Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/74d876-05a8-4b10-90e2-c9da030af326/1/a8vbb9OedvAEhAEuExRrIYdVw_s.mft
File: a8vbb9OedvAEhAEuExRrIYdVw_s.mft (raw, json)
Hash identifier: Oq1KhRYdT8OT8o0WQbPRjOpxwECmKJDRJSkX4h1xidM=
Subject key identifier: E2:1E:AC:0C:40:38:95:CB:B0:8F:8A:DC:92:A0:2C:F2:34:94:E4:FC
Authority key identifier: 6B:CB:DB:6F:D3:9E:76:F0:04:84:01:2E:13:14:6B:21:87:55:C3:FB
Certificate issuer: /CN=6bcbdb6fd39e76f00484012e13146b218755c3fb
Certificate serial: 019F9323B27800786F766D8B86BF153CA270
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a8vbb9OedvAEhAEuExRrIYdVw_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/74d876-05a8-4b10-90e2-c9da030af326/1/a8vbb9OedvAEhAEuExRrIYdVw_s.mft
Manifest number: 18C2
Signing time: Fri 24 Jul 2026 08:00:17 +0000
Manifest this update: Fri 24 Jul 2026 08:00:17 +0000
Manifest next update: Sat 25 Jul 2026 08:00:17 +0000
Files and hashes: 1: CaMOrAz-3VjPqu-gbyeJ5_Cx7NM.roa (hash: rD2u98MLb0jiD+OOiIWSkvqJ6RlBaZKAcES5KA3b+A4=)
2: a8vbb9OedvAEhAEuExRrIYdVw_s.crl (hash: DLeULmvLjlPqtKpt+oRUaGATIYvK+FDwPBIvHamBD9Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/74d876-05a8-4b10-90e2-c9da030af326/1/a8vbb9OedvAEhAEuExRrIYdVw_s.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/74d876-05a8-4b10-90e2-c9da030af326/1/a8vbb9OedvAEhAEuExRrIYdVw_s.mft
rsync://rpki.ripe.net/repository/DEFAULT/a8vbb9OedvAEhAEuExRrIYdVw_s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:23:b2:78:00:78:6f:76:6d:8b:86:bf:15:3c:a2:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6bcbdb6fd39e76f00484012e13146b218755c3fb
Validity
Not Before: Jul 24 08:00:17 2026 GMT
Not After : Jul 25 08:00:17 2026 GMT
Subject: CN=e21eac0c403895cbb08f8adc92a02cf23494e4fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:e4:df:25:0a:18:87:74:ac:be:0f:ba:19:f0:
01:2d:35:fa:b9:a4:c1:84:84:1d:ef:a7:e5:71:e2:
93:eb:54:73:99:cf:b4:3c:dc:7b:54:bd:ec:9b:eb:
02:0f:ba:72:4b:ec:45:dc:5a:ae:62:2a:a2:dd:b3:
79:6c:1a:50:12:29:6c:35:cb:db:f5:a2:ae:e1:b7:
96:cf:ca:30:c7:ab:04:41:35:5b:04:ab:c7:6c:8d:
29:23:42:49:61:63:65:c8:38:0a:f8:05:58:46:13:
21:fe:55:57:0e:61:91:d9:54:be:e4:f0:aa:d6:c0:
96:04:a5:4f:cc:28:5c:73:4f:2c:37:65:89:35:e4:
47:24:b6:23:55:a1:b5:3d:6f:96:83:a1:16:74:e7:
71:b6:93:35:dd:83:b8:af:75:e0:dc:ad:f3:bd:fb:
48:b9:e8:7e:d0:60:2c:75:6a:38:2a:77:dd:c5:a2:
f7:4a:5b:5d:ba:d2:a0:8b:c7:51:7c:ca:68:24:c4:
f0:90:e5:51:77:96:97:86:ae:cc:83:d2:fd:aa:32:
df:47:a2:e8:73:fd:fb:1f:93:4c:57:0f:ba:af:97:
fe:f6:65:5d:6f:e9:01:01:87:24:a0:ec:16:c0:c1:
26:f1:12:b3:c5:08:5d:f7:14:f7:82:1a:26:c2:3b:
a0:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:1E:AC:0C:40:38:95:CB:B0:8F:8A:DC:92:A0:2C:F2:34:94:E4:FC
X509v3 Authority Key Identifier:
keyid:6B:CB:DB:6F:D3:9E:76:F0:04:84:01:2E:13:14:6B:21:87:55:C3:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8vbb9OedvAEhAEuExRrIYdVw_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/74d876-05a8-4b10-90e2-c9da030af326/1/a8vbb9OedvAEhAEuExRrIYdVw_s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/74d876-05a8-4b10-90e2-c9da030af326/1/a8vbb9OedvAEhAEuExRrIYdVw_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:91:10:b9:fb:30:98:81:e4:06:bf:e3:6d:11:94:c4:0f:86:
78:82:4c:32:58:c9:32:ce:cf:37:f7:4e:5c:9d:af:74:21:38:
7c:ea:03:8e:24:d0:08:8f:67:fe:7a:b7:67:b0:24:c6:ba:88:
57:c4:4d:b1:05:ac:b4:45:a1:f2:96:76:34:5d:26:a6:f6:f1:
55:bf:75:7f:db:39:12:84:16:13:87:fa:c2:a7:42:0c:86:67:
f2:53:6a:ba:16:7c:ef:6f:80:37:2c:23:ba:5c:08:4f:bf:87:
33:40:ad:63:8f:0c:e4:ce:e4:83:ee:1e:f3:0a:5b:aa:a0:87:
b0:bf:39:7f:d8:64:3a:2e:24:60:be:61:45:93:24:38:9b:89:
30:78:f3:29:c3:66:3b:81:95:4c:49:1f:3b:65:7d:02:2e:61:
1e:27:03:88:a6:26:6d:ce:2c:7b:08:64:2b:53:d1:cc:2a:3f:
44:e4:40:a7:cf:73:83:72:9c:2d:f1:f0:9d:a7:6c:a0:f1:f8:
a8:f7:66:c3:e1:22:f6:54:d8:13:f1:e8:be:bb:b6:63:a8:58:
72:75:c5:a4:e5:70:fe:f1:9d:2c:22:94:6a:13:7f:2d:dd:6b:
91:b5:1d:98:8e:10:37:e9:80:ee:b8:de:c2:b9:38:68:b6:4a:
aa:8b:cf:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:39:45 2026 by rpki-client