Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/868a9c-fe25-4b59-a329-18401da43563/1/a3sSBFsa8JrPlmLuNbos1-HIW60.mft
File: a3sSBFsa8JrPlmLuNbos1-HIW60.mft (raw, json)
Hash identifier: 0Z7aKCjd6d9tQIeyOQNScF8n/km+1jTOeuxDlbG9o6M=
Subject key identifier: 98:79:9F:BF:9E:0E:D1:12:BC:48:26:F3:67:A2:21:44:2C:0C:E7:B5
Authority key identifier: 6B:7B:12:04:5B:1A:F0:9A:CF:96:62:EE:35:BA:2C:D7:E1:C8:5B:AD
Certificate issuer: /CN=6b7b12045b1af09acf9662ee35ba2cd7e1c85bad
Certificate serial: 019FCD4B4F20EE9DCCB665E1D55615C4377C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a3sSBFsa8JrPlmLuNbos1-HIW60.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/868a9c-fe25-4b59-a329-18401da43563/1/a3sSBFsa8JrPlmLuNbos1-HIW60.mft
Manifest number: 0991
Signing time: Tue 04 Aug 2026 15:01:32 +0000
Manifest this update: Tue 04 Aug 2026 15:01:32 +0000
Manifest next update: Wed 05 Aug 2026 15:01:32 +0000
Files and hashes: 1: 6ay0wHDiAgZDJPmL-UcgJsFPARM.roa (hash: pRBfANPJG+/QAyrSHAeenbhDDnLtn2aB52e6eqKhKNI=)
2: a3sSBFsa8JrPlmLuNbos1-HIW60.crl (hash: fRt/h3/sofythC2I2z2UPP07Ah8E9nHSBCn/oTm5CUw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/868a9c-fe25-4b59-a329-18401da43563/1/a3sSBFsa8JrPlmLuNbos1-HIW60.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/868a9c-fe25-4b59-a329-18401da43563/1/a3sSBFsa8JrPlmLuNbos1-HIW60.mft
rsync://rpki.ripe.net/repository/DEFAULT/a3sSBFsa8JrPlmLuNbos1-HIW60.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Aug 2026 15:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:cd:4b:4f:20:ee:9d:cc:b6:65:e1:d5:56:15:c4:37:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b7b12045b1af09acf9662ee35ba2cd7e1c85bad
Validity
Not Before: Aug 4 15:01:32 2026 GMT
Not After : Aug 5 15:01:32 2026 GMT
Subject: CN=98799fbf9e0ed112bc4826f367a221442c0ce7b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:ed:e6:1e:d0:b5:96:ce:c6:45:bd:b4:b4:c1:
04:b0:79:cf:d3:3e:27:9f:b8:85:97:c2:f3:68:53:
7d:87:16:6a:93:22:c0:03:61:6c:73:c1:1c:7a:d4:
23:fa:61:11:3f:71:75:48:82:e9:83:ec:1d:4e:bf:
29:a6:e3:8a:16:b3:de:07:7d:41:24:69:bc:6e:a3:
38:6d:b4:45:b3:82:37:c2:ed:95:e7:0b:6d:c5:b7:
dd:a4:f9:94:63:4c:ff:ed:59:bd:00:04:94:b3:63:
44:dc:94:62:1a:1b:d0:86:6e:4f:02:a6:26:f8:0e:
7b:95:39:62:42:21:aa:ea:62:b7:43:3d:41:01:46:
e1:2c:a4:cf:75:dc:f2:df:52:02:d9:7f:a0:94:cd:
d9:b6:28:52:02:69:40:78:57:b0:03:65:35:bd:9f:
3e:29:a9:60:11:e6:6a:91:48:cb:84:11:ca:68:85:
7b:2c:07:89:2c:8b:b9:93:9a:ab:66:c9:b3:c0:6b:
aa:7d:e5:7a:02:09:1a:54:81:ce:ef:e4:19:8a:5a:
44:ea:d0:56:fe:c9:8c:40:03:4b:a6:9f:76:ff:74:
b2:70:17:06:35:af:68:f1:4e:3e:9d:f9:c5:77:2e:
78:21:4d:ad:d3:69:3c:2b:92:40:5c:f3:28:b1:83:
28:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:79:9F:BF:9E:0E:D1:12:BC:48:26:F3:67:A2:21:44:2C:0C:E7:B5
X509v3 Authority Key Identifier:
keyid:6B:7B:12:04:5B:1A:F0:9A:CF:96:62:EE:35:BA:2C:D7:E1:C8:5B:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3sSBFsa8JrPlmLuNbos1-HIW60.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/868a9c-fe25-4b59-a329-18401da43563/1/a3sSBFsa8JrPlmLuNbos1-HIW60.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/868a9c-fe25-4b59-a329-18401da43563/1/a3sSBFsa8JrPlmLuNbos1-HIW60.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:c2:76:d3:c3:51:eb:96:0b:a6:ac:f2:e9:93:16:d5:88:d6:
a4:d2:53:b7:4b:c2:ad:1e:55:f5:fb:53:ed:00:1c:00:51:e8:
78:42:03:37:91:6d:c7:ea:00:2a:d5:9e:81:5b:84:e6:4e:c6:
eb:dd:fe:77:ee:e8:81:83:b0:8a:83:4d:77:52:ec:7e:47:ce:
17:e2:82:4f:b9:cb:3d:07:24:62:7b:3b:e8:8d:73:1c:a1:55:
31:2d:8b:5a:05:6d:01:71:62:b6:8a:a1:9d:b1:04:43:5e:81:
5a:68:3e:40:e6:18:42:04:33:87:2e:b7:8f:a3:c0:bf:cb:4b:
d2:21:55:4a:2b:72:b9:db:e2:38:a0:cf:15:3b:45:85:0c:12:
51:c7:76:45:85:de:f3:0c:da:59:79:71:96:52:ef:c8:0a:93:
bc:65:c4:6a:26:d5:15:6e:63:22:b6:0f:30:2a:1d:3c:ac:9e:
af:f2:bb:13:85:64:3d:62:5a:f2:f3:a3:8a:1a:4a:74:77:9c:
ea:99:f2:e0:fa:9e:0c:ae:78:ae:89:a2:1f:f3:d0:a2:54:de:
42:38:6a:4f:1b:d2:6e:2c:c6:88:ad:d9:17:e8:62:81:53:4e:
ee:d1:4b:e7:51:7d:bc:33:bf:9f:b0:4d:5a:09:63:ad:c7:2d:
34:d0:b3:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 4 18:55:18 2026 by rpki-client