Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b2/74d876-05a8-4b10-90e2-c9da030af326/1/a8vbb9OedvAEhAEuExRrIYdVw_s.mft
File: a8vbb9OedvAEhAEuExRrIYdVw_s.mft (raw, json)
Hash identifier: Jc0dYY2nOChoNpgmPM7G9lOVZxDXPNmFu3wS0gGT7YI=
Subject key identifier: DD:36:9A:86:C8:EA:08:BA:BC:15:C8:5F:A2:54:66:A5:95:0F:9E:AB
Authority key identifier: 6B:CB:DB:6F:D3:9E:76:F0:04:84:01:2E:13:14:6B:21:87:55:C3:FB
Certificate issuer: /CN=6bcbdb6fd39e76f00484012e13146b218755c3fb
Certificate serial: 01A06D5DC9EC02E25930087C0DAB391D4991
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a8vbb9OedvAEhAEuExRrIYdVw_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/74d876-05a8-4b10-90e2-c9da030af326/1/a8vbb9OedvAEhAEuExRrIYdVw_s.mft
Manifest number: 1933
Signing time: Fri 04 Sep 2026 17:00:58 +0000
Manifest this update: Fri 04 Sep 2026 17:00:58 +0000
Manifest next update: Sat 05 Sep 2026 17:00:58 +0000
Files and hashes: 1: CaMOrAz-3VjPqu-gbyeJ5_Cx7NM.roa (hash: rD2u98MLb0jiD+OOiIWSkvqJ6RlBaZKAcES5KA3b+A4=)
2: a8vbb9OedvAEhAEuExRrIYdVw_s.crl (hash: nif/1eNLG3YDvW3ahjDpSZkdzFeFK1zAHYADOW9A5GA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/74d876-05a8-4b10-90e2-c9da030af326/1/a8vbb9OedvAEhAEuExRrIYdVw_s.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/74d876-05a8-4b10-90e2-c9da030af326/1/a8vbb9OedvAEhAEuExRrIYdVw_s.mft
rsync://rpki.ripe.net/repository/DEFAULT/a8vbb9OedvAEhAEuExRrIYdVw_s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 17:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6d:5d:c9:ec:02:e2:59:30:08:7c:0d:ab:39:1d:49:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6bcbdb6fd39e76f00484012e13146b218755c3fb
Validity
Not Before: Sep 4 17:00:58 2026 GMT
Not After : Sep 5 17:00:58 2026 GMT
Subject: CN=dd369a86c8ea08babc15c85fa25466a5950f9eab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:9d:40:5b:e6:1b:69:01:e5:a5:f9:62:d4:a5:
5d:b4:d3:e3:dd:94:b4:73:56:90:70:67:bf:5e:8a:
9b:c8:68:c0:7c:87:a2:b8:61:f8:b2:cd:42:bf:ed:
4d:52:d5:39:6e:30:50:4f:fe:2a:48:3f:3f:a4:d5:
f4:45:86:56:cd:e8:a3:1e:8e:be:fb:ff:2e:be:c1:
05:a2:31:8b:53:84:d7:44:c5:d0:df:a4:0a:7b:72:
25:47:2f:4e:db:42:9e:4d:d7:62:3a:08:b7:47:25:
36:24:6f:c7:de:80:11:70:62:4f:84:18:c4:60:25:
df:37:cf:f0:d2:ca:1a:1c:8f:7f:fb:ab:87:9a:fa:
b9:85:c2:e5:cf:44:33:d4:dc:dd:64:ca:20:be:da:
83:d8:d2:11:a6:43:3e:f7:f3:f7:8d:87:89:1d:37:
12:8a:04:56:3c:4f:c7:37:ae:0b:5c:62:5f:48:06:
d6:72:e7:81:7b:c5:5f:39:8c:5b:eb:80:60:e3:46:
87:51:d0:e8:94:a2:94:87:0a:f3:de:7d:8f:99:06:
fc:bf:69:86:0b:de:d5:c1:4c:34:1b:7f:ff:1f:3d:
ae:4d:5d:53:0c:87:e0:e1:e5:0a:f0:43:ec:61:af:
2a:5a:c7:e6:14:62:04:32:39:36:b9:da:55:bd:9d:
0f:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:36:9A:86:C8:EA:08:BA:BC:15:C8:5F:A2:54:66:A5:95:0F:9E:AB
X509v3 Authority Key Identifier:
keyid:6B:CB:DB:6F:D3:9E:76:F0:04:84:01:2E:13:14:6B:21:87:55:C3:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8vbb9OedvAEhAEuExRrIYdVw_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/74d876-05a8-4b10-90e2-c9da030af326/1/a8vbb9OedvAEhAEuExRrIYdVw_s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/74d876-05a8-4b10-90e2-c9da030af326/1/a8vbb9OedvAEhAEuExRrIYdVw_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:94:a8:d1:e4:c1:6e:ee:99:c2:17:cc:f9:b8:7a:4b:79:48:
62:84:d7:63:2d:48:f4:b6:d7:74:41:48:e6:1c:c8:74:32:1d:
3a:4b:59:f8:37:80:2a:f1:db:f2:84:5a:4d:c4:e3:25:e3:d5:
0e:c0:3c:f1:ba:f8:04:b7:af:dc:a8:10:97:35:a6:61:a4:11:
6c:ab:bf:69:c1:71:97:86:20:50:3b:1b:0c:b0:39:d7:9c:fc:
c2:b0:47:54:7f:2b:3e:fb:0d:06:f3:18:63:d8:61:30:b1:3e:
40:fa:94:e8:f5:f9:70:aa:85:bd:50:a1:31:3c:a5:06:2e:49:
e2:fc:3e:33:94:64:ea:f6:ab:f9:46:b1:57:93:34:f9:b6:96:
25:cc:df:a7:a9:83:0b:8e:30:f8:1a:79:c9:7c:61:c8:ff:4f:
55:af:61:cf:47:36:86:01:0a:cb:3f:32:8e:90:27:5b:b4:e9:
91:1e:d5:99:24:c3:1d:4a:45:71:ad:f7:ac:ab:bc:8e:a0:3c:
d8:aa:22:54:54:a6:9f:c4:21:7d:1e:c5:9e:37:a0:bf:53:5f:
e0:d0:38:89:e3:79:c4:c3:fa:5d:79:bf:49:17:ab:b2:c3:32:
3a:79:76:66:06:27:13:96:08:c7:2f:74:a0:cb:63:79:7f:c4:
4c:06:83:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 05:09:41 2026 by rpki-client