Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/12/632e89-8842-48b1-9dcf-2aeadb966b76/1/a7ptDw-bGff0POtD5zWaPYTpnZk.mft
File: a7ptDw-bGff0POtD5zWaPYTpnZk.mft (raw, json)
Hash identifier: 8WcBG1IV+XTa3vbx4oaf9KlLp1MNO3AKNVaY6atO6L4=
Subject key identifier: 60:8B:D3:25:FE:2D:D4:70:9F:CF:36:02:49:FA:AF:FE:AA:63:FE:F1
Authority key identifier: 6B:BA:6D:0F:0F:9B:19:F7:F4:3C:EB:43:E7:35:9A:3D:84:E9:9D:99
Certificate issuer: /CN=6bba6d0f0f9b19f7f43ceb43e7359a3d84e99d99
Certificate serial: 01A0F720678D3D73240E1BAE2D9413BFCF35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a7ptDw-bGff0POtD5zWaPYTpnZk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/632e89-8842-48b1-9dcf-2aeadb966b76/1/a7ptDw-bGff0POtD5zWaPYTpnZk.mft
Manifest number: 1A89
Signing time: Thu 01 Oct 2026 11:01:30 +0000
Manifest this update: Thu 01 Oct 2026 11:01:30 +0000
Manifest next update: Fri 02 Oct 2026 11:01:30 +0000
Files and hashes: 1: 1FeE-xe_EaE3XH3Ygeo7C-eUXd8.asa (hash: 6bN7q1BQMUp1hzHOMNiQw/jYHXi6V75/bSdbFIE5Wyg=)
2: Iz0LT_Qe2YCy1jRQ8uxVx9mEXjU.roa (hash: sj0aNBI2t2YqU/+4g0EyWrm6gSCBWXNbag0SeNr1xIk=)
3: a7ptDw-bGff0POtD5zWaPYTpnZk.crl (hash: Pe3EakJeySyzTnv2jatTqmRbCkoIy8+9hGNPPSFRrUU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/632e89-8842-48b1-9dcf-2aeadb966b76/1/a7ptDw-bGff0POtD5zWaPYTpnZk.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/632e89-8842-48b1-9dcf-2aeadb966b76/1/a7ptDw-bGff0POtD5zWaPYTpnZk.mft
rsync://rpki.ripe.net/repository/DEFAULT/a7ptDw-bGff0POtD5zWaPYTpnZk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 Oct 2026 11:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f7:20:67:8d:3d:73:24:0e:1b:ae:2d:94:13:bf:cf:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6bba6d0f0f9b19f7f43ceb43e7359a3d84e99d99
Validity
Not Before: Oct 1 11:01:30 2026 GMT
Not After : Oct 2 11:01:30 2026 GMT
Subject: CN=608bd325fe2dd4709fcf360249faaffeaa63fef1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:e1:35:23:c6:56:aa:e8:99:aa:e6:e7:11:4f:
a8:ce:13:6e:32:ba:25:82:b8:86:4d:e9:59:7a:57:
a5:95:05:43:c3:70:03:50:9b:f3:2b:be:d4:5e:4e:
98:89:a8:0c:55:a5:57:5c:8d:0b:5a:0d:40:6e:9d:
34:a7:a5:74:e0:0c:25:fa:32:09:79:39:e1:94:96:
01:88:9c:15:b4:9e:bc:cd:8d:aa:0b:82:70:b6:df:
42:6a:3a:8f:d3:97:94:65:8c:ca:a8:86:82:40:5d:
30:fd:d8:f9:ec:ea:b9:75:bb:b4:61:b6:65:4c:b2:
ea:b5:3d:5a:5a:65:5c:9a:52:73:b5:2e:07:43:f8:
62:4e:57:df:2b:74:1b:ea:12:31:99:46:02:37:eb:
a1:90:58:66:6c:c5:72:5b:4f:f1:34:f9:88:f0:19:
45:01:ff:c8:96:a0:de:aa:22:d6:0b:26:8d:1f:54:
b6:5d:2d:3d:e1:6d:20:1e:61:1d:97:df:79:01:94:
9e:52:6b:5b:29:e0:ab:01:10:dd:fa:11:0c:00:c9:
34:96:1e:70:ef:71:69:46:e1:99:2b:85:fd:d0:b3:
2a:9d:68:2f:5c:0a:0b:5b:94:10:72:a1:f2:e8:bd:
a2:bd:90:9d:38:8d:04:bf:05:ac:c2:f0:2a:98:3e:
53:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:8B:D3:25:FE:2D:D4:70:9F:CF:36:02:49:FA:AF:FE:AA:63:FE:F1
X509v3 Authority Key Identifier:
keyid:6B:BA:6D:0F:0F:9B:19:F7:F4:3C:EB:43:E7:35:9A:3D:84:E9:9D:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7ptDw-bGff0POtD5zWaPYTpnZk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/632e89-8842-48b1-9dcf-2aeadb966b76/1/a7ptDw-bGff0POtD5zWaPYTpnZk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/632e89-8842-48b1-9dcf-2aeadb966b76/1/a7ptDw-bGff0POtD5zWaPYTpnZk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:0e:b4:a6:84:6f:ec:7d:3b:5f:88:2a:33:9d:5a:a4:6d:d3:
b6:ed:e6:58:b5:68:ab:cd:ff:c5:d5:cf:96:90:f9:bb:87:63:
ce:f9:55:e9:d7:85:5d:4f:7f:7b:45:fb:c7:68:c4:b5:7c:de:
30:eb:5f:9a:82:63:27:99:d1:43:de:4e:d9:7e:eb:a3:c6:c0:
3d:e2:cd:e6:a5:3f:be:21:da:a2:90:ea:80:8b:7a:e6:44:ef:
6e:d5:ce:13:1d:8f:67:35:84:b5:ab:0b:e4:62:bf:25:fa:99:
b7:45:c7:1e:d4:02:c5:c2:5d:97:e6:1c:03:f7:78:0b:f3:c2:
09:5d:6b:1f:84:84:ad:81:bd:4f:13:74:d6:11:e6:6b:7e:ba:
82:60:0a:2c:a0:3e:b8:9c:3b:d2:eb:ee:5e:71:1d:49:f7:93:
f8:32:73:aa:5c:25:18:05:da:c0:24:9c:aa:14:d6:2b:9e:8d:
ec:7c:73:ef:d4:c0:e4:6b:05:6d:4c:58:c8:8f:44:05:88:3b:
9a:1a:fd:7e:47:ac:90:29:49:70:81:62:26:24:3f:70:52:17:
8e:ad:06:27:aa:5d:4c:40:62:37:40:56:a7:e7:16:fa:c0:db:
0d:6f:51:18:f1:93:23:89:8b:ef:a0:a2:e2:8d:33:7c:1c:22:
92:69:fe:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 1 19:48:44 2026 by rpki-client