Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/68/a94a4c-a552-46f6-8a81-cef9448124b0/1/a7odJOcsQ57HpcvcORNX3YnLhqs.mft
File: a7odJOcsQ57HpcvcORNX3YnLhqs.mft (raw, json)
Hash identifier: rblvtHI4Sbfe+Z5QJbFVtl1qaF0eAlEcr6cD1hDA+Rs=
Subject key identifier: 14:15:C4:14:E9:25:E0:85:10:DD:01:AC:CC:88:9C:5C:C9:7E:B8:A8
Authority key identifier: 6B:BA:1D:24:E7:2C:43:9E:C7:A5:CB:DC:39:13:57:DD:89:CB:86:AB
Certificate issuer: /CN=6bba1d24e72c439ec7a5cbdc391357dd89cb86ab
Certificate serial: 01A1AA1568FB4959DF5C80A39836E1E62724
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a7odJOcsQ57HpcvcORNX3YnLhqs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/a94a4c-a552-46f6-8a81-cef9448124b0/1/a7odJOcsQ57HpcvcORNX3YnLhqs.mft
Manifest number: 0EE3
Signing time: Thu 05 Nov 2026 05:01:32 +0000
Manifest this update: Thu 05 Nov 2026 05:01:32 +0000
Manifest next update: Fri 06 Nov 2026 05:01:32 +0000
Files and hashes: 1: BTNbf-Zetnrn5fG4oMBQEb3Lp6E.roa (hash: A1g/+HrCWiAYQ0oLvI3fSXeEtYJcIWvKDusWeJft4J0=)
2: a7odJOcsQ57HpcvcORNX3YnLhqs.crl (hash: bWlGlr8O1JLJ7NdZ24m5cnXbiVzDGLLx2zelUMTDTcE=)
3: wWQwJt5nLKI1O5iEWrX6yUX3ERA.roa (hash: /R1mextPgTI5TYtyAkChJlhhx20Cv1HoCUbU0zyH5Ho=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/a94a4c-a552-46f6-8a81-cef9448124b0/1/a7odJOcsQ57HpcvcORNX3YnLhqs.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/a94a4c-a552-46f6-8a81-cef9448124b0/1/a7odJOcsQ57HpcvcORNX3YnLhqs.mft
rsync://rpki.ripe.net/repository/DEFAULT/a7odJOcsQ57HpcvcORNX3YnLhqs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 05:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:aa:15:68:fb:49:59:df:5c:80:a3:98:36:e1:e6:27:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6bba1d24e72c439ec7a5cbdc391357dd89cb86ab
Validity
Not Before: Nov 5 05:01:32 2026 GMT
Not After : Nov 6 05:01:32 2026 GMT
Subject: CN=1415c414e925e08510dd01accc889c5cc97eb8a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:6a:d6:70:d5:fc:14:66:84:54:18:fd:15:de:
2a:18:df:69:d0:ba:db:78:36:11:a6:40:0e:b7:4b:
bf:6f:fd:a6:47:51:e2:c0:59:bf:ff:b5:63:fa:f8:
4b:ab:ff:2b:1a:41:d2:58:91:40:7d:3c:82:a2:40:
be:eb:f6:82:52:80:f1:37:37:11:8d:f9:f7:fe:7f:
14:75:50:66:e0:58:4b:0a:50:d4:14:d0:f3:c2:b4:
63:97:01:b1:8c:32:90:a4:ec:78:7e:19:00:6a:1c:
d2:63:3d:59:c8:2a:39:5e:d4:d1:1c:9e:66:ab:ad:
2c:7b:84:5a:eb:42:a4:6b:78:e8:bf:ed:66:bf:3a:
e9:af:32:4e:36:c1:03:f6:52:d2:a2:5d:0c:50:b4:
75:a5:1b:a5:39:78:4f:08:42:fd:c4:90:04:b7:4d:
40:99:99:d0:ba:08:47:64:c6:3d:b8:73:93:7a:d2:
da:ce:9d:40:c4:4b:23:45:21:1e:88:3f:12:ac:fb:
df:fc:fc:52:06:0e:e3:92:3f:f0:b6:17:b5:1a:69:
4d:d4:0f:a2:f0:e6:f6:65:80:c4:66:0d:b6:2a:e5:
dc:78:a0:60:a2:56:b8:d7:f6:2f:9f:bf:73:06:e0:
e2:44:b5:f2:8e:fd:22:49:42:ec:5a:8f:03:d4:24:
2d:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:15:C4:14:E9:25:E0:85:10:DD:01:AC:CC:88:9C:5C:C9:7E:B8:A8
X509v3 Authority Key Identifier:
keyid:6B:BA:1D:24:E7:2C:43:9E:C7:A5:CB:DC:39:13:57:DD:89:CB:86:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7odJOcsQ57HpcvcORNX3YnLhqs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/a94a4c-a552-46f6-8a81-cef9448124b0/1/a7odJOcsQ57HpcvcORNX3YnLhqs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/a94a4c-a552-46f6-8a81-cef9448124b0/1/a7odJOcsQ57HpcvcORNX3YnLhqs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:76:9a:b9:32:18:f9:49:54:ea:63:f1:f4:96:d8:3e:bc:a0:
60:dc:af:a8:8c:a7:b2:43:72:94:ea:0f:ce:9b:f6:30:41:c0:
f1:60:34:c6:50:dc:d8:05:c4:2d:f4:e5:6f:3e:b5:ff:96:d7:
fb:e8:d0:dd:8d:80:63:e5:ea:c3:b4:7c:49:27:f8:98:6d:e9:
1c:ed:ad:de:68:17:bf:14:af:39:4e:f3:fa:76:ad:aa:f4:8f:
39:7a:2d:5a:b8:bc:58:b3:a3:38:d7:1a:bd:21:f0:84:64:ac:
08:54:1c:3d:90:ce:95:ca:7a:6b:d0:31:53:16:34:a3:1e:cb:
94:0f:f6:17:b2:9a:e3:ba:b8:7e:b6:30:c3:99:f4:8e:29:1d:
95:e0:71:59:69:d0:be:5f:08:20:46:cc:03:a6:6f:0f:d4:d7:
79:c4:2b:bd:fc:e4:ea:ba:e0:49:8c:e2:38:d9:aa:d4:c6:6b:
86:21:25:26:8a:b7:36:ce:76:e5:13:2b:c6:91:f4:9e:89:ea:
5d:c3:85:88:02:be:1f:29:c8:ac:a0:6d:56:cb:25:3e:82:1a:
ed:ce:f4:06:5e:17:bd:71:8d:c9:d3:be:a2:01:99:5a:c1:1d:
41:92:77:3c:70:f2:95:91:9e:f9:7a:c4:3e:99:03:44:90:98:
9a:24:71:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 11:23:57 2026 by rpki-client