Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/ebad37-a199-44e2-bf98-a0bb7caf9ce0/1/aKdgVLt-t4_XBs1Bip9uNkVmNm8.mft
File: aKdgVLt-t4_XBs1Bip9uNkVmNm8.mft (raw, json)
Hash identifier: ivUbnIvsU7nxLM7QoR38ZqeM+1d+GJem9/06vxgyh9k=
Subject key identifier: 36:2C:B4:B0:1F:84:25:2D:2B:06:F8:C4:E6:81:CF:D4:A5:18:C5:28
Authority key identifier: 68:A7:60:54:BB:7E:B7:8F:D7:06:CD:41:8A:9F:6E:36:45:66:36:6F
Certificate issuer: /CN=68a76054bb7eb78fd706cd418a9f6e364566366f
Certificate serial: 019FA907B76BD06EF24F5C7C238CD0E9787D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aKdgVLt-t4_XBs1Bip9uNkVmNm8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/ebad37-a199-44e2-bf98-a0bb7caf9ce0/1/aKdgVLt-t4_XBs1Bip9uNkVmNm8.mft
Manifest number: 85
Signing time: Tue 28 Jul 2026 14:01:22 +0000
Manifest this update: Tue 28 Jul 2026 14:01:22 +0000
Manifest next update: Wed 29 Jul 2026 14:01:22 +0000
Files and hashes: 1: aDxqedKr2O-4oJIg4fDpZa5gLAc.roa (hash: fppPlyvE3ZEeKH+ON2djCXrH3zpgUITE612vD7TTNF4=)
2: aKdgVLt-t4_XBs1Bip9uNkVmNm8.crl (hash: orLdsg86N16wLsqA0U1X6pXYqrXwMjFpFCeJ+dyeUPQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/ebad37-a199-44e2-bf98-a0bb7caf9ce0/1/aKdgVLt-t4_XBs1Bip9uNkVmNm8.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/ebad37-a199-44e2-bf98-a0bb7caf9ce0/1/aKdgVLt-t4_XBs1Bip9uNkVmNm8.mft
rsync://rpki.ripe.net/repository/DEFAULT/aKdgVLt-t4_XBs1Bip9uNkVmNm8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:07:b7:6b:d0:6e:f2:4f:5c:7c:23:8c:d0:e9:78:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68a76054bb7eb78fd706cd418a9f6e364566366f
Validity
Not Before: Jul 28 14:01:22 2026 GMT
Not After : Jul 29 14:01:22 2026 GMT
Subject: CN=362cb4b01f84252d2b06f8c4e681cfd4a518c528
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:d3:a1:f1:53:84:68:c8:83:98:a2:44:8c:52:
f8:a2:64:01:cd:8b:72:32:9a:80:27:8b:ce:09:1b:
01:07:92:f0:b0:79:6e:69:4c:ab:05:70:e0:eb:32:
41:0b:01:38:a9:8f:6f:31:79:96:5f:be:05:0c:8e:
50:77:cf:ec:82:22:82:d0:fa:59:5a:bb:32:ec:7c:
e3:9a:fc:c8:9e:fd:ae:28:06:e3:f6:f1:0c:df:12:
29:c1:c5:4e:d9:37:ab:ed:8d:b6:c4:93:da:d0:b3:
33:4f:fe:5e:d4:05:2e:ca:93:ec:9d:f3:45:f6:7e:
3a:a7:5e:d3:d2:88:37:f7:c6:05:80:a8:47:02:6c:
dd:fb:87:ad:a6:d4:c9:01:9f:4f:45:dd:a1:05:fd:
8e:d9:3e:38:bb:38:d7:76:1c:f2:7b:59:e8:b3:c2:
39:cc:15:b7:ed:04:e4:e0:e8:8e:88:a1:a5:cc:8b:
d1:7a:0d:2d:ad:70:e4:8f:e4:a0:35:15:eb:a1:d7:
c3:95:c9:ba:95:01:ee:71:5f:ce:e7:36:90:f0:9a:
61:d3:60:8d:f6:50:9c:c7:91:d6:ed:d7:0d:73:2e:
93:98:08:d6:5c:f0:d0:8c:4f:f9:8f:44:01:ed:a1:
25:56:a3:20:ec:c7:4a:ac:2d:cf:97:0f:c7:cd:69:
91:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:2C:B4:B0:1F:84:25:2D:2B:06:F8:C4:E6:81:CF:D4:A5:18:C5:28
X509v3 Authority Key Identifier:
keyid:68:A7:60:54:BB:7E:B7:8F:D7:06:CD:41:8A:9F:6E:36:45:66:36:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aKdgVLt-t4_XBs1Bip9uNkVmNm8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/ebad37-a199-44e2-bf98-a0bb7caf9ce0/1/aKdgVLt-t4_XBs1Bip9uNkVmNm8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/ebad37-a199-44e2-bf98-a0bb7caf9ce0/1/aKdgVLt-t4_XBs1Bip9uNkVmNm8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:d8:92:ff:30:ac:16:9e:10:92:60:3a:48:be:e3:d9:67:46:
38:56:49:21:7e:0c:4a:1b:65:67:d5:fc:ee:da:84:c4:b1:4e:
63:c5:6c:c9:49:a7:b2:74:ca:aa:3b:30:98:5b:19:7e:71:e8:
b2:75:7c:74:fb:3d:0e:69:d8:ec:4c:cb:d0:11:d1:2f:ab:3b:
6d:8c:5a:c6:5a:c6:f9:43:74:42:a7:cc:8c:4a:1b:a6:e7:04:
9b:c1:12:d8:95:9d:53:34:e8:12:8a:5e:e2:f7:fc:99:d4:0c:
28:d8:8f:28:74:f7:b6:cb:af:56:29:9a:bc:58:0a:85:19:c1:
bb:3b:24:46:eb:87:89:62:3a:13:41:8b:fc:51:4e:16:01:1a:
95:0b:06:54:e4:bc:35:6e:84:57:22:da:48:03:17:f3:7d:e7:
bd:52:47:88:8d:c4:de:47:3c:62:10:f2:a5:eb:d7:c3:48:b8:
d9:63:81:65:c3:03:4f:99:c8:fe:d5:74:23:c3:ad:aa:c6:84:
a0:75:d1:a6:d0:f1:dc:d9:de:51:d1:6f:40:9c:08:c9:3f:57:
97:c3:32:3e:03:38:43:03:ab:5e:44:11:03:85:62:55:0e:f3:
2d:f9:5f:81:e3:b7:d5:a1:41:59:4f:81:ed:03:85:d6:e4:32:
f6:13:b4:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:33:17 2026 by rpki-client