Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/a94a4c-a552-46f6-8a81-cef9448124b0/1/a7odJOcsQ57HpcvcORNX3YnLhqs.mft
File: a7odJOcsQ57HpcvcORNX3YnLhqs.mft (raw, json)
Hash identifier: FkTzLg1A4d48yzgEP4FksyYHBrXkwJbGRuhvvN5C5+k=
Subject key identifier: 29:75:6D:36:F9:25:5C:D5:0D:85:38:B7:4F:27:AD:E4:22:1C:B8:F7
Authority key identifier: 6B:BA:1D:24:E7:2C:43:9E:C7:A5:CB:DC:39:13:57:DD:89:CB:86:AB
Certificate issuer: /CN=6bba1d24e72c439ec7a5cbdc391357dd89cb86ab
Certificate serial: 019CE96E9780AAC68482726F474450274F90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a7odJOcsQ57HpcvcORNX3YnLhqs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/a94a4c-a552-46f6-8a81-cef9448124b0/1/a7odJOcsQ57HpcvcORNX3YnLhqs.mft
Manifest number: 0C6D
Signing time: Fri 13 Mar 2026 23:01:04 +0000
Manifest this update: Fri 13 Mar 2026 23:01:04 +0000
Manifest next update: Sat 14 Mar 2026 23:01:04 +0000
Files and hashes: 1: BTNbf-Zetnrn5fG4oMBQEb3Lp6E.roa (hash: A1g/+HrCWiAYQ0oLvI3fSXeEtYJcIWvKDusWeJft4J0=)
2: a7odJOcsQ57HpcvcORNX3YnLhqs.crl (hash: a+mbexcxhTLpO++Q9ZGgQuWOft9ONG4fftNhUVxdWZk=)
3: wWQwJt5nLKI1O5iEWrX6yUX3ERA.roa (hash: /R1mextPgTI5TYtyAkChJlhhx20Cv1HoCUbU0zyH5Ho=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/a94a4c-a552-46f6-8a81-cef9448124b0/1/a7odJOcsQ57HpcvcORNX3YnLhqs.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/a94a4c-a552-46f6-8a81-cef9448124b0/1/a7odJOcsQ57HpcvcORNX3YnLhqs.mft
rsync://rpki.ripe.net/repository/DEFAULT/a7odJOcsQ57HpcvcORNX3YnLhqs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 18:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e9:6e:97:80:aa:c6:84:82:72:6f:47:44:50:27:4f:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6bba1d24e72c439ec7a5cbdc391357dd89cb86ab
Validity
Not Before: Mar 13 23:01:04 2026 GMT
Not After : Mar 14 23:01:04 2026 GMT
Subject: CN=29756d36f9255cd50d8538b74f27ade4221cb8f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:0f:d4:bc:ad:86:39:b2:0d:86:06:5b:cd:d5:
81:c1:b4:f1:8f:52:cf:9d:9a:61:df:6b:4e:4e:20:
a2:d2:1f:b5:e8:5e:59:65:c1:7d:07:b7:2b:68:14:
bb:fd:ed:78:a0:f1:65:a0:02:4e:8b:59:7f:48:78:
49:db:cc:ce:49:d6:ef:98:f2:a8:8e:a3:96:92:cc:
ed:68:a1:35:63:52:b8:f0:f3:1b:3e:0a:e5:13:f5:
f8:25:b9:f8:3a:1e:7e:a4:ed:c4:90:4b:d7:d8:51:
af:b4:ef:cb:8f:90:65:c1:a0:24:47:78:75:97:79:
f6:a6:82:f4:79:e7:01:d5:eb:01:d7:85:95:68:6a:
88:72:f7:9a:b6:49:4b:4d:ea:03:20:85:3b:71:c4:
ca:0f:c9:27:5f:01:16:88:08:eb:0f:d6:3d:b7:d8:
d3:4e:eb:71:02:ee:52:4d:db:04:47:0f:b8:6a:65:
64:3a:8f:b0:58:b5:a9:f3:2b:29:c8:f7:35:13:99:
2a:1f:b1:38:07:d8:3c:2e:e7:26:17:95:cf:2c:05:
28:b2:ef:37:61:6f:8e:c9:53:36:39:1f:17:8a:10:
b2:f5:5c:37:a5:e1:c5:f1:5b:78:b2:2c:1b:d5:6f:
16:e2:9d:f5:06:16:91:13:6e:a6:64:1b:ed:2d:2d:
78:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:75:6D:36:F9:25:5C:D5:0D:85:38:B7:4F:27:AD:E4:22:1C:B8:F7
X509v3 Authority Key Identifier:
keyid:6B:BA:1D:24:E7:2C:43:9E:C7:A5:CB:DC:39:13:57:DD:89:CB:86:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7odJOcsQ57HpcvcORNX3YnLhqs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/a94a4c-a552-46f6-8a81-cef9448124b0/1/a7odJOcsQ57HpcvcORNX3YnLhqs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/a94a4c-a552-46f6-8a81-cef9448124b0/1/a7odJOcsQ57HpcvcORNX3YnLhqs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:24:fa:57:2e:60:7a:a0:41:54:59:f7:c2:f0:68:99:53:b3:
33:a5:ac:ca:08:02:ef:e9:3d:25:8a:33:4b:e1:e1:15:2c:38:
82:93:8e:29:bc:5a:0e:5c:29:41:88:6b:49:5a:a2:a6:c5:97:
37:a4:51:70:2c:a6:29:53:f5:26:bd:e9:ba:2c:90:8b:18:ac:
6e:36:88:1d:f2:11:98:78:5c:20:c5:51:a5:ad:aa:eb:ba:23:
cd:b0:8a:c4:fa:a4:32:e4:3f:d3:36:20:16:75:95:6c:f9:9a:
33:c8:d1:44:58:f6:0f:fc:49:7a:e2:d6:ec:59:50:04:93:2a:
9a:f9:8c:97:2c:e1:a8:d5:a7:48:0b:80:74:67:3b:6f:9f:2a:
fd:23:a5:8f:48:52:50:76:5c:59:98:30:52:4d:f1:bf:6e:f3:
9f:d1:79:4b:2b:59:20:d3:65:dc:69:96:09:d9:e8:c7:b2:d7:
da:e7:98:99:3e:08:24:27:43:fa:76:b7:a9:eb:27:75:e1:67:
69:0e:ec:27:1c:d5:2a:89:6e:78:59:47:cd:53:34:7c:c4:6f:
46:f4:09:b6:13:94:5d:db:25:52:7c:51:48:85:71:98:75:54:
e9:a4:8a:d9:9c:25:8c:91:3a:ce:3c:6f:e3:ba:32:19:18:4d:
15:32:4e:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 14 03:26:06 2026 by rpki-client