Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/f9d515-e629-4d10-adf3-08bd2e6f2f2c/1/o6oJDvqtugOsmUOrfOIxZXhvmB8.mft
File: o6oJDvqtugOsmUOrfOIxZXhvmB8.mft (raw, json)
Hash identifier: LN45byCJbzNWcmZl6pET3SQVRgJ85ssdWM1BV/HEtiM=
Subject key identifier: AE:E9:61:0B:2F:F0:BA:0B:42:93:6F:CF:57:78:55:2D:76:54:76:0B
Authority key identifier: A3:AA:09:0E:FA:AD:BA:03:AC:99:43:AB:7C:E2:31:65:78:6F:98:1F
Certificate issuer: /CN=a3aa090efaadba03ac9943ab7ce23165786f981f
Certificate serial: 019D3262A7959ADFAE28351A5EEB74234257
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o6oJDvqtugOsmUOrfOIxZXhvmB8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/f9d515-e629-4d10-adf3-08bd2e6f2f2c/1/o6oJDvqtugOsmUOrfOIxZXhvmB8.mft
Manifest number: 53
Signing time: Sat 28 Mar 2026 03:00:19 +0000
Manifest this update: Sat 28 Mar 2026 03:00:19 +0000
Manifest next update: Sun 29 Mar 2026 03:00:19 +0000
Files and hashes: 1: kfWSD5tVhW1XJa0Rw0pitcZgvIg.roa (hash: 6vFBk5z4/iD79DEPt868wv+otcleLhuYUPcOmF1pykc=)
2: o6oJDvqtugOsmUOrfOIxZXhvmB8.crl (hash: xwnRNKF28CqhSwy59Ub+vT/VYk7sFQ6fs8oKL+ZTU/g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/f9d515-e629-4d10-adf3-08bd2e6f2f2c/1/o6oJDvqtugOsmUOrfOIxZXhvmB8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/f9d515-e629-4d10-adf3-08bd2e6f2f2c/1/o6oJDvqtugOsmUOrfOIxZXhvmB8.mft
rsync://rpki.ripe.net/repository/DEFAULT/o6oJDvqtugOsmUOrfOIxZXhvmB8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:32:62:a7:95:9a:df:ae:28:35:1a:5e:eb:74:23:42:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3aa090efaadba03ac9943ab7ce23165786f981f
Validity
Not Before: Mar 28 03:00:19 2026 GMT
Not After : Mar 29 03:00:19 2026 GMT
Subject: CN=aee9610b2ff0ba0b42936fcf5778552d7654760b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:a0:a2:c6:1e:ab:da:7a:19:dd:b8:8d:5e:1d:
50:78:75:7e:dd:aa:f2:95:f6:db:e1:e6:96:3e:8e:
92:49:1f:8b:fb:14:44:39:f3:de:78:88:00:f2:a0:
85:bf:59:0b:84:c2:53:0e:80:6b:1d:ec:ea:16:d5:
82:04:96:cc:29:6d:6f:20:e9:98:0c:06:55:d9:f7:
fb:4c:05:82:f6:5d:a1:2b:6d:8c:80:ac:50:4a:04:
5a:ed:9b:ae:e0:ba:f7:0f:0b:a4:88:13:2b:a5:89:
e7:20:86:b6:88:85:08:33:b1:f4:e6:ea:27:a1:5b:
1a:41:68:70:95:f7:35:b4:d6:c1:fb:c7:e6:29:f5:
c3:56:a9:e7:ed:0b:94:84:39:ad:83:75:35:f3:10:
09:a2:03:c1:82:24:97:69:f1:9a:e1:3c:b1:eb:4d:
1f:a3:be:71:91:b7:5e:7e:71:70:84:43:34:2e:38:
a8:3b:db:d3:56:e7:94:37:01:e2:2a:44:c5:61:e1:
db:cb:7c:66:8c:39:26:f3:7b:d7:83:31:3d:95:d8:
4e:fc:9d:9f:ff:9c:f8:32:8e:00:0c:16:1f:a7:30:
3a:db:38:bb:10:44:84:2d:9b:7e:e2:f5:05:43:19:
f6:fd:58:7f:fe:26:95:34:29:45:55:f9:ac:a3:bc:
a8:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:E9:61:0B:2F:F0:BA:0B:42:93:6F:CF:57:78:55:2D:76:54:76:0B
X509v3 Authority Key Identifier:
keyid:A3:AA:09:0E:FA:AD:BA:03:AC:99:43:AB:7C:E2:31:65:78:6F:98:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o6oJDvqtugOsmUOrfOIxZXhvmB8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/f9d515-e629-4d10-adf3-08bd2e6f2f2c/1/o6oJDvqtugOsmUOrfOIxZXhvmB8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/f9d515-e629-4d10-adf3-08bd2e6f2f2c/1/o6oJDvqtugOsmUOrfOIxZXhvmB8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:f0:f5:4f:e4:1b:65:19:c1:eb:ff:2d:96:96:e2:52:02:db:
fe:d9:fb:ce:68:05:bb:7f:2b:ac:bc:8b:13:5b:d0:19:a3:97:
16:76:8a:fc:26:84:6a:5b:bc:fe:58:64:3f:c2:cc:c0:b3:be:
0e:e4:26:07:5a:d6:b8:92:f2:b5:ae:e0:4a:f9:d8:b2:5e:7b:
d6:df:ab:3a:45:6c:a3:60:ff:04:ea:41:54:7a:60:69:9c:64:
97:bf:a1:57:79:d7:b1:d3:2c:27:e5:32:d2:8e:a6:73:65:3d:
d5:e5:68:1a:ef:34:19:51:d7:3f:3a:d5:41:92:8a:dd:51:88:
17:66:3f:d9:e6:88:35:76:dd:4a:90:d1:9e:b4:01:90:c3:e9:
9f:2d:a8:75:12:c7:a0:c2:d2:11:4b:d0:18:18:b9:6e:00:d3:
b4:9f:81:93:21:75:f0:0d:cf:a3:9e:82:86:bf:02:ce:25:5c:
bd:9e:d6:6c:e2:2c:b8:7a:94:2d:54:6b:6b:5f:09:12:35:90:
b8:05:09:15:3d:d1:3d:27:23:1a:75:20:96:f7:8e:cb:bb:84:
22:af:e9:5c:fe:ec:3f:c0:ad:b5:bc:f4:c0:12:e6:fa:a0:38:
f9:16:0a:b8:f0:e4:f4:2d:26:b4:28:8f:4c:03:e9:0a:9d:db:
57:ce:b5:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:01:00 2026 by rpki-client