Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/868a9c-fe25-4b59-a329-18401da43563/1/a3sSBFsa8JrPlmLuNbos1-HIW60.mft
File: a3sSBFsa8JrPlmLuNbos1-HIW60.mft (raw, json)
Hash identifier: oBxuWsH3BLdwtnzb2wQQsWw4RwD2ir1hgiCz9giZApw=
Subject key identifier: 02:0C:25:EB:90:87:0A:78:D7:7D:E4:D9:CE:D1:5F:1E:3B:62:C8:22
Authority key identifier: 6B:7B:12:04:5B:1A:F0:9A:CF:96:62:EE:35:BA:2C:D7:E1:C8:5B:AD
Certificate issuer: /CN=6b7b12045b1af09acf9662ee35ba2cd7e1c85bad
Certificate serial: 019FAC75F9D2D3D46361C4BF182B1BF1685B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a3sSBFsa8JrPlmLuNbos1-HIW60.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/868a9c-fe25-4b59-a329-18401da43563/1/a3sSBFsa8JrPlmLuNbos1-HIW60.mft
Manifest number: 0980
Signing time: Wed 29 Jul 2026 06:00:40 +0000
Manifest this update: Wed 29 Jul 2026 06:00:40 +0000
Manifest next update: Thu 30 Jul 2026 06:00:40 +0000
Files and hashes: 1: 6ay0wHDiAgZDJPmL-UcgJsFPARM.roa (hash: pRBfANPJG+/QAyrSHAeenbhDDnLtn2aB52e6eqKhKNI=)
2: a3sSBFsa8JrPlmLuNbos1-HIW60.crl (hash: AEWXXI4ye7+jv4KR5bShaZOeCMw4B5LPSWa2I1E6rKQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/868a9c-fe25-4b59-a329-18401da43563/1/a3sSBFsa8JrPlmLuNbos1-HIW60.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/868a9c-fe25-4b59-a329-18401da43563/1/a3sSBFsa8JrPlmLuNbos1-HIW60.mft
rsync://rpki.ripe.net/repository/DEFAULT/a3sSBFsa8JrPlmLuNbos1-HIW60.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 06:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:75:f9:d2:d3:d4:63:61:c4:bf:18:2b:1b:f1:68:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b7b12045b1af09acf9662ee35ba2cd7e1c85bad
Validity
Not Before: Jul 29 06:00:40 2026 GMT
Not After : Jul 30 06:00:40 2026 GMT
Subject: CN=020c25eb90870a78d77de4d9ced15f1e3b62c822
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:15:d2:79:cb:a6:21:3e:a8:92:39:5e:19:83:
5d:ec:da:d3:b2:2e:49:94:4d:4b:b4:5d:dc:8b:5c:
08:ac:d0:48:dc:13:c9:13:3c:47:a0:7f:36:58:ce:
15:b7:9a:e5:ad:a1:93:73:8f:ef:22:7a:bb:0e:90:
c3:86:f1:e4:a4:15:41:d8:0a:80:ef:05:0a:44:6e:
a1:26:9f:f3:d8:9a:f1:5c:5f:c7:26:92:25:75:30:
d5:0a:29:0b:83:ef:91:47:d0:61:2e:3b:75:6d:46:
a9:88:63:2e:92:88:47:49:39:c1:3c:f3:ec:1a:52:
ca:f3:b9:25:66:81:34:b3:98:a2:69:93:f8:48:23:
a5:5b:ce:3d:ec:3b:7b:c1:ca:b1:bc:ee:02:15:68:
a5:30:38:b7:31:df:42:48:99:49:5b:84:ce:81:58:
12:99:9d:25:a2:2e:65:8b:76:a8:f1:8b:c6:c9:88:
32:02:69:94:da:3f:9b:ba:77:4b:eb:ab:2d:46:4b:
03:b7:69:01:f4:f0:da:bf:9f:81:47:25:32:87:ad:
85:62:38:92:99:d5:9a:85:77:61:36:8e:66:8a:fa:
e9:e3:27:22:8b:61:73:51:53:71:9a:6c:c1:52:cf:
c3:8a:d6:ff:4b:cd:83:61:12:68:59:7c:76:bd:2c:
81:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:0C:25:EB:90:87:0A:78:D7:7D:E4:D9:CE:D1:5F:1E:3B:62:C8:22
X509v3 Authority Key Identifier:
keyid:6B:7B:12:04:5B:1A:F0:9A:CF:96:62:EE:35:BA:2C:D7:E1:C8:5B:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3sSBFsa8JrPlmLuNbos1-HIW60.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/868a9c-fe25-4b59-a329-18401da43563/1/a3sSBFsa8JrPlmLuNbos1-HIW60.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/868a9c-fe25-4b59-a329-18401da43563/1/a3sSBFsa8JrPlmLuNbos1-HIW60.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:12:e4:28:c9:8a:78:b3:e6:bb:90:7f:6e:3c:17:b2:03:86:
c6:f2:d5:b7:87:84:81:4e:3b:e5:00:73:37:94:33:1f:56:22:
9f:7b:76:9d:98:c1:43:5a:43:ad:d8:4a:c2:19:71:49:72:a3:
9a:90:87:95:c0:67:b8:21:68:fd:d1:92:a4:38:46:14:b0:80:
2a:42:10:06:01:40:f9:d0:7e:3d:1f:09:7e:03:f7:8c:d8:d6:
76:58:36:9e:31:cb:28:79:b5:9b:e0:df:de:1f:85:82:ce:33:
b5:b5:76:b8:6d:a2:58:cf:8e:a6:e9:40:86:9e:49:d0:e8:19:
20:d1:9a:c5:5b:b2:2b:0b:64:1d:9e:0e:05:be:3c:59:fe:83:
bd:c4:2d:a3:0a:f2:b5:c8:6c:1a:0e:96:d4:ce:0d:fb:e0:a5:
e8:95:a7:b3:ff:71:3d:31:70:f9:1f:77:86:b0:ab:ba:a3:55:
96:d8:b3:98:95:52:63:d3:23:c0:d2:72:c2:e0:0b:f9:55:69:
44:28:7a:8d:88:6c:87:4e:a7:4a:26:fc:06:84:a0:ba:7e:92:
1b:a1:c4:93:9d:70:eb:31:4d:c9:64:0d:df:99:3b:32:9b:4d:
96:a6:12:74:e2:a5:f9:24:9e:a5:76:e1:a6:a2:af:44:76:eb:
4a:d6:b2:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 11:13:16 2026 by rpki-client