Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/a94a4c-a552-46f6-8a81-cef9448124b0/1/a7odJOcsQ57HpcvcORNX3YnLhqs.mft
File: a7odJOcsQ57HpcvcORNX3YnLhqs.mft (raw, json)
Hash identifier: AXJLwa8GvJ4Eh4AiRxzNlFOBxAS36PGGiLlKPHKMtXQ=
Subject key identifier: B9:2C:2A:26:4C:AA:43:C5:A9:49:A3:26:B9:4E:97:E5:53:D5:BB:A0
Authority key identifier: 6B:BA:1D:24:E7:2C:43:9E:C7:A5:CB:DC:39:13:57:DD:89:CB:86:AB
Certificate issuer: /CN=6bba1d24e72c439ec7a5cbdc391357dd89cb86ab
Certificate serial: 019FAA5089C85270AD9FB2CF7C671AA15D69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a7odJOcsQ57HpcvcORNX3YnLhqs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/a94a4c-a552-46f6-8a81-cef9448124b0/1/a7odJOcsQ57HpcvcORNX3YnLhqs.mft
Manifest number: 0DDA
Signing time: Tue 28 Jul 2026 20:00:32 +0000
Manifest this update: Tue 28 Jul 2026 20:00:32 +0000
Manifest next update: Wed 29 Jul 2026 20:00:32 +0000
Files and hashes: 1: BTNbf-Zetnrn5fG4oMBQEb3Lp6E.roa (hash: A1g/+HrCWiAYQ0oLvI3fSXeEtYJcIWvKDusWeJft4J0=)
2: a7odJOcsQ57HpcvcORNX3YnLhqs.crl (hash: ml57XJl6eZXhDy6XPILKr+peGkoY7xJQH0o4autRj7o=)
3: wWQwJt5nLKI1O5iEWrX6yUX3ERA.roa (hash: /R1mextPgTI5TYtyAkChJlhhx20Cv1HoCUbU0zyH5Ho=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/a94a4c-a552-46f6-8a81-cef9448124b0/1/a7odJOcsQ57HpcvcORNX3YnLhqs.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/a94a4c-a552-46f6-8a81-cef9448124b0/1/a7odJOcsQ57HpcvcORNX3YnLhqs.mft
rsync://rpki.ripe.net/repository/DEFAULT/a7odJOcsQ57HpcvcORNX3YnLhqs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 20:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:50:89:c8:52:70:ad:9f:b2:cf:7c:67:1a:a1:5d:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6bba1d24e72c439ec7a5cbdc391357dd89cb86ab
Validity
Not Before: Jul 28 20:00:32 2026 GMT
Not After : Jul 29 20:00:32 2026 GMT
Subject: CN=b92c2a264caa43c5a949a326b94e97e553d5bba0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:33:78:2e:b1:7c:7a:82:63:6b:c2:fd:36:f2:
88:37:6a:af:a5:87:38:61:e8:a0:b7:a1:23:3e:02:
91:82:4e:fd:11:7c:28:36:2a:c9:61:86:62:54:77:
48:46:81:95:49:03:b7:7f:47:cc:98:d0:2c:4c:d9:
2b:03:91:49:a7:a4:ff:82:9b:71:77:a6:dd:9b:69:
e8:58:f0:89:16:58:4d:e0:3c:e1:84:23:8f:35:f3:
10:a4:91:50:15:6d:b4:91:cc:7f:9d:9c:98:7d:f5:
79:b4:c0:9e:a3:e9:9d:48:ac:65:09:21:06:fb:73:
80:3c:bf:7a:86:d8:40:53:9a:4a:86:4c:66:0e:70:
f9:40:bd:89:1b:9b:f9:c0:52:53:d3:cb:bb:a7:72:
e1:28:af:0b:d0:d4:ee:61:11:c1:a1:56:82:17:1d:
b2:7e:b9:3a:41:f3:15:82:96:8c:60:bb:72:a4:3b:
0d:2d:a8:14:85:2a:67:cb:90:6d:2b:54:b2:17:8b:
a7:77:4d:2e:23:aa:4b:cb:ce:37:ea:12:ee:a8:1e:
5b:91:02:c5:18:8e:e0:5f:ca:74:2c:6b:ea:a7:8d:
10:9a:0a:03:c3:ae:fc:5d:33:6d:0d:03:d6:e8:be:
5f:3b:2a:2b:44:cd:89:17:63:68:48:3e:87:40:74:
4d:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:2C:2A:26:4C:AA:43:C5:A9:49:A3:26:B9:4E:97:E5:53:D5:BB:A0
X509v3 Authority Key Identifier:
