Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/53/476139-5661-4697-8b57-424aef67f776/1/roAO3oM7hsSM43BVZwaOuQcksI0.mft
File: roAO3oM7hsSM43BVZwaOuQcksI0.mft (raw, json)
Hash identifier: b/oqNuZxUzTTuiMj8z2LMiS+uUQ7WntUPAlxKhq1sqs=
Subject key identifier: D9:0D:9C:E1:A1:50:0D:4A:00:53:9D:DE:29:61:2B:7E:AA:8F:7B:A0
Authority key identifier: AE:80:0E:DE:83:3B:86:C4:8C:E3:70:55:67:06:8E:B9:07:24:B0:8D
Certificate issuer: /CN=ae800ede833b86c48ce3705567068eb90724b08d
Certificate serial: 01A135C8522CCA69C84B35283A7D7E02B5DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/roAO3oM7hsSM43BVZwaOuQcksI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/476139-5661-4697-8b57-424aef67f776/1/roAO3oM7hsSM43BVZwaOuQcksI0.mft
Manifest number: 02A1
Signing time: Tue 13 Oct 2026 15:01:22 +0000
Manifest this update: Tue 13 Oct 2026 15:01:22 +0000
Manifest next update: Wed 14 Oct 2026 15:01:22 +0000
Files and hashes: 1: 7clbtE8xwhadRQ3A3fwwc0B7Xx8.asa (hash: NSE+naftLaacIKnlx//uMGVJTg2CXO0d6h3CTsIyW90=)
2: ow2bqJhEdDegyshhSjmpEmSiWIE.roa (hash: jvnyA7cvV4BQzNY5m+pTfWf2ZrkK6vyFHIlZGwtJzpk=)
3: roAO3oM7hsSM43BVZwaOuQcksI0.crl (hash: kFZ4jg3oTowf1go81cN6iz69iTjWrzrtYHYXX6sf8uQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/476139-5661-4697-8b57-424aef67f776/1/roAO3oM7hsSM43BVZwaOuQcksI0.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/476139-5661-4697-8b57-424aef67f776/1/roAO3oM7hsSM43BVZwaOuQcksI0.mft
rsync://rpki.ripe.net/repository/DEFAULT/roAO3oM7hsSM43BVZwaOuQcksI0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Oct 2026 14:02:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:35:c8:52:2c:ca:69:c8:4b:35:28:3a:7d:7e:02:b5:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae800ede833b86c48ce3705567068eb90724b08d
Validity
Not Before: Oct 13 15:01:22 2026 GMT
Not After : Oct 14 15:01:22 2026 GMT
Subject: CN=d90d9ce1a1500d4a00539dde29612b7eaa8f7ba0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:5f:6f:18:21:d8:c0:bc:c1:3d:e5:70:22:65:
dc:8f:b6:a4:5b:12:2b:7b:77:3f:4b:c3:9d:b3:19:
ab:8c:8e:15:eb:a3:e3:ab:0c:10:6b:91:d6:b0:28:
72:b4:ea:1f:56:0a:64:6a:1e:d0:8b:77:2b:0f:dc:
23:61:d4:f5:84:92:cd:66:e4:f3:14:cf:6e:28:9b:
42:92:e6:56:04:b1:51:c6:4d:9b:29:71:8f:46:54:
39:a2:3e:6f:44:f9:e3:e0:ce:4e:aa:c7:9b:c5:f6:
16:ea:d8:33:ed:e3:e2:6b:37:04:28:d9:70:99:45:
25:a5:dc:ff:d8:a2:70:21:87:5d:06:11:5e:69:8d:
58:58:5e:6a:1a:1a:0a:02:8d:f3:09:10:fe:b0:b5:
f8:fa:b3:81:af:5e:1f:d5:13:af:78:5d:cf:cc:69:
41:77:ce:c7:69:ba:33:81:eb:96:b8:83:1b:ca:28:
ec:2e:d9:24:6c:66:39:68:0f:27:56:2a:a4:ee:8a:
0c:38:49:a4:2b:94:33:64:1f:f1:4c:27:5d:4d:51:
1c:59:62:2c:49:14:cd:6f:39:5d:60:b9:de:3c:6a:
a9:40:2a:28:a8:11:c3:35:a0:cd:65:6a:a2:39:6c:
25:8c:e4:ec:ab:68:e7:2c:76:27:f6:ad:48:01:16:
e7:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:0D:9C:E1:A1:50:0D:4A:00:53:9D:DE:29:61:2B:7E:AA:8F:7B:A0
X509v3 Authority Key Identifier:
