Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/a94a4c-a552-46f6-8a81-cef9448124b0/1/a7odJOcsQ57HpcvcORNX3YnLhqs.mft
File: a7odJOcsQ57HpcvcORNX3YnLhqs.mft (raw, json)
Hash identifier: aADqC6qQtTuV28JASemCdKbHiu7CuolFHwDfYxLq/n4=
Subject key identifier: 46:65:C1:95:2C:9C:97:AF:7B:A3:9D:9B:A2:63:71:C9:90:34:EE:56
Authority key identifier: 6B:BA:1D:24:E7:2C:43:9E:C7:A5:CB:DC:39:13:57:DD:89:CB:86:AB
Certificate issuer: /CN=6bba1d24e72c439ec7a5cbdc391357dd89cb86ab
Certificate serial: 019EC0A3BA52D9179F792AF8441341D6A86B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a7odJOcsQ57HpcvcORNX3YnLhqs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/a94a4c-a552-46f6-8a81-cef9448124b0/1/a7odJOcsQ57HpcvcORNX3YnLhqs.mft
Manifest number: 0D61
Signing time: Sat 13 Jun 2026 11:00:15 +0000
Manifest this update: Sat 13 Jun 2026 11:00:15 +0000
Manifest next update: Sun 14 Jun 2026 11:00:15 +0000
Files and hashes: 1: BTNbf-Zetnrn5fG4oMBQEb3Lp6E.roa (hash: A1g/+HrCWiAYQ0oLvI3fSXeEtYJcIWvKDusWeJft4J0=)
2: a7odJOcsQ57HpcvcORNX3YnLhqs.crl (hash: Xw6uFFCD8LgJrBaAfpfKxbaHriC882YHvBMtEXyi1Gs=)
3: wWQwJt5nLKI1O5iEWrX6yUX3ERA.roa (hash: /R1mextPgTI5TYtyAkChJlhhx20Cv1HoCUbU0zyH5Ho=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/a94a4c-a552-46f6-8a81-cef9448124b0/1/a7odJOcsQ57HpcvcORNX3YnLhqs.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/a94a4c-a552-46f6-8a81-cef9448124b0/1/a7odJOcsQ57HpcvcORNX3YnLhqs.mft
rsync://rpki.ripe.net/repository/DEFAULT/a7odJOcsQ57HpcvcORNX3YnLhqs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 11:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c0:a3:ba:52:d9:17:9f:79:2a:f8:44:13:41:d6:a8:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6bba1d24e72c439ec7a5cbdc391357dd89cb86ab
Validity
Not Before: Jun 13 11:00:15 2026 GMT
Not After : Jun 14 11:00:15 2026 GMT
Subject: CN=4665c1952c9c97af7ba39d9ba26371c99034ee56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:0e:c4:a8:d4:0b:87:e0:f3:ed:21:fc:cb:2d:
10:59:14:46:39:b4:98:37:bb:7f:ed:83:1d:d8:19:
16:4b:41:66:84:f9:e5:7a:0c:fa:39:c0:fc:c4:e9:
d9:50:6b:6d:04:a7:29:40:77:de:9b:18:ae:e4:a1:
1a:da:6b:a7:37:45:17:51:c6:5a:70:6e:d5:28:6a:
83:77:fa:c3:f3:a8:be:21:2a:b5:d7:29:34:1b:73:
aa:d2:1e:52:4b:84:ff:01:d2:df:cc:a5:f2:0f:34:
ef:89:01:6a:26:79:6b:db:79:33:2a:b4:a7:f0:bc:
52:cf:18:2b:d0:16:f3:66:31:cf:3c:bd:ff:64:d3:
04:7c:a0:ba:bb:11:29:e6:01:cf:58:15:c9:f8:61:
77:0b:66:3b:c3:6f:85:e5:a0:0e:0e:0f:4f:0e:97:
0a:60:0b:c6:18:69:9d:fa:4f:b6:80:d6:05:b0:0d:
af:50:23:c5:4b:8f:31:5b:0a:8b:74:04:fa:5c:b6:
57:b6:73:a4:7b:a4:46:e4:62:e0:f8:e5:e3:59:26:
b7:64:92:88:83:0e:30:2a:c5:97:e3:2a:9a:63:02:
0b:2d:1e:8d:47:32:16:7d:38:42:c1:28:e8:f3:ea:
62:e4:7d:55:35:9e:44:36:73:84:3d:68:f0:03:20:
cb:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:65:C1:95:2C:9C:97:AF:7B:A3:9D:9B:A2:63:71:C9:90:34:EE:56
X509v3 Authority Key Identifier:
keyid:6B:BA:1D:24:E7:2C:43:9E:C7:A5:CB:DC:39:13:57:DD:89:CB:86:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7odJOcsQ57HpcvcORNX3YnLhqs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/a94a4c-a552-46f6-8a81-cef9448124b0/1/a7odJOcsQ57HpcvcORNX3YnLhqs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/a94a4c-a552-46f6-8a81-cef9448124b0/1/a7odJOcsQ57HpcvcORNX3YnLhqs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:93:5c:4e:84:16:fe:13:09:41:18:6b:90:de:19:52:ed:82:
a5:b3:a3:2d:5d:05:74:fe:4b:8f:a5:63:11:5f:3d:f0:af:c5:
64:05:99:f7:e4:7c:27:22:cd:82:71:fa:ef:10:c0:89:50:09:
6e:17:3f:ca:ca:d1:29:ed:f7:84:4a:fc:1e:45:ec:d8:3a:17:
2d:0b:38:5c:7f:49:b7:ad:1e:f5:f7:28:da:62:31:8c:21:f0:
10:5f:0d:87:a2:7d:89:bf:ed:2e:2f:0f:ba:b7:9f:da:3f:db:
69:09:41:c3:96:3b:0f:2d:b9:ec:5c:f1:d8:22:55:47:ef:f7:
d7:22:b7:97:e9:28:cb:d6:c6:e3:0e:7e:55:bd:17:f2:ba:a8:
c9:80:cd:b2:3d:4c:7e:da:d1:d9:52:5a:90:5d:84:75:47:17:
e0:90:86:f2:a6:a5:88:ae:e2:90:26:4f:ec:5c:33:4d:e5:bd:
62:df:66:ac:14:f6:50:28:db:6b:87:bb:b9:b5:e5:e8:90:b9:
23:b1:a6:c4:60:91:db:5c:39:27:6d:e6:46:4f:0e:8d:5b:c2:
1b:3c:27:10:98:28:7d:d3:ca:e8:45:0c:f9:7d:71:46:48:21:
7a:d0:95:cd:c8:0a:1c:31:03:cf:df:2d:0a:e4:46:0b:14:b5:
61:a5:b0:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 21:25:40 2026 by rpki-client