Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/a94a4c-a552-46f6-8a81-cef9448124b0/1/a7odJOcsQ57HpcvcORNX3YnLhqs.mft
File: a7odJOcsQ57HpcvcORNX3YnLhqs.mft (raw, json)
Hash identifier: W03LBO+tjW16g9c5pohnvy/enuHGjDM1N101QTaYHRU=
Subject key identifier: BA:FF:82:30:FF:8C:AD:3A:EA:90:C6:24:02:D9:7B:05:64:2A:ED:21
Authority key identifier: 6B:BA:1D:24:E7:2C:43:9E:C7:A5:CB:DC:39:13:57:DD:89:CB:86:AB
Certificate issuer: /CN=6bba1d24e72c439ec7a5cbdc391357dd89cb86ab
Certificate serial: 019EBEB642DFDC436CE0910F8108CAF6796F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a7odJOcsQ57HpcvcORNX3YnLhqs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/a94a4c-a552-46f6-8a81-cef9448124b0/1/a7odJOcsQ57HpcvcORNX3YnLhqs.mft
Manifest number: 0D60
Signing time: Sat 13 Jun 2026 02:01:16 +0000
Manifest this update: Sat 13 Jun 2026 02:01:16 +0000
Manifest next update: Sun 14 Jun 2026 02:01:16 +0000
Files and hashes: 1: BTNbf-Zetnrn5fG4oMBQEb3Lp6E.roa (hash: A1g/+HrCWiAYQ0oLvI3fSXeEtYJcIWvKDusWeJft4J0=)
2: a7odJOcsQ57HpcvcORNX3YnLhqs.crl (hash: XruSyxUb7cz5YDM8wfWoXH8hUU8DVuGOPQdhSIjAA6I=)
3: wWQwJt5nLKI1O5iEWrX6yUX3ERA.roa (hash: /R1mextPgTI5TYtyAkChJlhhx20Cv1HoCUbU0zyH5Ho=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/a94a4c-a552-46f6-8a81-cef9448124b0/1/a7odJOcsQ57HpcvcORNX3YnLhqs.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/a94a4c-a552-46f6-8a81-cef9448124b0/1/a7odJOcsQ57HpcvcORNX3YnLhqs.mft
rsync://rpki.ripe.net/repository/DEFAULT/a7odJOcsQ57HpcvcORNX3YnLhqs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:be:b6:42:df:dc:43:6c:e0:91:0f:81:08:ca:f6:79:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6bba1d24e72c439ec7a5cbdc391357dd89cb86ab
Validity
Not Before: Jun 13 02:01:16 2026 GMT
Not After : Jun 14 02:01:16 2026 GMT
Subject: CN=baff8230ff8cad3aea90c62402d97b05642aed21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:38:fd:b5:92:6c:87:c6:ba:a5:d8:11:60:e6:
8d:31:8b:4d:ee:5c:97:69:e3:45:84:fa:cb:c7:0a:
ad:19:84:6a:59:e5:73:ce:01:72:c8:83:d5:88:e1:
4f:4a:62:5b:b7:5f:22:71:e3:16:b9:ff:b2:67:0b:
05:2f:a3:13:c1:3d:69:87:1f:3f:45:31:a6:04:13:
aa:32:48:e1:83:a7:4b:24:57:2a:b9:a1:20:54:9e:
56:6c:e8:bf:56:e8:0b:f3:68:20:7d:2e:25:83:83:
92:c8:c4:bc:5f:e5:c5:1d:80:2c:ba:57:60:61:73:
94:0c:dc:18:95:37:c5:b1:4b:48:de:d7:fc:58:18:
a4:8c:7e:3b:ba:bc:a1:19:55:80:76:67:05:e7:42:
25:82:30:62:b6:80:d7:48:8a:2e:29:b6:0d:f1:a6:
89:a5:fe:6d:42:1c:ff:e8:9d:46:3b:40:89:ff:f8:
fa:13:d2:62:f8:6c:37:17:be:5e:14:2d:3f:57:36:
20:93:86:46:bd:92:a9:bf:06:15:e7:75:f2:f9:66:
be:59:b6:bb:ed:b3:32:20:39:59:3f:68:cf:f5:3c:
7a:4f:70:fd:50:8a:a4:02:3b:cc:ae:d4:68:93:76:
cf:d5:6e:03:e8:e6:39:1f:ef:27:d2:e2:71:91:37:
79:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:FF:82:30:FF:8C:AD:3A:EA:90:C6:24:02:D9:7B:05:64:2A:ED:21
X509v3 Authority Key Identifier:
keyid:6B:BA:1D:24:E7:2C:43:9E:C7:A5:CB:DC:39:13:57:DD:89:CB:86:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7odJOcsQ57HpcvcORNX3YnLhqs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/a94a4c-a552-46f6-8a81-cef9448124b0/1/a7odJOcsQ57HpcvcORNX3YnLhqs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/a94a4c-a552-46f6-8a81-cef9448124b0/1/a7odJOcsQ57HpcvcORNX3YnLhqs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:33:d8:a0:ca:9f:00:6b:3b:a9:86:71:18:64:79:3f:f1:a1:
f5:2f:e4:e7:04:d2:52:f9:e8:59:8a:e7:9a:2e:b5:21:0a:f0:
b8:84:7b:82:0e:bf:c0:b4:f7:9d:2d:42:08:a7:c0:8d:3d:a7:
e7:bf:d1:60:b6:50:c9:41:bd:03:56:9f:18:0f:16:3e:a7:ea:
5d:18:b2:6a:9d:a9:05:ad:df:ae:c7:68:08:12:f3:3d:d6:d5:
d1:b0:48:94:06:08:00:fe:5f:ac:66:24:ef:a0:61:c1:19:df:
48:f2:d4:33:0f:98:76:bf:a9:c7:5e:72:ec:c1:2f:1c:5d:94:
cf:3d:49:e2:24:7e:53:e9:21:97:06:c9:b5:24:ec:19:c3:dc:
03:79:b1:fa:c5:dd:99:7d:91:93:1b:31:2f:f3:4a:71:5a:0c:
83:32:14:25:f7:33:b2:5e:9d:2c:e0:46:d1:b8:b1:ad:a6:62:
24:b5:f3:f4:80:3b:6a:c6:e4:a6:9f:b6:4d:aa:42:21:a3:e9:
8b:34:57:b1:46:e7:36:86:66:c3:be:ac:35:5e:43:33:a3:41:
2c:04:1f:ce:d3:92:63:c8:d4:c6:7e:80:58:2f:08:6d:93:83:
2c:bd:51:69:87:ea:64:c5:f1:ca:ac:2c:8c:bc:de:0f:6a:b2:
10:7b:d6:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:53:56 2026 by rpki-client