Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/acd746-71eb-4cde-ae20-67685b4dc8b9/1/invfL1uWEjLljbKJtIqf4kX6nWw.mft
File: invfL1uWEjLljbKJtIqf4kX6nWw.mft (raw, json)
Hash identifier: 4pb2o2w2RVxnJ50hbWEZLjx55NMTG7ies9tmHIA8kmA=
Subject key identifier: AE:03:42:7C:19:C0:CC:52:08:C9:7A:EA:79:09:0C:AB:58:25:95:3E
Authority key identifier: 8A:7B:DF:2F:5B:96:12:32:E5:8D:B2:89:B4:8A:9F:E2:45:FA:9D:6C
Certificate issuer: /CN=8a7bdf2f5b961232e58db289b48a9fe245fa9d6c
Certificate serial: 019E1F1157697A5391173DD22294DA3D8414
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/invfL1uWEjLljbKJtIqf4kX6nWw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/acd746-71eb-4cde-ae20-67685b4dc8b9/1/invfL1uWEjLljbKJtIqf4kX6nWw.mft
Manifest number: 0698
Signing time: Wed 13 May 2026 02:01:30 +0000
Manifest this update: Wed 13 May 2026 02:01:30 +0000
Manifest next update: Thu 14 May 2026 02:01:30 +0000
Files and hashes: 1: 13bg8sr321aaC-jFOX86O1_lBzU.roa (hash: bU7Oi7TbB7FOIxER/ptIdZra1cEI8qAD1Nz/78F0Vtg=)
2: invfL1uWEjLljbKJtIqf4kX6nWw.crl (hash: p1CdzJ7BS3CgqjOKxd3rpKpOsY7W5P8hufV3FQyp1Jc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/acd746-71eb-4cde-ae20-67685b4dc8b9/1/invfL1uWEjLljbKJtIqf4kX6nWw.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/acd746-71eb-4cde-ae20-67685b4dc8b9/1/invfL1uWEjLljbKJtIqf4kX6nWw.mft
rsync://rpki.ripe.net/repository/DEFAULT/invfL1uWEjLljbKJtIqf4kX6nWw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:11:57:69:7a:53:91:17:3d:d2:22:94:da:3d:84:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a7bdf2f5b961232e58db289b48a9fe245fa9d6c
Validity
Not Before: May 13 02:01:30 2026 GMT
Not After : May 14 02:01:30 2026 GMT
Subject: CN=ae03427c19c0cc5208c97aea79090cab5825953e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:2d:fb:c4:9f:fe:d9:df:d9:b0:ba:a4:bb:79:
b2:16:97:3a:1b:47:69:ec:ba:ff:60:80:41:57:9f:
f2:ea:a1:bb:cd:fe:6a:2c:18:5e:cc:4b:8a:26:58:
5a:81:d7:29:db:c7:bb:d5:3b:a2:a0:b1:e6:0b:c6:
02:28:5a:3d:c9:07:3c:ec:21:26:b8:d5:59:24:f3:
16:ba:35:9f:0c:c5:11:9d:3b:4f:47:4b:94:64:5a:
3f:b2:5e:d0:67:a8:1a:63:12:77:20:7d:79:11:0e:
17:14:20:e9:cb:7b:66:e0:b9:79:45:a2:8e:97:04:
0f:a4:46:bf:b3:c1:8b:7f:be:4d:fe:d3:a9:cc:d2:
b3:a9:c4:16:9a:c9:c8:bb:6c:78:90:36:99:d0:75:
1a:25:98:f1:8b:dd:29:f3:24:eb:39:55:09:a5:bb:
35:f9:cb:65:a9:10:12:bf:9d:c4:4f:06:22:03:59:
69:e2:b9:ca:8a:71:15:4a:97:f2:8d:c5:0a:b3:87:
28:16:7a:5c:87:ce:1e:38:5b:8b:07:c4:19:67:e9:
5c:14:76:bf:e5:4c:43:b8:77:b2:89:3b:48:f2:85:
80:08:4e:bd:96:3f:88:e2:26:d4:e3:dd:96:4e:b2:
84:a4:9e:2c:4a:78:3d:5e:33:fb:3a:64:a2:88:e9:
81:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:03:42:7C:19:C0:CC:52:08:C9:7A:EA:79:09:0C:AB:58:25:95:3E
X509v3 Authority Key Identifier:
keyid:8A:7B:DF:2F:5B:96:12:32:E5:8D:B2:89:B4:8A:9F:E2:45:FA:9D:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/invfL1uWEjLljbKJtIqf4kX6nWw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/acd746-71eb-4cde-ae20-67685b4dc8b9/1/invfL1uWEjLljbKJtIqf4kX6nWw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/acd746-71eb-4cde-ae20-67685b4dc8b9/1/invfL1uWEjLljbKJtIqf4kX6nWw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:1f:76:d3:95:7f:91:65:5f:cb:69:aa:91:e1:93:a4:51:52:
86:77:5a:b7:38:d1:fd:1e:9b:93:bd:05:ec:7c:e0:c7:09:f9:
18:bc:49:5c:15:89:8e:5a:d7:60:fa:53:bb:d2:51:b4:75:dd:
53:9b:b9:00:eb:35:f8:c6:9e:b3:a8:d2:f7:28:7b:4e:6a:63:
c8:67:d9:4f:02:dd:8a:f9:74:42:74:78:0b:7e:35:57:f0:db:
aa:27:9c:0f:73:d5:db:98:5e:7f:dd:4a:73:d8:a3:4f:06:41:
eb:3b:77:36:56:8d:d6:82:a5:d8:e8:cb:46:bd:6b:17:0c:a9:
5c:15:0f:94:3f:06:d3:ba:31:79:01:51:e4:87:92:cd:8a:f7:
cf:a7:94:0a:24:0b:b1:e9:32:47:ef:ad:bc:d4:53:1d:b1:84:
d0:52:da:e8:b2:75:ec:6b:9b:80:e8:fb:46:19:c4:a6:12:c8:
5d:cc:98:b7:87:a0:8d:a2:74:e2:9f:bf:99:aa:76:d3:d6:38:
93:2c:73:e9:55:9e:17:48:fc:aa:75:78:53:c4:04:d0:91:4f:
f6:e5:9a:6d:18:80:c3:66:c2:bb:55:aa:97:bf:19:c2:c5:06:
50:24:d0:d8:29:38:87:ff:18:7f:73:ab:fd:ae:b9:67:8d:03:
ad:1d:f6:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:53:11 2026 by rpki-client