Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/74d876-05a8-4b10-90e2-c9da030af326/1/a8vbb9OedvAEhAEuExRrIYdVw_s.mft
File: a8vbb9OedvAEhAEuExRrIYdVw_s.mft (raw, json)
Hash identifier: /Qr9JhilwNRDC3VqbvBySbMFQN3+1jokLAkuF1YkxBU=
Subject key identifier: 24:8F:2B:B9:28:6F:0A:9D:51:A0:63:E7:C8:E4:77:9F:F2:A2:FE:35
Authority key identifier: 6B:CB:DB:6F:D3:9E:76:F0:04:84:01:2E:13:14:6B:21:87:55:C3:FB
Certificate issuer: /CN=6bcbdb6fd39e76f00484012e13146b218755c3fb
Certificate serial: 019E1E6C0C7920A31416A4040095222AD51C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a8vbb9OedvAEhAEuExRrIYdVw_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/74d876-05a8-4b10-90e2-c9da030af326/1/a8vbb9OedvAEhAEuExRrIYdVw_s.mft
Manifest number: 1801
Signing time: Tue 12 May 2026 23:00:58 +0000
Manifest this update: Tue 12 May 2026 23:00:58 +0000
Manifest next update: Wed 13 May 2026 23:00:58 +0000
Files and hashes: 1: CaMOrAz-3VjPqu-gbyeJ5_Cx7NM.roa (hash: rD2u98MLb0jiD+OOiIWSkvqJ6RlBaZKAcES5KA3b+A4=)
2: a8vbb9OedvAEhAEuExRrIYdVw_s.crl (hash: OsG3xQX48AVlK4C+pDgOCtg1RK2ZKCxgAm4vblRpRGo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/74d876-05a8-4b10-90e2-c9da030af326/1/a8vbb9OedvAEhAEuExRrIYdVw_s.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/74d876-05a8-4b10-90e2-c9da030af326/1/a8vbb9OedvAEhAEuExRrIYdVw_s.mft
rsync://rpki.ripe.net/repository/DEFAULT/a8vbb9OedvAEhAEuExRrIYdVw_s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:6c:0c:79:20:a3:14:16:a4:04:00:95:22:2a:d5:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6bcbdb6fd39e76f00484012e13146b218755c3fb
Validity
Not Before: May 12 23:00:58 2026 GMT
Not After : May 13 23:00:58 2026 GMT
Subject: CN=248f2bb9286f0a9d51a063e7c8e4779ff2a2fe35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:3e:df:86:09:32:8b:f8:0d:cd:1a:27:8e:c3:
91:f1:96:a1:34:42:28:13:c0:50:32:5f:c4:bd:09:
8d:9c:be:27:1e:0d:d7:2c:2f:ea:8f:36:89:a3:52:
63:3b:c6:8e:bd:eb:e0:a8:74:6f:94:34:74:c5:c0:
b3:63:1e:98:da:50:e0:45:da:d6:b8:ac:91:0c:c3:
0f:37:68:9c:44:0b:b7:aa:34:7d:b8:fe:46:b2:51:
81:06:f2:cc:8f:86:d1:b0:98:3a:22:c7:58:be:2b:
44:4b:d6:c3:f7:eb:d6:65:95:24:4b:4c:db:70:40:
f1:21:2b:44:df:b8:2a:a4:a1:15:b0:13:be:c9:20:
a5:90:a4:e6:38:a0:9e:56:5c:37:22:ab:52:a1:42:
67:04:27:de:f9:7d:81:90:ab:5f:c5:bf:c4:bb:f1:
fb:f4:5c:fa:10:3a:bf:f8:39:b9:35:8c:2b:e5:41:
8a:22:4f:ef:77:5f:79:5c:14:17:c2:58:6f:a7:59:
26:82:8f:f8:db:e5:2e:62:ee:14:eb:84:fa:ed:e0:
3c:03:ec:43:1c:7a:92:dc:06:e8:0f:36:a6:ca:01:
28:4f:75:f2:11:98:13:87:c6:6e:a0:be:18:f0:aa:
76:1b:84:7f:a7:b9:a7:ce:25:c1:84:1e:7b:ff:6a:
16:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:8F:2B:B9:28:6F:0A:9D:51:A0:63:E7:C8:E4:77:9F:F2:A2:FE:35
X509v3 Authority Key Identifier:
keyid:6B:CB:DB:6F:D3:9E:76:F0:04:84:01:2E:13:14:6B:21:87:55:C3:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8vbb9OedvAEhAEuExRrIYdVw_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/74d876-05a8-4b10-90e2-c9da030af326/1/a8vbb9OedvAEhAEuExRrIYdVw_s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/74d876-05a8-4b10-90e2-c9da030af326/1/a8vbb9OedvAEhAEuExRrIYdVw_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:05:29:4f:f8:7a:60:23:ce:79:7f:bd:55:fb:8b:2e:24:31:
27:91:1a:e4:0f:9e:98:f9:fb:11:49:5d:48:41:88:4c:21:19:
97:1d:9b:58:09:73:8f:ba:68:cc:b8:ea:63:8c:7c:de:49:84:
a5:5a:63:e6:d7:07:c5:82:3e:65:4a:92:72:59:ba:6b:8d:52:
6c:30:dc:bf:44:b7:b5:07:2e:df:b7:c2:12:ec:50:52:ed:1e:
f5:45:0c:f7:16:2a:a5:80:2e:60:13:c3:93:28:ba:87:b3:a4:
ae:2d:6c:d4:7a:79:4e:4c:5f:b2:05:68:77:6e:5f:95:c8:6d:
65:50:40:db:3a:1c:2c:43:07:19:12:74:fa:d1:b8:35:56:4c:
f4:a8:2c:f3:6a:10:30:17:6c:a1:6a:d3:8f:0d:ae:37:a5:23:
3f:af:14:4e:57:64:ee:fc:0d:90:3e:40:66:0e:63:6a:e2:1a:
7c:c3:c8:0c:79:cd:00:9e:74:af:35:3f:e3:57:7e:87:fd:6d:
fb:63:f8:92:c8:0f:d8:d8:ca:80:01:64:b1:2b:08:c7:fb:f2:
be:e1:c1:21:f4:a1:b6:0a:0a:32:7f:6c:74:37:6c:63:28:d5:
43:9f:d5:bd:62:6d:aa:30:42:53:16:c8:fb:6a:8e:f7:39:78:
fc:df:e1:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:18:23 2026 by rpki-client