Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/d49d52-50b1-4948-b1f7-055a9cad8df7/1/Ao_fcZ1HoQAzRRqDOEptto29Ww8.mft
File: Ao_fcZ1HoQAzRRqDOEptto29Ww8.mft (raw, json)
Hash identifier: Lt1owhwicPZZMzHyGyKec0X8jkIh99CXZvWFpn+yhVI=
Subject key identifier: 98:35:24:F0:A9:A7:9F:1B:BB:1C:93:DF:E4:ED:53:2F:C5:1D:AA:3E
Authority key identifier: 02:8F:DF:71:9D:47:A1:00:33:45:1A:83:38:4A:6D:B6:8D:BD:5B:0F
Certificate issuer: /CN=028fdf719d47a10033451a83384a6db68dbd5b0f
Certificate serial: 019D9818D196ECB0E69E45105DE43DC85094
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ao_fcZ1HoQAzRRqDOEptto29Ww8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/d49d52-50b1-4948-b1f7-055a9cad8df7/1/Ao_fcZ1HoQAzRRqDOEptto29Ww8.mft
Manifest number: 0EC9
Signing time: Thu 16 Apr 2026 21:00:56 +0000
Manifest this update: Thu 16 Apr 2026 21:00:56 +0000
Manifest next update: Fri 17 Apr 2026 21:00:56 +0000
Files and hashes: 1: Ao_fcZ1HoQAzRRqDOEptto29Ww8.crl (hash: l9iyO5XYewL3+umwmBxlmgY3eEcSwngQWquObJyH0y4=)
2: wx4jf3r0v_RD4WGbwjNb9_66YeA.roa (hash: Yg61lLQnPGGlaDhOZEVebkyWouHjvzVXcfasCV97MNE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/d49d52-50b1-4948-b1f7-055a9cad8df7/1/Ao_fcZ1HoQAzRRqDOEptto29Ww8.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/d49d52-50b1-4948-b1f7-055a9cad8df7/1/Ao_fcZ1HoQAzRRqDOEptto29Ww8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ao_fcZ1HoQAzRRqDOEptto29Ww8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 21:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:18:d1:96:ec:b0:e6:9e:45:10:5d:e4:3d:c8:50:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=028fdf719d47a10033451a83384a6db68dbd5b0f
Validity
Not Before: Apr 16 21:00:56 2026 GMT
Not After : Apr 17 21:00:56 2026 GMT
Subject: CN=983524f0a9a79f1bbb1c93dfe4ed532fc51daa3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:00:dc:f9:e5:57:fa:b9:b1:ea:ad:ab:57:86:
d8:a3:df:f8:8c:90:ee:12:4a:db:6c:b4:50:64:20:
42:44:60:b2:75:ed:d2:89:84:61:68:97:ce:f1:82:
1d:56:f9:c0:4a:83:a5:8d:56:8f:81:64:15:96:52:
79:e7:7c:64:5c:9a:2e:2f:3b:f6:e4:bf:ed:01:ea:
e8:b6:f5:2b:18:ea:29:2f:75:77:67:ae:c0:ec:9a:
fa:df:82:70:3b:bc:e8:f1:1f:b2:ba:b1:33:ef:5c:
d1:b7:db:49:3c:ce:dc:3c:71:99:b1:2d:3a:35:ea:
ea:40:22:a5:05:5a:7b:27:08:01:22:1a:8b:37:5f:
19:3e:bc:e3:f7:e9:77:36:b6:d0:3e:77:00:89:91:
b4:94:a8:3b:ce:05:94:d5:0f:f9:5e:27:b6:08:32:
bf:52:ac:b9:d0:63:b9:81:fe:83:d3:39:bf:62:3f:
65:e0:31:43:0f:e5:8b:0b:4e:d2:d3:b1:85:47:46:
4e:f8:03:d7:f0:36:3a:50:80:18:cf:65:46:06:4b:
b1:cf:09:c0:4d:62:9b:83:66:7f:1f:80:69:c6:22:
85:c9:40:f7:44:9f:8d:bb:8f:0d:f4:99:25:fe:92:
fb:ff:9f:f7:58:52:c4:e3:e5:5c:6a:30:68:8e:47:
84:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:35:24:F0:A9:A7:9F:1B:BB:1C:93:DF:E4:ED:53:2F:C5:1D:AA:3E
X509v3 Authority Key Identifier:
