Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/68/a94a4c-a552-46f6-8a81-cef9448124b0/1/a7odJOcsQ57HpcvcORNX3YnLhqs.mft
File: a7odJOcsQ57HpcvcORNX3YnLhqs.mft (raw, json)
Hash identifier: J7qhxFJRRd6+F25++3NYSY93ZwJ1do6NheQe0FE/Bi0=
Subject key identifier: 2D:88:D7:44:38:FF:14:5B:7E:E4:2D:AE:D4:0C:AC:3D:FB:DB:ED:92
Authority key identifier: 6B:BA:1D:24:E7:2C:43:9E:C7:A5:CB:DC:39:13:57:DD:89:CB:86:AB
Certificate issuer: /CN=6bba1d24e72c439ec7a5cbdc391357dd89cb86ab
Certificate serial: 01A0B4D16C3BEF8BDA6CE385E847B8562DED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a7odJOcsQ57HpcvcORNX3YnLhqs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/a94a4c-a552-46f6-8a81-cef9448124b0/1/a7odJOcsQ57HpcvcORNX3YnLhqs.mft
Manifest number: 0E64
Signing time: Fri 18 Sep 2026 14:00:18 +0000
Manifest this update: Fri 18 Sep 2026 14:00:18 +0000
Manifest next update: Sat 19 Sep 2026 14:00:18 +0000
Files and hashes: 1: BTNbf-Zetnrn5fG4oMBQEb3Lp6E.roa (hash: A1g/+HrCWiAYQ0oLvI3fSXeEtYJcIWvKDusWeJft4J0=)
2: a7odJOcsQ57HpcvcORNX3YnLhqs.crl (hash: 6OVGyrVsxgxhQugxVHuhxheBrPQ8qq1U4PZ965ylgVQ=)
3: wWQwJt5nLKI1O5iEWrX6yUX3ERA.roa (hash: /R1mextPgTI5TYtyAkChJlhhx20Cv1HoCUbU0zyH5Ho=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/a94a4c-a552-46f6-8a81-cef9448124b0/1/a7odJOcsQ57HpcvcORNX3YnLhqs.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/a94a4c-a552-46f6-8a81-cef9448124b0/1/a7odJOcsQ57HpcvcORNX3YnLhqs.mft
rsync://rpki.ripe.net/repository/DEFAULT/a7odJOcsQ57HpcvcORNX3YnLhqs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 08:15:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:b4:d1:6c:3b:ef:8b:da:6c:e3:85:e8:47:b8:56:2d:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6bba1d24e72c439ec7a5cbdc391357dd89cb86ab
Validity
Not Before: Sep 18 14:00:18 2026 GMT
Not After : Sep 19 14:00:18 2026 GMT
Subject: CN=2d88d74438ff145b7ee42daed40cac3dfbdbed92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:33:5f:d8:2f:1e:45:72:7e:bb:9f:09:63:a6:
ec:8f:90:07:4a:c0:6c:c6:5e:39:1b:ae:e9:77:c7:
05:fe:c0:1a:f5:87:ba:a2:d7:d3:23:17:9d:53:48:
82:be:36:67:a8:ef:c3:3f:3d:42:cb:ca:ee:b0:53:
0c:ee:44:03:d1:87:4c:5b:1b:69:e1:ae:c0:76:b2:
3a:0e:ca:0c:83:5f:cf:e9:27:1e:35:4d:ca:95:98:
3d:38:8d:3d:c1:85:ef:b9:13:7c:8a:2c:e5:05:5f:
d0:dc:76:df:58:73:51:0c:34:b6:e3:60:65:50:9f:
76:b6:a3:fb:d6:22:d3:1e:f6:84:a0:1d:d5:57:49:
8a:ed:82:bf:f4:f7:78:18:59:c0:4b:18:94:d2:b1:
89:fc:14:99:ef:19:72:9b:00:62:b1:2f:ec:e1:d1:
97:41:23:e9:88:84:da:ca:63:2e:1e:b3:eb:83:90:
6c:d2:4d:a1:0f:36:46:6e:9c:d5:f8:cf:78:c8:78:
f0:95:82:23:1b:79:db:4a:34:e3:5d:80:66:f8:06:
ad:ab:9f:08:1d:17:52:00:31:68:79:fc:c3:ef:67:
ec:cd:f2:e9:9f:d2:71:e3:56:72:51:37:5c:1c:9c:
12:71:83:da:35:ab:17:2a:7b:bb:6f:8b:ef:04:d0:
15:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:88:D7:44:38:FF:14:5B:7E:E4:2D:AE:D4:0C:AC:3D:FB:DB:ED:92
X509v3 Authority Key Identifier:
keyid:6B:BA:1D:24:E7:2C:43:9E:C7:A5:CB:DC:39:13:57:DD:89:CB:86:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7odJOcsQ57HpcvcORNX3YnLhqs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/a94a4c-a552-46f6-8a81-cef9448124b0/1/a7odJOcsQ57HpcvcORNX3YnLhqs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/a94a4c-a552-46f6-8a81-cef9448124b0/1/a7odJOcsQ57HpcvcORNX3YnLhqs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:28:7d:32:ad:7f:82:19:7e:5b:6d:d2:4d:06:47:93:ec:b2:
ce:14:b9:77:df:3b:51:fa:c0:2e:80:2f:2e:0f:0e:94:e7:05:
67:13:8b:13:14:55:b9:1f:52:46:d4:eb:8e:35:87:61:a8:bc:
09:dc:19:70:9f:34:96:57:40:0c:89:52:51:36:0d:1b:f7:2f:
20:4e:35:bc:dd:ff:a1:87:cb:b3:91:a5:b1:d6:ed:37:cd:eb:
c1:12:a5:50:07:cb:db:7d:14:8f:ad:51:fc:19:a9:01:9d:fa:
2e:fa:47:07:33:c2:20:11:73:b1:53:e4:d1:6b:34:57:ea:9b:
99:e2:b6:78:40:d3:3f:17:02:b4:ba:73:85:c1:99:9e:17:88:
ac:ff:a1:ea:50:e9:59:45:d1:2f:14:81:89:ea:e2:c7:37:56:
e9:c9:04:1e:08:1d:4b:37:db:b5:b9:07:78:fe:06:27:ba:0a:
09:9a:b4:13:4e:c3:31:2c:39:70:89:38:14:68:d2:dc:5b:82:
19:af:55:3b:40:90:1c:da:29:89:d5:a1:78:53:8f:3a:bf:1b:
bf:43:7b:ce:46:e6:ab:c7:99:0f:be:16:c0:58:59:6b:d4:ef:
d9:4a:e8:f0:0c:47:47:a5:80:58:9f:98:f6:11:ab:89:5f:53:
3e:90:30:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 15:38:07 2026 by rpki-client