keyid:6B:BA:1D:24:E7:2C:43:9E:C7:A5:CB:DC:39:13:57:DD:89:CB:86:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7odJOcsQ57HpcvcORNX3YnLhqs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/a94a4c-a552-46f6-8a81-cef9448124b0/1/a7odJOcsQ57HpcvcORNX3YnLhqs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/a94a4c-a552-46f6-8a81-cef9448124b0/1/a7odJOcsQ57HpcvcORNX3YnLhqs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:75:3f:9d:d7:e1:fd:06:8c:4f:4f:2d:30:84:c9:0e:4a:ed:
dd:c6:e4:97:83:aa:8d:a2:41:03:2a:97:c4:ae:ca:33:7d:35:
29:3b:4e:c0:6e:2b:db:18:6a:0f:3e:2d:d7:f8:d2:4c:35:a4:
41:9a:0b:d6:bf:e8:be:9c:71:be:9e:9b:c5:f4:bc:b8:e1:e2:
ef:42:4b:03:48:c3:39:6a:79:f1:95:df:80:3c:8e:a8:14:05:
1a:99:e1:9d:76:b8:1f:4b:93:57:49:15:d8:e6:5b:4b:c9:c2:
7e:1e:3a:ab:a7:e7:15:96:44:d1:33:87:f5:dc:27:b6:a4:c6:
0f:8f:ab:07:65:ef:22:96:53:f9:4a:d5:9f:31:03:4d:e9:e6:
0b:89:2d:d2:9b:63:c5:34:73:9e:40:8b:ae:fb:a7:8f:94:4e:
7d:b6:55:82:a2:50:3c:7d:3e:55:cb:5a:b7:d7:06:68:b8:dd:
e4:a8:8f:a0:da:05:a3:d5:f4:72:aa:62:99:0f:c3:1e:1f:c9:
19:dc:b7:df:0b:42:07:d6:2f:92:94:db:16:5f:c7:52:85:82:
13:b2:e9:71:24:c3:a4:7d:be:5c:37:a0:91:83:72:23:df:b6:
c5:6a:61:d3:e0:48:7b:ca:71:97:30:97:f4:c6:8a:59:8f:c3:
e3:40:b8:d8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+qUInIUnCtn7LPfGcaoV1pMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZiYmExZDI0ZTcyYzQzOWVjN2E1Y2JkYzM5MTM1N2RkODlj
Yjg2YWIwHhcNMjYwNzI4MjAwMDMyWhcNMjYwNzI5MjAwMDMyWjAzMTEwLwYDVQQD
EyhiOTJjMmEyNjRjYWE0M2M1YTk0OWEzMjZiOTRlOTdlNTUzZDViYmEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzTN4LrF8eoJja8L9NvKIN2qvpYc4
Yeigt6EjPgKRgk79EXwoNirJYYZiVHdIRoGVSQO3f0fMmNAsTNkrA5FJp6T/gptx
d6bdm2noWPCJFlhN4DzhhCOPNfMQpJFQFW20kcx/nZyYffV5tMCeo+mdSKxlCSEG
+3OAPL96hthAU5pKhkxmDnD5QL2JG5v5wFJT08u7p3LhKK8L0NTuYRHBoVaCFx2y
frk6QfMVgpaMYLtypDsNLagUhSpny5BtK1SyF4und00uI6pLy8436hLuqB5bkQLF
GI7gX8p0LGvqp40QmgoDw678XTNtDQPW6L5fOyorRM2JF2NoSD6HQHRNcQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLksKiZMqkPFqUmjJrlOl+VT1bugMB8GA1UdIwQY
MBaAFGu6HSTnLEOex6XL3DkTV92Jy4arMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYTdvZEpPY3NRNTdIcGN2Y09STlgzWW5MaHFzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC9hOTRhNGMtYTU1Mi00NmY2LThhODEt
Y2VmOTQ0ODEyNGIwLzEvYTdvZEpPY3NRNTdIcGN2Y09STlgzWW5MaHFzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OC9hOTRhNGMtYTU1Mi00NmY2LThhODEtY2VmOTQ0ODEyNGIw
LzEvYTdvZEpPY3NRNTdIcGN2Y09STlgzWW5MaHFzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGHU/ndfh
/QaMT08tMITJDkrt3cbkl4OqjaJBAyqXxK7KM301KTtOwG4r2xhqDz4t1/jSTDWk
QZoL1r/ovpxxvp6bxfS8uOHi70JLA0jDOWp58ZXfgDyOqBQFGpnhnXa4H0uTV0kV
2OZbS8nCfh46q6fnFZZE0TOH9dwntqTGD4+rB2XvIpZT+UrVnzEDTenmC4kt0ptj
xTRznkCLrvunj5ROfbZVgqJQPH0+Vctat9cGaLjd5KiPoNoFo9X0cqpimQ/DHh/J
Gdy33wtCB9YvkpTbFl/HUoWCE7LpcSTDpH2+XDegkYNyI9+2xWph0+BIe8pxlzCX
9MaKWY/D40C42A==
-----END CERTIFICATE-----
Generated at Wed Jul 29 05:36:27 2026 by rpki-client