Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/8d7e85-00c0-40e0-aa80-c7dcc2391cc9/1/rrdjIcjUae47oCOSCzcszaXeng8.mft
File: rrdjIcjUae47oCOSCzcszaXeng8.mft (raw, json)
Hash identifier: IggyueH8lwyScrhcQ06abI1EMuqTRPesKFTYNyCoh3w=
Subject key identifier: BB:12:2B:DD:79:E3:E1:18:0F:DE:72:38:72:F1:3F:F2:1C:E7:D9:F2
Authority key identifier: AE:B7:63:21:C8:D4:69:EE:3B:A0:23:92:0B:37:2C:CD:A5:DE:9E:0F
Certificate issuer: /CN=aeb76321c8d469ee3ba023920b372ccda5de9e0f
Certificate serial: 019F973809E1DE062E1B3D63F9448D649A75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rrdjIcjUae47oCOSCzcszaXeng8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/8d7e85-00c0-40e0-aa80-c7dcc2391cc9/1/rrdjIcjUae47oCOSCzcszaXeng8.mft
Manifest number: 0B6D
Signing time: Sat 25 Jul 2026 03:00:59 +0000
Manifest this update: Sat 25 Jul 2026 03:00:59 +0000
Manifest next update: Sun 26 Jul 2026 03:00:59 +0000
Files and hashes: 1: eodQO_QecDa9A4kfpjbm-rS0pPo.roa (hash: iUWofSRT9UHvNK/hkBEFkKulPRt3pBGPPSMNCjcW5Yw=)
2: rrdjIcjUae47oCOSCzcszaXeng8.crl (hash: T2scbCR+wcmjn3dTFNqDklHU9A9XdD/tyeknVqDGX7c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/8d7e85-00c0-40e0-aa80-c7dcc2391cc9/1/rrdjIcjUae47oCOSCzcszaXeng8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/8d7e85-00c0-40e0-aa80-c7dcc2391cc9/1/rrdjIcjUae47oCOSCzcszaXeng8.mft
rsync://rpki.ripe.net/repository/DEFAULT/rrdjIcjUae47oCOSCzcszaXeng8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Jul 2026 02:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:97:38:09:e1:de:06:2e:1b:3d:63:f9:44:8d:64:9a:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aeb76321c8d469ee3ba023920b372ccda5de9e0f
Validity
Not Before: Jul 25 03:00:59 2026 GMT
Not After : Jul 26 03:00:59 2026 GMT
Subject: CN=bb122bdd79e3e1180fde723872f13ff21ce7d9f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:43:ce:fe:cf:6d:6f:de:97:e0:84:4f:e5:dc:
a0:4c:44:3b:59:12:40:f2:48:8d:d1:08:62:c5:a4:
19:72:87:f9:10:69:41:5c:b0:0e:91:7b:37:72:00:
cd:c1:a6:09:02:17:47:3e:82:de:84:98:84:4b:48:
5e:a7:56:b7:bd:39:14:9d:bf:01:63:59:37:70:b7:
2c:dc:62:76:b9:8c:93:6d:40:cf:e8:fc:91:14:e7:
ba:73:5e:cc:a5:a4:d8:bc:01:d7:82:d1:94:9b:f1:
df:11:69:fe:3a:ec:f6:e0:4c:a2:f4:a7:81:fb:fd:
12:47:03:69:7b:da:cc:4f:74:2b:a7:76:f3:7d:10:
8b:98:83:6d:d3:42:e8:7e:78:40:45:e2:21:ef:05:
3c:ef:6f:53:cb:f5:2b:6f:60:e7:a5:33:f2:54:4b:
c8:9c:2e:e6:59:ef:e6:7d:ec:f3:58:e1:50:68:6a:
ef:6e:96:5f:4d:30:cb:ca:62:ff:c6:bd:0b:44:64:
3a:94:7f:28:4f:5d:e4:e3:f3:73:ed:05:3b:68:52:
50:f0:35:d2:ab:50:d0:f9:4f:0c:e2:d6:11:0f:fd:
f8:aa:f7:b0:25:79:6b:33:e5:cb:4d:34:33:01:73:
89:a6:2c:f9:a9:3a:1e:a1:e9:ee:0d:6e:49:6b:6b:
c2:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:12:2B:DD:79:E3:E1:18:0F:DE:72:38:72:F1:3F:F2:1C:E7:D9:F2
X509v3 Authority Key Identifier:
keyid:AE:B7:63:21:C8:D4:69:EE:3B:A0:23:92:0B:37:2C:CD:A5:DE:9E:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rrdjIcjUae47oCOSCzcszaXeng8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/8d7e85-00c0-40e0-aa80-c7dcc2391cc9/1/rrdjIcjUae47oCOSCzcszaXeng8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/8d7e85-00c0-40e0-aa80-c7dcc2391cc9/1/rrdjIcjUae47oCOSCzcszaXeng8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:59:fd:2a:ef:ae:82:24:ad:97:81:0b:65:26:0d:72:b8:7d:
3b:a2:07:d0:2a:4e:f4:ab:43:ec:07:76:fb:1b:93:07:b1:84:
5b:fb:d0:29:aa:98:34:13:dd:10:e6:5f:8f:f3:c7:d1:95:bb:
6f:31:f9:76:0f:2f:95:ba:b2:3c:98:5d:80:1f:89:8f:ed:fc:
18:d6:db:e3:ae:e5:75:51:b1:bf:ab:83:28:0f:71:f4:38:3e:
c9:2b:a1:99:1e:f9:30:b5:99:ba:fc:b1:fa:59:a5:cf:9f:9e:
02:78:d8:f1:bf:0a:25:4d:16:82:b0:18:d4:7b:49:ea:81:46:
63:5f:7c:d8:0d:36:be:22:09:50:56:33:93:a2:4d:53:aa:6f:
44:ba:3a:84:9e:32:bd:5c:d6:8a:2c:55:14:5b:79:77:96:c4:
67:12:9a:04:b3:ed:a6:e1:54:94:26:a9:cd:2d:c2:05:75:8e:
fd:f8:9a:be:2a:3b:54:a7:8c:2f:38:40:d7:95:77:cb:04:1b:
48:9e:ae:61:92:d3:f6:97:42:b5:21:ea:38:13:fa:70:6d:96:
0c:9e:7a:27:45:79:d6:8c:d2:49:15:a9:95:6a:ae:f5:c3:6c:
37:bc:0b:be:17:cb:86:7d:59:ae:e3:dd:fe:f8:e3:25:5d:39:
b0:ca:54:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 06:23:01 2026 by rpki-client