Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/275a74-b3ef-44cf-8220-6a3342b95af1/1/a2BBKCOgIkpdAOSWPWsj0iUEmX0.mft
File: a2BBKCOgIkpdAOSWPWsj0iUEmX0.mft (raw, json)
Hash identifier: SzzaoL7wVDVvXPWKmCMo9d5lD97zwwpmoc3UlnVsTuM=
Subject key identifier: 7A:01:FB:AF:F0:37:BA:49:F7:2F:7B:E4:9D:3C:74:6B:02:C1:50:B3
Authority key identifier: 6B:60:41:28:23:A0:22:4A:5D:00:E4:96:3D:6B:23:D2:25:04:99:7D
Certificate issuer: /CN=6b60412823a0224a5d00e4963d6b23d22504997d
Certificate serial: 019CAAC6B2ABD80A421F48557B5746B5AC81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a2BBKCOgIkpdAOSWPWsj0iUEmX0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/275a74-b3ef-44cf-8220-6a3342b95af1/1/a2BBKCOgIkpdAOSWPWsj0iUEmX0.mft
Manifest number: 1321
Signing time: Sun 01 Mar 2026 19:01:14 +0000
Manifest this update: Sun 01 Mar 2026 19:01:14 +0000
Manifest next update: Mon 02 Mar 2026 19:01:14 +0000
Files and hashes: 1: V060t6JNUi1vfEsa62qo_X0iJE4.roa (hash: AduE5hrvzuYfk+rxNc4doqIVoG5+EDDcPuZpuiYxofo=)
2: a2BBKCOgIkpdAOSWPWsj0iUEmX0.crl (hash: 83lqeMfJguNMtKHM0g8LHleTpyp8pZsA6tZ5p4dMTAM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/275a74-b3ef-44cf-8220-6a3342b95af1/1/a2BBKCOgIkpdAOSWPWsj0iUEmX0.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/275a74-b3ef-44cf-8220-6a3342b95af1/1/a2BBKCOgIkpdAOSWPWsj0iUEmX0.mft
rsync://rpki.ripe.net/repository/DEFAULT/a2BBKCOgIkpdAOSWPWsj0iUEmX0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:b2:ab:d8:0a:42:1f:48:55:7b:57:46:b5:ac:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b60412823a0224a5d00e4963d6b23d22504997d
Validity
Not Before: Mar 1 19:01:14 2026 GMT
Not After : Mar 2 19:01:14 2026 GMT
Subject: CN=7a01fbaff037ba49f72f7be49d3c746b02c150b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:83:5d:0e:ea:aa:35:52:a6:67:84:d0:3b:c1:
ab:65:f9:3a:1c:4d:1c:b3:70:07:92:ed:83:2a:5b:
6c:32:79:98:e5:1b:1a:cf:0a:7d:48:26:8f:1d:8a:
b6:5c:ac:fe:18:4e:ea:7b:d9:9a:55:f2:43:b6:25:
94:c1:49:7d:b8:d3:1b:e2:37:52:30:11:f4:65:0b:
e1:0b:77:b6:cb:0a:e7:16:cd:45:62:fd:10:56:44:
ff:eb:06:9d:55:7f:e6:a4:af:b7:c9:55:ae:d1:e6:
7c:89:a4:d9:18:ae:21:82:32:2e:5a:78:9d:d1:cf:
b4:00:73:d3:a8:87:67:10:05:29:4f:a9:f3:36:1c:
3d:9c:46:d5:17:13:4f:50:88:0e:4b:c4:29:12:e0:
2f:9f:9a:a0:90:00:b6:c0:38:73:2e:8f:8e:62:c4:
a5:6d:60:3f:43:c2:8d:52:07:e7:ab:dd:9c:98:3b:
4d:c9:56:f7:af:89:0f:e2:c0:0a:fd:4e:d7:5c:aa:
5c:da:12:39:05:6b:5c:18:31:d5:a3:64:01:88:fe:
45:3a:4b:22:61:89:44:27:14:e6:8b:f1:30:48:e8:
b0:9d:bb:24:ff:65:ae:f9:f9:e1:d9:47:fa:c5:8e:
62:5c:ab:60:6c:7f:bc:11:dd:88:ac:3f:a2:8a:6c:
da:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:01:FB:AF:F0:37:BA:49:F7:2F:7B:E4:9D:3C:74:6B:02:C1:50:B3
X509v3 Authority Key Identifier:
keyid:6B:60:41:28:23:A0:22:4A:5D:00:E4:96:3D:6B:23:D2:25:04:99:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2BBKCOgIkpdAOSWPWsj0iUEmX0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/275a74-b3ef-44cf-8220-6a3342b95af1/1/a2BBKCOgIkpdAOSWPWsj0iUEmX0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/275a74-b3ef-44cf-8220-6a3342b95af1/1/a2BBKCOgIkpdAOSWPWsj0iUEmX0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:e9:c5:a9:ca:ea:1b:e6:53:6d:3e:41:49:26:28:2e:d4:1e:
bc:41:06:a2:c1:66:51:e3:2e:f6:28:d1:48:f0:57:13:77:81:
c1:45:87:2d:1d:2c:bc:95:25:34:20:22:f3:eb:a6:83:fe:af:
19:1c:c4:27:11:65:b4:aa:9c:8b:42:80:05:bc:3d:17:ba:54:
c4:f0:9d:87:ba:51:c7:13:35:c3:f8:7b:4f:14:2a:0a:dc:47:
1d:13:78:03:3a:f2:5d:98:e5:51:88:3a:ca:e4:41:4d:a2:8c:
99:46:9d:40:d9:30:21:bb:9a:20:27:17:2d:ca:28:28:ac:c8:
19:36:45:33:82:6f:4d:f2:09:c5:de:22:e4:90:12:07:31:9b:
96:68:82:f7:f9:a8:2f:47:1f:ab:67:a6:56:7f:11:a2:70:1f:
d8:17:00:6e:3d:4a:9e:14:4f:ed:47:d0:1b:6f:f2:d3:4e:42:
99:e6:7b:c3:10:98:f2:83:37:c3:d4:42:c2:2e:fe:fa:bb:46:
46:51:16:40:1f:a0:8e:a2:22:0f:d4:20:fa:bf:5c:46:7f:62:
1f:05:99:4f:c3:41:6c:2e:77:4d:b3:9b:e6:bd:16:0d:64:35:
17:f2:9f:a5:2f:a5:22:77:f5:83:01:46:ad:93:38:d8:de:5d:
04:61:69:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:59:49 2026 by rpki-client