Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/b769e3-e215-44a5-8a2e-0e9df99d9339/1/aDei-kt4dzpmIA_qTFhQepLzEgM.mft
File: aDei-kt4dzpmIA_qTFhQepLzEgM.mft (raw, json)
Hash identifier: vHK6F6fWMqz2JQPcOCP69MgXw66ocnnuYsliUjxQMEE=
Subject key identifier: B7:32:70:A6:25:C4:CB:58:74:FF:99:7A:3A:BC:DD:18:D6:8E:92:93
Authority key identifier: 68:37:A2:FA:4B:78:77:3A:66:20:0F:EA:4C:58:50:7A:92:F3:12:03
Certificate issuer: /CN=6837a2fa4b78773a66200fea4c58507a92f31203
Certificate serial: 019FA0A8A14564B4CF46ADDBC72621D8BB67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aDei-kt4dzpmIA_qTFhQepLzEgM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/b769e3-e215-44a5-8a2e-0e9df99d9339/1/aDei-kt4dzpmIA_qTFhQepLzEgM.mft
Manifest number: 0720
Signing time: Sun 26 Jul 2026 23:00:33 +0000
Manifest this update: Sun 26 Jul 2026 23:00:33 +0000
Manifest next update: Mon 27 Jul 2026 23:00:33 +0000
Files and hashes: 1: 4iNI26R-dGov0Tl2yDZjMNRLbfA.roa (hash: Mbs7tF0S261BkHnLQzWDasyVwFU+7wR+ArpU3P29zD8=)
2: aDei-kt4dzpmIA_qTFhQepLzEgM.crl (hash: dXXaX5x0thd320RNAMUC4GL5PKvu4zOXknlPeDZ4zXY=)
3: dE-JGprnxw6rfyqiHGwVstJ3B-s.roa (hash: P5+Wa8hBNG0OAzbkWpR9P6pZV6VqpgnBr0Mr7oMWvCQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/b769e3-e215-44a5-8a2e-0e9df99d9339/1/aDei-kt4dzpmIA_qTFhQepLzEgM.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/b769e3-e215-44a5-8a2e-0e9df99d9339/1/aDei-kt4dzpmIA_qTFhQepLzEgM.mft
rsync://rpki.ripe.net/repository/DEFAULT/aDei-kt4dzpmIA_qTFhQepLzEgM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a0:a8:a1:45:64:b4:cf:46:ad:db:c7:26:21:d8:bb:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6837a2fa4b78773a66200fea4c58507a92f31203
Validity
Not Before: Jul 26 23:00:33 2026 GMT
Not After : Jul 27 23:00:33 2026 GMT
Subject: CN=b73270a625c4cb5874ff997a3abcdd18d68e9293
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:b3:d5:b1:c4:fd:19:1b:4f:38:c2:57:1e:dd:
55:47:36:13:c0:00:5d:05:5f:b9:f6:fa:ea:a1:57:
04:3e:cb:61:7d:a4:e8:d4:cf:f9:af:c3:82:d6:c6:
76:ee:0e:34:e2:24:e0:a2:a3:2e:20:e0:cc:83:5b:
c0:61:62:78:d1:28:1a:80:df:e4:b3:76:d3:c9:e7:
af:4d:75:91:ad:62:d3:17:01:40:71:80:42:69:c2:
ce:ca:6e:1e:ae:68:bd:ed:08:64:a5:d0:70:03:99:
d5:db:12:06:57:99:a9:6b:a4:b2:37:aa:a7:e7:fa:
15:fe:5d:4c:cb:cb:f2:ff:4e:8f:c7:59:30:26:84:
53:6c:14:18:ff:41:fd:60:c9:3e:b5:4b:fa:b1:90:
8a:26:de:1c:de:e5:71:39:65:b5:f9:11:5e:6f:fe:
2c:34:2d:75:d1:57:c7:00:33:31:a7:07:fa:d6:e9:
f6:09:2e:36:fd:14:b3:2c:11:be:3d:01:5b:5e:a3:
13:e7:05:6f:08:34:a0:e6:a4:1d:9b:f7:af:c8:24:
d7:0f:ca:ed:b6:45:1a:ea:52:7f:43:8e:a7:39:7e:
aa:26:b3:57:d4:56:a9:a6:28:de:36:b2:f3:59:0d:
97:1d:5e:a4:3b:9d:33:cf:bf:97:66:9d:93:02:ee:
41:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:32:70:A6:25:C4:CB:58:74:FF:99:7A:3A:BC:DD:18:D6:8E:92:93
X509v3 Authority Key Identifier:
keyid:68:37:A2:FA:4B:78:77:3A:66:20:0F:EA:4C:58:50:7A:92:F3:12:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aDei-kt4dzpmIA_qTFhQepLzEgM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/b769e3-e215-44a5-8a2e-0e9df99d9339/1/aDei-kt4dzpmIA_qTFhQepLzEgM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/b769e3-e215-44a5-8a2e-0e9df99d9339/1/aDei-kt4dzpmIA_qTFhQepLzEgM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:12:d1:4b:23:2d:32:52:ae:eb:ab:61:e3:43:cb:c4:88:1a:
f4:07:e4:4e:61:a0:e9:2c:88:18:c6:79:ad:17:f0:ac:a4:e6:
63:6c:7c:80:2a:62:77:fb:40:48:7d:76:f7:56:59:ff:ca:ec:
65:65:2c:11:14:4f:e5:40:cd:88:c2:85:48:2a:c2:a6:43:66:
4e:4f:dd:27:75:5b:6b:e5:46:ff:92:1c:94:5d:0b:8f:61:c7:
97:cb:53:e6:29:95:b6:61:0e:e2:ae:91:58:de:8f:61:57:00:
89:9a:d6:23:e4:23:78:f6:52:c6:57:3a:49:60:e3:8b:d2:e2:
36:5d:ce:21:1f:c6:c0:bd:3a:4c:16:bc:ee:6b:3b:54:08:b8:
5e:23:8a:f3:28:20:34:d8:b6:36:29:38:10:9a:98:86:72:e5:
c8:c5:52:a8:40:5d:38:26:63:50:2c:be:38:69:45:d4:63:00:
6e:f8:f4:4f:3f:63:d6:fa:f2:b5:85:33:aa:1d:5b:89:d4:6c:
9b:4d:ca:f0:61:44:cd:79:2f:7d:de:58:44:11:39:1d:f5:0a:
cc:50:59:38:7e:2b:26:81:62:4f:ef:a7:e0:3b:72:11:e8:f1:
5f:d6:e7:19:2c:ff:02:7a:af:ff:66:28:1e:5f:69:28:81:2b:
b4:20:98:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 04:48:34 2026 by rpki-client