Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/d49d52-50b1-4948-b1f7-055a9cad8df7/1/Ao_fcZ1HoQAzRRqDOEptto29Ww8.mft
File: Ao_fcZ1HoQAzRRqDOEptto29Ww8.mft (raw, json)
Hash identifier: 0E53iwKyA2nNXaD1b5+FVTs652Rg7SKR/8BjHuNHRGI=
Subject key identifier: 69:68:FF:81:1F:10:8F:36:04:86:3F:5F:FF:F5:9A:D4:93:D7:36:46
Authority key identifier: 02:8F:DF:71:9D:47:A1:00:33:45:1A:83:38:4A:6D:B6:8D:BD:5B:0F
Certificate issuer: /CN=028fdf719d47a10033451a83384a6db68dbd5b0f
Certificate serial: 019D2816F57459A41A5559E8810BEB364A0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ao_fcZ1HoQAzRRqDOEptto29Ww8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/d49d52-50b1-4948-b1f7-055a9cad8df7/1/Ao_fcZ1HoQAzRRqDOEptto29Ww8.mft
Manifest number: 0E8F
Signing time: Thu 26 Mar 2026 03:01:26 +0000
Manifest this update: Thu 26 Mar 2026 03:01:26 +0000
Manifest next update: Fri 27 Mar 2026 03:01:26 +0000
Files and hashes: 1: Ao_fcZ1HoQAzRRqDOEptto29Ww8.crl (hash: MSF0/cIASDRaK5MuVI/lGiYkZ22I6bz+Wt630DgYEEs=)
2: wx4jf3r0v_RD4WGbwjNb9_66YeA.roa (hash: Yg61lLQnPGGlaDhOZEVebkyWouHjvzVXcfasCV97MNE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/d49d52-50b1-4948-b1f7-055a9cad8df7/1/Ao_fcZ1HoQAzRRqDOEptto29Ww8.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/d49d52-50b1-4948-b1f7-055a9cad8df7/1/Ao_fcZ1HoQAzRRqDOEptto29Ww8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ao_fcZ1HoQAzRRqDOEptto29Ww8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:f5:74:59:a4:1a:55:59:e8:81:0b:eb:36:4a:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=028fdf719d47a10033451a83384a6db68dbd5b0f
Validity
Not Before: Mar 26 03:01:26 2026 GMT
Not After : Mar 27 03:01:26 2026 GMT
Subject: CN=6968ff811f108f3604863f5ffff59ad493d73646
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:50:c3:4a:75:23:4e:34:42:f6:b2:dc:86:91:
b1:21:f3:c9:50:53:2a:a1:24:52:d5:e7:1b:0e:3f:
ab:e5:80:1b:81:db:18:11:5b:7b:63:03:6c:70:f4:
82:3e:0e:b0:e4:1f:b3:5b:48:40:c5:d9:7b:1e:bd:
6c:15:fd:6c:f6:fd:a4:b6:c8:26:46:43:c7:71:9c:
18:7d:c9:9d:63:c9:db:25:26:68:f1:e5:94:95:68:
1c:9c:a3:ee:f7:d6:ac:99:14:42:e6:84:98:bd:2f:
b5:99:1e:d0:fd:0f:be:6e:30:20:38:ff:67:0b:97:
16:29:9d:5e:e8:af:c3:0d:ea:d0:5c:f7:61:ea:c2:
94:f7:75:0e:fa:69:d4:0d:6c:ec:15:a5:15:b1:ca:
81:12:d8:66:02:71:6c:5d:ea:3b:11:4e:22:d8:5d:
71:0a:d9:71:2f:45:60:86:d1:4d:c1:99:9f:0d:47:
04:a0:d3:82:ac:9c:99:bb:73:1f:55:f9:95:53:93:
7c:cd:15:21:7a:0a:d7:27:3a:dc:ce:7c:00:bf:28:
2d:ec:8c:df:b0:bb:0b:96:b3:64:a6:05:dd:0e:86:
69:37:02:aa:c3:68:a3:2c:48:eb:27:e4:1d:8e:77:
6c:d4:9b:b1:6b:5e:90:58:9f:c7:8e:aa:7f:2c:5c:
2e:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:68:FF:81:1F:10:8F:36:04:86:3F:5F:FF:F5:9A:D4:93:D7:36:46
X509v3 Authority Key Identifier:
keyid:02:8F:DF:71:9D:47:A1:00:33:45:1A:83:38:4A:6D:B6:8D:BD:5B:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ao_fcZ1HoQAzRRqDOEptto29Ww8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/d49d52-50b1-4948-b1f7-055a9cad8df7/1/Ao_fcZ1HoQAzRRqDOEptto29Ww8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/d49d52-50b1-4948-b1f7-055a9cad8df7/1/Ao_fcZ1HoQAzRRqDOEptto29Ww8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:62:ab:1d:85:90:ca:16:29:3c:80:ca:da:06:d1:76:aa:ca:
39:d1:38:4b:40:c3:b4:40:3e:94:f1:e0:69:86:8e:7c:d3:e2:
b9:29:1e:e8:66:a8:56:96:77:bc:1a:d0:88:26:ae:73:4a:a2:
7e:3c:6a:96:3f:1a:bb:6f:4d:64:5a:51:ba:81:2c:96:7e:9f:
c9:eb:d3:1c:db:80:8f:e9:93:86:b5:6f:77:c0:e5:5b:5f:b9:
28:fb:ad:a3:12:59:c3:80:22:dc:26:fd:fd:65:15:93:9b:08:
ea:2a:64:67:0e:a9:55:ae:4e:c1:51:04:63:86:da:d2:cb:e9:
df:4f:b9:97:8d:ff:57:5e:b1:b4:d6:fb:40:c3:e0:30:88:8d:
b2:66:71:73:05:91:26:52:d3:7a:ac:98:33:b8:84:e2:00:fc:
c2:b3:d5:27:06:3d:65:17:1a:50:5e:8e:c4:86:05:ed:a8:41:
9f:d9:0c:c5:a8:4b:49:26:cc:e4:e3:d9:f4:9e:ad:a3:eb:84:
65:2f:16:55:3a:c5:6f:63:61:37:e2:64:ad:02:c5:9e:5d:24:
5d:fe:28:27:b9:6e:33:31:70:f0:25:2d:ba:b9:56:3e:7b:ac:
10:f2:9e:05:80:f6:e8:f5:2f:b3:1d:de:be:d3:4c:c7:12:51:
e7:91:e4:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:01:07 2026 by rpki-client