Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/476139-5661-4697-8b57-424aef67f776/1/roAO3oM7hsSM43BVZwaOuQcksI0.mft
File: roAO3oM7hsSM43BVZwaOuQcksI0.mft (raw, json)
Hash identifier: aNVze+mXNxrIcMIpPdChiCTWl41i0TL5zWmy7DnnIJY=
Subject key identifier: 68:E3:93:58:49:BA:73:85:CE:99:CB:26:75:12:38:82:71:3B:37:07
Authority key identifier: AE:80:0E:DE:83:3B:86:C4:8C:E3:70:55:67:06:8E:B9:07:24:B0:8D
Certificate issuer: /CN=ae800ede833b86c48ce3705567068eb90724b08d
Certificate serial: 019D24DE84F2AC37868CA19DB2DB6607AD58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/roAO3oM7hsSM43BVZwaOuQcksI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/476139-5661-4697-8b57-424aef67f776/1/roAO3oM7hsSM43BVZwaOuQcksI0.mft
Manifest number: 85
Signing time: Wed 25 Mar 2026 12:00:55 +0000
Manifest this update: Wed 25 Mar 2026 12:00:55 +0000
Manifest next update: Thu 26 Mar 2026 12:00:55 +0000
Files and hashes: 1: 7clbtE8xwhadRQ3A3fwwc0B7Xx8.asa (hash: NSE+naftLaacIKnlx//uMGVJTg2CXO0d6h3CTsIyW90=)
2: ZL2C4Xh3gk3HxtfjXSTbvl0b7Eg.roa (hash: RUoJ7koe3OvwmkZQ+5gWyWMHICJts5yQk65pg7WzrdM=)
3: roAO3oM7hsSM43BVZwaOuQcksI0.crl (hash: rp2Fvle5UZJrgwE92zx2+S1i5OuZm7KguobnAYQq3BA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/476139-5661-4697-8b57-424aef67f776/1/roAO3oM7hsSM43BVZwaOuQcksI0.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/476139-5661-4697-8b57-424aef67f776/1/roAO3oM7hsSM43BVZwaOuQcksI0.mft
rsync://rpki.ripe.net/repository/DEFAULT/roAO3oM7hsSM43BVZwaOuQcksI0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 12:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:24:de:84:f2:ac:37:86:8c:a1:9d:b2:db:66:07:ad:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae800ede833b86c48ce3705567068eb90724b08d
Validity
Not Before: Mar 25 12:00:55 2026 GMT
Not After : Mar 26 12:00:55 2026 GMT
Subject: CN=68e3935849ba7385ce99cb2675123882713b3707
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:a2:ba:27:14:f4:a4:bf:78:24:3d:a3:d5:00:
81:1c:9c:e8:95:8c:a7:43:4b:f6:24:61:0c:79:0d:
37:b1:06:fd:8f:33:2a:8b:04:aa:8a:e4:d3:ee:35:
ee:59:d0:3b:47:64:09:b3:51:60:87:a1:fb:b3:c6:
6d:d3:cb:95:a0:8f:22:a0:54:9c:3c:c0:55:0f:7e:
ad:d6:ab:cb:d4:17:3b:5b:28:48:97:69:8c:30:46:
6a:de:7c:51:9d:b4:32:59:8b:e4:3e:af:e5:43:b5:
43:8b:da:42:38:11:03:9b:53:81:e3:e4:a0:25:95:
ef:a8:f5:c5:e7:ab:d1:af:1f:4e:77:cd:02:e7:24:
f0:ba:65:64:57:2a:22:70:24:d2:ed:3a:61:7f:ac:
90:14:99:ef:c2:d8:79:c8:e6:61:c7:d0:5b:ff:ff:
41:27:f7:dc:d6:cf:18:75:43:97:40:f0:21:6c:d0:
fc:9b:2c:f1:f0:bc:1c:6d:08:b7:b3:1d:91:07:88:
f4:a1:13:78:0d:14:09:2f:23:2d:9d:32:2f:24:05:
e7:5b:54:c6:2d:49:f0:79:f4:ee:0d:69:e1:13:23:
ac:8e:9a:e5:6a:ca:f0:13:a2:d4:52:ec:b2:c9:f2:
3f:f5:4c:12:55:d1:a0:c7:5b:fc:92:85:e5:5b:e1:
ce:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:E3:93:58:49:BA:73:85:CE:99:CB:26:75:12:38:82:71:3B:37:07
X509v3 Authority Key Identifier:
keyid:AE:80:0E:DE:83:3B:86:C4:8C:E3:70:55:67:06:8E:B9:07:24:B0:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/roAO3oM7hsSM43BVZwaOuQcksI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/476139-5661-4697-8b57-424aef67f776/1/roAO3oM7hsSM43BVZwaOuQcksI0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/476139-5661-4697-8b57-424aef67f776/1/roAO3oM7hsSM43BVZwaOuQcksI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:94:8e:b6:89:49:58:d3:21:54:e2:91:08:6d:42:03:94:04:
b7:25:af:bf:d9:8f:f8:e4:1a:d0:9b:7f:ab:2d:6c:d3:55:23:
89:44:f7:1e:cf:0d:45:b7:78:97:d3:6f:97:1b:d3:51:16:1d:
01:c3:b5:cd:cc:f3:85:b3:9c:32:d4:cb:40:37:7c:d4:7f:c0:
05:01:59:72:63:bc:bf:09:ff:ce:8a:12:13:35:d5:ce:2d:61:
b6:42:a9:f5:13:00:e4:72:6c:05:67:b0:b4:15:2a:7a:7c:ac:
40:c4:61:6e:7f:88:84:af:4c:7d:26:df:70:9a:bf:22:d7:9c:
c8:8e:22:87:92:f6:db:ef:87:87:00:96:8b:3a:51:2e:e9:d3:
38:6f:2e:ab:c0:5b:7d:0d:2e:83:ce:35:b9:52:73:1d:0b:19:
7d:d1:45:9a:37:58:7b:e4:9a:01:f4:72:ec:89:5c:ea:33:45:
83:40:bc:4c:0e:b2:87:9b:81:35:f4:05:20:31:2c:e8:ea:4d:
97:d1:51:bf:00:77:b4:69:24:d2:1a:a6:1f:95:b9:a4:9f:8a:
b3:d7:c7:6d:5b:be:61:f6:46:a5:7b:b4:26:b7:5f:70:04:b9:
26:c0:cb:8e:bf:33:8a:9b:aa:c3:00:3d:30:39:d0:e2:05:d4:
d8:11:7c:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 23:09:45 2026 by rpki-client