Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/a94a4c-a552-46f6-8a81-cef9448124b0/1/a7odJOcsQ57HpcvcORNX3YnLhqs.mft
File: a7odJOcsQ57HpcvcORNX3YnLhqs.mft (raw, json)
Hash identifier: piMdEtTpFsndCnFhZOxgDvEeOAFY5HCugocCJbnDrfw=
Subject key identifier: BF:32:52:8F:00:92:AC:14:30:24:9D:D2:6F:80:63:92:58:0E:E5:92
Authority key identifier: 6B:BA:1D:24:E7:2C:43:9E:C7:A5:CB:DC:39:13:57:DD:89:CB:86:AB
Certificate issuer: /CN=6bba1d24e72c439ec7a5cbdc391357dd89cb86ab
Certificate serial: 019D273AD1DB105D5898D234DDC6FC5E3F79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a7odJOcsQ57HpcvcORNX3YnLhqs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/a94a4c-a552-46f6-8a81-cef9448124b0/1/a7odJOcsQ57HpcvcORNX3YnLhqs.mft
Manifest number: 0C8D
Signing time: Wed 25 Mar 2026 23:00:59 +0000
Manifest this update: Wed 25 Mar 2026 23:00:59 +0000
Manifest next update: Thu 26 Mar 2026 23:00:59 +0000
Files and hashes: 1: BTNbf-Zetnrn5fG4oMBQEb3Lp6E.roa (hash: A1g/+HrCWiAYQ0oLvI3fSXeEtYJcIWvKDusWeJft4J0=)
2: a7odJOcsQ57HpcvcORNX3YnLhqs.crl (hash: vVC6Dy35zCznbd8jFGWohVcgx1WIZzbV6vzC6iVsYQ8=)
3: wWQwJt5nLKI1O5iEWrX6yUX3ERA.roa (hash: /R1mextPgTI5TYtyAkChJlhhx20Cv1HoCUbU0zyH5Ho=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/a94a4c-a552-46f6-8a81-cef9448124b0/1/a7odJOcsQ57HpcvcORNX3YnLhqs.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/a94a4c-a552-46f6-8a81-cef9448124b0/1/a7odJOcsQ57HpcvcORNX3YnLhqs.mft
rsync://rpki.ripe.net/repository/DEFAULT/a7odJOcsQ57HpcvcORNX3YnLhqs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 23:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3a:d1:db:10:5d:58:98:d2:34:dd:c6:fc:5e:3f:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6bba1d24e72c439ec7a5cbdc391357dd89cb86ab
Validity
Not Before: Mar 25 23:00:59 2026 GMT
Not After : Mar 26 23:00:59 2026 GMT
Subject: CN=bf32528f0092ac1430249dd26f806392580ee592
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:a1:07:4d:85:39:ac:96:d1:12:3f:3f:41:5b:
51:6b:9f:2f:35:79:31:eb:db:d1:bf:7f:35:d4:eb:
53:06:db:d9:e5:15:16:dc:fa:30:bd:ad:16:86:43:
37:44:3f:77:96:eb:f6:7d:81:6a:3a:72:05:b3:2b:
91:62:f8:0a:7a:fe:cc:c7:ff:31:ab:6e:71:90:db:
40:c3:bc:69:df:57:94:01:66:c0:5a:00:bf:4f:a4:
3e:ea:e0:5a:a4:15:e6:1e:98:f4:a2:75:b9:33:4f:
40:92:1c:ad:41:a4:57:22:6a:fd:52:5b:ce:29:02:
45:a3:58:1e:ad:da:3b:bd:76:80:33:ff:22:17:78:
10:90:35:20:bb:af:06:61:f2:f4:a5:91:a3:13:41:
11:3b:78:9b:d5:ee:99:4f:cb:8b:8d:19:8c:fd:d6:
f7:b8:a6:b5:c1:b5:bf:f6:d1:db:b9:97:74:18:ad:
27:04:cb:7e:bf:a4:4b:ca:16:db:4a:8c:51:df:c0:
6e:c0:73:13:4d:df:eb:71:d6:63:92:c8:c8:38:df:
6a:cc:b0:8a:2a:df:31:e4:55:d0:57:cb:bc:d7:e6:
2b:0a:3c:db:b3:a0:0a:c7:34:72:29:fc:d7:cf:38:
7b:ab:af:7e:b4:f2:72:de:ea:d1:72:7c:e9:55:c3:
ba:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:32:52:8F:00:92:AC:14:30:24:9D:D2:6F:80:63:92:58:0E:E5:92
X509v3 Authority Key Identifier:
keyid:6B:BA:1D:24:E7:2C:43:9E:C7:A5:CB:DC:39:13:57:DD:89:CB:86:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7odJOcsQ57HpcvcORNX3YnLhqs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/a94a4c-a552-46f6-8a81-cef9448124b0/1/a7odJOcsQ57HpcvcORNX3YnLhqs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/a94a4c-a552-46f6-8a81-cef9448124b0/1/a7odJOcsQ57HpcvcORNX3YnLhqs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:4e:14:98:ab:1a:c1:0c:73:56:94:7f:d5:df:4b:42:f6:ce:
35:29:d4:55:1b:63:fc:3c:ac:41:11:d1:f3:77:bb:18:b0:e2:
d7:32:41:f7:6f:f6:49:49:10:26:63:62:71:c6:fb:cd:bc:4f:
84:cf:8c:57:54:18:05:62:cc:22:6b:e3:36:eb:e3:d9:cc:20:
65:e8:34:1f:99:3f:d5:67:3b:be:f1:67:24:b9:20:11:51:f7:
50:4f:bc:f2:6b:7e:a8:cd:07:3b:a2:0f:ca:b0:46:68:54:88:
3d:6e:56:70:46:e8:b3:99:be:04:05:30:00:23:6e:4e:47:0c:
83:1b:43:b9:73:df:47:56:19:43:81:48:d2:f5:e0:8e:f6:86:
7d:a8:2d:d8:22:19:27:e0:bb:29:fc:34:e0:2f:48:73:ce:af:
c4:3e:1c:7c:87:3d:45:ae:7f:dc:05:b2:f5:31:6b:e1:85:65:
cc:e1:9f:92:28:ab:52:00:74:2a:9d:14:45:c1:68:a7:14:6c:
df:71:f4:c6:46:3e:06:e5:75:07:13:ec:7f:36:2b:b2:6e:11:
a5:ff:df:c0:13:64:52:05:60:db:38:e5:3c:5a:04:10:89:d7:
b3:da:79:c2:f9:e1:c9:cb:3c:9f:0f:01:ef:08:e0:97:6e:64:
c0:8e:45:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:14:08 2026 by rpki-client