Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/74d876-05a8-4b10-90e2-c9da030af326/1/a8vbb9OedvAEhAEuExRrIYdVw_s.mft
File: a8vbb9OedvAEhAEuExRrIYdVw_s.mft (raw, json)
Hash identifier: rTtKnX0MKPa/YAiE/zw+5N+VkdXV2oJ8Rn5+hcO+W6E=
Subject key identifier: E7:6E:1F:11:B2:D2:7F:84:C4:B2:7E:46:83:16:48:50:08:4B:6B:72
Authority key identifier: 6B:CB:DB:6F:D3:9E:76:F0:04:84:01:2E:13:14:6B:21:87:55:C3:FB
Certificate issuer: /CN=6bcbdb6fd39e76f00484012e13146b218755c3fb
Certificate serial: 019F859EF57D5B3935F60CC98BECDE96E673
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a8vbb9OedvAEhAEuExRrIYdVw_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/74d876-05a8-4b10-90e2-c9da030af326/1/a8vbb9OedvAEhAEuExRrIYdVw_s.mft
Manifest number: 18BB
Signing time: Tue 21 Jul 2026 17:00:14 +0000
Manifest this update: Tue 21 Jul 2026 17:00:14 +0000
Manifest next update: Wed 22 Jul 2026 17:00:14 +0000
Files and hashes: 1: CaMOrAz-3VjPqu-gbyeJ5_Cx7NM.roa (hash: rD2u98MLb0jiD+OOiIWSkvqJ6RlBaZKAcES5KA3b+A4=)
2: a8vbb9OedvAEhAEuExRrIYdVw_s.crl (hash: IHJNgew+EfE+mvoE3PpQ2GMA8EsrRYdmT/gRgo6VT84=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/74d876-05a8-4b10-90e2-c9da030af326/1/a8vbb9OedvAEhAEuExRrIYdVw_s.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/74d876-05a8-4b10-90e2-c9da030af326/1/a8vbb9OedvAEhAEuExRrIYdVw_s.mft
rsync://rpki.ripe.net/repository/DEFAULT/a8vbb9OedvAEhAEuExRrIYdVw_s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:85:9e:f5:7d:5b:39:35:f6:0c:c9:8b:ec:de:96:e6:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6bcbdb6fd39e76f00484012e13146b218755c3fb
Validity
Not Before: Jul 21 17:00:14 2026 GMT
Not After : Jul 22 17:00:14 2026 GMT
Subject: CN=e76e1f11b2d27f84c4b27e4683164850084b6b72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:05:58:d6:f8:a7:ae:d1:eb:5e:ac:9f:ec:da:
9f:75:92:68:eb:ec:2b:5d:16:bb:9b:72:d4:2e:c5:
9f:be:7f:88:1e:48:3a:26:39:c5:d9:93:d6:c3:a3:
15:bc:68:b8:87:2b:1e:fa:88:cf:21:ee:e2:37:b3:
33:ce:e6:68:df:8b:2c:ea:4f:ad:88:fe:a9:08:df:
fe:15:85:d2:a3:2d:8a:95:d0:54:8a:f1:8e:c5:22:
c8:67:ed:e5:82:41:94:2e:ed:23:de:09:ec:cf:4e:
d0:29:7f:38:4d:4e:3b:f0:0d:37:c5:40:7d:b7:de:
fd:af:f9:6e:8d:4d:c7:df:56:c4:eb:ee:99:4e:ab:
e7:ae:7a:4b:b3:0d:e9:0f:6e:e3:d7:00:13:42:5d:
a4:4b:d7:3a:9f:d1:b7:f4:81:a3:c2:61:b6:a9:f3:
e3:b7:bc:f7:66:4a:89:57:03:c8:04:e6:4a:a7:43:
6f:92:c5:ad:f8:e0:05:fe:0b:54:58:37:a6:f3:80:
78:f1:10:17:fe:cc:a0:a0:94:dc:85:29:87:dd:b1:
a7:11:e6:ce:c9:5a:23:97:2a:84:0e:11:a1:ab:e0:
57:8b:f6:6f:1b:44:90:ec:6f:1c:39:f2:bc:1c:d3:
a0:26:dc:37:e2:04:a9:72:6a:a9:30:97:d3:59:ab:
4f:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:6E:1F:11:B2:D2:7F:84:C4:B2:7E:46:83:16:48:50:08:4B:6B:72
X509v3 Authority Key Identifier:
keyid:6B:CB:DB:6F:D3:9E:76:F0:04:84:01:2E:13:14:6B:21:87:55:C3:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8vbb9OedvAEhAEuExRrIYdVw_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/74d876-05a8-4b10-90e2-c9da030af326/1/a8vbb9OedvAEhAEuExRrIYdVw_s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/74d876-05a8-4b10-90e2-c9da030af326/1/a8vbb9OedvAEhAEuExRrIYdVw_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c5:65:0d:d0:77:3d:50:75:f5:4d:c4:63:26:6f:4e:62:3a:93:
ae:eb:3d:56:5a:f6:a6:2d:22:c5:1a:59:a5:81:0e:d2:3b:00:
d1:8c:ed:00:54:09:0c:56:9c:f9:17:f7:f4:ec:dd:fd:26:f9:
7a:39:17:50:87:e8:fa:3e:35:11:45:ac:d4:a4:83:43:fe:49:
5c:a6:92:a0:9d:80:d9:29:05:49:ec:6c:bf:a3:7d:cf:35:51:
92:d8:45:ec:d8:f4:4a:d7:58:31:ef:9b:0c:26:fe:ae:89:1d:
70:64:a0:2a:a0:a8:13:cf:bf:f8:64:c7:da:9f:43:65:89:ce:
bf:53:91:04:7a:ab:51:00:77:16:10:05:92:72:d8:8a:f5:9f:
24:9f:5d:24:31:ac:fe:ac:c9:7f:fc:de:ca:cf:cd:ae:3e:02:
ec:e9:b5:3a:3c:40:a2:9b:fe:aa:1e:ac:06:97:74:31:e1:3b:
ca:0e:21:20:3e:94:ed:9c:6b:2e:01:e6:c4:5d:a6:c7:90:91:
cf:0c:c8:ee:17:a0:19:8d:45:1b:77:97:ca:5b:ed:1e:61:42:
18:9a:e4:ea:5e:7e:dc:32:c0:64:ad:fb:11:58:16:16:8d:3f:
d9:26:dc:03:3c:b6:02:a4:3c:81:f8:a8:cb:9a:23:a3:b4:14:
09:70:42:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 22:06:16 2026 by rpki-client