Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/a94a4c-a552-46f6-8a81-cef9448124b0/1/a7odJOcsQ57HpcvcORNX3YnLhqs.mft
File: a7odJOcsQ57HpcvcORNX3YnLhqs.mft (raw, json)
Hash identifier: tZRpsGqwrcBFD84xmNAifcTdILwbOyiTI0Zpye8NJgI=
Subject key identifier: 09:9E:8C:D3:58:AB:46:D9:20:83:80:EF:E2:D5:4E:8E:78:9D:73:F9
Authority key identifier: 6B:BA:1D:24:E7:2C:43:9E:C7:A5:CB:DC:39:13:57:DD:89:CB:86:AB
Certificate issuer: /CN=6bba1d24e72c439ec7a5cbdc391357dd89cb86ab
Certificate serial: 019E1E6CCD255D3DFAC0EFBE69E5120F1065
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a7odJOcsQ57HpcvcORNX3YnLhqs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/a94a4c-a552-46f6-8a81-cef9448124b0/1/a7odJOcsQ57HpcvcORNX3YnLhqs.mft
Manifest number: 0D0D
Signing time: Tue 12 May 2026 23:01:47 +0000
Manifest this update: Tue 12 May 2026 23:01:47 +0000
Manifest next update: Wed 13 May 2026 23:01:47 +0000
Files and hashes: 1: BTNbf-Zetnrn5fG4oMBQEb3Lp6E.roa (hash: A1g/+HrCWiAYQ0oLvI3fSXeEtYJcIWvKDusWeJft4J0=)
2: a7odJOcsQ57HpcvcORNX3YnLhqs.crl (hash: Vs3ApQ+N4pWFxN9pNs4mw26WvspbMa9hlIFaTp0Ut0k=)
3: wWQwJt5nLKI1O5iEWrX6yUX3ERA.roa (hash: /R1mextPgTI5TYtyAkChJlhhx20Cv1HoCUbU0zyH5Ho=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/a94a4c-a552-46f6-8a81-cef9448124b0/1/a7odJOcsQ57HpcvcORNX3YnLhqs.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/a94a4c-a552-46f6-8a81-cef9448124b0/1/a7odJOcsQ57HpcvcORNX3YnLhqs.mft
rsync://rpki.ripe.net/repository/DEFAULT/a7odJOcsQ57HpcvcORNX3YnLhqs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:6c:cd:25:5d:3d:fa:c0:ef:be:69:e5:12:0f:10:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6bba1d24e72c439ec7a5cbdc391357dd89cb86ab
Validity
Not Before: May 12 23:01:47 2026 GMT
Not After : May 13 23:01:47 2026 GMT
Subject: CN=099e8cd358ab46d9208380efe2d54e8e789d73f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:c8:8c:5b:d3:21:b3:d5:0f:6c:c0:8c:9f:a0:
ca:40:e3:9b:47:7a:26:bc:25:72:52:77:fd:db:00:
93:31:f8:0f:2b:4e:dc:5c:2a:fe:b8:15:0f:f2:29:
63:70:5f:da:49:f0:8c:cb:ad:6c:77:dc:f6:62:9f:
56:20:67:d4:70:8d:93:99:76:ac:a0:85:2a:59:6e:
07:01:d6:f7:9f:ec:48:00:a1:3c:74:c4:fc:c2:4d:
32:37:4b:87:56:94:a8:62:da:ea:c6:39:fd:a9:f4:
5e:bf:9c:bb:53:52:62:44:51:20:e2:5c:70:a2:a7:
bc:d1:00:ae:a9:58:7b:39:2f:06:55:c0:9a:7d:4a:
4a:ca:fd:39:7c:4c:ee:eb:33:52:33:65:74:a7:b2:
cd:b0:b3:8f:f0:6e:29:13:f8:6b:47:e6:88:50:9d:
7f:d9:0c:d1:cc:d8:53:e7:04:51:00:4d:26:9e:3c:
98:3d:dd:19:63:40:08:58:21:5a:92:1d:30:fc:7c:
e1:d8:d6:ad:ca:ad:0f:02:78:a0:f1:33:bf:15:86:
7b:14:4a:84:3f:f3:a6:92:df:f2:ac:a5:5f:2d:9b:
ee:ca:59:71:14:4b:01:1f:ea:95:5a:b0:27:44:81:
ec:c8:48:d7:64:72:d5:3d:8e:46:a8:eb:10:93:a4:
13:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:9E:8C:D3:58:AB:46:D9:20:83:80:EF:E2:D5:4E:8E:78:9D:73:F9
X509v3 Authority Key Identifier:
keyid:6B:BA:1D:24:E7:2C:43:9E:C7:A5:CB:DC:39:13:57:DD:89:CB:86:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7odJOcsQ57HpcvcORNX3YnLhqs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/a94a4c-a552-46f6-8a81-cef9448124b0/1/a7odJOcsQ57HpcvcORNX3YnLhqs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/a94a4c-a552-46f6-8a81-cef9448124b0/1/a7odJOcsQ57HpcvcORNX3YnLhqs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:61:10:a9:a1:68:e6:6f:b0:e6:6d:45:a8:9e:2d:85:0d:bf:
76:70:e4:b4:c6:6c:72:da:4d:c7:a1:8d:a3:30:6c:41:3c:b5:
db:75:af:e8:c2:8c:42:01:29:0c:97:f6:ad:b1:fa:36:37:79:
d5:5a:d3:b2:79:17:20:da:29:c3:93:90:3c:f4:e8:8f:14:67:
20:d7:8f:a6:03:a2:5f:d1:fd:a5:50:ae:9d:8c:56:50:12:58:
c6:ed:99:45:0c:02:c4:96:b2:17:f9:8e:1e:eb:03:07:b7:4f:
ce:3a:a9:8f:ba:63:1a:fb:a8:73:7f:34:61:71:c3:1e:ca:8b:
58:87:c9:ed:0a:34:96:42:67:a5:a6:7b:92:e8:7d:ef:bd:33:
7c:fe:64:13:6b:28:17:c8:12:dc:93:4d:a6:50:b9:2e:dc:06:
28:75:d0:95:e2:85:51:51:25:8e:c0:21:3f:a6:99:f7:41:52:
9e:5d:c7:3e:d9:13:9f:6b:1c:2f:e3:a4:d1:27:9d:f7:47:09:
0e:4d:d0:8b:f2:bb:36:bd:db:c0:22:7c:df:1a:60:cd:27:1c:
e1:d4:e7:12:b9:ce:95:88:e6:ab:b8:46:a7:94:9b:f2:67:ef:
b5:e2:6b:ae:f7:e2:dc:c3:48:a4:e6:23:d0:41:2d:44:92:bc:
9d:b2:a4:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:19:57 2026 by rpki-client