Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/476139-5661-4697-8b57-424aef67f776/1/roAO3oM7hsSM43BVZwaOuQcksI0.mft
File: roAO3oM7hsSM43BVZwaOuQcksI0.mft (raw, json)
Hash identifier: +9cEOjP62lsyKB5jBNCRQ8ffMRFlxyQwFlW52m+MDhQ=
Subject key identifier: AD:8B:DF:71:67:3A:F0:AE:C4:3A:B3:B6:59:24:09:E9:26:E5:7C:D7
Authority key identifier: AE:80:0E:DE:83:3B:86:C4:8C:E3:70:55:67:06:8E:B9:07:24:B0:8D
Certificate issuer: /CN=ae800ede833b86c48ce3705567068eb90724b08d
Certificate serial: 019E1C0F9F4539E071F61960DD6FDE15D218
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/roAO3oM7hsSM43BVZwaOuQcksI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/476139-5661-4697-8b57-424aef67f776/1/roAO3oM7hsSM43BVZwaOuQcksI0.mft
Manifest number: 0105
Signing time: Tue 12 May 2026 12:00:46 +0000
Manifest this update: Tue 12 May 2026 12:00:46 +0000
Manifest next update: Wed 13 May 2026 12:00:46 +0000
Files and hashes: 1: 7clbtE8xwhadRQ3A3fwwc0B7Xx8.asa (hash: NSE+naftLaacIKnlx//uMGVJTg2CXO0d6h3CTsIyW90=)
2: ZL2C4Xh3gk3HxtfjXSTbvl0b7Eg.roa (hash: RUoJ7koe3OvwmkZQ+5gWyWMHICJts5yQk65pg7WzrdM=)
3: roAO3oM7hsSM43BVZwaOuQcksI0.crl (hash: 1eQIzEjuRiQPjX/UASuFMEsB/WkprZqiCV+BDu+GTV4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/476139-5661-4697-8b57-424aef67f776/1/roAO3oM7hsSM43BVZwaOuQcksI0.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/476139-5661-4697-8b57-424aef67f776/1/roAO3oM7hsSM43BVZwaOuQcksI0.mft
rsync://rpki.ripe.net/repository/DEFAULT/roAO3oM7hsSM43BVZwaOuQcksI0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 12:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:0f:9f:45:39:e0:71:f6:19:60:dd:6f:de:15:d2:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae800ede833b86c48ce3705567068eb90724b08d
Validity
Not Before: May 12 12:00:46 2026 GMT
Not After : May 13 12:00:46 2026 GMT
Subject: CN=ad8bdf71673af0aec43ab3b6592409e926e57cd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:8c:06:0f:c4:f5:0e:d3:3a:54:7d:9f:6d:0b:
d7:e4:c3:61:10:8d:ae:c8:1f:9c:00:ca:c4:61:8c:
3c:6d:16:95:46:7a:a8:e8:58:3c:e3:9c:6c:4d:f2:
5b:80:1b:33:e7:72:44:9e:2c:2c:39:a6:15:dd:dc:
cf:ff:92:46:e6:18:78:f2:e3:d4:ce:77:08:3f:f0:
7f:81:7b:dd:af:4e:e1:eb:d6:2b:4d:6c:e3:7a:bb:
38:e0:a5:24:c4:e7:72:bc:59:41:27:ff:61:2f:6d:
98:6f:40:93:d5:02:fa:20:08:48:b8:56:3c:74:15:
ad:8a:46:6e:d9:70:3d:3a:48:e9:d9:67:b9:cf:46:
ed:2f:89:13:a7:e5:16:a9:56:a2:60:97:49:31:78:
e1:d4:fa:a1:6d:d2:47:2a:25:82:ca:de:c9:f5:a5:
8f:56:1d:e3:23:f8:30:bb:c9:05:7b:8f:fb:ba:b3:
ae:3e:b1:1a:23:d1:74:62:15:ba:92:58:63:c0:0f:
50:49:2a:24:38:d6:8c:9c:b3:2a:64:33:90:0b:65:
30:80:37:f2:05:c3:02:d2:d0:5f:8c:0d:9d:22:6b:
67:b1:f8:88:36:19:fb:6c:c0:c8:6b:9a:7d:f0:d4:
8a:e1:85:1e:a5:5b:14:3f:46:7e:7b:5a:8d:9b:48:
be:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:8B:DF:71:67:3A:F0:AE:C4:3A:B3:B6:59:24:09:E9:26:E5:7C:D7
X509v3 Authority Key Identifier:
keyid:AE:80:0E:DE:83:3B:86:C4:8C:E3:70:55:67:06:8E:B9:07:24:B0:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/roAO3oM7hsSM43BVZwaOuQcksI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/476139-5661-4697-8b57-424aef67f776/1/roAO3oM7hsSM43BVZwaOuQcksI0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/476139-5661-4697-8b57-424aef67f776/1/roAO3oM7hsSM43BVZwaOuQcksI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:19:e9:e6:ef:5b:51:6d:e2:8a:93:3a:5d:37:3d:fd:f0:8b:
0f:9b:f9:27:9b:5b:2f:ad:1d:62:80:17:0d:42:57:37:e5:4c:
4c:a5:4f:b3:4e:4e:77:40:34:96:14:d8:4b:a5:f6:fc:75:20:
0f:11:12:7b:b4:8f:e5:fd:78:12:8f:75:ea:37:99:58:1b:c0:
8e:f1:dd:19:b2:e0:46:e8:dd:04:95:3b:76:21:1b:5e:45:bf:
63:26:06:3d:78:4c:77:39:7b:53:6b:01:ee:b2:ff:75:c0:89:
a6:6b:3e:9a:52:b0:c4:1c:17:41:ed:cf:7c:4c:3b:13:20:5e:
6b:9d:36:e9:e2:ae:70:de:4b:c6:0b:11:db:b9:8a:01:5b:a0:
eb:3f:c9:e1:d9:74:66:a5:82:01:a3:80:98:9b:cf:e5:62:be:
bf:dd:1d:24:e8:d5:d7:88:23:43:9d:55:e0:f8:58:94:d1:f8:
fa:f2:64:22:bb:da:34:80:08:c5:35:3e:e0:79:7e:6a:7e:51:
a0:ff:fe:57:cc:6e:40:e1:65:92:8d:8b:4d:e4:66:f8:65:4f:
6f:05:6d:26:5b:72:93:c4:5b:6f:a3:41:ce:3b:72:69:5f:8d:
c6:4b:47:d8:d5:d7:3e:11:3f:5c:58:f1:02:e5:33:9c:75:bf:
72:85:59:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:33:48 2026 by rpki-client