Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/0d6b47-8191-41e2-8113-6e56212cdf5c/1/960EaCOkpawZj0BdOYQ0moNlwWE.mft
File: 960EaCOkpawZj0BdOYQ0moNlwWE.mft (raw, json)
Hash identifier: zV9Se8qk7v9BDL4hMCrJxDbCFBsUrok5rIm2gfyXzGQ=
Subject key identifier: BA:7F:AE:8B:C8:F2:5E:40:50:CF:03:9E:C2:74:55:C5:06:6F:AD:E0
Authority key identifier: F7:AD:04:68:23:A4:A5:AC:19:8F:40:5D:39:84:34:9A:83:65:C1:61
Certificate issuer: /CN=f7ad046823a4a5ac198f405d3984349a8365c161
Certificate serial: 019F916C8963976756073A9187924C69D066
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/960EaCOkpawZj0BdOYQ0moNlwWE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/0d6b47-8191-41e2-8113-6e56212cdf5c/1/960EaCOkpawZj0BdOYQ0moNlwWE.mft
Manifest number: 40
Signing time: Fri 24 Jul 2026 00:00:37 +0000
Manifest this update: Fri 24 Jul 2026 00:00:37 +0000
Manifest next update: Sat 25 Jul 2026 00:00:37 +0000
Files and hashes: 1: 960EaCOkpawZj0BdOYQ0moNlwWE.crl (hash: 6/TDzphdqlcNd7qIzl45L22u5Ya9ucmHNaRGIKLKY8E=)
2: bG3fcprpXz4Us6cwgJ9PkaUxgXQ.roa (hash: FrGHJvzVXHIulkPnWqo3gyts46hg4UH5BktvMTcKuRo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/0d6b47-8191-41e2-8113-6e56212cdf5c/1/960EaCOkpawZj0BdOYQ0moNlwWE.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/0d6b47-8191-41e2-8113-6e56212cdf5c/1/960EaCOkpawZj0BdOYQ0moNlwWE.mft
rsync://rpki.ripe.net/repository/DEFAULT/960EaCOkpawZj0BdOYQ0moNlwWE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:6c:89:63:97:67:56:07:3a:91:87:92:4c:69:d0:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7ad046823a4a5ac198f405d3984349a8365c161
Validity
Not Before: Jul 24 00:00:37 2026 GMT
Not After : Jul 25 00:00:37 2026 GMT
Subject: CN=ba7fae8bc8f25e4050cf039ec27455c5066fade0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:8e:94:75:7b:7e:2f:f9:85:35:18:f0:2b:fa:
01:28:ff:bf:c8:b0:9e:df:e2:9d:08:33:bd:99:0f:
ad:07:e2:0b:b2:a2:5b:2e:b7:52:e8:25:4f:2a:cd:
12:02:2e:ba:91:11:11:7a:3d:f2:85:39:fd:ef:21:
c8:53:0d:70:7e:4d:23:ee:48:85:b6:d4:28:42:7d:
82:4d:62:47:0f:13:eb:43:9d:13:88:7c:a3:66:e5:
0e:db:97:b3:9c:8e:60:b1:32:94:d0:ef:35:1f:1f:
5b:3e:9a:7c:02:83:0f:49:ed:ea:c5:80:a2:58:a1:
3c:bb:f6:fa:74:02:5e:21:5e:75:82:7c:3b:b4:8b:
84:6f:56:dd:7d:47:56:38:82:03:12:0f:83:70:62:
ca:43:23:a7:ad:6a:f3:19:a9:92:e1:b7:7a:71:d0:
a2:62:11:43:27:82:24:79:68:86:e0:2b:c7:41:91:
d1:71:d0:d6:16:9f:16:22:e4:06:07:5a:11:5e:a4:
8d:9c:93:1c:1d:a5:e4:3b:f7:eb:da:ae:9b:ae:e9:
54:cb:7e:05:69:4c:a1:f1:bc:74:9c:17:7a:6a:32:
05:52:39:50:9e:c0:ae:1d:b3:5b:28:61:f1:9d:9b:
6d:2d:af:9e:0e:b0:ec:54:8a:31:4a:85:e6:ef:6c:
a7:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:7F:AE:8B:C8:F2:5E:40:50:CF:03:9E:C2:74:55:C5:06:6F:AD:E0
X509v3 Authority Key Identifier:
keyid:F7:AD:04:68:23:A4:A5:AC:19:8F:40:5D:39:84:34:9A:83:65:C1:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/960EaCOkpawZj0BdOYQ0moNlwWE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/0d6b47-8191-41e2-8113-6e56212cdf5c/1/960EaCOkpawZj0BdOYQ0moNlwWE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/0d6b47-8191-41e2-8113-6e56212cdf5c/1/960EaCOkpawZj0BdOYQ0moNlwWE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:35:b2:00:fa:dd:5c:0e:61:5b:1d:45:8a:16:b0:9f:4c:45:
7c:6e:c4:bb:67:e5:15:34:c1:40:44:ad:b3:40:77:32:1e:cb:
ae:86:94:85:4e:11:24:f4:b1:a3:30:93:56:50:db:86:db:7f:
61:ad:29:29:4b:c7:40:7a:7b:8d:73:22:8b:10:57:49:27:cf:
a3:53:fd:36:3d:23:75:a2:48:d2:62:60:71:59:f5:2a:03:19:
bd:a5:f7:b4:3d:cd:25:26:da:ae:38:17:31:37:ed:89:36:86:
ea:24:87:45:f4:93:af:ee:45:e6:ad:6c:5c:30:cd:d0:81:93:
1d:47:f8:3d:b5:aa:38:29:76:7a:ab:04:86:ac:21:4c:0e:90:
72:39:40:db:ac:07:8b:c6:dc:1f:fd:e8:9c:dc:bb:7a:48:04:
cb:dc:2d:a1:63:1a:83:6b:ed:c3:b1:4c:db:4c:f7:f2:f7:c1:
61:87:16:88:54:fc:a1:75:fc:9f:63:12:df:b0:2c:15:dd:98:
71:b6:4b:11:19:5a:56:13:5a:61:b1:ae:bc:22:a1:be:50:89:
92:be:70:fe:88:cb:de:4c:5e:cb:7a:11:01:fb:51:b9:c7:bd:
4c:13:fb:1b:52:a9:24:ab:e5:b0:c8:5c:94:ab:13:4e:60:dc:
6c:54:f3:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:55:27 2026 by rpki-client