Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/68/a94a4c-a552-46f6-8a81-cef9448124b0/1/a7odJOcsQ57HpcvcORNX3YnLhqs.mft
File: a7odJOcsQ57HpcvcORNX3YnLhqs.mft (raw, json)
Hash identifier: JcAF28Dm3cninMNX2uuIFTZ+IbPyQli6GpGw7xKpoqg=
Subject key identifier: D0:82:88:59:54:8E:B6:A5:C1:22:62:F1:89:E3:E3:1E:B6:66:37:44
Authority key identifier: 6B:BA:1D:24:E7:2C:43:9E:C7:A5:CB:DC:39:13:57:DD:89:CB:86:AB
Certificate issuer: /CN=6bba1d24e72c439ec7a5cbdc391357dd89cb86ab
Certificate serial: 01A0CA0FD5C418B2C9E511A0BB4F3499C76D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a7odJOcsQ57HpcvcORNX3YnLhqs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/a94a4c-a552-46f6-8a81-cef9448124b0/1/a7odJOcsQ57HpcvcORNX3YnLhqs.mft
Manifest number: 0E6F
Signing time: Tue 22 Sep 2026 17:00:30 +0000
Manifest this update: Tue 22 Sep 2026 17:00:30 +0000
Manifest next update: Wed 23 Sep 2026 17:00:30 +0000
Files and hashes: 1: BTNbf-Zetnrn5fG4oMBQEb3Lp6E.roa (hash: A1g/+HrCWiAYQ0oLvI3fSXeEtYJcIWvKDusWeJft4J0=)
2: a7odJOcsQ57HpcvcORNX3YnLhqs.crl (hash: fRTsd/DSFAIgQtqopZwWABKUfMPygXr856WfwroOoEY=)
3: wWQwJt5nLKI1O5iEWrX6yUX3ERA.roa (hash: /R1mextPgTI5TYtyAkChJlhhx20Cv1HoCUbU0zyH5Ho=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/a94a4c-a552-46f6-8a81-cef9448124b0/1/a7odJOcsQ57HpcvcORNX3YnLhqs.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/a94a4c-a552-46f6-8a81-cef9448124b0/1/a7odJOcsQ57HpcvcORNX3YnLhqs.mft
rsync://rpki.ripe.net/repository/DEFAULT/a7odJOcsQ57HpcvcORNX3YnLhqs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 17:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ca:0f:d5:c4:18:b2:c9:e5:11:a0:bb:4f:34:99:c7:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6bba1d24e72c439ec7a5cbdc391357dd89cb86ab
Validity
Not Before: Sep 22 17:00:30 2026 GMT
Not After : Sep 23 17:00:30 2026 GMT
Subject: CN=d0828859548eb6a5c12262f189e3e31eb6663744
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:41:d7:1c:1e:ae:67:81:f7:ee:23:0b:37:65:
69:39:54:83:58:2e:6c:ad:76:eb:c4:94:bc:46:64:
e4:9b:07:94:53:08:34:64:17:cc:52:00:a9:84:2d:
49:02:f1:de:41:c6:c9:b9:a7:be:aa:7c:c3:4a:76:
71:a3:83:64:21:49:65:25:61:3c:8a:9c:32:f5:b3:
3f:e8:51:03:5c:e8:54:2b:7d:9b:ac:0c:26:9f:d9:
01:95:77:c4:b8:90:74:fc:06:45:d0:51:74:3f:7c:
ea:c3:11:30:9f:33:4f:30:45:19:32:74:01:8b:cb:
e3:b8:bf:22:ea:ca:46:54:3f:47:b0:dd:b2:af:3f:
05:fa:b8:1c:9a:54:78:f6:8f:5e:cf:10:58:ad:e3:
aa:4b:a1:c5:fa:74:83:81:fe:02:58:e1:76:c4:89:
5f:b5:3e:f9:ae:3d:b7:84:cc:e5:89:d4:3f:e8:ed:
5a:53:9a:9f:26:27:e7:35:af:4b:e1:d6:52:05:51:
25:2e:2e:30:dd:c4:5b:45:61:bc:9f:63:d8:72:b9:
51:7c:f1:29:f0:8f:91:d9:e8:ad:dc:73:5d:80:88:
c1:6f:9b:4c:f2:e3:61:95:bc:26:35:e1:ab:f4:5f:
19:44:e1:81:4d:2f:a9:f9:97:19:47:32:b0:09:3a:
b7:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:82:88:59:54:8E:B6:A5:C1:22:62:F1:89:E3:E3:1E:B6:66:37:44
X509v3 Authority Key Identifier:
keyid:6B:BA:1D:24:E7:2C:43:9E:C7:A5:CB:DC:39:13:57:DD:89:CB:86:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7odJOcsQ57HpcvcORNX3YnLhqs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/a94a4c-a552-46f6-8a81-cef9448124b0/1/a7odJOcsQ57HpcvcORNX3YnLhqs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/a94a4c-a552-46f6-8a81-cef9448124b0/1/a7odJOcsQ57HpcvcORNX3YnLhqs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:de:83:e1:c4:67:c5:5d:70:a0:d3:80:31:b8:8c:65:db:2a:
e9:64:a2:bc:74:92:f1:a8:51:fe:7f:51:bc:71:af:8d:2a:9d:
28:01:4a:1e:97:0f:fa:33:7b:f0:45:cf:7f:be:29:a6:28:62:
84:e8:73:43:e1:46:85:60:96:46:db:25:6c:3c:9d:d0:c8:8b:
4d:6c:a6:0b:5b:41:b8:7c:f5:71:e8:db:d1:bd:5e:c1:6c:7e:
38:f0:bd:8c:6a:99:bc:7e:e8:07:46:d3:da:1f:76:20:2d:24:
48:71:e8:b5:aa:1a:22:f3:7a:63:8f:65:4a:26:50:dd:c1:4b:
eb:f3:f9:f4:f0:b1:7b:75:11:00:ee:d5:ea:2d:27:f5:c8:7a:
57:6a:c4:26:1e:03:17:01:17:a9:04:c3:5d:77:63:7c:6e:39:
11:0f:87:d9:81:96:09:0c:7a:9e:ff:65:f7:04:44:2c:db:6e:
7d:32:4b:aa:81:fc:a6:27:42:f7:2e:21:38:9b:bc:84:4b:b2:
44:b7:04:4c:e8:e0:cb:25:f7:0a:18:49:85:6d:99:19:92:40:
8c:22:17:e1:25:7b:f4:40:cf:05:b0:ad:5b:c6:db:1b:eb:a4:
01:6d:82:77:88:4e:97:3f:3f:1e:01:e9:1b:37:80:4d:06:76:
6c:9c:62:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 02:57:27 2026 by rpki-client