Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/6db797-a3d3-4241-903a-0c66840198d0/1/ao7dovIciF--ZyhiGLgxjWrSOJY.mft
File: ao7dovIciF--ZyhiGLgxjWrSOJY.mft (raw, json)
Hash identifier: l9M+BuuuSkE1uljx/B8bzonv903sc9wLF2+ap3P3gJM=
Subject key identifier: B9:61:77:BD:D4:2A:98:F3:E1:08:A4:36:C1:CC:4F:AA:54:5E:25:91
Authority key identifier: 6A:8E:DD:A2:F2:1C:88:5F:BE:67:28:62:18:B8:31:8D:6A:D2:38:96
Certificate issuer: /CN=6a8edda2f21c885fbe67286218b8318d6ad23896
Certificate serial: 019D296186D303DF1D9653C6335E09EE0AE1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ao7dovIciF--ZyhiGLgxjWrSOJY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/6db797-a3d3-4241-903a-0c66840198d0/1/ao7dovIciF--ZyhiGLgxjWrSOJY.mft
Manifest number: 0B3D
Signing time: Thu 26 Mar 2026 09:02:30 +0000
Manifest this update: Thu 26 Mar 2026 09:02:30 +0000
Manifest next update: Fri 27 Mar 2026 09:02:30 +0000
Files and hashes: 1: IMvi_cxz_R-ayNNId6HH2kVVpAQ.roa (hash: 6IK4Qty1bIRA82kzLZxrqtFW3xfyNSEpnkEntDA5sT8=)
2: XGNpEJyZ5ofWurDz4XnNulUh5Qc.roa (hash: ApJMkAtwvgFPQPDi80cwWPLVrZBQ049k8CTijiz27yI=)
3: ao7dovIciF--ZyhiGLgxjWrSOJY.crl (hash: uYNx0JNY80NOpnSlv0dQ2R25dms2vtUlbIKvuvqGLtA=)
4: rTBbbKqOoDleztbkH5gCUuaaskA.roa (hash: RwwqIDHdfQieX8PTWUMnN4JTqKEHqM2AaHzXNkqy1/Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/6db797-a3d3-4241-903a-0c66840198d0/1/ao7dovIciF--ZyhiGLgxjWrSOJY.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/6db797-a3d3-4241-903a-0c66840198d0/1/ao7dovIciF--ZyhiGLgxjWrSOJY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ao7dovIciF--ZyhiGLgxjWrSOJY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:61:86:d3:03:df:1d:96:53:c6:33:5e:09:ee:0a:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a8edda2f21c885fbe67286218b8318d6ad23896
Validity
Not Before: Mar 26 09:02:30 2026 GMT
Not After : Mar 27 09:02:30 2026 GMT
Subject: CN=b96177bdd42a98f3e108a436c1cc4faa545e2591
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:ab:4a:af:36:8f:7d:7f:75:92:93:03:85:5b:
7b:99:ca:40:df:91:6d:76:11:47:7f:41:2a:cf:e7:
29:0c:68:c9:53:82:e9:e8:7d:4c:28:c9:d2:9c:fa:
3b:59:e0:14:a0:9b:ca:1e:67:20:fa:c6:88:ab:00:
f3:80:86:43:b5:85:51:06:2b:b1:80:75:27:1e:a4:
8d:70:bf:f7:c8:77:0d:55:48:ca:e7:0a:92:58:40:
f5:d7:2d:c3:0d:60:ac:d9:8d:a8:b9:65:7e:16:f5:
1a:e6:09:fd:71:fe:75:e3:af:79:08:12:56:c5:a9:
2d:f6:56:7b:db:bd:d0:15:43:36:49:ef:a9:55:56:
a1:dd:7e:10:4c:7c:fd:1d:ce:8e:a8:53:0f:82:8c:
15:1b:43:a3:60:21:b0:0e:66:a1:d8:30:7e:73:f3:
68:7c:98:31:c5:0b:37:cb:3a:8b:95:f1:31:65:60:
a6:9c:a7:72:d4:b2:0f:57:c5:83:4b:e0:5e:92:ab:
34:d9:2a:e5:05:a6:df:7b:6b:57:83:44:0e:f9:84:
0e:26:91:0e:2e:86:77:f4:d5:2a:d5:23:96:b0:f4:
c8:3f:cf:66:2d:28:80:76:63:e8:48:09:57:30:6a:
ea:40:9e:3b:19:9e:47:e8:43:e9:f8:0c:43:42:8a:
2c:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:61:77:BD:D4:2A:98:F3:E1:08:A4:36:C1:CC:4F:AA:54:5E:25:91
X509v3 Authority Key Identifier:
keyid:6A:8E:DD:A2:F2:1C:88:5F:BE:67:28:62:18:B8:31:8D:6A:D2:38:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ao7dovIciF--ZyhiGLgxjWrSOJY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/6db797-a3d3-4241-903a-0c66840198d0/1/ao7dovIciF--ZyhiGLgxjWrSOJY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/6db797-a3d3-4241-903a-0c66840198d0/1/ao7dovIciF--ZyhiGLgxjWrSOJY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:93:3d:10:7d:45:cd:8e:27:05:bb:29:4a:b7:91:c0:44:89:
05:de:97:7a:1b:b0:60:0b:11:a7:f7:e3:27:04:2d:0f:36:c9:
1b:fe:5c:e2:df:08:49:0e:3e:ec:1b:a7:07:45:f8:17:8e:72:
5a:d4:35:89:39:c1:73:f2:50:0f:2d:cb:a6:76:66:66:bc:a5:
fc:43:7b:de:1c:32:8c:a7:04:b5:23:ca:69:83:b0:ea:e2:d1:
27:8e:2c:62:7f:37:f5:a2:2e:c7:59:79:29:15:2e:d5:ae:14:
8d:d4:2c:e9:c0:07:e6:f9:26:eb:72:07:8f:00:f3:02:f6:1b:
93:e2:97:05:8a:a5:f5:5c:02:4f:7e:bb:b0:9e:7e:43:04:29:
e3:59:16:c8:86:20:5f:f2:f9:fb:1d:72:67:2b:c1:7e:17:c4:
c2:9d:66:82:2f:4c:3a:d8:08:f4:8e:9c:5c:f2:db:1e:c9:2f:
a1:6f:b0:50:37:6b:66:03:35:8c:77:52:c6:0a:62:a0:ca:a5:
bb:0d:a2:e1:fb:a2:3a:68:06:f2:47:0f:d7:7f:cc:4b:2a:0d:
f9:c4:2e:fd:61:df:2a:f1:13:63:37:bd:de:e6:e4:ac:6d:28:
42:a7:52:ca:64:67:ec:93:a8:fe:f9:f7:65:03:ac:bd:95:db:
c7:95:88:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:29:59 2026 by rpki-client