Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/12/632e89-8842-48b1-9dcf-2aeadb966b76/1/a7ptDw-bGff0POtD5zWaPYTpnZk.mft
File: a7ptDw-bGff0POtD5zWaPYTpnZk.mft (raw, json)
Hash identifier: F43QpCN/LcH7T9rubNsa4Py2MdNxn06L9h3xvSvKWOQ=
Subject key identifier: FC:3B:31:EF:E7:24:C6:32:68:2D:F2:0D:A6:61:8C:19:0A:82:F7:B2
Authority key identifier: 6B:BA:6D:0F:0F:9B:19:F7:F4:3C:EB:43:E7:35:9A:3D:84:E9:9D:99
Certificate issuer: /CN=6bba6d0f0f9b19f7f43ceb43e7359a3d84e99d99
Certificate serial: 01A0CCA3555ED203204ED6004ACCDA6460A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a7ptDw-bGff0POtD5zWaPYTpnZk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/632e89-8842-48b1-9dcf-2aeadb966b76/1/a7ptDw-bGff0POtD5zWaPYTpnZk.mft
Manifest number: 1A73
Signing time: Wed 23 Sep 2026 05:00:51 +0000
Manifest this update: Wed 23 Sep 2026 05:00:51 +0000
Manifest next update: Thu 24 Sep 2026 05:00:51 +0000
Files and hashes: 1: 1FeE-xe_EaE3XH3Ygeo7C-eUXd8.asa (hash: 6bN7q1BQMUp1hzHOMNiQw/jYHXi6V75/bSdbFIE5Wyg=)
2: Iz0LT_Qe2YCy1jRQ8uxVx9mEXjU.roa (hash: sj0aNBI2t2YqU/+4g0EyWrm6gSCBWXNbag0SeNr1xIk=)
3: a7ptDw-bGff0POtD5zWaPYTpnZk.crl (hash: O+Kptm+B66Vtnb5oz3gvzXziNNRexDZx6Ty2CLF7SD4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/632e89-8842-48b1-9dcf-2aeadb966b76/1/a7ptDw-bGff0POtD5zWaPYTpnZk.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/632e89-8842-48b1-9dcf-2aeadb966b76/1/a7ptDw-bGff0POtD5zWaPYTpnZk.mft
rsync://rpki.ripe.net/repository/DEFAULT/a7ptDw-bGff0POtD5zWaPYTpnZk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 05:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cc:a3:55:5e:d2:03:20:4e:d6:00:4a:cc:da:64:60:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6bba6d0f0f9b19f7f43ceb43e7359a3d84e99d99
Validity
Not Before: Sep 23 05:00:51 2026 GMT
Not After : Sep 24 05:00:51 2026 GMT
Subject: CN=fc3b31efe724c632682df20da6618c190a82f7b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:5d:fb:ae:13:10:65:e3:e1:66:ef:b3:aa:b8:
6c:e9:08:12:39:aa:f6:9f:f0:3f:f0:2f:47:c8:8c:
84:33:63:c9:7a:3d:a1:ce:1a:b6:95:31:96:47:72:
0f:8d:9f:09:bb:71:d0:4a:37:62:29:06:ef:38:43:
e0:15:bc:ad:fc:a0:de:2e:df:69:b8:cc:21:ba:2e:
78:dd:af:44:30:21:4e:62:37:8d:d8:d5:e1:9b:f8:
5f:b7:f0:85:2b:02:95:49:4e:35:57:44:50:aa:9d:
40:ea:b4:c8:a7:69:b4:6e:af:51:a7:a1:af:7d:49:
8b:c2:25:dd:a3:e9:c7:6f:f8:ca:54:4b:4a:99:8a:
ab:c2:34:b7:ce:67:b0:6e:c8:69:cc:92:9e:82:87:
6b:57:fc:0e:d9:78:df:e8:56:54:51:c9:58:93:7f:
07:0a:61:f7:a4:83:9c:e6:06:d6:f6:47:f3:c5:62:
54:2b:68:b3:46:e2:86:4a:c3:f3:94:e2:e3:d6:88:
9a:f5:f6:9d:1f:e9:cc:5d:6d:05:2f:a1:05:47:67:
20:06:10:d2:7c:87:b1:0b:e9:c9:a0:f5:60:96:7a:
27:c6:ba:60:8c:79:e0:87:2c:76:3f:51:7a:4a:aa:
43:a5:69:19:46:ff:8d:ab:b8:99:6d:6a:f1:92:fb:
16:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:3B:31:EF:E7:24:C6:32:68:2D:F2:0D:A6:61:8C:19:0A:82:F7:B2
X509v3 Authority Key Identifier:
keyid:6B:BA:6D:0F:0F:9B:19:F7:F4:3C:EB:43:E7:35:9A:3D:84:E9:9D:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7ptDw-bGff0POtD5zWaPYTpnZk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/632e89-8842-48b1-9dcf-2aeadb966b76/1/a7ptDw-bGff0POtD5zWaPYTpnZk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/632e89-8842-48b1-9dcf-2aeadb966b76/1/a7ptDw-bGff0POtD5zWaPYTpnZk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:8c:90:40:e2:9f:66:77:f8:d9:ce:f1:c5:61:79:1a:36:f9:
7b:28:c6:2b:b4:72:e4:70:fd:8d:5c:42:92:1d:d9:36:30:64:
61:f2:39:5e:09:87:da:ec:61:b0:da:bb:57:c4:31:a7:4d:c6:
c2:1c:c4:21:2e:6e:99:60:33:b1:0e:69:60:bf:15:46:ee:08:
cc:21:63:04:ff:85:3e:83:23:1a:89:22:85:6f:fe:a6:b4:d8:
c4:1d:0a:f5:c0:6a:b3:9b:91:87:59:db:4c:cf:1c:57:60:70:
d6:c1:88:e6:e0:bd:b2:d8:52:e9:bb:0e:91:27:53:90:15:45:
6a:74:64:f3:ee:f1:20:d7:61:44:2e:54:0f:48:07:b7:53:d5:
0d:b9:97:b1:7b:3e:ea:4c:6d:00:d9:f8:c8:8c:4b:ab:91:35:
08:fd:5b:2b:7b:de:5e:5b:e8:cd:ac:ca:a9:d1:38:80:e4:cc:
af:a0:30:e5:4c:87:64:f9:d4:18:0d:e7:6e:b5:c3:30:fd:7a:
ed:d4:12:18:59:95:da:31:42:e7:67:d8:09:a7:5f:c0:fe:be:
e3:4e:9e:26:09:b2:92:fe:bc:c3:13:10:b0:2f:1c:48:3d:36:
ec:55:f1:50:67:7a:e2:0b:98:78:92:1c:13:59:e5:04:f2:a0:
25:bd:74:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 11:37:43 2026 by rpki-client