Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/d301cd-f513-4995-9d55-1b38b02245c1/1/ao33d2sW0oLgTGluJYqk-fnOnJg.mft
File: ao33d2sW0oLgTGluJYqk-fnOnJg.mft (raw, json)
Hash identifier: xv34AKrfXRDhLm9VMe6HSmg2HB5hY4h/PPpPe2JcDRw=
Subject key identifier: 25:3A:63:DB:B2:56:BE:04:86:7E:84:3B:75:3F:4A:D5:4B:BC:8C:41
Authority key identifier: 6A:8D:F7:77:6B:16:D2:82:E0:4C:69:6E:25:8A:A4:F9:F9:CE:9C:98
Certificate issuer: /CN=6a8df7776b16d282e04c696e258aa4f9f9ce9c98
Certificate serial: 019F94370EE6A047AE15CCDF96CDD85341DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ao33d2sW0oLgTGluJYqk-fnOnJg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/d301cd-f513-4995-9d55-1b38b02245c1/1/ao33d2sW0oLgTGluJYqk-fnOnJg.mft
Manifest number: 0DB9
Signing time: Fri 24 Jul 2026 13:01:03 +0000
Manifest this update: Fri 24 Jul 2026 13:01:03 +0000
Manifest next update: Sat 25 Jul 2026 13:01:03 +0000
Files and hashes: 1: GmFXXmDlxbUAsewZb2XP6yyDi4w.roa (hash: t86pSAuRTeL1p9o68CyCCsghXoQGwpFAgB1l7sjE7zs=)
2: ao33d2sW0oLgTGluJYqk-fnOnJg.crl (hash: OQN0XR3KdCbwUm/kvI4nZp/WXJ1HeJt8TiSsVC9c8Uk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/d301cd-f513-4995-9d55-1b38b02245c1/1/ao33d2sW0oLgTGluJYqk-fnOnJg.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/d301cd-f513-4995-9d55-1b38b02245c1/1/ao33d2sW0oLgTGluJYqk-fnOnJg.mft
rsync://rpki.ripe.net/repository/DEFAULT/ao33d2sW0oLgTGluJYqk-fnOnJg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:37:0e:e6:a0:47:ae:15:cc:df:96:cd:d8:53:41:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a8df7776b16d282e04c696e258aa4f9f9ce9c98
Validity
Not Before: Jul 24 13:01:03 2026 GMT
Not After : Jul 25 13:01:03 2026 GMT
Subject: CN=253a63dbb256be04867e843b753f4ad54bbc8c41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:f3:5c:0f:b1:5c:f3:f8:20:b6:5b:1b:b8:f0:
16:1e:2a:2d:a8:b2:9a:cf:9b:11:24:48:ba:58:58:
06:90:b6:b9:54:32:fd:46:ff:17:a4:63:ef:ab:16:
26:a9:fe:0c:20:cd:25:80:9d:c8:78:ef:77:a9:42:
bd:73:08:53:10:93:5a:06:25:a5:ab:b8:ca:28:43:
e0:a4:89:f8:45:b2:67:5f:53:21:d7:9a:07:76:7c:
4d:11:7e:43:f7:51:83:bf:96:f3:06:86:e1:1c:22:
c2:93:b9:9f:ee:3d:1e:6a:cb:80:d7:58:3a:1a:90:
4c:3f:7b:73:45:38:a6:30:31:60:51:49:ec:e4:5d:
ef:eb:54:e2:d0:4a:ea:c2:a3:2a:73:44:91:fa:4d:
ae:86:ac:c3:c2:52:5d:bf:76:6d:10:cc:f1:ab:a6:
82:29:c0:26:b0:1f:93:99:c1:34:15:18:d8:e0:04:
e5:08:aa:de:4a:43:c6:e0:a3:5e:87:65:cd:5d:89:
e6:8c:2b:e1:a1:21:43:ed:0c:bb:68:38:70:86:a9:
0c:90:d5:8d:e4:68:a0:d2:08:0c:87:73:9c:72:45:
d6:c0:6d:dc:27:35:33:32:e4:4d:e3:d2:7a:65:f3:
12:45:65:f1:3b:3c:cf:93:bf:04:a4:a9:6d:34:bf:
f8:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:3A:63:DB:B2:56:BE:04:86:7E:84:3B:75:3F:4A:D5:4B:BC:8C:41
X509v3 Authority Key Identifier:
keyid:6A:8D:F7:77:6B:16:D2:82:E0:4C:69:6E:25:8A:A4:F9:F9:CE:9C:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ao33d2sW0oLgTGluJYqk-fnOnJg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/d301cd-f513-4995-9d55-1b38b02245c1/1/ao33d2sW0oLgTGluJYqk-fnOnJg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/d301cd-f513-4995-9d55-1b38b02245c1/1/ao33d2sW0oLgTGluJYqk-fnOnJg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:bf:3b:e9:29:fe:2d:fa:af:09:20:09:1d:50:ac:03:87:2b:
48:48:ca:bb:56:fc:ac:0b:25:59:a8:5b:bd:f3:c7:4d:f9:ae:
f8:38:d9:f5:57:83:ca:c2:f8:53:05:70:91:48:63:38:69:77:
6e:fc:cd:e5:0c:78:3d:23:56:35:18:a5:6e:84:22:93:9e:ae:
62:37:32:43:6f:8d:30:ea:55:bf:dd:4e:c5:7a:19:14:bd:6c:
52:d9:ed:0c:bd:f3:77:4e:90:f5:f0:d2:6c:15:06:79:5b:fd:
d0:c8:52:60:25:01:27:24:bc:c6:30:fa:d7:91:01:dd:86:05:
49:ad:2d:c1:ae:ab:b0:16:dd:1d:1f:a3:c1:e2:16:1f:22:fd:
c5:61:de:6b:7f:a1:0e:47:d4:b1:40:2c:8a:3a:ba:93:7d:1a:
ca:a6:18:d9:39:87:6e:2a:19:c8:26:74:46:f3:89:69:e0:39:
0a:5d:b1:91:e7:69:17:3c:b0:06:d8:bf:e6:83:f1:16:87:eb:
0e:9c:1d:93:e6:49:76:41:73:60:31:b5:a6:71:83:f3:84:8a:
e3:b5:25:74:19:05:68:23:a2:76:c6:60:b8:72:60:c4:01:66:
89:3f:75:51:81:f0:21:e5:0d:dd:32:18:bd:78:14:4e:9c:01:
5a:29:fb:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:17:58 2026 by rpki-client