Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/ee26b9-5029-48e3-aae6-4850b7128006/1/a_RAcbpaZ3hyFRmhhiISgE5gNMw.mft
File: a_RAcbpaZ3hyFRmhhiISgE5gNMw.mft (raw, json)
Hash identifier: vdEK0515BCvExdNb7fy0QlygsJvI2KqWc4oZwAU6MUk=
Subject key identifier: A6:68:58:FA:A5:0D:24:45:34:5C:17:0B:95:C6:5B:87:8B:10:37:AE
Authority key identifier: 6B:F4:40:71:BA:5A:67:78:72:15:19:A1:86:22:12:80:4E:60:34:CC
Certificate issuer: /CN=6bf44071ba5a6778721519a1862212804e6034cc
Certificate serial: 019E20C85E59F4BEDA3B6B61C6997BAAC6DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a_RAcbpaZ3hyFRmhhiISgE5gNMw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/ee26b9-5029-48e3-aae6-4850b7128006/1/a_RAcbpaZ3hyFRmhhiISgE5gNMw.mft
Manifest number: 99
Signing time: Wed 13 May 2026 10:01:02 +0000
Manifest this update: Wed 13 May 2026 10:01:02 +0000
Manifest next update: Thu 14 May 2026 10:01:02 +0000
Files and hashes: 1: K7J8SU2ONJde1_XoPCAxg3_UhsY.roa (hash: IHipWsFTiehUckIWg3IwCtFkKfvzXuaM4MqoN3r8AzA=)
2: a_RAcbpaZ3hyFRmhhiISgE5gNMw.crl (hash: mtPgOjdzYNWzWnCsYKJs7BnCQbgdw0+vK3K7vAFWI6s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/ee26b9-5029-48e3-aae6-4850b7128006/1/a_RAcbpaZ3hyFRmhhiISgE5gNMw.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/ee26b9-5029-48e3-aae6-4850b7128006/1/a_RAcbpaZ3hyFRmhhiISgE5gNMw.mft
rsync://rpki.ripe.net/repository/DEFAULT/a_RAcbpaZ3hyFRmhhiISgE5gNMw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:c8:5e:59:f4:be:da:3b:6b:61:c6:99:7b:aa:c6:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6bf44071ba5a6778721519a1862212804e6034cc
Validity
Not Before: May 13 10:01:02 2026 GMT
Not After : May 14 10:01:02 2026 GMT
Subject: CN=a66858faa50d2445345c170b95c65b878b1037ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:b5:54:ed:0f:ca:4f:b3:79:07:02:1c:15:ff:
ce:3a:9e:bc:da:30:7d:fb:ae:a2:26:85:04:71:e2:
69:08:34:00:18:37:e8:84:a6:ac:6c:28:de:d9:b1:
3a:d2:e5:b6:de:81:5d:27:6c:e5:86:7e:7c:46:c7:
9e:5a:d8:29:fe:d0:8e:81:b1:ac:f8:cf:e7:06:db:
4b:f1:1c:35:0c:c9:aa:39:6c:7b:0f:d8:68:20:4f:
b4:f9:9a:10:26:9d:14:05:34:77:de:4a:39:3d:5c:
e5:0d:7e:95:be:29:b0:2a:5b:07:48:77:67:b5:d8:
6e:61:ad:f1:63:19:17:fd:fb:ae:b3:dd:07:4a:00:
a9:c9:5e:25:88:db:15:3e:ff:a2:cf:02:ca:dd:34:
99:f7:a8:87:70:e3:d1:5b:bf:ea:da:8b:6b:4b:2b:
45:95:25:81:11:5a:ad:21:42:c3:94:82:8d:43:a6:
90:bf:66:1c:36:61:f2:73:51:4f:12:74:77:00:06:
94:a5:1f:67:03:3f:a4:78:9f:c9:bf:79:4d:ac:2a:
f6:15:10:57:73:c0:88:cf:87:dc:ef:98:dd:dc:1f:
c4:71:57:aa:6a:c2:cc:de:11:82:e8:fe:eb:77:d0:
53:d9:8f:80:f3:ba:ae:26:d7:55:0d:e2:26:a3:49:
b8:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:68:58:FA:A5:0D:24:45:34:5C:17:0B:95:C6:5B:87:8B:10:37:AE
X509v3 Authority Key Identifier:
keyid:6B:F4:40:71:BA:5A:67:78:72:15:19:A1:86:22:12:80:4E:60:34:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a_RAcbpaZ3hyFRmhhiISgE5gNMw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/ee26b9-5029-48e3-aae6-4850b7128006/1/a_RAcbpaZ3hyFRmhhiISgE5gNMw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/ee26b9-5029-48e3-aae6-4850b7128006/1/a_RAcbpaZ3hyFRmhhiISgE5gNMw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:8e:77:90:61:88:d8:c3:6d:3a:a4:b6:c0:d3:2f:ca:00:9c:
3c:47:0a:05:2f:a0:1a:62:d0:b6:1d:3a:43:77:92:b7:0a:b1:
c2:3f:d4:0e:f8:6a:fa:34:91:61:36:46:a9:67:a0:24:ff:72:
b9:24:1e:14:c5:2f:49:0d:09:a3:ea:bb:41:59:5c:91:6d:75:
80:e3:de:6e:b6:43:50:64:7e:2d:46:57:e9:bc:44:64:ab:98:
23:ad:f4:c6:bc:59:a4:a1:7a:f5:0d:74:03:e6:fb:4f:9c:18:
aa:a4:f3:32:6f:39:b3:3b:1d:83:03:16:af:a1:bf:57:22:f5:
e4:70:d9:b0:25:d4:43:9c:0e:73:18:f7:c2:cb:76:9a:15:0f:
9f:da:0d:d9:07:73:06:6b:fc:8c:89:61:b3:94:3d:13:ee:39:
ef:8b:06:c6:25:9d:41:cf:ec:67:c9:52:54:9c:27:70:6e:04:
8c:28:49:57:b4:74:a2:2f:b2:18:aa:e9:fc:a0:f7:cf:18:e7:
de:40:7c:06:66:a5:2c:fb:d0:97:71:ed:f5:5e:ce:e2:d6:70:
01:70:f3:3e:8b:2f:65:96:d4:99:bd:c6:58:ad:86:24:de:5d:
7e:f7:c6:b5:bd:29:9a:ad:a8:22:4a:e9:b2:ab:57:23:96:1f:
2c:7b:a6:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:21:22 2026 by rpki-client