Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/a94a4c-a552-46f6-8a81-cef9448124b0/1/a7odJOcsQ57HpcvcORNX3YnLhqs.mft
File: a7odJOcsQ57HpcvcORNX3YnLhqs.mft (raw, json)
Hash identifier: grPlA431tjffHu8TQ8Of4/4+Q/b2J6s3zAsvL4iJcJg=
Subject key identifier: 3A:BA:7B:F4:D3:C6:66:E2:D7:F7:3E:FE:85:FB:70:24:54:D3:8D:D1
Authority key identifier: 6B:BA:1D:24:E7:2C:43:9E:C7:A5:CB:DC:39:13:57:DD:89:CB:86:AB
Certificate issuer: /CN=6bba1d24e72c439ec7a5cbdc391357dd89cb86ab
Certificate serial: 019F9135F7CD8FEE12EBC5301E4501631B18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a7odJOcsQ57HpcvcORNX3YnLhqs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/a94a4c-a552-46f6-8a81-cef9448124b0/1/a7odJOcsQ57HpcvcORNX3YnLhqs.mft
Manifest number: 0DCD
Signing time: Thu 23 Jul 2026 23:01:00 +0000
Manifest this update: Thu 23 Jul 2026 23:01:00 +0000
Manifest next update: Fri 24 Jul 2026 23:01:00 +0000
Files and hashes: 1: BTNbf-Zetnrn5fG4oMBQEb3Lp6E.roa (hash: A1g/+HrCWiAYQ0oLvI3fSXeEtYJcIWvKDusWeJft4J0=)
2: a7odJOcsQ57HpcvcORNX3YnLhqs.crl (hash: 8MJL7sp1K9CDpmUieLV4MQ3P46sldAgbsQyWp9cMoBg=)
3: wWQwJt5nLKI1O5iEWrX6yUX3ERA.roa (hash: /R1mextPgTI5TYtyAkChJlhhx20Cv1HoCUbU0zyH5Ho=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/a94a4c-a552-46f6-8a81-cef9448124b0/1/a7odJOcsQ57HpcvcORNX3YnLhqs.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/a94a4c-a552-46f6-8a81-cef9448124b0/1/a7odJOcsQ57HpcvcORNX3YnLhqs.mft
rsync://rpki.ripe.net/repository/DEFAULT/a7odJOcsQ57HpcvcORNX3YnLhqs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:35:f7:cd:8f:ee:12:eb:c5:30:1e:45:01:63:1b:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6bba1d24e72c439ec7a5cbdc391357dd89cb86ab
Validity
Not Before: Jul 23 23:01:00 2026 GMT
Not After : Jul 24 23:01:00 2026 GMT
Subject: CN=3aba7bf4d3c666e2d7f73efe85fb702454d38dd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:f5:72:c4:6a:65:9b:4b:ef:56:0a:43:20:de:
58:37:98:66:a7:39:7b:d6:cc:7a:47:c9:29:f1:2f:
d4:2c:ae:80:db:58:a8:7a:b8:9b:5d:11:87:ff:7a:
db:27:b6:49:96:12:85:09:5c:d4:17:a8:93:fd:6a:
4b:27:98:5a:9b:5b:3b:cb:78:90:a0:ed:f2:5d:0e:
5f:47:46:ac:fc:49:8e:bf:76:81:f2:3b:79:de:9c:
b6:69:18:f8:f4:1f:a7:1f:2b:95:f5:d0:b3:62:2d:
68:44:f7:17:8a:0e:cb:11:6c:06:f0:89:00:c5:67:
2b:2b:fb:b1:28:39:01:e8:de:72:99:91:ea:2a:fc:
65:23:e3:df:cb:c2:83:3f:38:83:02:46:88:37:1f:
d0:b8:fb:a7:53:f4:d6:fa:5c:e8:5f:aa:f4:87:b2:
d4:9d:4e:4d:93:e4:02:3c:d5:7c:b5:cd:43:e2:4d:
c9:48:04:7c:3a:24:14:29:33:58:ba:08:98:74:54:
7c:c2:8c:6c:ce:a1:37:76:c6:07:29:8b:05:24:02:
20:16:b9:be:2c:c6:78:6c:e3:a9:bd:18:62:c3:96:
2b:8c:7d:61:32:91:7a:a0:24:15:36:7a:e5:af:f5:
ff:37:97:c2:7d:4b:6e:a5:c9:2c:91:64:d7:ba:f9:
ee:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:BA:7B:F4:D3:C6:66:E2:D7:F7:3E:FE:85:FB:70:24:54:D3:8D:D1
X509v3 Authority Key Identifier:
