Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/a94a4c-a552-46f6-8a81-cef9448124b0/1/a7odJOcsQ57HpcvcORNX3YnLhqs.mft
File: a7odJOcsQ57HpcvcORNX3YnLhqs.mft (raw, json)
Hash identifier: 2/fyhXHz/025N7fk5K1kPKQ/68xibv8Z5qpuTlBo6O8=
Subject key identifier: F9:60:74:11:4A:A1:95:B9:32:42:F6:AE:0E:67:E1:75:34:62:AC:3A
Authority key identifier: 6B:BA:1D:24:E7:2C:43:9E:C7:A5:CB:DC:39:13:57:DD:89:CB:86:AB
Certificate issuer: /CN=6bba1d24e72c439ec7a5cbdc391357dd89cb86ab
Certificate serial: 019D9D07B9F0C012F8FF0D996BDA098F0E3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a7odJOcsQ57HpcvcORNX3YnLhqs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/a94a4c-a552-46f6-8a81-cef9448124b0/1/a7odJOcsQ57HpcvcORNX3YnLhqs.mft
Manifest number: 0CCA
Signing time: Fri 17 Apr 2026 20:00:22 +0000
Manifest this update: Fri 17 Apr 2026 20:00:22 +0000
Manifest next update: Sat 18 Apr 2026 20:00:22 +0000
Files and hashes: 1: BTNbf-Zetnrn5fG4oMBQEb3Lp6E.roa (hash: A1g/+HrCWiAYQ0oLvI3fSXeEtYJcIWvKDusWeJft4J0=)
2: a7odJOcsQ57HpcvcORNX3YnLhqs.crl (hash: lRGYJekrtOYs46+WiUvVHPfiFPmmCL2CslhuK16303w=)
3: wWQwJt5nLKI1O5iEWrX6yUX3ERA.roa (hash: /R1mextPgTI5TYtyAkChJlhhx20Cv1HoCUbU0zyH5Ho=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/a94a4c-a552-46f6-8a81-cef9448124b0/1/a7odJOcsQ57HpcvcORNX3YnLhqs.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/a94a4c-a552-46f6-8a81-cef9448124b0/1/a7odJOcsQ57HpcvcORNX3YnLhqs.mft
rsync://rpki.ripe.net/repository/DEFAULT/a7odJOcsQ57HpcvcORNX3YnLhqs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 20:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9d:07:b9:f0:c0:12:f8:ff:0d:99:6b:da:09:8f:0e:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6bba1d24e72c439ec7a5cbdc391357dd89cb86ab
Validity
Not Before: Apr 17 20:00:22 2026 GMT
Not After : Apr 18 20:00:22 2026 GMT
Subject: CN=f96074114aa195b93242f6ae0e67e1753462ac3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:1b:3f:92:88:c3:99:e7:5b:87:59:ca:46:83:
79:ad:7d:79:e7:6c:9f:75:d5:2d:c3:0c:1e:94:eb:
72:51:1e:48:f0:bd:ef:4e:45:a3:ee:5b:9a:c0:f2:
a9:44:89:d9:93:9a:0c:60:1f:e9:14:18:73:9f:c7:
04:c3:cd:38:d1:94:66:10:e9:95:64:7e:ff:8e:27:
61:cc:80:84:70:4d:ef:a2:13:42:2f:4a:42:46:7e:
e9:3c:66:7b:9f:f3:68:8d:37:95:18:7b:39:1e:c1:
cd:34:0b:ef:5e:35:b1:2b:0a:20:70:d5:48:f6:fb:
73:b8:06:13:64:16:bd:e0:86:b6:ff:56:44:91:1a:
b3:7c:83:66:c5:77:48:49:be:5c:f7:95:cb:d7:02:
34:b5:e5:1d:d3:20:7e:e3:ec:99:1b:e7:ce:d8:3a:
cf:91:64:7f:f1:60:dd:71:15:ea:f5:25:bf:fe:8e:
f7:53:ac:1d:cb:29:e6:1c:5c:58:99:54:71:b4:2b:
f7:2b:02:25:50:68:21:43:7f:6c:48:bd:b5:c3:62:
38:40:22:51:ed:58:c0:01:fe:0a:23:e7:9c:45:67:
32:c6:7e:e0:ab:4e:f3:55:c7:3e:ac:00:d1:d0:62:
5c:6e:63:76:33:00:49:36:94:38:31:51:69:ce:83:
af:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:60:74:11:4A:A1:95:B9:32:42:F6:AE:0E:67:E1:75:34:62:AC:3A
X509v3 Authority Key Identifier:
keyid:6B:BA:1D:24:E7:2C:43:9E:C7:A5:CB:DC:39:13:57:DD:89:CB:86:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7odJOcsQ57HpcvcORNX3YnLhqs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/a94a4c-a552-46f6-8a81-cef9448124b0/1/a7odJOcsQ57HpcvcORNX3YnLhqs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/a94a4c-a552-46f6-8a81-cef9448124b0/1/a7odJOcsQ57HpcvcORNX3YnLhqs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:a2:5e:73:f6:c6:f0:b7:fd:27:1d:90:8e:0c:3e:c8:7c:87:
68:56:da:05:1d:59:e8:01:85:de:9a:76:f9:9e:03:ba:7e:53:
10:ac:8a:21:76:ab:cd:75:f0:31:65:06:d5:64:a6:29:92:f7:
a6:1a:39:99:fb:15:1a:32:47:0a:84:42:0e:dd:a6:ba:ab:99:
43:f8:7d:94:60:66:13:dc:07:b3:fd:51:07:ec:35:b1:df:c0:
f4:72:1b:5b:cd:1e:76:44:ca:91:54:27:43:2b:af:7f:62:3f:
64:bb:40:18:0a:8f:46:3d:1f:d1:6d:4b:8c:df:22:0c:a5:79:
2d:36:ed:51:2e:dd:d9:eb:57:e8:aa:83:05:39:40:7e:0a:6a:
cf:b6:af:55:8f:ee:57:13:5c:a9:e4:21:0e:34:23:3c:cd:cc:
42:3e:ae:15:8d:21:f0:08:e4:15:05:23:9b:50:0a:85:a7:c1:
46:ed:95:71:03:e1:f2:b9:ce:e9:e0:a6:96:36:8d:0d:4e:b5:
13:ac:45:3f:56:6d:6d:1f:50:16:e8:aa:ed:c1:7b:09:03:dc:
eb:de:46:5d:c8:62:b5:85:13:ed:56:04:30:33:de:34:03:4a:
17:22:5e:8d:65:71:a8:36:2b:c4:36:f2:be:0d:24:47:d9:42:
5e:fb:1a:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 03:22:38 2026 by rpki-client