Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/a94a4c-a552-46f6-8a81-cef9448124b0/1/a7odJOcsQ57HpcvcORNX3YnLhqs.mft
File: a7odJOcsQ57HpcvcORNX3YnLhqs.mft (raw, json)
Hash identifier: R51v7KGhMBeTYM5Z+EWzsdJVCDkVwwkpq2QcbeBQy6A=
Subject key identifier: 1A:28:E7:FB:73:EC:D0:7D:26:3E:07:F3:CB:7C:92:83:C0:B2:7D:D8
Authority key identifier: 6B:BA:1D:24:E7:2C:43:9E:C7:A5:CB:DC:39:13:57:DD:89:CB:86:AB
Certificate issuer: /CN=6bba1d24e72c439ec7a5cbdc391357dd89cb86ab
Certificate serial: 019CABA226A3CDBE5C14F1C27A7986B1A5E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a7odJOcsQ57HpcvcORNX3YnLhqs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/a94a4c-a552-46f6-8a81-cef9448124b0/1/a7odJOcsQ57HpcvcORNX3YnLhqs.mft
Manifest number: 0C4D
Signing time: Sun 01 Mar 2026 23:00:56 +0000
Manifest this update: Sun 01 Mar 2026 23:00:56 +0000
Manifest next update: Mon 02 Mar 2026 23:00:56 +0000
Files and hashes: 1: BTNbf-Zetnrn5fG4oMBQEb3Lp6E.roa (hash: A1g/+HrCWiAYQ0oLvI3fSXeEtYJcIWvKDusWeJft4J0=)
2: a7odJOcsQ57HpcvcORNX3YnLhqs.crl (hash: rq6jW8ZoR1S1MRd8qffPS4t+9s6aq0d5lQHUHllIvGc=)
3: wWQwJt5nLKI1O5iEWrX6yUX3ERA.roa (hash: /R1mextPgTI5TYtyAkChJlhhx20Cv1HoCUbU0zyH5Ho=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/a94a4c-a552-46f6-8a81-cef9448124b0/1/a7odJOcsQ57HpcvcORNX3YnLhqs.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/a94a4c-a552-46f6-8a81-cef9448124b0/1/a7odJOcsQ57HpcvcORNX3YnLhqs.mft
rsync://rpki.ripe.net/repository/DEFAULT/a7odJOcsQ57HpcvcORNX3YnLhqs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 23:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:a2:26:a3:cd:be:5c:14:f1:c2:7a:79:86:b1:a5:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6bba1d24e72c439ec7a5cbdc391357dd89cb86ab
Validity
Not Before: Mar 1 23:00:56 2026 GMT
Not After : Mar 2 23:00:56 2026 GMT
Subject: CN=1a28e7fb73ecd07d263e07f3cb7c9283c0b27dd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:4e:46:8e:cb:21:7b:66:a8:24:a4:2d:fc:7c:
6d:bc:95:ff:84:a6:37:6b:ef:61:20:ad:95:04:6a:
10:a1:e1:5d:8e:84:f2:ca:28:90:ad:26:0e:ad:ec:
9b:08:41:9d:58:b9:8e:4c:5c:73:b0:d2:d7:6e:bd:
b0:ee:d2:7f:6b:ba:7b:9c:ae:44:aa:16:dc:38:3d:
c0:cd:de:a9:4e:34:96:d4:e1:7d:02:86:90:95:2f:
25:7a:0b:e1:e2:40:0d:c3:89:8a:cd:47:62:8b:95:
0f:2d:b5:24:4f:a8:c4:c7:b2:f3:a1:bc:57:72:73:
9e:c0:5c:35:c2:b3:26:32:17:33:63:63:77:1f:dc:
c7:70:c1:36:15:88:74:b1:7c:eb:c7:c5:a6:95:92:
2a:b6:a2:23:cd:37:e5:23:42:88:b9:80:be:37:08:
70:e5:25:74:4d:da:ed:44:0c:f2:2f:c2:0c:91:92:
5a:8d:0e:c6:1e:4e:11:56:8e:b0:62:d2:a2:63:f6:
87:40:c9:fd:41:75:0b:13:73:bd:df:2b:57:61:47:
4e:a9:d7:78:45:18:5d:60:cc:16:92:45:80:d3:67:
f9:42:91:db:0c:4f:a8:83:b0:2a:31:1b:74:17:20:
67:3e:ae:ef:36:fd:b6:d7:6c:f0:b1:d5:ae:1d:90:
ec:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:28:E7:FB:73:EC:D0:7D:26:3E:07:F3:CB:7C:92:83:C0:B2:7D:D8
X509v3 Authority Key Identifier:
keyid:6B:BA:1D:24:E7:2C:43:9E:C7:A5:CB:DC:39:13:57:DD:89:CB:86:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7odJOcsQ57HpcvcORNX3YnLhqs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/a94a4c-a552-46f6-8a81-cef9448124b0/1/a7odJOcsQ57HpcvcORNX3YnLhqs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/a94a4c-a552-46f6-8a81-cef9448124b0/1/a7odJOcsQ57HpcvcORNX3YnLhqs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:af:e9:d2:8b:8f:54:f8:10:5b:98:c8:c1:fe:5e:67:4a:b8:
8e:b2:4e:7e:0f:8e:5f:dd:bc:a8:b6:dd:c7:ff:31:90:40:63:
05:5e:ed:f9:7b:ac:91:f6:73:c2:ed:d9:0c:58:9b:02:cc:7a:
95:f1:c0:a2:46:ef:db:bc:bc:5f:b2:d6:7b:be:fe:88:2a:8e:
f3:c0:f4:d2:d1:50:b8:d3:2a:b6:0d:2e:1c:62:76:52:c2:3c:
e7:5b:49:c0:7e:89:d1:2a:8b:2d:ec:f2:4f:ff:fa:26:99:eb:
4c:08:4e:35:c1:3f:e4:48:9d:65:0d:d8:10:33:4f:38:45:15:
f6:e9:4b:dc:73:bd:b8:a5:68:85:7a:a6:86:67:c9:68:33:ef:
0e:dd:27:0e:fc:9e:b5:c9:b5:a0:cd:1a:ee:85:17:29:54:e4:
58:ac:37:53:f4:1c:54:df:9d:26:71:04:c2:6d:68:01:1e:01:
53:c9:52:3b:17:23:57:a0:6a:c5:74:ab:6e:5d:d0:41:d8:d9:
d4:a1:36:40:b3:bf:07:ad:39:ed:91:31:4f:ea:5b:5e:54:40:
7c:e4:ad:e4:ea:b3:fa:86:f7:1a:fb:1e:76:ef:fe:e8:c9:b9:
f5:96:fa:38:aa:d1:cc:fa:1c:70:54:f7:79:ff:ce:f5:b0:c1:
47:0b:34:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:36:09 2026 by rpki-client