Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/74d876-05a8-4b10-90e2-c9da030af326/1/a8vbb9OedvAEhAEuExRrIYdVw_s.mft
File: a8vbb9OedvAEhAEuExRrIYdVw_s.mft (raw, json)
Hash identifier: 6ndGuCParVTuZ90zKs68QJc6oHWqGL1tNJn51eNf+U4=
Subject key identifier: 25:00:8F:E0:B8:79:74:90:AB:06:43:23:2E:70:2A:14:86:87:F0:59
Authority key identifier: 6B:CB:DB:6F:D3:9E:76:F0:04:84:01:2E:13:14:6B:21:87:55:C3:FB
Certificate issuer: /CN=6bcbdb6fd39e76f00484012e13146b218755c3fb
Certificate serial: 019E924B221018E13572D0D96BB45C0850EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a8vbb9OedvAEhAEuExRrIYdVw_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/74d876-05a8-4b10-90e2-c9da030af326/1/a8vbb9OedvAEhAEuExRrIYdVw_s.mft
Manifest number: 183D
Signing time: Thu 04 Jun 2026 11:00:57 +0000
Manifest this update: Thu 04 Jun 2026 11:00:57 +0000
Manifest next update: Fri 05 Jun 2026 11:00:57 +0000
Files and hashes: 1: CaMOrAz-3VjPqu-gbyeJ5_Cx7NM.roa (hash: rD2u98MLb0jiD+OOiIWSkvqJ6RlBaZKAcES5KA3b+A4=)
2: a8vbb9OedvAEhAEuExRrIYdVw_s.crl (hash: FnVIuh9L+pHRLtDFghBqKKvxYX7g8bE+YJarhypnsHk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/74d876-05a8-4b10-90e2-c9da030af326/1/a8vbb9OedvAEhAEuExRrIYdVw_s.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/74d876-05a8-4b10-90e2-c9da030af326/1/a8vbb9OedvAEhAEuExRrIYdVw_s.mft
rsync://rpki.ripe.net/repository/DEFAULT/a8vbb9OedvAEhAEuExRrIYdVw_s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Jun 2026 07:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:92:4b:22:10:18:e1:35:72:d0:d9:6b:b4:5c:08:50:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6bcbdb6fd39e76f00484012e13146b218755c3fb
Validity
Not Before: Jun 4 11:00:57 2026 GMT
Not After : Jun 5 11:00:57 2026 GMT
Subject: CN=25008fe0b8797490ab0643232e702a148687f059
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:89:83:7c:a3:78:90:3e:16:14:9a:7c:61:96:
fb:b4:cb:87:aa:c3:17:45:39:00:ca:d8:f5:81:4f:
f1:03:3c:a0:9f:ea:cc:0b:16:38:b8:1c:c9:25:1c:
25:d1:71:02:ed:d5:13:55:73:ff:df:cc:fb:42:c8:
9a:10:ba:71:dc:35:14:a6:81:7a:74:c3:3b:7a:fc:
cb:e2:e5:40:36:39:38:40:43:59:c4:38:25:da:c1:
0f:c8:fb:76:de:ec:b0:02:90:92:d6:45:85:a2:05:
4b:67:10:1c:e3:9e:11:6e:3a:1c:f4:56:1f:16:51:
fb:df:f4:2b:e8:95:78:37:4b:b9:e9:00:d5:6e:a1:
7f:e6:0a:28:ce:11:c5:f9:a0:d0:01:9d:5a:4b:b6:
cd:f1:7c:af:d1:ba:8a:f0:72:42:ad:5f:1d:36:04:
0d:12:9f:dc:b0:8f:34:3f:d8:a4:44:e6:6b:30:25:
43:72:20:58:34:14:c2:50:f2:cd:29:29:12:24:e3:
be:00:51:1b:bd:8d:c7:b7:b0:ab:f1:cc:56:a8:1b:
7f:dc:f4:ce:1c:f2:99:5e:ca:59:48:5e:48:bd:a6:
0a:f8:ea:0f:28:d1:68:cf:11:40:a1:4f:60:10:0e:
b4:36:71:87:6f:02:f1:fb:9a:9d:9f:f2:c6:9c:40:
35:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:00:8F:E0:B8:79:74:90:AB:06:43:23:2E:70:2A:14:86:87:F0:59
X509v3 Authority Key Identifier:
keyid:6B:CB:DB:6F:D3:9E:76:F0:04:84:01:2E:13:14:6B:21:87:55:C3:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8vbb9OedvAEhAEuExRrIYdVw_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/74d876-05a8-4b10-90e2-c9da030af326/1/a8vbb9OedvAEhAEuExRrIYdVw_s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/74d876-05a8-4b10-90e2-c9da030af326/1/a8vbb9OedvAEhAEuExRrIYdVw_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:9f:6a:ac:33:86:a8:7f:36:34:d2:9c:67:f7:fd:aa:3f:a8:
79:fa:ce:2d:4c:e8:08:8a:a6:32:92:12:65:62:11:d9:04:ed:
03:67:ad:22:74:d2:7d:9e:c6:21:b1:2d:45:08:eb:9b:3f:ca:
d8:0d:fb:f1:2e:dc:47:2e:d5:c1:da:5a:da:27:0e:ca:19:01:
91:ff:85:a3:de:d6:13:3c:bb:22:db:5c:7d:13:ba:15:09:49:
35:03:c0:ef:46:24:53:55:28:3b:22:f8:af:4a:c2:d3:92:cc:
de:c5:12:b2:b3:bc:2f:b6:79:db:2b:a7:53:16:5d:e1:fa:d4:
13:2e:d5:d6:08:96:4d:d5:45:a1:4d:0e:38:71:e6:f9:93:aa:
91:26:2e:11:f1:87:d9:0a:5b:70:55:b6:2d:91:ea:8d:ff:2f:
40:b6:91:9d:27:e9:7d:37:9c:f3:c9:8b:83:3a:4a:46:9b:16:
45:e7:d6:a1:4c:ec:77:ad:e1:d4:ca:40:e2:a0:ef:ed:b1:f9:
00:70:08:8a:73:fb:32:a1:72:a7:49:60:b8:46:d5:1a:53:7c:
0f:64:a7:1d:58:2f:48:1c:8d:56:dd:56:6d:5d:27:26:a5:58:
2b:cc:a9:24:59:12:51:7d:89:ab:a9:7c:13:d5:1c:21:0f:0e:
f5:3c:be:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 16:01:01 2026 by rpki-client