Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/632e89-8842-48b1-9dcf-2aeadb966b76/1/a7ptDw-bGff0POtD5zWaPYTpnZk.mft
File: a7ptDw-bGff0POtD5zWaPYTpnZk.mft (raw, json)
Hash identifier: m8dY9/GDMvwJAuZNyrg7rg9Zp7nprkAVoT8dGgTX5tA=
Subject key identifier: 18:87:5A:87:86:3D:FF:21:60:3A:EF:C9:37:41:A8:24:37:B2:71:8C
Authority key identifier: 6B:BA:6D:0F:0F:9B:19:F7:F4:3C:EB:43:E7:35:9A:3D:84:E9:9D:99
Certificate issuer: /CN=6bba6d0f0f9b19f7f43ceb43e7359a3d84e99d99
Certificate serial: 019FA906F28FAB339FC9A8F952CEBEF61CEB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a7ptDw-bGff0POtD5zWaPYTpnZk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/632e89-8842-48b1-9dcf-2aeadb966b76/1/a7ptDw-bGff0POtD5zWaPYTpnZk.mft
Manifest number: 19DC
Signing time: Tue 28 Jul 2026 14:00:32 +0000
Manifest this update: Tue 28 Jul 2026 14:00:32 +0000
Manifest next update: Wed 29 Jul 2026 14:00:32 +0000
Files and hashes: 1: 1FeE-xe_EaE3XH3Ygeo7C-eUXd8.asa (hash: 6bN7q1BQMUp1hzHOMNiQw/jYHXi6V75/bSdbFIE5Wyg=)
2: Iz0LT_Qe2YCy1jRQ8uxVx9mEXjU.roa (hash: sj0aNBI2t2YqU/+4g0EyWrm6gSCBWXNbag0SeNr1xIk=)
3: a7ptDw-bGff0POtD5zWaPYTpnZk.crl (hash: PqzwnEmNflQ1GoMIZBznEsDEuD8uXlZhRDB0BfLObnI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/632e89-8842-48b1-9dcf-2aeadb966b76/1/a7ptDw-bGff0POtD5zWaPYTpnZk.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/632e89-8842-48b1-9dcf-2aeadb966b76/1/a7ptDw-bGff0POtD5zWaPYTpnZk.mft
rsync://rpki.ripe.net/repository/DEFAULT/a7ptDw-bGff0POtD5zWaPYTpnZk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:06:f2:8f:ab:33:9f:c9:a8:f9:52:ce:be:f6:1c:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6bba6d0f0f9b19f7f43ceb43e7359a3d84e99d99
Validity
Not Before: Jul 28 14:00:32 2026 GMT
Not After : Jul 29 14:00:32 2026 GMT
Subject: CN=18875a87863dff21603aefc93741a82437b2718c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:02:92:d4:fb:55:17:5c:9b:21:83:0e:78:31:
fe:60:68:49:a3:e8:c8:da:23:73:99:f8:71:43:fa:
6e:2e:ee:58:e7:e2:36:c2:7a:35:42:8c:33:8e:a4:
b3:95:9d:eb:67:48:e2:c8:cc:a0:1b:23:55:6c:b9:
e7:a1:5c:40:39:1d:97:cd:2e:4f:25:45:cb:a2:64:
79:ca:f9:c5:fd:58:f8:3f:d8:8a:f1:84:75:80:ce:
bd:5b:36:89:cc:37:a9:ff:68:29:ba:d4:7d:cc:67:
d2:b7:db:26:dd:f5:c7:9a:fe:f0:66:93:d0:99:8e:
a4:b7:fd:f5:e7:52:46:04:f6:54:d5:58:d3:5b:39:
df:43:b7:19:a6:60:eb:f1:cc:fc:f9:3c:15:63:4a:
2c:05:11:30:ac:34:2a:2e:99:f5:db:8c:95:2c:84:
6a:81:5f:80:df:b0:6f:62:56:aa:97:0b:f6:cd:d6:
9e:67:95:47:a4:89:8c:16:f0:4b:ef:b1:d1:98:ff:
e2:67:1a:06:67:5c:bc:9c:d0:47:49:aa:de:88:65:
00:af:61:94:6b:75:fd:cc:0c:e3:ff:3e:5e:a5:16:
0b:e9:38:09:95:28:83:ca:2d:15:22:1c:47:46:1b:
41:ed:cb:b3:76:a6:68:d9:d8:66:0c:f3:d4:25:73:
2a:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:87:5A:87:86:3D:FF:21:60:3A:EF:C9:37:41:A8:24:37:B2:71:8C
X509v3 Authority Key Identifier:
keyid:6B:BA:6D:0F:0F:9B:19:F7:F4:3C:EB:43:E7:35:9A:3D:84:E9:9D:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7ptDw-bGff0POtD5zWaPYTpnZk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/632e89-8842-48b1-9dcf-2aeadb966b76/1/a7ptDw-bGff0POtD5zWaPYTpnZk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/632e89-8842-48b1-9dcf-2aeadb966b76/1/a7ptDw-bGff0POtD5zWaPYTpnZk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:e6:87:53:0b:9a:7b:3a:5c:bb:51:cc:fa:62:a3:49:d0:21:
66:22:fb:fc:66:06:42:8f:7c:4d:33:11:4a:29:c6:a9:f2:f6:
c4:9f:1f:36:03:ed:74:26:12:2b:ee:fc:32:bf:c0:54:ae:f0:
eb:d7:48:c8:2b:73:fa:be:d9:b2:44:bf:37:6d:e1:ca:b8:0c:
42:91:0c:6c:3f:7c:dc:13:70:e7:95:c3:34:98:c3:61:58:84:
88:df:e4:2f:38:6a:39:57:53:0a:62:d1:35:ce:a5:31:eb:b1:
e4:c8:73:58:db:36:57:00:9c:b7:63:60:c5:f8:cf:e7:c3:f9:
07:89:cc:58:f6:49:52:14:ff:52:8d:ae:06:3b:cc:37:c6:63:
92:b8:d5:16:ab:32:8d:da:0f:b7:5e:83:6b:34:dc:e5:5b:6c:
27:f2:c8:11:c8:18:ec:c0:2f:52:66:28:4f:ec:1b:fd:a1:29:
73:a8:61:0d:84:c8:46:91:31:37:d8:30:1b:6f:f4:8c:c4:a7:
16:53:39:be:2d:a8:60:bf:75:a4:a2:c4:2a:2a:30:bd:7d:02:
67:0e:91:e5:78:ef:c9:a2:ca:30:03:71:d0:af:d2:89:3d:7e:
6a:dd:b3:ec:ac:9f:74:47:e2:85:27:19:09:37:d0:2c:62:1b:
07:8b:78:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 15:46:58 2026 by rpki-client