Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/a83337-6e16-4cd9-921a-87b010ea6235/1/p6U4qsM3eEYOGXAaq1lSx6ol8Fw.mft
File: p6U4qsM3eEYOGXAaq1lSx6ol8Fw.mft (raw, json)
Hash identifier: wvO5DUZOd8afOCMgivzvmuaGpwSBMIuTKayEXMsSgvE=
Subject key identifier: A9:43:F1:35:3B:8D:71:E8:D2:AB:AB:E1:A5:F6:43:DA:30:F4:6A:D7
Authority key identifier: A7:A5:38:AA:C3:37:78:46:0E:19:70:1A:AB:59:52:C7:AA:25:F0:5C
Certificate issuer: /CN=a7a538aac33778460e19701aab5952c7aa25f05c
Certificate serial: 019F85314ABA02C23F8892239170E0BAE6B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p6U4qsM3eEYOGXAaq1lSx6ol8Fw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/a83337-6e16-4cd9-921a-87b010ea6235/1/p6U4qsM3eEYOGXAaq1lSx6ol8Fw.mft
Manifest number: 0ABE
Signing time: Tue 21 Jul 2026 15:00:27 +0000
Manifest this update: Tue 21 Jul 2026 15:00:27 +0000
Manifest next update: Wed 22 Jul 2026 15:00:27 +0000
Files and hashes: 1: bes3Ak7lAYiWjjD6sUuNX8KOJ5k.roa (hash: lgQ99fWD6Q82webEcbroGsEXSi8mGfzgwcI7IvYH5SE=)
2: p6U4qsM3eEYOGXAaq1lSx6ol8Fw.crl (hash: EvaCl0/9mx2qL2nvlBxwcqfzSFv2GBtW/mf6EPdXvHc=)
3: pyzNTgyDpRY88na56omeNzoc2p8.roa (hash: AtQp7azQyTl2ubez83Xz2smb6q4U417Sym3wqe3HC6M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/a83337-6e16-4cd9-921a-87b010ea6235/1/p6U4qsM3eEYOGXAaq1lSx6ol8Fw.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/a83337-6e16-4cd9-921a-87b010ea6235/1/p6U4qsM3eEYOGXAaq1lSx6ol8Fw.mft
rsync://rpki.ripe.net/repository/DEFAULT/p6U4qsM3eEYOGXAaq1lSx6ol8Fw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:85:31:4a:ba:02:c2:3f:88:92:23:91:70:e0:ba:e6:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7a538aac33778460e19701aab5952c7aa25f05c
Validity
Not Before: Jul 21 15:00:27 2026 GMT
Not After : Jul 22 15:00:27 2026 GMT
Subject: CN=a943f1353b8d71e8d2ababe1a5f643da30f46ad7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:90:d5:ca:7d:7f:35:64:2b:9a:3f:73:e3:66:
4d:56:c8:e5:b6:04:76:ee:98:8f:6b:20:3f:46:df:
56:4b:36:68:e0:37:75:65:ac:0f:96:cf:68:fa:a1:
0a:e8:88:6c:84:09:43:3f:52:b7:a5:bf:9e:ab:1c:
89:d7:ea:87:14:a6:df:bd:d0:51:8c:7a:33:b1:3c:
7c:ff:d7:c5:9e:50:6f:1f:21:c4:04:a0:50:d5:7c:
d3:97:92:67:4e:82:7f:83:ce:19:14:73:89:8f:14:
57:e9:08:b1:89:02:16:f0:ef:3b:f0:27:ee:d8:14:
02:25:8e:65:4a:0c:6c:23:81:0e:e4:90:1c:08:16:
c2:c3:1b:ed:a3:21:e5:49:c0:67:4c:e5:14:70:2d:
34:7d:6c:7e:aa:f8:02:03:d8:5f:06:d5:83:36:a4:
83:4d:b5:f7:a5:c9:d6:8a:51:02:ff:50:76:35:d5:
47:35:79:3d:28:07:38:da:38:0e:18:ab:f2:d3:f1:
29:17:a1:c5:a1:5d:e7:3b:32:0d:8e:4f:7c:61:db:
b5:8c:1d:ae:3c:cc:5b:54:ad:4d:5f:d8:b1:b3:8a:
60:b8:f6:64:ee:42:3a:0b:76:81:b6:b0:4d:c4:72:
7a:0b:fe:e5:48:be:6e:4d:ea:8f:71:ae:32:3f:b8:
91:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:43:F1:35:3B:8D:71:E8:D2:AB:AB:E1:A5:F6:43:DA:30:F4:6A:D7
X509v3 Authority Key Identifier:
keyid:A7:A5:38:AA:C3:37:78:46:0E:19:70:1A:AB:59:52:C7:AA:25:F0:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p6U4qsM3eEYOGXAaq1lSx6ol8Fw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/a83337-6e16-4cd9-921a-87b010ea6235/1/p6U4qsM3eEYOGXAaq1lSx6ol8Fw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/a83337-6e16-4cd9-921a-87b010ea6235/1/p6U4qsM3eEYOGXAaq1lSx6ol8Fw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:16:c6:c5:d4:f2:e3:9a:8b:c7:64:71:87:28:4a:de:38:1f:
40:a9:bf:30:2f:f4:8b:e6:e8:e5:c2:9c:df:db:53:58:d5:18:
dd:2b:0c:f8:e0:96:48:84:8f:33:2d:af:0b:d7:43:59:a3:05:
0f:0d:f4:cc:83:03:8c:e9:4c:a5:9c:cf:10:b4:b1:30:77:63:
3d:c6:09:3d:bd:2e:8d:0a:66:72:3b:a9:d0:b4:80:27:d5:e0:
14:13:03:53:1b:a2:35:73:5a:b3:49:d6:bd:74:b0:d7:c0:9a:
37:66:33:c7:2b:6d:f1:d6:c0:4b:23:34:8a:51:72:3a:72:0b:
51:c9:0d:4d:85:ce:d3:80:df:5a:49:54:83:1e:2b:c6:db:fa:
04:52:54:71:39:ae:42:a4:b1:0e:69:3c:a7:d2:8b:0c:a6:7b:
97:d9:d4:d6:c0:62:92:09:dc:8f:15:40:33:c3:14:23:76:5c:
e1:3e:cc:b4:23:0a:0b:d2:16:81:39:a1:87:d6:f8:c6:f2:b1:
e8:70:6f:a3:f0:8f:48:1c:ed:55:07:61:f5:98:4d:e7:d1:b4:
cb:53:82:de:d6:2e:21:b4:16:a1:92:a9:e3:f2:ea:7d:d4:35:
1e:44:a1:d8:04:2e:81:19:6a:e1:82:f9:e6:34:6f:43:dd:eb:
68:07:42:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 21:51:06 2026 by rpki-client