Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/68/a94a4c-a552-46f6-8a81-cef9448124b0/1/a7odJOcsQ57HpcvcORNX3YnLhqs.mft
File: a7odJOcsQ57HpcvcORNX3YnLhqs.mft (raw, json)
Hash identifier: 0t/av8X845o3Zkd+jR5ukxAaC7MGhqoUtLFi8MVU/nA=
Subject key identifier: 6C:1B:E3:82:26:A1:8A:1C:30:DF:07:65:69:24:BE:C8:61:38:47:2B
Authority key identifier: 6B:BA:1D:24:E7:2C:43:9E:C7:A5:CB:DC:39:13:57:DD:89:CB:86:AB
Certificate issuer: /CN=6bba1d24e72c439ec7a5cbdc391357dd89cb86ab
Certificate serial: 01A0D1C9AA974D33416CE6CE8091109C1E2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a7odJOcsQ57HpcvcORNX3YnLhqs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/a94a4c-a552-46f6-8a81-cef9448124b0/1/a7odJOcsQ57HpcvcORNX3YnLhqs.mft
Manifest number: 0E73
Signing time: Thu 24 Sep 2026 05:00:49 +0000
Manifest this update: Thu 24 Sep 2026 05:00:49 +0000
Manifest next update: Fri 25 Sep 2026 05:00:49 +0000
Files and hashes: 1: BTNbf-Zetnrn5fG4oMBQEb3Lp6E.roa (hash: A1g/+HrCWiAYQ0oLvI3fSXeEtYJcIWvKDusWeJft4J0=)
2: a7odJOcsQ57HpcvcORNX3YnLhqs.crl (hash: +xKtztoUqYdWhrnMTtmaYGcZUy80XNztI5XbEE/sytQ=)
3: wWQwJt5nLKI1O5iEWrX6yUX3ERA.roa (hash: /R1mextPgTI5TYtyAkChJlhhx20Cv1HoCUbU0zyH5Ho=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/a94a4c-a552-46f6-8a81-cef9448124b0/1/a7odJOcsQ57HpcvcORNX3YnLhqs.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/a94a4c-a552-46f6-8a81-cef9448124b0/1/a7odJOcsQ57HpcvcORNX3YnLhqs.mft
rsync://rpki.ripe.net/repository/DEFAULT/a7odJOcsQ57HpcvcORNX3YnLhqs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d1:c9:aa:97:4d:33:41:6c:e6:ce:80:91:10:9c:1e:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6bba1d24e72c439ec7a5cbdc391357dd89cb86ab
Validity
Not Before: Sep 24 05:00:49 2026 GMT
Not After : Sep 25 05:00:49 2026 GMT
Subject: CN=6c1be38226a18a1c30df07656924bec86138472b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:d2:39:40:a9:aa:bc:4c:c6:da:ce:5b:49:94:
3a:e5:b8:b9:d9:ba:63:e8:91:72:f3:4c:e1:13:4a:
37:0a:33:60:3d:26:c1:47:b8:19:90:06:92:da:1e:
b3:0e:7f:e3:9d:73:f1:ee:1a:9a:fc:9f:ec:1f:6a:
ee:70:9e:df:33:d8:07:45:3f:4d:f6:04:6d:78:39:
12:fb:ea:1d:e7:b6:2d:97:89:20:40:78:53:21:40:
03:ca:52:93:05:b1:f0:7a:04:d2:4a:f1:56:0f:07:
55:b2:6c:8d:e7:3c:f7:c4:b1:87:3d:b5:c2:b3:30:
d0:cc:73:68:24:dd:40:dc:a1:48:2b:53:2d:f6:6b:
d3:7b:02:f3:02:0a:1e:6c:49:9e:e1:86:4a:fa:14:
49:77:59:d2:43:42:5c:62:ee:38:81:16:0b:2e:8a:
75:fe:1e:c1:24:1e:c8:fc:4b:c3:df:8c:82:0b:37:
5f:cf:1f:b1:8a:5f:ee:1c:f2:18:2e:a2:3b:eb:7a:
65:1d:be:7d:ed:f9:85:68:67:af:9a:fa:ee:dd:ba:
40:f9:2c:4b:db:61:44:96:37:8e:66:71:64:e7:3a:
7f:e0:f8:2c:a8:b9:26:26:8c:75:f5:0a:b6:fe:1a:
a0:0e:aa:e6:6e:13:39:c1:48:b7:51:9f:5b:76:b1:
0d:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:1B:E3:82:26:A1:8A:1C:30:DF:07:65:69:24:BE:C8:61:38:47:2B
X509v3 Authority Key Identifier:
keyid:6B:BA:1D:24:E7:2C:43:9E:C7:A5:CB:DC:39:13:57:DD:89:CB:86:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7odJOcsQ57HpcvcORNX3YnLhqs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/a94a4c-a552-46f6-8a81-cef9448124b0/1/a7odJOcsQ57HpcvcORNX3YnLhqs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/a94a4c-a552-46f6-8a81-cef9448124b0/1/a7odJOcsQ57HpcvcORNX3YnLhqs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:b8:7f:f1:17:6f:a8:a3:bb:65:1c:bc:f6:e2:a2:47:a7:99:
85:58:4f:7f:75:11:f2:a4:3c:af:de:ca:66:6f:55:98:f5:23:
85:c0:f6:6a:40:65:7d:2b:6b:ee:9b:90:95:ae:8a:46:1b:9d:
9e:03:91:94:b9:1e:e5:31:0c:75:b0:df:cc:42:c8:88:fc:a2:
40:5d:75:ef:cb:60:25:2c:ec:ea:e6:63:e9:8b:04:86:c3:5c:
a0:9e:ab:bf:71:00:2f:f4:36:ca:c5:f3:ec:03:09:45:10:e4:
59:16:e9:c2:2f:c3:53:af:8d:69:f5:13:d2:ce:0a:3d:29:1e:
4f:30:30:a7:4f:52:9a:de:5f:cf:8f:64:60:8e:db:95:49:59:
3a:fc:58:83:66:ff:75:83:9c:fb:b7:c1:28:6f:65:2f:4a:fd:
8f:6e:e7:57:e0:9c:2d:93:33:54:ed:c6:38:72:c9:fd:41:cc:
14:81:0b:12:27:87:96:40:40:0b:4f:a0:d0:4f:cf:25:34:2e:
11:2a:95:4d:d4:13:46:be:22:f0:0c:49:a1:a2:5b:d9:fb:df:
83:4a:ad:4e:7a:a4:9b:d5:53:2a:59:b3:b6:b2:4f:fd:33:db:
1d:cd:8e:50:46:6c:e2:32:2c:42:28:50:f7:86:6f:cf:86:45:
5d:c7:9b:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 10:40:24 2026 by rpki-client