keyid:02:8F:DF:71:9D:47:A1:00:33:45:1A:83:38:4A:6D:B6:8D:BD:5B:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ao_fcZ1HoQAzRRqDOEptto29Ww8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/d49d52-50b1-4948-b1f7-055a9cad8df7/1/Ao_fcZ1HoQAzRRqDOEptto29Ww8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/d49d52-50b1-4948-b1f7-055a9cad8df7/1/Ao_fcZ1HoQAzRRqDOEptto29Ww8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:b2:b8:7d:9d:54:6c:c4:82:c7:18:57:eb:82:8e:1b:ca:67:
33:20:d2:da:13:90:59:80:f3:5e:58:2e:67:b5:04:27:13:cc:
14:ac:0c:b8:3b:5c:32:c7:e4:88:b7:83:0f:1f:3f:57:27:0b:
dd:c1:d4:95:eb:f8:81:8f:e8:d3:25:48:73:b6:3c:8c:ab:bb:
51:0a:19:c4:0c:24:f5:17:8a:fa:fd:b9:56:41:7e:95:46:32:
c0:33:99:97:39:95:d1:33:ef:c0:f7:7a:9e:53:8d:fc:43:e0:
ac:8e:68:21:6a:9b:a2:34:57:8b:eb:07:79:c7:28:5c:cf:ec:
2c:8f:d2:92:9c:3d:ba:52:73:98:a8:54:80:5e:58:5f:99:a5:
77:01:15:5f:64:9e:ef:59:46:53:e7:a1:8e:e8:7d:29:73:45:
56:94:02:9a:40:8a:66:c3:0e:aa:dc:1b:26:ca:bc:f7:7d:89:
52:ec:a6:6b:27:1a:36:5e:fd:ca:57:72:2f:ba:8a:a7:09:d4:
26:84:46:93:d5:75:26:94:08:86:94:be:3a:c1:d4:52:c8:5b:
8f:3f:75:68:61:2a:1c:96:0b:a4:c5:26:1a:4c:83:7e:13:cc:
52:73:e0:fc:8e:21:7a:88:ab:58:2f:0c:06:60:f3:43:ca:55:
53:fa:3a:ac
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2YGNGW7LDmnkUQXeQ9yFCUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAyOGZkZjcxOWQ0N2ExMDAzMzQ1MWE4MzM4NGE2ZGI2OGRi
ZDViMGYwHhcNMjYwNDE2MjEwMDU2WhcNMjYwNDE3MjEwMDU2WjAzMTEwLwYDVQQD
Eyg5ODM1MjRmMGE5YTc5ZjFiYmIxYzkzZGZlNGVkNTMyZmM1MWRhYTNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAowDc+eVX+rmx6q2rV4bYo9/4jJDu
EkrbbLRQZCBCRGCyde3SiYRhaJfO8YIdVvnASoOljVaPgWQVllJ553xkXJouLzv2
5L/tAerotvUrGOopL3V3Z67A7Jr634JwO7zo8R+yurEz71zRt9tJPM7cPHGZsS06
NerqQCKlBVp7JwgBIhqLN18ZPrzj9+l3NrbQPncAiZG0lKg7zgWU1Q/5Xie2CDK/
Uqy50GO5gf6D0zm/Yj9l4DFDD+WLC07S07GFR0ZO+APX8DY6UIAYz2VGBkuxzwnA
TWKbg2Z/H4BpxiKFyUD3RJ+Nu48N9Jkl/pL7/5/3WFLE4+VcajBojkeEdwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJg1JPCpp58buxyT3+TtUy/FHao+MB8GA1UdIwQY
MBaAFAKP33GdR6EAM0UagzhKbbaNvVsPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQW9fZmNaMUhvUUF6UlJxRE9FcHR0bzI5V3c4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi9kNDlkNTItNTBiMS00OTQ4LWIxZjct
MDU1YTljYWQ4ZGY3LzEvQW9fZmNaMUhvUUF6UlJxRE9FcHR0bzI5V3c4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYi9kNDlkNTItNTBiMS00OTQ4LWIxZjctMDU1YTljYWQ4ZGY3
LzEvQW9fZmNaMUhvUUF6UlJxRE9FcHR0bzI5V3c4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL7K4fZ1U
bMSCxxhX64KOG8pnMyDS2hOQWYDzXlguZ7UEJxPMFKwMuDtcMsfkiLeDDx8/VycL
3cHUlev4gY/o0yVIc7Y8jKu7UQoZxAwk9ReK+v25VkF+lUYywDOZlzmV0TPvwPd6
nlON/EPgrI5oIWqbojRXi+sHeccoXM/sLI/Skpw9ulJzmKhUgF5YX5mldwEVX2Se
71lGU+ehjuh9KXNFVpQCmkCKZsMOqtwbJsq8932JUuymaycaNl79yldyL7qKpwnU
JoRGk9V1JpQIhpS+OsHUUshbjz91aGEqHJYLpMUmGkyDfhPMUnPg/I4heoirWC8M
BmDzQ8pVU/o6rA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 05:01:17 2026 by rpki-client