Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/cce012-2cb9-4be6-a1b6-d5167e6756b6/1/o_AJmtht2ENOUvjG_d7rLD7Wxso.mft
File: o_AJmtht2ENOUvjG_d7rLD7Wxso.mft (raw, json)
Hash identifier: qmb/yqWkJCoX//3N8Zy9XxAsIe92iRed6Nk5ov97lpg=
Subject key identifier: 14:0F:53:AF:DF:3E:E6:90:40:25:EB:1D:A0:8E:F7:28:1A:C9:80:B7
Authority key identifier: A3:F0:09:9A:D8:6D:D8:43:4E:52:F8:C6:FD:DE:EB:2C:3E:D6:C6:CA
Certificate issuer: /CN=a3f0099ad86dd8434e52f8c6fddeeb2c3ed6c6ca
Certificate serial: 019D284DB1C59F94DCC3E7F6E26831D1E530
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o_AJmtht2ENOUvjG_d7rLD7Wxso.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/cce012-2cb9-4be6-a1b6-d5167e6756b6/1/o_AJmtht2ENOUvjG_d7rLD7Wxso.mft
Manifest number: 0DB4
Signing time: Thu 26 Mar 2026 04:01:13 +0000
Manifest this update: Thu 26 Mar 2026 04:01:13 +0000
Manifest next update: Fri 27 Mar 2026 04:01:13 +0000
Files and hashes: 1: h1nd4Qn-NC3F4blTzKUQQVdDcGU.roa (hash: lz23Y5PvDIkn6cwsXMHaDyiIabMEIIObGoga2OQiexA=)
2: o_AJmtht2ENOUvjG_d7rLD7Wxso.crl (hash: 85vGbXbcZ0o25DOIoT+GzKkDNIf3VBGqpSeVHzk8800=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/cce012-2cb9-4be6-a1b6-d5167e6756b6/1/o_AJmtht2ENOUvjG_d7rLD7Wxso.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/cce012-2cb9-4be6-a1b6-d5167e6756b6/1/o_AJmtht2ENOUvjG_d7rLD7Wxso.mft
rsync://rpki.ripe.net/repository/DEFAULT/o_AJmtht2ENOUvjG_d7rLD7Wxso.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4d:b1:c5:9f:94:dc:c3:e7:f6:e2:68:31:d1:e5:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3f0099ad86dd8434e52f8c6fddeeb2c3ed6c6ca
Validity
Not Before: Mar 26 04:01:13 2026 GMT
Not After : Mar 27 04:01:13 2026 GMT
Subject: CN=140f53afdf3ee6904025eb1da08ef7281ac980b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:0c:e5:3c:cd:47:b4:71:3f:44:b4:7d:1e:1e:
96:7f:22:bc:34:ae:97:63:3b:e5:c1:ca:5f:98:79:
3d:96:60:49:ea:9f:e4:7d:2a:0b:5c:e1:5e:5d:e7:
c9:3d:bc:28:04:93:9e:a8:3b:86:da:5b:16:70:b9:
2a:02:40:d9:2a:53:49:8d:2b:ec:08:f9:3c:2a:4d:
86:d6:54:ea:c9:20:64:fd:20:70:36:b5:b3:fe:80:
e3:32:0d:da:b9:2e:48:ad:0c:55:fb:2b:d3:1f:4e:
3b:1c:a5:f6:c8:55:7d:e2:ce:64:0a:87:96:b1:de:
dc:a3:67:83:bf:e1:7b:19:5c:3a:9c:80:f3:b0:59:
ae:34:ee:c6:0b:6e:77:1e:d3:0a:84:31:fd:e1:36:
a9:78:c2:d0:ee:61:e2:a9:a1:96:10:fb:38:8f:aa:
c0:2b:d0:02:36:ba:06:46:c0:69:5c:f1:29:6b:aa:
16:a7:64:98:46:55:5f:a1:5d:61:7a:63:eb:d7:73:
4c:1d:47:7a:dc:40:36:89:35:46:6f:de:f6:4d:8a:
fc:ec:7b:77:8e:ae:36:05:e0:b0:bc:a2:56:d6:47:
df:64:48:09:62:23:73:8a:09:ec:1e:7c:05:0f:88:
e8:4f:51:d0:3c:2a:0c:5d:d2:b4:97:60:c1:d4:0b:
ce:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:0F:53:AF:DF:3E:E6:90:40:25:EB:1D:A0:8E:F7:28:1A:C9:80:B7
X509v3 Authority Key Identifier:
keyid:A3:F0:09:9A:D8:6D:D8:43:4E:52:F8:C6:FD:DE:EB:2C:3E:D6:C6:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o_AJmtht2ENOUvjG_d7rLD7Wxso.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/cce012-2cb9-4be6-a1b6-d5167e6756b6/1/o_AJmtht2ENOUvjG_d7rLD7Wxso.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/cce012-2cb9-4be6-a1b6-d5167e6756b6/1/o_AJmtht2ENOUvjG_d7rLD7Wxso.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:64:67:50:8f:08:93:2d:cd:6e:e1:56:95:69:61:33:aa:81:
ed:cd:65:12:12:67:c9:1f:8f:b8:c0:2a:46:04:1a:bd:18:30:
28:a7:58:ca:7b:6a:3a:48:7c:2b:b9:45:25:97:70:c6:1c:03:
16:1a:6d:7d:f4:28:8b:99:91:de:96:42:da:49:f8:97:ce:8c:
c9:b9:33:cb:b7:fe:72:04:04:4c:cd:e3:85:ed:13:db:06:da:
77:51:a4:0b:f5:55:c7:15:a5:96:c3:4b:bd:11:8b:79:aa:f8:
35:28:dd:b6:0f:dd:94:05:f2:f1:22:4e:23:6d:b2:f5:2d:d9:
f3:67:bc:56:a0:1f:d4:1b:a7:9b:65:d9:7f:58:a7:59:d5:fa:
c0:9c:05:0b:40:cf:64:4a:fb:f4:ca:0a:75:76:49:be:d6:7c:
7f:5b:6e:69:2a:a6:59:6e:a2:8a:63:ba:8d:0e:e4:c0:c5:25:
cd:09:b0:dd:2b:b2:a2:3b:60:ce:d1:1e:64:c7:c5:24:03:25:
02:06:4a:2c:9b:d2:d4:f6:59:9a:26:3b:8c:4c:68:5a:1d:c7:
7d:43:94:18:37:b1:bc:ba:23:3a:08:1b:ed:42:30:70:f8:90:
45:80:f0:56:ab:a9:fc:ce:91:30:9a:71:16:86:e8:71:b8:fc:
87:a9:ff:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:57:01 2026 by rpki-client