Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4a/6db797-a3d3-4241-903a-0c66840198d0/1/ao7dovIciF--ZyhiGLgxjWrSOJY.mft
File: ao7dovIciF--ZyhiGLgxjWrSOJY.mft (raw, json)
Hash identifier: U5K/Vy1sLQnOE5iV8J8VtP7JZ08MF+3phHAZgejwplc=
Subject key identifier: 0B:8C:63:F9:1E:34:FD:4E:38:09:36:FC:EF:8E:6E:43:F4:AF:B0:24
Authority key identifier: 6A:8E:DD:A2:F2:1C:88:5F:BE:67:28:62:18:B8:31:8D:6A:D2:38:96
Certificate issuer: /CN=6a8edda2f21c885fbe67286218b8318d6ad23896
Certificate serial: 01A0EDAF412281304CB73ABCE2A381AC8A45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ao7dovIciF--ZyhiGLgxjWrSOJY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/6db797-a3d3-4241-903a-0c66840198d0/1/ao7dovIciF--ZyhiGLgxjWrSOJY.mft
Manifest number: 0D35
Signing time: Tue 29 Sep 2026 15:01:20 +0000
Manifest this update: Tue 29 Sep 2026 15:01:20 +0000
Manifest next update: Wed 30 Sep 2026 15:01:20 +0000
Files and hashes: 1: 4Ju3VaQ4C6q0qWM27SQOg0xG0LY.roa (hash: CXJhJHQ7ol0fZjsffI02dL1cMgtuyDC/aOoAbGch63A=)
2: ao7dovIciF--ZyhiGLgxjWrSOJY.crl (hash: pyfL/GrxxvB2t0paCoXzcXJQ01Y6xAGZg2e8wvdNxe0=)
3: oA31tgyLZdN2czm4RB3Kz9g85HU.roa (hash: OyiWBOPqWwEUSj8ktxk8sZ34jz/J/+HAdPgWkshrJgs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/6db797-a3d3-4241-903a-0c66840198d0/1/ao7dovIciF--ZyhiGLgxjWrSOJY.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/6db797-a3d3-4241-903a-0c66840198d0/1/ao7dovIciF--ZyhiGLgxjWrSOJY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ao7dovIciF--ZyhiGLgxjWrSOJY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 08:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ed:af:41:22:81:30:4c:b7:3a:bc:e2:a3:81:ac:8a:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a8edda2f21c885fbe67286218b8318d6ad23896
Validity
Not Before: Sep 29 15:01:20 2026 GMT
Not After : Sep 30 15:01:20 2026 GMT
Subject: CN=0b8c63f91e34fd4e380936fcef8e6e43f4afb024
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:59:53:73:d1:21:eb:af:bc:ed:c3:7d:f7:5b:
e5:0b:3e:26:bc:c6:fe:08:c8:cc:95:6f:04:ce:8d:
1d:27:64:5f:84:60:54:e9:bb:a2:37:61:33:0b:13:
26:a3:e1:b4:c6:02:b8:2a:5c:b0:58:aa:9f:5b:b0:
38:04:8d:2c:c4:e4:24:74:d6:31:b1:72:1a:d6:44:
96:05:2b:fa:4b:1c:f8:b9:80:f4:3d:1e:ef:9f:d9:
2a:da:3f:f6:00:80:bf:88:56:93:9d:d0:01:44:dd:
37:b3:9a:53:75:94:35:67:f8:0f:e7:6c:9a:d4:17:
38:52:a8:9a:d3:0c:52:a8:83:fd:82:e7:1d:6f:da:
83:78:48:33:a2:48:29:6c:dc:89:4d:d2:cc:5b:67:
0b:c2:8d:64:3e:ab:0a:62:ff:f3:8d:c2:68:ed:a2:
e7:23:4c:f1:91:a3:55:a4:18:4a:2e:19:c2:73:0f:
f5:af:ff:01:69:9a:73:f1:9f:14:8a:34:b1:51:ea:
6d:0f:33:1b:00:c3:f7:f6:b8:eb:58:c0:06:c0:98:
5a:84:46:61:c2:56:94:4d:aa:4b:e1:ba:9d:50:6a:
b4:bd:b5:a2:87:7a:7c:b5:77:e1:f5:82:a4:c2:35:
b9:00:37:94:04:58:63:c9:5c:80:d3:37:b8:22:65:
ec:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:8C:63:F9:1E:34:FD:4E:38:09:36:FC:EF:8E:6E:43:F4:AF:B0:24
X509v3 Authority Key Identifier:
keyid:6A:8E:DD:A2:F2:1C:88:5F:BE:67:28:62:18:B8:31:8D:6A:D2:38:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ao7dovIciF--ZyhiGLgxjWrSOJY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/6db797-a3d3-4241-903a-0c66840198d0/1/ao7dovIciF--ZyhiGLgxjWrSOJY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/6db797-a3d3-4241-903a-0c66840198d0/1/ao7dovIciF--ZyhiGLgxjWrSOJY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:89:a6:07:3f:23:30:d6:a6:d7:2b:80:ab:1a:2a:1f:c4:81:
77:9e:05:94:32:f2:c8:fa:44:fa:d3:7e:1d:96:38:4c:0e:63:
69:5c:e3:5d:6c:15:d4:b3:75:87:d0:5d:1a:23:21:71:4c:7b:
be:47:e1:e1:d7:55:d4:b5:f6:87:57:7c:3a:37:67:f1:f7:dd:
02:ed:5f:80:18:6a:c5:6f:4e:d5:de:07:d8:ee:fe:08:5a:a1:
65:33:05:2f:83:77:80:03:09:31:56:4f:88:97:6a:75:84:d6:
17:5a:f7:91:1c:b4:d1:8b:c3:ff:b8:3c:69:9c:fa:b3:77:4d:
10:e4:4d:f1:15:68:3b:14:1a:ec:1d:9f:bd:ce:a9:0b:0c:85:
e2:0b:b5:69:2e:ae:cc:2b:dc:36:aa:39:2a:59:01:97:00:8d:
93:55:57:6f:74:b0:d5:da:04:73:aa:11:59:b5:f8:a4:39:f7:
d4:b0:69:4f:50:cc:2c:52:bb:d7:ea:1f:22:58:9c:da:05:a2:
0f:5f:47:ac:81:7a:8b:b3:b1:39:59:e8:5d:ca:ad:3d:f3:08:
e3:8f:46:4a:c2:21:8e:b7:4c:fb:47:38:23:25:32:db:1d:41:
1a:42:ab:04:81:6f:89:45:4b:5f:05:01:70:93:34:2f:ff:68:
dd:1d:05:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 17:40:55 2026 by rpki-client