Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/e97120-4208-4acc-a54b-92f520e46e88/1/daobbpHzNqAdTS7JukRO_QZxYfc.mft
File: daobbpHzNqAdTS7JukRO_QZxYfc.mft (raw, json)
Hash identifier: 1Wx1JYlwt/Bmb33wRNsMSwAHeOkeskG5FscUTPkspaI=
Subject key identifier: B6:34:8C:16:7D:D4:67:5A:E4:5B:2D:48:6C:30:24:71:9F:1E:0C:C1
Authority key identifier: 75:AA:1B:6E:91:F3:36:A0:1D:4D:2E:C9:BA:44:4E:FD:06:71:61:F7
Certificate issuer: /CN=75aa1b6e91f336a01d4d2ec9ba444efd067161f7
Certificate serial: 019FA899060416B22F6B39A2E1B69C4F5787
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/daobbpHzNqAdTS7JukRO_QZxYfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/e97120-4208-4acc-a54b-92f520e46e88/1/daobbpHzNqAdTS7JukRO_QZxYfc.mft
Manifest number: 4C
Signing time: Tue 28 Jul 2026 12:00:28 +0000
Manifest this update: Tue 28 Jul 2026 12:00:28 +0000
Manifest next update: Wed 29 Jul 2026 12:00:28 +0000
Files and hashes: 1: 1-nNpS75iYMcjjtHDmrPvO5OT4c0.asa (hash: 8ky8Utp0nRPsWBK/+jB+V8TaLHoS6comwINplKcWJxQ=)
2: daobbpHzNqAdTS7JukRO_QZxYfc.crl (hash: e6emRPRwZH0dzyYXF1i8NgTn6Qu5xTJe3rvqp1cCO90=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/e97120-4208-4acc-a54b-92f520e46e88/1/daobbpHzNqAdTS7JukRO_QZxYfc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/e97120-4208-4acc-a54b-92f520e46e88/1/daobbpHzNqAdTS7JukRO_QZxYfc.mft
rsync://rpki.ripe.net/repository/DEFAULT/daobbpHzNqAdTS7JukRO_QZxYfc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 12:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:99:06:04:16:b2:2f:6b:39:a2:e1:b6:9c:4f:57:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75aa1b6e91f336a01d4d2ec9ba444efd067161f7
Validity
Not Before: Jul 28 12:00:28 2026 GMT
Not After : Jul 29 12:00:28 2026 GMT
Subject: CN=b6348c167dd4675ae45b2d486c3024719f1e0cc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:73:34:7d:f8:db:a5:0f:98:5a:73:85:09:cf:
13:9c:4a:65:7c:87:c2:8b:bf:f5:a1:57:8f:28:a8:
a6:65:7d:25:71:80:fd:5c:cd:b4:8a:60:28:19:49:
5c:7b:57:0d:3a:98:dd:e7:9e:0f:d6:f3:09:d4:91:
06:64:57:37:1b:7b:55:5a:f7:3f:80:a0:9c:88:3e:
5b:f7:e2:59:bf:e1:04:b9:7b:ff:70:23:19:59:b8:
d3:4b:bb:8d:3b:5c:56:ec:aa:f9:40:ed:6e:99:f4:
bb:b0:09:0c:fe:60:0c:c8:6a:d4:4b:db:06:96:29:
c7:b5:1c:29:7c:a8:24:76:87:66:0e:09:29:8e:e1:
95:fb:a8:e8:8d:2d:39:21:9d:5f:6c:50:a8:10:1c:
e3:2e:6e:d6:30:ba:b0:89:a3:ce:1b:8c:f2:33:6a:
d9:73:8b:30:e5:eb:5d:ac:e1:ae:09:06:10:00:f6:
8a:43:cc:e2:aa:1a:3a:0e:41:9b:bb:5b:da:35:43:
1b:d8:c4:49:1b:ae:71:b6:bc:1b:c3:6b:55:d2:6c:
66:2d:eb:03:ae:b0:84:9e:ec:4f:a8:f0:fd:ab:a9:
48:30:63:f4:ae:ae:57:f8:b5:f2:cb:4c:31:74:e8:
7e:52:66:3d:e2:1d:6a:07:a7:63:61:75:7a:b6:c8:
f8:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:34:8C:16:7D:D4:67:5A:E4:5B:2D:48:6C:30:24:71:9F:1E:0C:C1
X509v3 Authority Key Identifier:
keyid:75:AA:1B:6E:91:F3:36:A0:1D:4D:2E:C9:BA:44:4E:FD:06:71:61:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/daobbpHzNqAdTS7JukRO_QZxYfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/e97120-4208-4acc-a54b-92f520e46e88/1/daobbpHzNqAdTS7JukRO_QZxYfc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/e97120-4208-4acc-a54b-92f520e46e88/1/daobbpHzNqAdTS7JukRO_QZxYfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:eb:1c:49:72:44:ff:9e:97:2f:5e:06:1e:81:43:0e:df:82:
d5:2e:bd:bd:78:e5:0e:85:56:c3:41:7b:d8:d3:18:58:cc:cb:
2a:f8:50:66:ab:45:55:f9:65:5f:c1:80:c7:04:39:16:e2:6f:
d7:09:20:b1:86:50:fc:65:48:ed:8c:76:af:a2:af:2c:55:55:
17:29:22:7e:d9:ae:92:18:a9:01:16:f8:f3:e8:ab:8d:e8:9d:
3e:3c:20:de:9a:28:6c:28:a9:e7:4f:67:a8:45:f3:44:a2:29:
c7:b6:43:f8:93:b7:a6:5a:fe:60:6f:83:3f:ca:31:75:0d:be:
18:9a:d0:b4:3d:a3:98:d1:c3:56:b8:6c:50:be:06:c0:55:2e:
ec:f0:22:90:9c:04:c7:2e:23:58:06:b1:df:47:10:2d:51:2e:
34:92:10:c6:4a:21:4e:e5:9a:a2:2d:40:aa:09:62:11:d2:48:
18:ef:7f:d5:5c:ea:96:31:0f:6e:0a:dd:f9:41:b9:0b:c9:69:
2d:1c:24:8e:79:0f:6c:66:6f:2a:0c:3b:2d:88:34:1d:2a:af:
7e:9d:6b:a0:40:00:c5:e3:04:4c:e5:1a:08:2d:fc:4e:37:e2:
00:90:33:90:60:78:cf:6e:55:2f:fd:92:a3:18:0e:68:da:0f:
6c:ca:f6:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:02:47 2026 by rpki-client