Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/a94a4c-a552-46f6-8a81-cef9448124b0/1/a7odJOcsQ57HpcvcORNX3YnLhqs.mft
File: a7odJOcsQ57HpcvcORNX3YnLhqs.mft (raw, json)
Hash identifier: siMGupNWiEb4c2d8Nllyg8vYrP84XA+szbT+mRDiAfI=
Subject key identifier: 71:16:A7:49:3D:36:3D:3E:85:5A:23:14:02:D0:06:6F:E4:1D:04:B0
Authority key identifier: 6B:BA:1D:24:E7:2C:43:9E:C7:A5:CB:DC:39:13:57:DD:89:CB:86:AB
Certificate issuer: /CN=6bba1d24e72c439ec7a5cbdc391357dd89cb86ab
Certificate serial: 019EC2925743E946B7A7715E6A054A153899
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a7odJOcsQ57HpcvcORNX3YnLhqs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/a94a4c-a552-46f6-8a81-cef9448124b0/1/a7odJOcsQ57HpcvcORNX3YnLhqs.mft
Manifest number: 0D62
Signing time: Sat 13 Jun 2026 20:00:30 +0000
Manifest this update: Sat 13 Jun 2026 20:00:30 +0000
Manifest next update: Sun 14 Jun 2026 20:00:30 +0000
Files and hashes: 1: BTNbf-Zetnrn5fG4oMBQEb3Lp6E.roa (hash: A1g/+HrCWiAYQ0oLvI3fSXeEtYJcIWvKDusWeJft4J0=)
2: a7odJOcsQ57HpcvcORNX3YnLhqs.crl (hash: BfdhSgbKa8ZbQBtB/2XpdjRYUIakYw2X967s8RW1c3o=)
3: wWQwJt5nLKI1O5iEWrX6yUX3ERA.roa (hash: /R1mextPgTI5TYtyAkChJlhhx20Cv1HoCUbU0zyH5Ho=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/a94a4c-a552-46f6-8a81-cef9448124b0/1/a7odJOcsQ57HpcvcORNX3YnLhqs.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/a94a4c-a552-46f6-8a81-cef9448124b0/1/a7odJOcsQ57HpcvcORNX3YnLhqs.mft
rsync://rpki.ripe.net/repository/DEFAULT/a7odJOcsQ57HpcvcORNX3YnLhqs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 19:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c2:92:57:43:e9:46:b7:a7:71:5e:6a:05:4a:15:38:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6bba1d24e72c439ec7a5cbdc391357dd89cb86ab
Validity
Not Before: Jun 13 20:00:30 2026 GMT
Not After : Jun 14 20:00:30 2026 GMT
Subject: CN=7116a7493d363d3e855a231402d0066fe41d04b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:96:61:0e:9a:90:ac:30:6f:2a:e1:27:9c:11:
83:1c:1a:1d:4f:36:30:10:8a:ca:b6:14:5a:b8:13:
52:93:bf:0b:74:10:ce:be:c3:fa:b2:42:90:e9:cb:
21:e4:06:01:1c:ef:49:0c:ba:5e:a3:11:2e:4a:31:
1e:d3:43:ed:32:eb:51:ca:ff:c5:7c:61:c6:bd:80:
40:66:26:ee:9c:ef:10:2f:06:d7:cf:b0:e5:88:17:
c2:95:56:97:aa:b5:d0:2d:dc:a1:1f:c2:12:2b:a7:
c6:fc:53:d7:b5:d8:a7:22:df:71:4b:79:bd:fd:5c:
1d:2c:f4:80:a2:53:0f:30:cf:36:a2:48:4a:f9:78:
81:58:81:05:7e:2f:a1:89:79:3d:c3:c9:dd:9a:5c:
12:30:44:7f:34:45:04:c7:55:10:7a:c1:e7:d2:c5:
bd:cd:14:5c:7a:cb:25:74:5b:5b:a1:69:7c:25:c5:
4a:37:67:4e:5f:72:69:bd:4f:35:d9:92:1c:97:4c:
39:16:df:c0:11:2e:36:be:b0:39:44:e6:58:bc:e7:
3c:7e:54:87:d8:8c:c2:58:84:0c:1d:54:c1:ee:6e:
3e:68:b1:be:03:83:f1:14:57:fc:8e:2d:3d:cd:73:
25:38:16:d0:c2:5d:0f:30:1e:ca:03:08:98:01:a1:
bf:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:16:A7:49:3D:36:3D:3E:85:5A:23:14:02:D0:06:6F:E4:1D:04:B0
X509v3 Authority Key Identifier:
keyid:6B:BA:1D:24:E7:2C:43:9E:C7:A5:CB:DC:39:13:57:DD:89:CB:86:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7odJOcsQ57HpcvcORNX3YnLhqs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/a94a4c-a552-46f6-8a81-cef9448124b0/1/a7odJOcsQ57HpcvcORNX3YnLhqs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/a94a4c-a552-46f6-8a81-cef9448124b0/1/a7odJOcsQ57HpcvcORNX3YnLhqs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:dc:86:af:de:eb:7e:e5:9a:c9:b9:aa:81:98:24:7d:47:a0:
c8:01:a8:78:ec:c0:cc:09:8b:5f:f5:91:ae:3e:2a:ff:29:37:
8d:07:58:c6:3d:69:83:36:a9:67:55:e8:7a:ed:d6:42:e6:28:
f1:14:64:b0:e2:f1:a1:61:21:20:64:56:39:05:32:74:fa:13:
f4:5e:c2:f8:35:df:d2:18:f0:94:6c:f7:fe:f9:45:23:86:45:
a3:46:cf:a9:30:ac:c5:9b:78:5c:c6:88:a3:ac:5c:fe:97:f2:
94:68:c8:7b:0d:51:45:b2:5e:2f:9d:a5:53:76:2e:27:b2:55:
b8:b3:7f:5e:27:e4:57:77:f7:22:13:24:07:cb:8b:74:bf:be:
b7:fa:c6:0c:a8:cc:94:10:72:7f:b9:65:71:e8:18:ef:ba:d3:
2a:6b:e2:d6:fc:dd:f5:a7:27:4b:8e:6f:29:6f:24:04:4a:34:
a5:3b:4b:22:4c:5d:8d:d7:51:cd:62:b2:70:58:4b:2a:9f:ff:
b1:3e:1f:79:04:b4:e6:ed:ef:84:ae:01:5c:0e:cb:c8:18:47:
31:d1:6e:00:0b:ee:91:fc:41:49:90:76:e9:9d:a5:b2:73:42:
26:5d:51:b8:60:10:21:6f:c9:7a:e1:7f:d9:0f:a7:26:74:94:
82:ce:84:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 04:15:13 2026 by rpki-client