Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/a94a4c-a552-46f6-8a81-cef9448124b0/1/a7odJOcsQ57HpcvcORNX3YnLhqs.mft
File: a7odJOcsQ57HpcvcORNX3YnLhqs.mft (raw, json)
Hash identifier: nDmGDS6X9WnvCk9cDjo/8RRsKeX+Mg7islY4NQNXrqU=
Subject key identifier: B0:A2:AE:03:F4:AF:58:EB:C8:F9:C9:A2:C4:8C:67:68:F5:55:B2:CF
Authority key identifier: 6B:BA:1D:24:E7:2C:43:9E:C7:A5:CB:DC:39:13:57:DD:89:CB:86:AB
Certificate issuer: /CN=6bba1d24e72c439ec7a5cbdc391357dd89cb86ab
Certificate serial: 019DD50994A06CE7147237C25CCE9AFF2AC0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a7odJOcsQ57HpcvcORNX3YnLhqs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/a94a4c-a552-46f6-8a81-cef9448124b0/1/a7odJOcsQ57HpcvcORNX3YnLhqs.mft
Manifest number: 0CE7
Signing time: Tue 28 Apr 2026 17:01:07 +0000
Manifest this update: Tue 28 Apr 2026 17:01:07 +0000
Manifest next update: Wed 29 Apr 2026 17:01:07 +0000
Files and hashes: 1: BTNbf-Zetnrn5fG4oMBQEb3Lp6E.roa (hash: A1g/+HrCWiAYQ0oLvI3fSXeEtYJcIWvKDusWeJft4J0=)
2: a7odJOcsQ57HpcvcORNX3YnLhqs.crl (hash: c3P71Vfj7gyjB87DPrf2Yh+s8R8Bv2AHJ4HlOaoO0wY=)
3: wWQwJt5nLKI1O5iEWrX6yUX3ERA.roa (hash: /R1mextPgTI5TYtyAkChJlhhx20Cv1HoCUbU0zyH5Ho=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/a94a4c-a552-46f6-8a81-cef9448124b0/1/a7odJOcsQ57HpcvcORNX3YnLhqs.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/a94a4c-a552-46f6-8a81-cef9448124b0/1/a7odJOcsQ57HpcvcORNX3YnLhqs.mft
rsync://rpki.ripe.net/repository/DEFAULT/a7odJOcsQ57HpcvcORNX3YnLhqs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Apr 2026 17:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:d5:09:94:a0:6c:e7:14:72:37:c2:5c:ce:9a:ff:2a:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6bba1d24e72c439ec7a5cbdc391357dd89cb86ab
Validity
Not Before: Apr 28 17:01:07 2026 GMT
Not After : Apr 29 17:01:07 2026 GMT
Subject: CN=b0a2ae03f4af58ebc8f9c9a2c48c6768f555b2cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:b3:4d:b4:d3:0c:f5:93:ca:73:ef:e5:31:e8:
ce:be:e9:6e:67:a5:04:c3:3b:b1:8e:46:56:23:5b:
9f:c7:98:eb:3c:95:d0:6e:ab:18:0d:60:8d:af:6a:
e7:d2:9a:1c:c0:ee:14:53:a4:e9:1e:43:7a:91:97:
a2:c1:7a:68:f0:93:48:b6:68:4e:4e:4b:38:57:45:
cd:c1:1f:5d:c8:30:aa:90:72:5d:71:6f:29:db:97:
cb:fb:b1:19:18:51:1f:7d:b7:b6:db:b8:8f:fe:ff:
62:cb:cc:1c:d7:12:22:ec:8d:d9:ca:29:0f:d1:2f:
e0:98:03:e9:26:8d:32:8c:32:0d:f5:68:71:8d:50:
3f:00:ca:da:8d:67:67:fa:c6:25:ee:bf:fc:ab:5c:
e9:7d:e1:2c:5a:c3:b2:f9:04:85:3e:57:c9:33:37:
05:ce:76:99:38:ae:e8:e4:01:d6:0c:32:66:d5:01:
1c:ee:6c:12:05:9b:83:0f:2c:cc:88:09:30:74:80:
27:9e:c4:8a:57:56:e2:15:de:50:66:53:6e:60:96:
b3:f5:23:17:1d:f1:d7:7d:4a:0b:65:5b:bf:49:ca:
11:48:c7:bd:29:42:be:ee:a2:42:83:e7:73:76:dd:
1c:7b:37:e0:69:85:01:7f:3b:47:ef:e1:06:5f:5a:
eb:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:A2:AE:03:F4:AF:58:EB:C8:F9:C9:A2:C4:8C:67:68:F5:55:B2:CF
X509v3 Authority Key Identifier:
keyid:6B:BA:1D:24:E7:2C:43:9E:C7:A5:CB:DC:39:13:57:DD:89:CB:86:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7odJOcsQ57HpcvcORNX3YnLhqs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/a94a4c-a552-46f6-8a81-cef9448124b0/1/a7odJOcsQ57HpcvcORNX3YnLhqs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/a94a4c-a552-46f6-8a81-cef9448124b0/1/a7odJOcsQ57HpcvcORNX3YnLhqs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:c8:d1:16:00:30:1d:e8:06:28:5b:01:0d:42:bf:b8:f8:ec:
86:fe:56:21:94:6d:d5:c3:b8:8e:fc:d8:35:f0:cc:1a:3d:cd:
d5:72:f7:e7:d4:85:5f:4f:f3:5c:da:3d:f3:e2:3f:ba:92:b5:
77:f1:a8:29:4d:e2:df:6e:ea:e1:39:7a:11:c5:6b:c8:98:a3:
12:3c:d1:e4:c9:43:51:f4:7b:1c:7d:eb:f0:85:b8:91:96:96:
e7:18:66:fe:74:55:dc:3e:5c:b2:d4:18:09:2a:e0:a5:30:f2:
5b:ba:04:fd:3b:bb:b3:8b:92:90:ed:1f:5c:8e:64:bb:36:75:
9c:90:b3:2f:1e:b5:54:70:2b:4a:18:7f:94:17:cd:67:d9:3e:
c2:9f:26:90:d3:66:61:04:1d:cc:cf:7c:6d:02:99:d7:f3:aa:
94:c1:11:f0:35:ee:67:a1:45:77:9b:05:7f:a2:59:09:d6:12:
e8:8a:f4:6b:36:ff:4b:47:04:87:62:1a:c4:87:89:50:a2:3c:
df:0c:52:8b:7a:4f:11:b2:42:f1:54:c6:a1:1a:81:12:53:da:
16:a1:66:7f:e4:78:15:6a:82:bb:27:1a:42:db:a7:5c:d0:cb:
3c:98:e9:37:5e:4f:c0:ca:f1:83:3b:72:f5:20:79:bb:81:8c:
79:5a:fa:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 29 01:42:11 2026 by rpki-client