keyid:6B:BA:1D:24:E7:2C:43:9E:C7:A5:CB:DC:39:13:57:DD:89:CB:86:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7odJOcsQ57HpcvcORNX3YnLhqs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/a94a4c-a552-46f6-8a81-cef9448124b0/1/a7odJOcsQ57HpcvcORNX3YnLhqs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/a94a4c-a552-46f6-8a81-cef9448124b0/1/a7odJOcsQ57HpcvcORNX3YnLhqs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:83:06:2b:de:0a:17:08:a6:bf:64:59:91:48:fa:81:fe:57:
cf:31:1a:33:53:6d:18:7e:7a:05:62:7b:4d:17:37:ff:e9:7c:
86:a2:3d:fa:93:d9:e5:b4:9c:bd:29:a4:ef:f4:15:96:98:f7:
6f:b2:f6:02:7b:df:c3:7d:62:ee:6c:b2:aa:38:7a:8c:ef:ef:
98:cb:c4:70:da:15:d2:3e:e2:fc:ed:6e:12:60:02:ce:42:89:
f4:88:51:a0:5e:54:4d:50:a8:bc:88:a8:32:c8:bb:64:67:7e:
48:54:97:7d:7d:f5:cc:79:c4:ba:79:38:51:63:4a:68:ab:1b:
3c:a4:27:0b:90:19:bc:92:3c:dd:b7:7a:90:31:f0:25:dd:fe:
ba:6f:32:f0:5a:27:73:6f:e1:29:a3:08:ca:a3:1a:85:60:e9:
16:78:3e:3a:c0:0b:2d:6e:2e:6d:7d:bb:9e:6f:ef:8a:fc:3a:
be:c3:85:79:76:61:f4:c7:21:fc:f1:56:e2:fa:75:43:4a:18:
10:1d:de:ef:5c:71:7e:53:f0:04:60:06:89:e0:82:ed:d9:2e:
98:77:95:1a:ed:1e:98:81:3c:a7:ce:c8:f0:fb:2f:85:97:1f:
0a:43:47:b7:b2:9e:a9:5b:18:0a:c2:c8:21:a9:d2:10:46:01:
1b:3f:0f:21
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+RNffNj+4S68UwHkUBYxsYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZiYmExZDI0ZTcyYzQzOWVjN2E1Y2JkYzM5MTM1N2RkODlj
Yjg2YWIwHhcNMjYwNzIzMjMwMTAwWhcNMjYwNzI0MjMwMTAwWjAzMTEwLwYDVQQD
EygzYWJhN2JmNGQzYzY2NmUyZDdmNzNlZmU4NWZiNzAyNDU0ZDM4ZGQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmvVyxGplm0vvVgpDIN5YN5hmpzl7
1sx6R8kp8S/ULK6A21ioeribXRGH/3rbJ7ZJlhKFCVzUF6iT/WpLJ5ham1s7y3iQ
oO3yXQ5fR0as/EmOv3aB8jt53py2aRj49B+nHyuV9dCzYi1oRPcXig7LEWwG8IkA
xWcrK/uxKDkB6N5ymZHqKvxlI+Pfy8KDPziDAkaINx/QuPunU/TW+lzoX6r0h7LU
nU5Nk+QCPNV8tc1D4k3JSAR8OiQUKTNYugiYdFR8woxszqE3dsYHKYsFJAIgFrm+
LMZ4bOOpvRhiw5YrjH1hMpF6oCQVNnrlr/X/N5fCfUtupckskWTXuvnu1wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDq6e/TTxmbi1/c+/oX7cCRU043RMB8GA1UdIwQY
MBaAFGu6HSTnLEOex6XL3DkTV92Jy4arMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYTdvZEpPY3NRNTdIcGN2Y09STlgzWW5MaHFzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC9hOTRhNGMtYTU1Mi00NmY2LThhODEt
Y2VmOTQ0ODEyNGIwLzEvYTdvZEpPY3NRNTdIcGN2Y09STlgzWW5MaHFzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OC9hOTRhNGMtYTU1Mi00NmY2LThhODEtY2VmOTQ0ODEyNGIw
LzEvYTdvZEpPY3NRNTdIcGN2Y09STlgzWW5MaHFzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk4MGK94K
Fwimv2RZkUj6gf5XzzEaM1NtGH56BWJ7TRc3/+l8hqI9+pPZ5bScvSmk7/QVlpj3
b7L2Anvfw31i7myyqjh6jO/vmMvEcNoV0j7i/O1uEmACzkKJ9IhRoF5UTVCovIio
Msi7ZGd+SFSXfX31zHnEunk4UWNKaKsbPKQnC5AZvJI83bd6kDHwJd3+um8y8Fon
c2/hKaMIyqMahWDpFng+OsALLW4ubX27nm/vivw6vsOFeXZh9Mch/PFW4vp1Q0oY
EB3e71xxflPwBGAGieCC7dkumHeVGu0emIE8p87I8PsvhZcfCkNHt7KeqVsYCsLI
IanSEEYBGz8PIQ==
-----END CERTIFICATE-----
Generated at Fri Jul 24 09:25:48 2026 by rpki-client