Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/12/632e89-8842-48b1-9dcf-2aeadb966b76/1/a7ptDw-bGff0POtD5zWaPYTpnZk.mft
File: a7ptDw-bGff0POtD5zWaPYTpnZk.mft (raw, json)
Hash identifier: lNAWM6iQN/YwG2mufGBWQy4KCsCE19pqjTIeqTZ2O44=
Subject key identifier: 72:33:2B:8B:82:0D:20:F9:35:F3:FC:CE:B4:6F:4D:40:AD:70:6B:36
Authority key identifier: 6B:BA:6D:0F:0F:9B:19:F7:F4:3C:EB:43:E7:35:9A:3D:84:E9:9D:99
Certificate issuer: /CN=6bba6d0f0f9b19f7f43ceb43e7359a3d84e99d99
Certificate serial: 01A0F3440C086FF570882ED8388E7925D97B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a7ptDw-bGff0POtD5zWaPYTpnZk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/632e89-8842-48b1-9dcf-2aeadb966b76/1/a7ptDw-bGff0POtD5zWaPYTpnZk.mft
Manifest number: 1A87
Signing time: Wed 30 Sep 2026 17:01:58 +0000
Manifest this update: Wed 30 Sep 2026 17:01:58 +0000
Manifest next update: Thu 01 Oct 2026 17:01:58 +0000
Files and hashes: 1: 1FeE-xe_EaE3XH3Ygeo7C-eUXd8.asa (hash: 6bN7q1BQMUp1hzHOMNiQw/jYHXi6V75/bSdbFIE5Wyg=)
2: Iz0LT_Qe2YCy1jRQ8uxVx9mEXjU.roa (hash: sj0aNBI2t2YqU/+4g0EyWrm6gSCBWXNbag0SeNr1xIk=)
3: a7ptDw-bGff0POtD5zWaPYTpnZk.crl (hash: OTTldkN1yb7ukNcy065UD0IzX1OaiOnojA3XrUosQXc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/632e89-8842-48b1-9dcf-2aeadb966b76/1/a7ptDw-bGff0POtD5zWaPYTpnZk.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/632e89-8842-48b1-9dcf-2aeadb966b76/1/a7ptDw-bGff0POtD5zWaPYTpnZk.mft
rsync://rpki.ripe.net/repository/DEFAULT/a7ptDw-bGff0POtD5zWaPYTpnZk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 Oct 2026 16:23:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f3:44:0c:08:6f:f5:70:88:2e:d8:38:8e:79:25:d9:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6bba6d0f0f9b19f7f43ceb43e7359a3d84e99d99
Validity
Not Before: Sep 30 17:01:58 2026 GMT
Not After : Oct 1 17:01:58 2026 GMT
Subject: CN=72332b8b820d20f935f3fcceb46f4d40ad706b36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:a3:49:9b:68:f8:a7:8d:fd:54:ee:0a:81:be:
6f:79:8d:76:7a:ca:bd:c1:9d:a7:3e:1a:5c:2e:51:
55:6a:0e:ea:cc:8d:1c:fa:e9:a2:34:32:9a:f3:9a:
da:89:43:8e:70:4b:78:75:bc:fd:3c:00:bc:23:60:
16:75:1e:8f:d2:32:fd:20:b0:15:5b:68:b7:9c:ff:
f7:42:e4:e7:c0:f8:c1:ae:f9:17:58:cd:1b:15:41:
5c:b7:42:9b:2d:95:e0:59:29:45:c2:79:ab:87:1a:
18:58:1a:a1:93:88:14:b1:3f:5a:e5:39:a5:62:94:
f1:b0:02:8c:21:8f:37:88:fe:20:2a:1c:e8:fc:ec:
8c:ff:ef:31:dc:72:c8:02:b8:13:2c:35:8a:d1:38:
05:3f:1b:51:f4:1e:97:35:4d:00:82:8a:ab:51:3b:
ab:07:99:0f:e9:87:84:b0:18:4f:f2:e0:3b:01:77:
75:b8:90:cd:84:95:92:52:87:cb:ca:88:8a:95:73:
ba:1a:21:36:b4:5d:66:50:0e:d9:f1:6e:0c:92:dc:
6d:dd:81:b5:bb:9b:16:3b:76:bc:de:c9:72:8f:01:
64:f4:f6:68:43:67:e4:30:09:04:69:6f:96:e6:15:
c5:f8:09:7d:03:13:32:39:ae:18:a7:fb:e3:18:aa:
fe:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:33:2B:8B:82:0D:20:F9:35:F3:FC:CE:B4:6F:4D:40:AD:70:6B:36
X509v3 Authority Key Identifier:
keyid:6B:BA:6D:0F:0F:9B:19:F7:F4:3C:EB:43:E7:35:9A:3D:84:E9:9D:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7ptDw-bGff0POtD5zWaPYTpnZk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/632e89-8842-48b1-9dcf-2aeadb966b76/1/a7ptDw-bGff0POtD5zWaPYTpnZk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/632e89-8842-48b1-9dcf-2aeadb966b76/1/a7ptDw-bGff0POtD5zWaPYTpnZk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:b5:07:e3:b4:aa:89:6d:55:01:f2:98:98:af:c8:8c:90:27:
f1:00:8f:30:c7:59:bb:44:3c:35:43:3b:fa:1d:83:34:04:36:
26:71:e9:0d:4b:65:54:9a:ef:74:ee:d5:c7:39:35:4e:bf:25:
61:4c:5d:0a:c0:71:d5:7a:3a:05:b3:d5:af:56:a4:51:7b:c3:
d6:2f:66:9a:0b:f9:00:13:05:fa:b4:b9:97:26:7d:67:c9:e2:
bc:7f:46:f9:86:ba:5c:f5:11:e6:01:b7:a3:e9:30:56:60:e3:
a6:d6:e5:78:ab:cd:e0:20:99:95:9d:d8:d4:0a:d0:47:ef:f1:
ac:6e:eb:a5:27:2a:ad:b1:f3:e7:c9:1e:e9:bf:a1:6f:a7:df:
95:34:93:08:15:27:23:0a:05:5c:a3:28:ea:43:98:8a:c7:76:
47:47:7c:ae:fa:68:bf:0f:94:46:33:ff:85:89:47:6a:0c:fd:
97:37:05:26:6e:31:7e:63:04:41:2d:5a:e4:87:bf:50:24:e1:
4d:1a:4f:41:88:14:e9:38:50:77:e8:30:3a:4e:65:ab:3e:63:
2a:35:0e:c6:0b:ff:7b:17:dc:cd:bc:99:15:97:77:fe:a4:91:
77:25:48:c1:52:e5:51:7d:2f:d9:db:f4:82:a5:22:71:92:ce:
60:3a:85:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 22:56:56 2026 by rpki-client