Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/a94a4c-a552-46f6-8a81-cef9448124b0/1/a7odJOcsQ57HpcvcORNX3YnLhqs.mft
File: a7odJOcsQ57HpcvcORNX3YnLhqs.mft (raw, json)
Hash identifier: RPOIPHpZdc1S/AsI4DgizFRIT8jc+Wsx0IN74TEOCzE=
Subject key identifier: 1F:3D:18:D1:0D:96:79:88:4E:24:B5:51:2C:B3:3B:89:3F:A7:32:EE
Authority key identifier: 6B:BA:1D:24:E7:2C:43:9E:C7:A5:CB:DC:39:13:57:DD:89:CB:86:AB
Certificate issuer: /CN=6bba1d24e72c439ec7a5cbdc391357dd89cb86ab
Certificate serial: 019D992B0DD82F07FC7618B5695CDF919245
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a7odJOcsQ57HpcvcORNX3YnLhqs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/a94a4c-a552-46f6-8a81-cef9448124b0/1/a7odJOcsQ57HpcvcORNX3YnLhqs.mft
Manifest number: 0CC8
Signing time: Fri 17 Apr 2026 02:00:28 +0000
Manifest this update: Fri 17 Apr 2026 02:00:28 +0000
Manifest next update: Sat 18 Apr 2026 02:00:28 +0000
Files and hashes: 1: BTNbf-Zetnrn5fG4oMBQEb3Lp6E.roa (hash: A1g/+HrCWiAYQ0oLvI3fSXeEtYJcIWvKDusWeJft4J0=)
2: a7odJOcsQ57HpcvcORNX3YnLhqs.crl (hash: cRziLV7y58M+HTSM8oH9tWcYAgNPSnu4e/bx3PwOBeI=)
3: wWQwJt5nLKI1O5iEWrX6yUX3ERA.roa (hash: /R1mextPgTI5TYtyAkChJlhhx20Cv1HoCUbU0zyH5Ho=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/a94a4c-a552-46f6-8a81-cef9448124b0/1/a7odJOcsQ57HpcvcORNX3YnLhqs.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/a94a4c-a552-46f6-8a81-cef9448124b0/1/a7odJOcsQ57HpcvcORNX3YnLhqs.mft
rsync://rpki.ripe.net/repository/DEFAULT/a7odJOcsQ57HpcvcORNX3YnLhqs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 02:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:2b:0d:d8:2f:07:fc:76:18:b5:69:5c:df:91:92:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6bba1d24e72c439ec7a5cbdc391357dd89cb86ab
Validity
Not Before: Apr 17 02:00:28 2026 GMT
Not After : Apr 18 02:00:28 2026 GMT
Subject: CN=1f3d18d10d9679884e24b5512cb33b893fa732ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:62:18:49:4d:89:8c:25:09:ce:b9:58:af:13:
cb:5f:62:10:3c:08:5a:25:9b:4e:89:53:22:4d:7d:
5a:9b:51:9a:2c:21:6a:b5:a8:1e:80:c0:a2:55:90:
a7:16:3e:07:5e:d4:1b:03:0b:a6:7d:d4:f1:0d:e6:
00:7a:6e:e2:31:c5:76:71:62:b5:4b:37:68:ff:71:
05:71:07:57:af:18:16:d3:a3:fe:d1:50:3f:95:12:
50:3b:1a:82:f6:b8:af:6a:33:6d:30:2b:89:69:fa:
43:34:87:e6:f5:de:b9:52:77:57:a9:10:49:98:0c:
99:bb:5c:61:b3:8f:36:eb:3f:a5:d8:a1:dd:38:0a:
eb:20:c1:91:d7:ef:b5:ab:9e:8d:a6:c5:76:2f:df:
44:80:52:50:a6:7a:24:e1:88:9d:44:fc:12:4d:01:
e7:85:ef:15:52:0a:97:7b:86:fc:4e:08:e1:c7:22:
5a:ce:b9:fe:b9:ec:99:57:37:cc:3c:d9:d3:16:27:
9e:2e:ad:f1:40:cc:31:db:39:83:a2:b5:1e:c1:d9:
03:12:89:7b:07:f2:34:f1:53:5d:7a:7a:f9:17:07:
79:18:c4:2c:ca:4f:49:bb:6d:bd:73:31:61:41:6d:
d6:03:70:88:06:84:c9:b3:39:df:82:f6:a2:6b:75:
1d:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:3D:18:D1:0D:96:79:88:4E:24:B5:51:2C:B3:3B:89:3F:A7:32:EE
X509v3 Authority Key Identifier:
keyid:6B:BA:1D:24:E7:2C:43:9E:C7:A5:CB:DC:39:13:57:DD:89:CB:86:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7odJOcsQ57HpcvcORNX3YnLhqs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/a94a4c-a552-46f6-8a81-cef9448124b0/1/a7odJOcsQ57HpcvcORNX3YnLhqs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/a94a4c-a552-46f6-8a81-cef9448124b0/1/a7odJOcsQ57HpcvcORNX3YnLhqs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:c5:50:3e:8e:65:23:6e:ee:78:e3:d5:54:9a:46:42:70:a6:
6c:65:09:0e:25:da:bf:9d:2f:38:54:33:2a:2d:66:91:7c:0f:
e9:1f:ed:93:7a:f4:ad:d6:1c:7b:1c:e1:58:f7:a5:34:4a:4f:
da:7c:f7:d9:07:f7:3c:30:c9:13:8a:a0:93:d9:80:64:f0:56:
6c:ab:df:6f:cb:dd:6f:18:3b:46:7c:dc:ad:a9:99:ff:b8:0d:
43:b3:32:a9:94:7a:80:37:d6:b8:f8:4e:47:e1:10:e4:41:f7:
26:28:4d:83:1e:04:e4:fe:27:d7:b7:86:9f:d6:1e:ce:6c:40:
81:ac:42:1f:f4:04:f5:58:a2:0b:ec:7f:1c:c2:7b:e4:51:15:
e4:12:48:22:af:7e:6a:7e:6f:2b:86:73:98:9d:bd:5a:e1:76:
5a:1e:23:4d:fb:55:ee:06:cb:b5:6f:61:7e:79:46:a4:11:dc:
96:b2:e0:f8:68:9f:70:6f:be:98:b3:20:ef:df:8c:22:b7:ea:
97:3e:c0:d2:c1:b7:23:3d:9a:73:ad:74:12:cc:a7:24:48:58:
ba:12:ce:b8:82:47:40:f0:20:ec:c7:99:e2:88:ee:1b:4a:ed:
23:09:19:5d:02:b1:07:1d:7a:95:d8:7b:d7:ca:f4:87:81:e0:
f2:bb:18:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:44:17 2026 by rpki-client