Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b2/74d876-05a8-4b10-90e2-c9da030af326/1/a8vbb9OedvAEhAEuExRrIYdVw_s.mft
File: a8vbb9OedvAEhAEuExRrIYdVw_s.mft (raw, json)
Hash identifier: Bp0GMTp4dpplX+6DfvxllBVRf7Ec4D2DXQ1eYGYwdiw=
Subject key identifier: 64:CE:BF:43:F2:4B:02:F5:47:C8:49:22:0D:E3:22:93:BF:AC:59:BD
Authority key identifier: 6B:CB:DB:6F:D3:9E:76:F0:04:84:01:2E:13:14:6B:21:87:55:C3:FB
Certificate issuer: /CN=6bcbdb6fd39e76f00484012e13146b218755c3fb
Certificate serial: 01A0C82174457B5FBB2D717D6FB1EA93E83D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a8vbb9OedvAEhAEuExRrIYdVw_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/74d876-05a8-4b10-90e2-c9da030af326/1/a8vbb9OedvAEhAEuExRrIYdVw_s.mft
Manifest number: 1962
Signing time: Tue 22 Sep 2026 08:00:30 +0000
Manifest this update: Tue 22 Sep 2026 08:00:30 +0000
Manifest next update: Wed 23 Sep 2026 08:00:30 +0000
Files and hashes: 1: CaMOrAz-3VjPqu-gbyeJ5_Cx7NM.roa (hash: rD2u98MLb0jiD+OOiIWSkvqJ6RlBaZKAcES5KA3b+A4=)
2: a8vbb9OedvAEhAEuExRrIYdVw_s.crl (hash: NluMv8+PZhKIY2hNlwRB9NOplvpjN++zgFHw3+zinkg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/74d876-05a8-4b10-90e2-c9da030af326/1/a8vbb9OedvAEhAEuExRrIYdVw_s.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/74d876-05a8-4b10-90e2-c9da030af326/1/a8vbb9OedvAEhAEuExRrIYdVw_s.mft
rsync://rpki.ripe.net/repository/DEFAULT/a8vbb9OedvAEhAEuExRrIYdVw_s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 05:59:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c8:21:74:45:7b:5f:bb:2d:71:7d:6f:b1:ea:93:e8:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6bcbdb6fd39e76f00484012e13146b218755c3fb
Validity
Not Before: Sep 22 08:00:30 2026 GMT
Not After : Sep 23 08:00:30 2026 GMT
Subject: CN=64cebf43f24b02f547c849220de32293bfac59bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:e0:de:a0:a8:37:20:b8:c8:d0:90:55:43:a1:
ed:b2:54:72:c1:d6:80:46:1f:cf:1b:1e:21:78:4c:
02:19:29:6d:4d:44:04:e0:81:39:40:71:e2:a5:64:
9f:e2:4c:a6:98:56:61:f2:78:61:8b:49:07:04:95:
37:a4:8f:eb:de:9c:7d:35:b7:a9:e5:f4:6a:52:8b:
65:af:44:56:a9:6e:50:cb:19:47:6d:cd:1f:12:41:
72:bf:54:60:43:50:53:e4:88:a6:5f:f5:63:4d:32:
a4:74:6b:0c:55:06:c4:7f:06:f6:14:64:d9:12:84:
3c:90:7e:21:66:24:94:94:fd:96:8a:34:48:c6:b1:
2b:e3:c1:ef:39:75:32:c4:74:d2:be:73:b6:b7:ee:
d8:16:00:34:b4:21:73:95:81:3d:96:54:82:76:47:
0c:c2:e7:71:e0:37:2f:36:77:b8:db:72:50:99:0a:
9e:8b:5b:3b:c0:68:26:cc:09:7b:1b:d8:9c:10:23:
e5:15:0f:10:40:ba:1d:01:6a:02:32:78:9e:b8:f4:
01:93:e4:09:b0:8b:76:2a:79:09:9d:8f:80:85:00:
dd:7b:cc:e5:7d:9f:d4:02:13:bc:5f:c9:d9:41:f8:
cb:a8:1b:de:bd:eb:79:2a:3f:df:8a:2a:59:27:a2:
9b:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:CE:BF:43:F2:4B:02:F5:47:C8:49:22:0D:E3:22:93:BF:AC:59:BD
X509v3 Authority Key Identifier:
keyid:6B:CB:DB:6F:D3:9E:76:F0:04:84:01:2E:13:14:6B:21:87:55:C3:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8vbb9OedvAEhAEuExRrIYdVw_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/74d876-05a8-4b10-90e2-c9da030af326/1/a8vbb9OedvAEhAEuExRrIYdVw_s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/74d876-05a8-4b10-90e2-c9da030af326/1/a8vbb9OedvAEhAEuExRrIYdVw_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:90:53:af:d7:b3:6b:94:3f:41:5d:d5:e2:89:5c:15:cc:7e:
76:e9:bf:29:70:65:3e:8a:91:d1:1a:05:cd:f3:8e:44:73:cd:
dd:e8:d3:94:8b:78:55:ac:87:8f:d2:ad:e9:35:2c:58:1f:53:
d5:30:6e:15:63:db:e3:7d:e9:0f:0f:ce:5c:d7:19:90:f0:b3:
04:c6:3e:87:5f:33:aa:b4:6d:bd:4d:f9:fb:22:4c:99:18:9a:
4a:3a:a7:34:3b:ce:06:23:cc:46:12:e0:53:90:0b:f7:92:46:
ee:aa:77:3c:c6:9d:3a:92:26:77:b8:c1:87:b0:4f:ce:60:9c:
0d:aa:78:78:60:2b:6c:bf:b2:21:77:62:e0:83:1b:74:38:f4:
dd:59:3e:31:6c:3e:ce:6f:e8:4d:a9:29:d4:93:0d:68:0f:be:
75:f0:ed:f4:45:81:42:6c:fe:fd:74:96:c7:4a:8b:5e:ca:39:
e3:f7:68:3f:77:60:63:7f:18:0b:93:1d:ae:be:91:c8:1f:fa:
d2:f3:19:bc:b6:a7:c0:4f:3e:96:22:1b:84:4a:be:b6:c6:37:
a8:0c:c3:c7:74:cc:d1:13:a3:31:7b:00:fb:ba:d3:ed:f1:d8:
ac:62:f9:37:13:77:b7:ce:f6:75:e6:eb:e2:59:07:25:ac:b3:
99:a2:c9:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 13:19:48 2026 by rpki-client