Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/275a74-b3ef-44cf-8220-6a3342b95af1/1/a2BBKCOgIkpdAOSWPWsj0iUEmX0.mft
File: a2BBKCOgIkpdAOSWPWsj0iUEmX0.mft (raw, json)
Hash identifier: 3axPmuKvDjJJLyLXpNkEv6S3HLj91SH06Ni7Ek6clfw=
Subject key identifier: 17:1C:C5:19:78:78:C1:6F:CB:97:3E:32:5D:50:91:AD:87:38:BC:EF
Authority key identifier: 6B:60:41:28:23:A0:22:4A:5D:00:E4:96:3D:6B:23:D2:25:04:99:7D
Certificate issuer: /CN=6b60412823a0224a5d00e4963d6b23d22504997d
Certificate serial: 019D9A3E1EB293695C3D27FC977C01E0EC18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a2BBKCOgIkpdAOSWPWsj0iUEmX0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/275a74-b3ef-44cf-8220-6a3342b95af1/1/a2BBKCOgIkpdAOSWPWsj0iUEmX0.mft
Manifest number: 139D
Signing time: Fri 17 Apr 2026 07:00:55 +0000
Manifest this update: Fri 17 Apr 2026 07:00:55 +0000
Manifest next update: Sat 18 Apr 2026 07:00:55 +0000
Files and hashes: 1: V060t6JNUi1vfEsa62qo_X0iJE4.roa (hash: AduE5hrvzuYfk+rxNc4doqIVoG5+EDDcPuZpuiYxofo=)
2: a2BBKCOgIkpdAOSWPWsj0iUEmX0.crl (hash: 4vYC2G8Yc/BH1wmKxr3kRT95IlkmVWNTl2MFZOTP8H8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/275a74-b3ef-44cf-8220-6a3342b95af1/1/a2BBKCOgIkpdAOSWPWsj0iUEmX0.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/275a74-b3ef-44cf-8220-6a3342b95af1/1/a2BBKCOgIkpdAOSWPWsj0iUEmX0.mft
rsync://rpki.ripe.net/repository/DEFAULT/a2BBKCOgIkpdAOSWPWsj0iUEmX0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3e:1e:b2:93:69:5c:3d:27:fc:97:7c:01:e0:ec:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b60412823a0224a5d00e4963d6b23d22504997d
Validity
Not Before: Apr 17 07:00:55 2026 GMT
Not After : Apr 18 07:00:55 2026 GMT
Subject: CN=171cc5197878c16fcb973e325d5091ad8738bcef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:1c:fa:83:4e:d4:7b:80:1c:38:f2:c3:9a:9c:
05:ab:8d:53:ba:67:c3:9c:22:b4:25:30:10:57:ee:
c7:6e:50:98:7b:a7:3f:42:ab:c2:69:62:5c:64:61:
d0:0d:0f:bb:bd:5c:b7:a8:5f:b0:00:bb:1c:b0:b8:
a4:27:4a:dd:2b:ef:3b:3d:ca:95:2d:4d:ee:e4:12:
d9:a2:b1:45:e8:ff:e3:c0:08:21:af:5f:1f:17:ae:
30:93:d9:39:49:cb:ad:4d:b9:9c:21:5d:7e:a3:b8:
92:93:55:a7:20:1a:4d:c9:e1:e6:f4:f1:b5:57:67:
79:64:7b:ea:04:58:42:b8:15:1e:c6:8c:56:c1:78:
13:86:9d:8a:06:07:a3:64:67:7f:1f:85:70:19:9f:
da:a7:77:d8:b2:49:9d:58:50:a9:7c:08:9d:87:74:
18:94:e5:db:7f:43:01:ab:4e:fd:e3:a2:a6:f7:a5:
ff:c1:ad:d1:8d:8c:be:70:56:2a:7f:da:cd:5f:3e:
c1:93:3a:78:ee:0e:bf:f9:3d:37:9b:bd:76:d7:51:
c4:23:5a:f5:33:5e:40:6a:08:83:b8:7c:d7:b6:08:
b8:f5:ff:58:86:a2:6f:68:a4:80:ad:38:ce:12:d8:
78:c7:e7:f4:0b:44:9e:76:c8:49:3f:a1:af:75:6c:
17:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:1C:C5:19:78:78:C1:6F:CB:97:3E:32:5D:50:91:AD:87:38:BC:EF
X509v3 Authority Key Identifier:
keyid:6B:60:41:28:23:A0:22:4A:5D:00:E4:96:3D:6B:23:D2:25:04:99:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2BBKCOgIkpdAOSWPWsj0iUEmX0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/275a74-b3ef-44cf-8220-6a3342b95af1/1/a2BBKCOgIkpdAOSWPWsj0iUEmX0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/275a74-b3ef-44cf-8220-6a3342b95af1/1/a2BBKCOgIkpdAOSWPWsj0iUEmX0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:73:80:46:99:9b:f9:d8:cc:e1:c5:bd:e6:10:7b:da:88:0a:
35:f5:ec:63:bc:ea:2b:0f:55:cb:9f:4c:e6:15:b2:a3:b0:17:
f3:84:59:85:fd:4e:94:e1:14:1e:ad:26:d8:d6:e5:94:a8:2a:
05:f4:2d:bf:f8:ac:76:8d:f2:b0:e7:57:da:e2:53:b1:40:c2:
a8:8b:bf:1c:2f:ab:38:71:f9:3f:8b:21:d1:15:aa:f5:88:04:
30:4b:ef:3f:99:28:c0:d0:6b:f0:f4:87:31:ae:5f:0e:80:52:
32:fa:71:db:07:d2:f2:5a:57:17:4e:78:27:65:54:0c:68:9b:
3f:f5:dc:e6:2d:f3:65:b3:c7:78:42:c3:12:2e:5f:d6:66:7d:
f4:1e:34:9c:ff:a4:90:13:f0:48:ea:c6:ef:53:2c:e8:00:bf:
e6:4b:c1:22:7c:18:dd:11:31:0c:79:46:a8:df:4c:cc:4a:d0:
a6:93:02:0d:f6:f5:ce:ae:33:f7:cf:b9:39:d5:f0:e2:7f:30:
e3:34:e7:67:6f:bc:7a:72:08:d5:f6:04:fd:e8:b2:a7:9c:4e:
11:c1:48:b3:4a:26:d5:b3:42:c9:c3:2f:b1:bc:55:85:1e:be:
4d:f8:50:66:99:fd:a2:23:3e:75:86:76:e9:7e:61:fe:a6:42:
5a:82:81:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:26:59 2026 by rpki-client