Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/a94a4c-a552-46f6-8a81-cef9448124b0/1/a7odJOcsQ57HpcvcORNX3YnLhqs.mft
File: a7odJOcsQ57HpcvcORNX3YnLhqs.mft (raw, json)
Hash identifier: ct1wRz4jGyTNERYkeVgi0JOLYRgYzQGQBSbKQ7fKuBY=
Subject key identifier: FE:A8:58:EE:20:E9:C8:A7:AF:AB:B0:07:61:2F:90:F2:20:17:4D:E4
Authority key identifier: 6B:BA:1D:24:E7:2C:43:9E:C7:A5:CB:DC:39:13:57:DD:89:CB:86:AB
Certificate issuer: /CN=6bba1d24e72c439ec7a5cbdc391357dd89cb86ab
Certificate serial: 019F9323E62D44A6912171FBBFDDD06EBFE9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a7odJOcsQ57HpcvcORNX3YnLhqs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/a94a4c-a552-46f6-8a81-cef9448124b0/1/a7odJOcsQ57HpcvcORNX3YnLhqs.mft
Manifest number: 0DCE
Signing time: Fri 24 Jul 2026 08:00:31 +0000
Manifest this update: Fri 24 Jul 2026 08:00:31 +0000
Manifest next update: Sat 25 Jul 2026 08:00:31 +0000
Files and hashes: 1: BTNbf-Zetnrn5fG4oMBQEb3Lp6E.roa (hash: A1g/+HrCWiAYQ0oLvI3fSXeEtYJcIWvKDusWeJft4J0=)
2: a7odJOcsQ57HpcvcORNX3YnLhqs.crl (hash: jfFX8pkHpe6hotianl9v67jjNewj/PPLstQ6mrhpQJY=)
3: wWQwJt5nLKI1O5iEWrX6yUX3ERA.roa (hash: /R1mextPgTI5TYtyAkChJlhhx20Cv1HoCUbU0zyH5Ho=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/a94a4c-a552-46f6-8a81-cef9448124b0/1/a7odJOcsQ57HpcvcORNX3YnLhqs.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/a94a4c-a552-46f6-8a81-cef9448124b0/1/a7odJOcsQ57HpcvcORNX3YnLhqs.mft
rsync://rpki.ripe.net/repository/DEFAULT/a7odJOcsQ57HpcvcORNX3YnLhqs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:23:e6:2d:44:a6:91:21:71:fb:bf:dd:d0:6e:bf:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6bba1d24e72c439ec7a5cbdc391357dd89cb86ab
Validity
Not Before: Jul 24 08:00:31 2026 GMT
Not After : Jul 25 08:00:31 2026 GMT
Subject: CN=fea858ee20e9c8a7afabb007612f90f220174de4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:4f:60:c1:2b:56:26:d6:9d:26:f6:7c:47:a5:
c3:15:26:9d:90:92:b6:24:52:97:31:af:b7:f3:f0:
b2:3d:58:52:d8:91:77:55:66:f4:b6:88:1d:9f:d1:
d2:47:6b:a6:d8:93:23:56:56:d3:85:5a:6b:c5:0c:
5e:12:04:f4:09:e9:07:c7:24:bf:15:84:d1:ca:a9:
db:9a:a4:dd:d9:b2:a7:66:97:ef:02:12:33:78:15:
9f:1a:91:9f:9b:a1:11:6e:54:32:18:b9:0b:dd:53:
b2:12:00:f6:0d:4e:e5:9a:f8:27:da:d2:be:14:71:
a3:c1:09:bf:2e:4b:e0:07:60:b1:71:bb:c2:04:7b:
c6:ce:30:7d:01:97:a8:59:68:88:6d:f7:ce:03:43:
db:2e:44:81:70:e2:72:44:c2:75:4e:f2:fa:00:56:
18:39:5e:27:9b:0d:e3:08:10:56:75:79:b7:01:19:
f1:01:a1:e1:2e:3a:ae:fe:69:a1:4e:29:e3:d0:bc:
ef:58:84:d2:13:5f:9c:a4:ed:10:1f:7c:1d:89:8c:
fc:4c:24:6c:20:e0:cf:d6:cb:60:3e:78:b7:fd:df:
f7:b8:6c:9d:fe:c7:cb:60:ce:a4:63:78:94:fe:0d:
fc:45:8a:b2:31:dd:20:30:4a:b3:7d:05:9d:f7:ab:
eb:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:A8:58:EE:20:E9:C8:A7:AF:AB:B0:07:61:2F:90:F2:20:17:4D:E4
X509v3 Authority Key Identifier:
keyid:6B:BA:1D:24:E7:2C:43:9E:C7:A5:CB:DC:39:13:57:DD:89:CB:86:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7odJOcsQ57HpcvcORNX3YnLhqs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/a94a4c-a552-46f6-8a81-cef9448124b0/1/a7odJOcsQ57HpcvcORNX3YnLhqs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/a94a4c-a552-46f6-8a81-cef9448124b0/1/a7odJOcsQ57HpcvcORNX3YnLhqs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:ab:e0:f5:ce:b8:65:11:3a:74:4a:77:93:37:5e:32:0c:77:
86:8e:ab:cf:8c:7b:6b:78:08:96:92:8d:76:bf:84:bb:db:b7:
6d:ae:1d:7d:ff:b0:4c:3f:53:d8:5e:67:f9:55:89:55:f8:6a:
37:75:e2:d9:18:06:a5:2a:fe:09:5f:74:ab:10:64:70:7c:75:
f1:37:64:30:27:1e:37:b8:bb:b0:33:8b:6b:00:eb:e6:e1:d3:
4b:85:b0:e1:7e:f7:55:6b:bd:d9:54:87:f3:ee:3b:0e:ad:35:
05:88:df:7d:8b:46:3f:20:24:99:70:23:f7:59:07:55:01:b7:
45:b1:4b:cf:9a:4a:4a:d2:e8:2a:5b:dc:90:d8:a6:c1:58:44:
60:d8:a8:17:f8:95:d1:fc:7b:7e:28:ca:a3:53:69:8c:73:27:
9f:d9:70:9f:1d:3b:f8:a1:66:23:d4:ec:64:ae:81:3a:a5:0a:
46:09:df:8e:77:86:30:1b:3b:77:d0:ce:23:d6:e2:5e:d2:ac:
24:17:b9:be:c1:6f:6d:a3:f4:4a:75:db:d9:68:2f:b5:d4:6a:
5b:9c:e5:2d:c9:af:42:33:ef:f2:ce:30:b3:6e:75:39:7b:26:
9f:e1:e9:ab:e6:ce:f1:c9:4c:e8:5c:0c:56:a7:4e:4e:bd:a2:
b2:89:1a:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:01:00 2026 by rpki-client