keyid:AE:80:0E:DE:83:3B:86:C4:8C:E3:70:55:67:06:8E:B9:07:24:B0:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/roAO3oM7hsSM43BVZwaOuQcksI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/476139-5661-4697-8b57-424aef67f776/1/roAO3oM7hsSM43BVZwaOuQcksI0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/476139-5661-4697-8b57-424aef67f776/1/roAO3oM7hsSM43BVZwaOuQcksI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:d9:52:b4:61:80:97:86:e3:23:69:09:b8:0c:dd:bf:4d:42:
fe:25:30:22:86:37:0a:a7:cc:d1:30:16:8c:90:b4:95:92:cf:
ee:33:0b:8f:95:32:df:f4:ff:71:a0:4e:fd:82:3c:7a:b2:92:
91:3e:dc:ab:e4:3b:a8:07:24:94:88:14:ba:0f:0f:ff:29:e6:
1b:e9:f1:66:55:53:cd:5a:c8:d7:38:61:76:6b:76:90:28:40:
1b:18:ed:c7:ea:99:e4:45:cb:6c:cf:ea:fb:de:20:e4:c6:5f:
dd:dc:a3:71:10:ee:e8:10:db:4e:2a:5e:14:0c:4d:72:22:6c:
6f:71:c7:5f:ca:31:e4:3e:4c:8f:a1:16:a0:ae:cc:e6:16:fd:
45:1f:f8:13:cf:aa:63:78:26:2e:c0:5b:27:0f:7b:6a:e8:31:
a0:3a:4b:79:7e:10:b7:8f:1f:50:30:ab:58:65:d4:38:cd:a1:
59:fb:64:39:61:4c:ba:8f:03:c8:3c:16:a3:09:e4:74:7e:d6:
2c:81:b0:c5:6e:3d:c8:60:0a:0a:2e:2e:37:dd:57:b1:09:54:
b3:ea:9c:65:ca:f9:b7:37:62:28:e7:34:52:68:85:38:be:00:
35:cb:8e:a7:d5:f0:7f:0e:c8:d6:03:0d:24:a4:1e:64:9e:6e:
8c:c9:a3:48
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaE1yFIsymnISzUoOn1+ArXfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFlODAwZWRlODMzYjg2YzQ4Y2UzNzA1NTY3MDY4ZWI5MDcy
NGIwOGQwHhcNMjYxMDEzMTUwMTIyWhcNMjYxMDE0MTUwMTIyWjAzMTEwLwYDVQQD
EyhkOTBkOWNlMWExNTAwZDRhMDA1MzlkZGUyOTYxMmI3ZWFhOGY3YmEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAol9vGCHYwLzBPeVwImXcj7akWxIr
e3c/S8OdsxmrjI4V66PjqwwQa5HWsChytOofVgpkah7Qi3crD9wjYdT1hJLNZuTz
FM9uKJtCkuZWBLFRxk2bKXGPRlQ5oj5vRPnj4M5OqsebxfYW6tgz7ePiazcEKNlw
mUUlpdz/2KJwIYddBhFeaY1YWF5qGhoKAo3zCRD+sLX4+rOBr14f1ROveF3PzGlB
d87HabozgeuWuIMbyijsLtkkbGY5aA8nViqk7ooMOEmkK5QzZB/xTCddTVEcWWIs
SRTNbzldYLnePGqpQCooqBHDNaDNZWqiOWwljOTsq2jnLHYn9q1IARbn6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNkNnOGhUA1KAFOd3ilhK36qj3ugMB8GA1UdIwQY
MBaAFK6ADt6DO4bEjONwVWcGjrkHJLCNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcm9BTzNvTTdoc1NNNDNCVlp3YU91UWNrc0kwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My80NzYxMzktNTY2MS00Njk3LThiNTct
NDI0YWVmNjdmNzc2LzEvcm9BTzNvTTdoc1NNNDNCVlp3YU91UWNrc0kwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81My80NzYxMzktNTY2MS00Njk3LThiNTctNDI0YWVmNjdmNzc2
LzEvcm9BTzNvTTdoc1NNNDNCVlp3YU91UWNrc0kwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjNlStGGA
l4bjI2kJuAzdv01C/iUwIoY3CqfM0TAWjJC0lZLP7jMLj5Uy3/T/caBO/YI8erKS
kT7cq+Q7qAcklIgUug8P/ynmG+nxZlVTzVrI1zhhdmt2kChAGxjtx+qZ5EXLbM/q
+94g5MZf3dyjcRDu6BDbTipeFAxNciJsb3HHX8ox5D5Mj6EWoK7M5hb9RR/4E8+q
Y3gmLsBbJw97augxoDpLeX4Qt48fUDCrWGXUOM2hWftkOWFMuo8DyDwWownkdH7W
LIGwxW49yGAKCi4uN91XsQlUs+qcZcr5tzdiKOc0UmiFOL4ANcuOp9Xwfw7I1gMN
JKQeZJ5ujMmjSA==
-----END CERTIFICATE-----
Generated at Tue Oct 13 19:48:32 2026 by rpki-client