Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/632e89-8842-48b1-9dcf-2aeadb966b76/1/a7ptDw-bGff0POtD5zWaPYTpnZk.mft
File: a7ptDw-bGff0POtD5zWaPYTpnZk.mft (raw, json)
Hash identifier: DAIz9CBG93fcUUIRK1vCkOpSfGL6JuelP1J2Sa+UxT4=
Subject key identifier: 4D:A3:2A:E9:B4:FC:C8:84:9F:5C:F2:96:5E:7B:E0:EF:38:DD:D1:ED
Authority key identifier: 6B:BA:6D:0F:0F:9B:19:F7:F4:3C:EB:43:E7:35:9A:3D:84:E9:9D:99
Certificate issuer: /CN=6bba6d0f0f9b19f7f43ceb43e7359a3d84e99d99
Certificate serial: 019D389BCEF60609E861232F3108E5B443E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a7ptDw-bGff0POtD5zWaPYTpnZk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/632e89-8842-48b1-9dcf-2aeadb966b76/1/a7ptDw-bGff0POtD5zWaPYTpnZk.mft
Manifest number: 1898
Signing time: Sun 29 Mar 2026 08:00:28 +0000
Manifest this update: Sun 29 Mar 2026 08:00:28 +0000
Manifest next update: Mon 30 Mar 2026 08:00:28 +0000
Files and hashes: 1: Iz0LT_Qe2YCy1jRQ8uxVx9mEXjU.roa (hash: sj0aNBI2t2YqU/+4g0EyWrm6gSCBWXNbag0SeNr1xIk=)
2: a7ptDw-bGff0POtD5zWaPYTpnZk.crl (hash: wwLsVZdF7B9LO3UruFr5Cf3an2LhGCwR6qZOCk6DS6M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/632e89-8842-48b1-9dcf-2aeadb966b76/1/a7ptDw-bGff0POtD5zWaPYTpnZk.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/632e89-8842-48b1-9dcf-2aeadb966b76/1/a7ptDw-bGff0POtD5zWaPYTpnZk.mft
rsync://rpki.ripe.net/repository/DEFAULT/a7ptDw-bGff0POtD5zWaPYTpnZk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9b:ce:f6:06:09:e8:61:23:2f:31:08:e5:b4:43:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6bba6d0f0f9b19f7f43ceb43e7359a3d84e99d99
Validity
Not Before: Mar 29 08:00:28 2026 GMT
Not After : Mar 30 08:00:28 2026 GMT
Subject: CN=4da32ae9b4fcc8849f5cf2965e7be0ef38ddd1ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:b4:ff:dd:00:3c:5d:d2:f9:92:84:bc:40:f1:
3b:22:a4:da:50:34:24:0f:a5:1a:ba:2f:46:3f:9a:
23:0f:8d:6b:3a:5a:5b:86:2c:8e:d5:52:f0:19:f5:
f6:b7:56:2b:8c:e6:5b:3a:6e:db:59:eb:32:9d:88:
22:91:fe:ce:e9:9b:7b:6a:67:a6:8f:78:43:41:57:
d6:5d:8c:a1:b2:50:cc:d2:a7:bb:74:61:98:4b:1b:
e4:62:07:31:56:e9:9b:6e:aa:aa:86:b3:75:05:be:
f8:c3:0b:16:db:35:b6:2a:23:50:17:38:12:cd:a4:
ae:6f:9a:f0:c1:4e:5c:72:31:c7:52:df:94:7f:07:
6f:ca:05:ae:15:aa:60:4c:99:ae:88:5d:94:d9:50:
ed:6b:f0:de:8e:44:e1:93:a4:bf:76:93:30:9f:fb:
e5:31:13:97:93:aa:55:7f:cb:48:df:23:5b:89:c4:
1f:86:90:b5:48:1c:d7:74:98:4d:43:88:6b:ac:f4:
13:ff:83:1c:6d:b7:5f:56:d7:72:34:56:96:ab:df:
88:d3:82:ab:61:28:57:00:67:24:da:ab:4b:35:69:
0e:0a:bc:a4:39:6f:a1:16:05:f6:81:3c:ac:57:ee:
6d:f0:b8:9d:74:b0:22:b9:4e:bd:60:b6:9b:ce:7c:
80:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:A3:2A:E9:B4:FC:C8:84:9F:5C:F2:96:5E:7B:E0:EF:38:DD:D1:ED
X509v3 Authority Key Identifier:
keyid:6B:BA:6D:0F:0F:9B:19:F7:F4:3C:EB:43:E7:35:9A:3D:84:E9:9D:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7ptDw-bGff0POtD5zWaPYTpnZk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/632e89-8842-48b1-9dcf-2aeadb966b76/1/a7ptDw-bGff0POtD5zWaPYTpnZk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/632e89-8842-48b1-9dcf-2aeadb966b76/1/a7ptDw-bGff0POtD5zWaPYTpnZk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:8f:50:a6:e0:9c:b8:bb:8c:38:46:43:30:4c:3b:3f:b8:cd:
88:60:2d:1a:4a:f5:80:d6:47:67:bb:5d:ae:bd:24:4a:af:2c:
bf:06:62:c7:d9:d8:0b:32:2d:04:9b:4c:a4:c9:c2:d5:be:2a:
e0:6a:8e:de:ba:cd:74:f8:61:0b:0e:1a:ca:47:9f:cc:43:aa:
6b:0d:b3:1d:6f:b1:94:d2:69:27:cf:0d:f7:6f:b5:37:7c:b7:
f2:56:74:09:70:f6:81:05:8c:ca:8b:23:86:9e:4c:40:66:ca:
f9:34:24:31:9e:f1:71:b7:7a:a8:f0:7f:1e:ef:19:86:ed:50:
6f:24:15:90:c6:2d:68:83:05:fd:3e:a5:21:da:ed:93:75:0f:
2f:ef:e9:b6:45:bc:ee:dc:f4:6c:a9:ef:a7:6e:2f:f3:77:5b:
cd:7b:cb:ea:cb:6a:58:40:29:32:1d:83:2b:40:16:a7:9d:8e:
75:a3:78:5b:43:34:a3:e7:da:7b:bf:e3:3b:68:9b:69:be:cf:
f2:73:93:db:22:e2:9a:09:14:61:ac:22:02:0d:67:3b:78:37:
de:59:f8:ee:61:5b:c7:2c:ec:9a:f4:40:01:2b:87:fb:cc:26:
8a:13:41:0b:92:69:28:63:67:28:33:54:be:b6:22:44:c4:44:
47:ff:90:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:06:19 2026 by rpki-client