Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/632e89-8842-48b1-9dcf-2aeadb966b76/1/a7ptDw-bGff0POtD5zWaPYTpnZk.mft
File: a7ptDw-bGff0POtD5zWaPYTpnZk.mft (raw, json)
Hash identifier: EghtMHbIw5YSF+FvfM8ejoGbO0w8RokVGI1aZivfIHU=
Subject key identifier: 87:4A:E6:01:E9:49:65:0B:4A:A5:EC:8F:A9:61:17:9A:F9:7D:7F:10
Authority key identifier: 6B:BA:6D:0F:0F:9B:19:F7:F4:3C:EB:43:E7:35:9A:3D:84:E9:9D:99
Certificate issuer: /CN=6bba6d0f0f9b19f7f43ceb43e7359a3d84e99d99
Certificate serial: 019FF83611CFBBFF32010D79D0EACB5EDF2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a7ptDw-bGff0POtD5zWaPYTpnZk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/632e89-8842-48b1-9dcf-2aeadb966b76/1/a7ptDw-bGff0POtD5zWaPYTpnZk.mft
Manifest number: 1A05
Signing time: Wed 12 Aug 2026 23:02:00 +0000
Manifest this update: Wed 12 Aug 2026 23:02:00 +0000
Manifest next update: Thu 13 Aug 2026 23:02:00 +0000
Files and hashes: 1: 1FeE-xe_EaE3XH3Ygeo7C-eUXd8.asa (hash: 6bN7q1BQMUp1hzHOMNiQw/jYHXi6V75/bSdbFIE5Wyg=)
2: Iz0LT_Qe2YCy1jRQ8uxVx9mEXjU.roa (hash: sj0aNBI2t2YqU/+4g0EyWrm6gSCBWXNbag0SeNr1xIk=)
3: a7ptDw-bGff0POtD5zWaPYTpnZk.crl (hash: libAlrOp+GnTeVOWxDUlfi01pTdG5oTKjMnPL094LfM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/632e89-8842-48b1-9dcf-2aeadb966b76/1/a7ptDw-bGff0POtD5zWaPYTpnZk.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/632e89-8842-48b1-9dcf-2aeadb966b76/1/a7ptDw-bGff0POtD5zWaPYTpnZk.mft
rsync://rpki.ripe.net/repository/DEFAULT/a7ptDw-bGff0POtD5zWaPYTpnZk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Aug 2026 23:02:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f8:36:11:cf:bb:ff:32:01:0d:79:d0:ea:cb:5e:df:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6bba6d0f0f9b19f7f43ceb43e7359a3d84e99d99
Validity
Not Before: Aug 12 23:02:00 2026 GMT
Not After : Aug 13 23:02:00 2026 GMT
Subject: CN=874ae601e949650b4aa5ec8fa961179af97d7f10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:97:dd:cc:bd:7c:5f:67:ec:f7:7c:ed:1d:0f:
98:81:68:3e:dc:56:f3:f1:fb:b6:f2:10:85:6c:97:
8d:ad:2c:e9:12:15:d0:4c:b3:0e:5b:ef:c7:89:01:
3d:1c:09:1d:6f:3b:1d:49:e7:53:54:2c:4f:ed:8e:
33:99:65:0e:6c:fc:4b:d9:cc:83:22:0c:56:96:9a:
01:d7:de:5a:00:14:62:6d:71:d5:f0:bc:7c:b6:df:
17:4f:44:43:a8:ef:0b:9f:d0:b2:ca:34:de:10:c5:
68:2d:2a:a5:83:67:f3:21:4a:ee:98:9f:cc:aa:d2:
6c:55:1e:12:a4:cf:b7:2f:90:d9:ea:53:65:84:73:
18:d4:2e:e1:dd:4b:36:ff:be:26:ba:c7:2a:bb:eb:
97:7a:95:b3:a7:ab:4b:87:74:b6:ec:e6:a4:0d:7b:
25:13:62:40:7e:75:b8:e2:b5:ec:e1:e9:e9:12:ee:
e6:f1:b3:30:dc:91:af:62:5c:84:f2:83:b1:fe:92:
13:c0:93:f9:97:e7:8c:03:da:b3:ca:d3:b3:40:09:
b4:97:23:e6:8b:ba:69:6b:03:6c:cc:74:f6:e2:5a:
75:c6:e4:77:b7:82:bd:64:5a:b5:0c:6f:8c:78:a0:
4f:72:0b:a4:a0:e6:7b:a8:53:50:86:54:a8:42:8c:
45:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:4A:E6:01:E9:49:65:0B:4A:A5:EC:8F:A9:61:17:9A:F9:7D:7F:10
X509v3 Authority Key Identifier:
keyid:6B:BA:6D:0F:0F:9B:19:F7:F4:3C:EB:43:E7:35:9A:3D:84:E9:9D:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7ptDw-bGff0POtD5zWaPYTpnZk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/632e89-8842-48b1-9dcf-2aeadb966b76/1/a7ptDw-bGff0POtD5zWaPYTpnZk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/632e89-8842-48b1-9dcf-2aeadb966b76/1/a7ptDw-bGff0POtD5zWaPYTpnZk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:ab:05:fd:e0:c6:7b:75:70:e3:fb:85:63:7a:ba:2f:5e:65:
aa:5c:1d:d8:8f:56:6f:a2:10:5d:b3:a2:26:02:79:a2:45:ec:
57:a4:c4:fa:1f:8e:8e:f7:c3:74:2c:5e:4c:b2:49:fd:a5:03:
5b:e4:89:31:77:8a:f8:07:d2:fe:39:32:25:a0:0e:58:2a:4e:
1c:c4:0d:16:e4:fb:77:cf:6a:77:78:e9:cc:c4:9f:f1:9b:89:
d8:c4:29:0b:b8:ed:fe:d8:3d:b0:30:94:12:08:44:f1:16:2e:
6e:71:d0:16:61:5c:ce:e6:00:0b:09:38:41:cd:1a:67:62:09:
ef:20:a0:df:d8:dc:e1:10:35:f4:06:2d:b6:4e:c6:b4:da:35:
25:37:45:95:ab:bc:be:e9:25:d7:e4:b2:60:70:e1:42:c5:9c:
19:89:65:34:64:50:81:38:f2:31:bc:cf:9b:c4:a9:bf:b2:2b:
fc:6e:f1:79:40:d9:68:3d:00:3f:51:f6:15:6f:1f:cb:77:80:
ee:0c:3d:5d:15:a1:06:68:1b:a3:cf:7d:b9:4d:f4:b7:b7:01:
1d:86:54:50:7f:1f:f2:8a:99:55:8c:19:bb:b3:a7:c7:34:e1:
a5:71:8d:0a:80:95:2b:0f:67:bf:27:7d:b2:d7:68:8f:24:77:
f9:be:46:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 07:49:37 2026 by rpki-client