Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/cce012-2cb9-4be6-a1b6-d5167e6756b6/1/o_AJmtht2ENOUvjG_d7rLD7Wxso.mft
File: o_AJmtht2ENOUvjG_d7rLD7Wxso.mft (raw, json)
Hash identifier: hpKizDWzx1AUtLIzn0m4BVZ7VIM2WK07Dp7q7pVn7UQ=
Subject key identifier: CA:C2:11:AB:10:67:E7:E6:63:7E:FF:95:99:18:65:CC:81:A6:38:9A
Authority key identifier: A3:F0:09:9A:D8:6D:D8:43:4E:52:F8:C6:FD:DE:EB:2C:3E:D6:C6:CA
Certificate issuer: /CN=a3f0099ad86dd8434e52f8c6fddeeb2c3ed6c6ca
Certificate serial: 019CAAC5FD97E470C2C33826E5495BCC36DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o_AJmtht2ENOUvjG_d7rLD7Wxso.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/cce012-2cb9-4be6-a1b6-d5167e6756b6/1/o_AJmtht2ENOUvjG_d7rLD7Wxso.mft
Manifest number: 0D73
Signing time: Sun 01 Mar 2026 19:00:28 +0000
Manifest this update: Sun 01 Mar 2026 19:00:28 +0000
Manifest next update: Mon 02 Mar 2026 19:00:28 +0000
Files and hashes: 1: h1nd4Qn-NC3F4blTzKUQQVdDcGU.roa (hash: lz23Y5PvDIkn6cwsXMHaDyiIabMEIIObGoga2OQiexA=)
2: o_AJmtht2ENOUvjG_d7rLD7Wxso.crl (hash: /VkUTFVVmcZ+pQvWWYpzV+WO3oKWfvErNVmb0X9yTzo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/cce012-2cb9-4be6-a1b6-d5167e6756b6/1/o_AJmtht2ENOUvjG_d7rLD7Wxso.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/cce012-2cb9-4be6-a1b6-d5167e6756b6/1/o_AJmtht2ENOUvjG_d7rLD7Wxso.mft
rsync://rpki.ripe.net/repository/DEFAULT/o_AJmtht2ENOUvjG_d7rLD7Wxso.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c5:fd:97:e4:70:c2:c3:38:26:e5:49:5b:cc:36:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3f0099ad86dd8434e52f8c6fddeeb2c3ed6c6ca
Validity
Not Before: Mar 1 19:00:28 2026 GMT
Not After : Mar 2 19:00:28 2026 GMT
Subject: CN=cac211ab1067e7e6637eff95991865cc81a6389a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:52:79:a7:73:ac:37:68:29:9a:4d:de:78:22:
55:ad:0b:c5:d2:8d:1d:21:51:1b:94:1f:65:db:88:
fb:9e:f7:40:fb:d6:e8:99:2d:8e:f1:b7:72:27:78:
b7:e7:6c:21:f5:3a:86:2a:3f:2f:1b:59:e3:d2:fe:
92:38:4d:42:6f:af:35:3b:0a:75:37:d1:80:1c:d9:
c7:f8:ed:64:20:71:2a:7c:6a:e6:38:42:38:d0:c5:
9f:f0:0a:7d:82:92:4a:af:63:ca:a4:d8:8c:bb:09:
37:d7:35:e4:b3:d5:2f:97:8f:90:0a:04:27:64:ec:
96:35:da:11:3d:e1:fd:75:2d:63:3c:9e:7f:e3:3d:
4d:54:01:0f:f6:5a:39:24:f1:b7:60:db:f0:94:46:
f8:4d:f2:29:a5:9d:33:70:64:d7:27:0b:17:77:8c:
ec:71:29:03:78:29:52:a8:cc:db:8b:e3:75:c4:94:
12:23:fd:40:71:f3:da:f4:75:c6:74:5a:4c:b6:fb:
dd:a7:ed:49:f7:ab:65:8f:0c:e6:3a:6a:46:a8:5b:
c9:d5:50:04:be:1f:b3:fb:53:4a:31:03:cb:4a:c0:
fb:c6:ae:fd:df:2e:5e:3e:21:7b:b3:f3:3e:1a:80:
4f:b2:69:96:bb:6f:52:1c:79:03:7e:bc:b9:09:c6:
78:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:C2:11:AB:10:67:E7:E6:63:7E:FF:95:99:18:65:CC:81:A6:38:9A
X509v3 Authority Key Identifier:
keyid:A3:F0:09:9A:D8:6D:D8:43:4E:52:F8:C6:FD:DE:EB:2C:3E:D6:C6:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o_AJmtht2ENOUvjG_d7rLD7Wxso.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/cce012-2cb9-4be6-a1b6-d5167e6756b6/1/o_AJmtht2ENOUvjG_d7rLD7Wxso.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/cce012-2cb9-4be6-a1b6-d5167e6756b6/1/o_AJmtht2ENOUvjG_d7rLD7Wxso.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:23:b8:9d:d5:ac:06:9a:fd:41:bc:33:8a:47:bf:0e:9e:ee:
03:1a:14:90:0d:02:8c:c4:50:c8:ef:f0:af:53:ea:2f:2c:36:
4b:2a:42:e5:a8:bb:85:cf:48:78:6c:45:47:70:1d:13:30:24:
dd:cb:bd:02:86:4e:e3:8a:ac:25:e2:de:37:c8:cc:79:aa:aa:
e0:a8:9f:4e:8a:42:55:5c:2f:fc:91:ac:0a:e9:74:3e:2c:a2:
3c:52:8a:8c:d9:e3:47:a4:82:fa:bb:26:f2:91:65:57:00:10:
31:31:31:cf:c1:a6:ce:44:6b:a2:21:97:16:22:75:29:33:ed:
27:bd:08:e2:01:32:89:95:44:ed:6e:21:d5:39:7e:5b:89:6a:
ff:2a:e9:c0:6e:43:ad:d6:83:e6:a6:45:71:f7:11:ca:1f:e1:
5e:81:c2:e9:fc:44:5e:d6:a4:39:32:e5:ea:7b:12:eb:6d:82:
84:99:50:2c:f4:10:f5:05:7b:ee:01:7a:86:bf:18:ff:0c:d0:
c2:fc:d1:9e:90:96:6b:17:b9:13:4b:65:f0:0e:4c:ff:d6:39:
3d:51:fa:ad:ea:41:aa:09:35:4f:15:81:24:45:f8:b5:7a:37:
f9:b7:70:5c:6d:07:04:fa:6a:37:28:ff:d0:ae:cf:00:94:cc:
2e:ed:bc:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:44:14 2026 by rpki-client