Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/632e89-8842-48b1-9dcf-2aeadb966b76/1/a7ptDw-bGff0POtD5zWaPYTpnZk.mft
File: a7ptDw-bGff0POtD5zWaPYTpnZk.mft (raw, json)
Hash identifier: Sc+RjXgi0XCwp8QHAUnVDKIMyUgx4e0z0nnUql3+8js=
Subject key identifier: 2E:67:D1:0F:30:CF:32:39:B0:7D:1B:C6:E9:B5:97:A5:2F:33:73:13
Authority key identifier: 6B:BA:6D:0F:0F:9B:19:F7:F4:3C:EB:43:E7:35:9A:3D:84:E9:9D:99
Certificate issuer: /CN=6bba6d0f0f9b19f7f43ceb43e7359a3d84e99d99
Certificate serial: 019D273ABE4F43C207F98AA8D9A3EC9E4BB3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a7ptDw-bGff0POtD5zWaPYTpnZk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/632e89-8842-48b1-9dcf-2aeadb966b76/1/a7ptDw-bGff0POtD5zWaPYTpnZk.mft
Manifest number: 188F
Signing time: Wed 25 Mar 2026 23:00:54 +0000
Manifest this update: Wed 25 Mar 2026 23:00:54 +0000
Manifest next update: Thu 26 Mar 2026 23:00:54 +0000
Files and hashes: 1: Iz0LT_Qe2YCy1jRQ8uxVx9mEXjU.roa (hash: sj0aNBI2t2YqU/+4g0EyWrm6gSCBWXNbag0SeNr1xIk=)
2: a7ptDw-bGff0POtD5zWaPYTpnZk.crl (hash: F0bl8jJuIUy6At4/MFlxZun6iDd5QAbx21wDfCqYtuI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/632e89-8842-48b1-9dcf-2aeadb966b76/1/a7ptDw-bGff0POtD5zWaPYTpnZk.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/632e89-8842-48b1-9dcf-2aeadb966b76/1/a7ptDw-bGff0POtD5zWaPYTpnZk.mft
rsync://rpki.ripe.net/repository/DEFAULT/a7ptDw-bGff0POtD5zWaPYTpnZk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 23:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3a:be:4f:43:c2:07:f9:8a:a8:d9:a3:ec:9e:4b:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6bba6d0f0f9b19f7f43ceb43e7359a3d84e99d99
Validity
Not Before: Mar 25 23:00:54 2026 GMT
Not After : Mar 26 23:00:54 2026 GMT
Subject: CN=2e67d10f30cf3239b07d1bc6e9b597a52f337313
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:59:05:63:d0:aa:4b:81:fe:3d:34:55:50:d2:
5b:f4:db:5f:74:d8:65:fe:b3:71:86:e4:6b:5b:e2:
fa:32:6d:ae:76:a6:c9:9b:3f:c9:c9:a5:9b:b2:55:
b5:da:c2:06:88:61:34:85:0e:e2:8d:c7:77:75:b8:
5c:0b:93:20:2f:bf:eb:87:ff:83:c7:45:23:e5:1f:
f6:fc:57:28:1f:51:81:d1:fb:7e:b4:16:4d:df:2f:
68:04:00:7c:87:db:d8:70:fc:8b:d6:82:0c:0c:57:
36:bf:c3:0f:93:6f:69:c4:91:e5:be:9d:2d:49:23:
e0:0d:57:e2:1f:4b:65:7d:74:1f:a9:cf:e3:86:c3:
46:32:b5:9b:a7:f4:ff:2d:ef:34:a1:3c:52:a7:9e:
88:c9:4e:76:60:42:ea:76:33:03:36:db:62:54:17:
a5:c7:45:8d:1e:f5:dd:54:1b:59:a1:ae:0e:38:57:
01:26:b8:09:6a:d5:e7:aa:8f:10:b3:4a:e1:5e:eb:
93:d0:10:63:07:35:46:fb:d7:37:2c:b0:4f:9e:4e:
9c:56:7e:17:8b:22:4f:3b:cf:45:77:16:78:44:2c:
2e:44:57:2c:cd:6d:f5:a2:a9:eb:8c:70:a5:56:60:
99:b7:40:47:3c:68:e8:9a:13:e9:fd:e9:db:f8:8a:
57:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:67:D1:0F:30:CF:32:39:B0:7D:1B:C6:E9:B5:97:A5:2F:33:73:13
X509v3 Authority Key Identifier:
keyid:6B:BA:6D:0F:0F:9B:19:F7:F4:3C:EB:43:E7:35:9A:3D:84:E9:9D:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7ptDw-bGff0POtD5zWaPYTpnZk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/632e89-8842-48b1-9dcf-2aeadb966b76/1/a7ptDw-bGff0POtD5zWaPYTpnZk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/632e89-8842-48b1-9dcf-2aeadb966b76/1/a7ptDw-bGff0POtD5zWaPYTpnZk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:86:62:a4:06:eb:1e:de:51:08:56:1c:1d:40:99:27:61:78:
26:cd:3b:4f:b0:ab:af:1f:01:db:ed:87:73:e1:7c:9d:a8:80:
19:d2:a5:6c:bf:45:38:d4:4f:e4:6c:f9:d9:82:9b:87:51:6b:
dc:cc:bb:d4:cd:40:41:30:10:fb:25:02:f5:38:aa:ac:f5:cb:
61:aa:80:de:94:38:8b:e5:f3:28:54:48:44:4c:32:60:bd:c3:
ff:f0:eb:59:9e:09:5b:32:b1:5c:45:90:38:22:b1:5a:b7:75:
58:b4:c5:04:a9:05:8f:d1:8e:18:3e:d2:fe:07:b1:7a:64:d7:
23:49:5b:45:65:c8:65:c2:4e:d1:23:49:b3:8e:f8:ab:1a:a5:
f3:72:fe:1e:75:b2:95:9c:29:9c:8d:95:6c:47:0a:33:ce:a7:
b4:62:b5:70:3e:ed:ac:02:c7:69:a3:1c:f4:f3:c4:2c:23:71:
2e:13:a0:61:2f:6f:54:e9:f8:1a:ac:14:76:2d:77:0e:7b:71:
f5:8d:9d:d1:13:cc:ac:15:b6:d5:83:0f:e2:1c:c1:a4:12:ac:
88:59:91:ff:e3:8f:b2:71:41:1a:37:0b:45:5b:65:81:08:54:
2c:4e:a0:a4:2b:94:b8:ee:4c:72:b0:39:9f:bf:45:89:20:11:
be:12:bc:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:01:06 2026 by rpki-client