN+XvxYzUHtGjdUos+eR/lFVysr2sW6ibSHY40Xbs6vpMHb2/O8pFaQ
BsHu88/yb7oPgYpZmwnWr/FdiLFGsiqzTI2+89/YrcwURXf84vVg5iStq91R31AF
cqBjCeg9T4BwsO74xgzdytVqvLbQaoDmbhQ6yGicn31/uw4zisnyQ2SrxDEJp2m+
MluUs+0ptd1Om3931galBo2Rpp7Zq7DyA8jXzN0FM7uwsT2tVkmi25Z8SQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGJRf/+u94kN25CO2I6S+pK7/3AHMB8GA1UdIwQY
MBaAFAKDqMaaJjDNj2+nCvKlP+AZ8swHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQW9Pb3hwb21NTTJQYjZjSzhxVV80Qm55ekFjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi8xYzI0YWQtMjRiNC00Yzk4LWE2NTkt
NTkyYzBkY2RhZjc5LzEvQW9Pb3hwb21NTTJQYjZjSzhxVV80Qm55ekFjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMi8xYzI0YWQtMjRiNC00Yzk4LWE2NTktNTkyYzBkY2RhZjc5
LzEvQW9Pb3hwb21NTTJQYjZjSzhxVV80Qm55ekFjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWCdYWtvW
aJOrmcWzOQqmoeuz4qhi3625vFHwAW+bf4dGUH8fBQse1YKoWO2/mCN1pOj27lxc
DzDmTi3f2DAJdG+K8Bb4VMrA8X2L6fSjxpbjiD6nUzAxKBcVlXBzH8gadZe78VLS
8bAnLmE8w4DXCs8MFbnAqj88b92hV7RMokZgJJJhwIaE2n1IhdlACgoFsnrlE/2r
mVt5djD0gtpoFjbkt8+aLiLllQtf6xCHWhfRko4S34paJevbQdKm+TLayKHr/Zov
cEKltPbSQ3yVO4x+5x24qZhLBC9mvdkDnetmckOO3hrxq5T83SpUAZzkzr7xQmVU
1vkQBIp6dIUtqA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 12:15:50 2026 by rpki-client