Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/a94a4c-a552-46f6-8a81-cef9448124b0/1/a7odJOcsQ57HpcvcORNX3YnLhqs.mft
File: a7odJOcsQ57HpcvcORNX3YnLhqs.mft (raw, json)
Hash identifier: S4dZt4ja/Xnwqlu6DB12azbJ6gbVsE2vabi66R4vRhE=
Subject key identifier: B6:69:84:6B:FD:5E:84:B2:62:56:C7:BA:DF:55:63:79:EB:C7:96:A6
Authority key identifier: 6B:BA:1D:24:E7:2C:43:9E:C7:A5:CB:DC:39:13:57:DD:89:CB:86:AB
Certificate issuer: /CN=6bba1d24e72c439ec7a5cbdc391357dd89cb86ab
Certificate serial: 019FAC3EDB52F48436238D4FE0A77130FB23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a7odJOcsQ57HpcvcORNX3YnLhqs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/a94a4c-a552-46f6-8a81-cef9448124b0/1/a7odJOcsQ57HpcvcORNX3YnLhqs.mft
Manifest number: 0DDB
Signing time: Wed 29 Jul 2026 05:00:28 +0000
Manifest this update: Wed 29 Jul 2026 05:00:28 +0000
Manifest next update: Thu 30 Jul 2026 05:00:28 +0000
Files and hashes: 1: BTNbf-Zetnrn5fG4oMBQEb3Lp6E.roa (hash: A1g/+HrCWiAYQ0oLvI3fSXeEtYJcIWvKDusWeJft4J0=)
2: a7odJOcsQ57HpcvcORNX3YnLhqs.crl (hash: ITWG5QTY+jKxmGw/WD7/W/Usf7JyXhpA+u2V7I2hNRA=)
3: wWQwJt5nLKI1O5iEWrX6yUX3ERA.roa (hash: /R1mextPgTI5TYtyAkChJlhhx20Cv1HoCUbU0zyH5Ho=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/a94a4c-a552-46f6-8a81-cef9448124b0/1/a7odJOcsQ57HpcvcORNX3YnLhqs.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/a94a4c-a552-46f6-8a81-cef9448124b0/1/a7odJOcsQ57HpcvcORNX3YnLhqs.mft
rsync://rpki.ripe.net/repository/DEFAULT/a7odJOcsQ57HpcvcORNX3YnLhqs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 05:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:3e:db:52:f4:84:36:23:8d:4f:e0:a7:71:30:fb:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6bba1d24e72c439ec7a5cbdc391357dd89cb86ab
Validity
Not Before: Jul 29 05:00:28 2026 GMT
Not After : Jul 30 05:00:28 2026 GMT
Subject: CN=b669846bfd5e84b26256c7badf556379ebc796a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:fd:cf:7b:ed:12:bc:23:58:6c:5c:14:1f:12:
c4:64:34:f9:8b:b9:c9:a0:e4:c1:ea:ed:b9:e5:3b:
4c:a2:40:36:0a:ac:29:19:9a:d6:5a:02:db:e9:dd:
eb:49:1d:b6:fe:e5:00:cf:13:aa:60:9f:d5:4e:ab:
76:d6:d8:8e:d3:45:dd:30:75:23:70:83:39:21:7d:
4b:97:62:e0:af:5f:5f:a2:b3:69:55:ea:ce:d0:9a:
8a:1b:39:be:e0:69:56:88:ab:6b:c9:f4:9b:a6:a8:
10:79:73:8c:a4:46:e8:64:ae:e3:49:32:12:ab:a8:
88:80:08:12:a7:6f:b8:9d:ac:16:49:a3:ea:c7:b6:
1a:51:f3:30:94:b5:68:b8:9a:23:1b:f0:53:f1:c6:
ac:64:db:7d:9c:74:e7:80:95:e9:0f:fa:1f:10:76:
96:b2:c5:35:f1:09:2e:11:e7:f4:70:d3:90:cc:70:
38:5a:4b:fc:84:4b:37:e3:d9:87:09:71:8f:ba:ce:
4e:67:b0:c5:61:5d:2a:9c:08:66:ea:ea:cc:c3:ea:
22:76:81:74:0a:70:bb:02:be:fc:0b:24:0b:eb:64:
59:45:f8:e4:57:47:f3:3b:a9:dd:44:c4:97:fb:6c:
0e:9c:6a:21:ea:7a:37:06:c0:9d:39:e1:49:fc:13:
64:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:69:84:6B:FD:5E:84:B2:62:56:C7:BA:DF:55:63:79:EB:C7:96:A6
X509v3 Authority Key Identifier:
keyid:6B:BA:1D:24:E7:2C:43:9E:C7:A5:CB:DC:39:13:57:DD:89:CB:86:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7odJOcsQ57HpcvcORNX3YnLhqs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/a94a4c-a552-46f6-8a81-cef9448124b0/1/a7odJOcsQ57HpcvcORNX3YnLhqs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/a94a4c-a552-46f6-8a81-cef9448124b0/1/a7odJOcsQ57HpcvcORNX3YnLhqs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:5f:72:8a:68:5e:50:ac:ee:c9:7e:99:41:14:21:ed:4d:14:
fc:6b:0e:cc:3a:e5:74:fc:e9:92:9c:4d:c2:cd:19:32:8d:6d:
53:3e:15:ca:2d:9f:28:24:ee:b4:dd:d4:88:0b:ef:9b:8d:f6:
bd:5e:fa:b3:11:9f:46:9f:b9:8d:46:ef:99:f8:2a:11:37:6a:
c0:55:c2:40:78:ba:4e:75:7f:3d:61:0e:e1:c3:17:4e:87:cc:
40:ab:37:74:17:6d:77:89:da:0e:0e:86:2b:c0:57:65:86:6a:
9f:ea:69:a2:74:c6:a2:3e:75:9d:aa:ed:e5:65:97:04:38:ed:
a1:07:b1:41:cd:90:50:49:73:83:18:76:8f:da:e6:0e:dd:c1:
94:55:7a:8a:53:0a:7f:1b:fd:66:38:3c:16:c1:9d:c4:b2:02:
ef:67:9a:43:7b:c6:96:64:3b:71:7a:0e:1c:40:7a:d9:bd:68:
99:3f:bd:e9:4d:d3:30:79:01:9f:2f:9d:13:e3:2a:02:ab:f2:
5d:46:e8:f9:90:96:7c:37:d0:24:c4:ca:12:31:25:8e:62:4b:
07:80:9c:70:f5:0d:b5:0e:3b:55:4c:97:a4:b0:0b:0f:5a:1c:
17:02:f6:d7:52:10:55:ab:8b:39:30:c1:1c:07:2c:af:5c:f7:
66:8c:5c:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 13:09:32 2026 by rpki-client