Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/74d876-05a8-4b10-90e2-c9da030af326/1/a8vbb9OedvAEhAEuExRrIYdVw_s.mft
File: a8vbb9OedvAEhAEuExRrIYdVw_s.mft (raw, json)
Hash identifier: xk8p2FJUfnzEyFjX+swyjxpJw6xtax4LjgM0kMHhNt8=
Subject key identifier: EC:39:EA:F9:64:AF:6D:6E:F7:70:3D:B6:A3:78:CC:7B:1C:51:60:39
Authority key identifier: 6B:CB:DB:6F:D3:9E:76:F0:04:84:01:2E:13:14:6B:21:87:55:C3:FB
Certificate issuer: /CN=6bcbdb6fd39e76f00484012e13146b218755c3fb
Certificate serial: 019D292917FAF21E2320EF0281F5B5CD0447
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a8vbb9OedvAEhAEuExRrIYdVw_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/74d876-05a8-4b10-90e2-c9da030af326/1/a8vbb9OedvAEhAEuExRrIYdVw_s.mft
Manifest number: 1782
Signing time: Thu 26 Mar 2026 08:00:51 +0000
Manifest this update: Thu 26 Mar 2026 08:00:51 +0000
Manifest next update: Fri 27 Mar 2026 08:00:51 +0000
Files and hashes: 1: CaMOrAz-3VjPqu-gbyeJ5_Cx7NM.roa (hash: rD2u98MLb0jiD+OOiIWSkvqJ6RlBaZKAcES5KA3b+A4=)
2: a8vbb9OedvAEhAEuExRrIYdVw_s.crl (hash: T7BwxtHafOaeVMyNUOepcVai9gXYV8xWNJK8q1/JZzE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/74d876-05a8-4b10-90e2-c9da030af326/1/a8vbb9OedvAEhAEuExRrIYdVw_s.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/74d876-05a8-4b10-90e2-c9da030af326/1/a8vbb9OedvAEhAEuExRrIYdVw_s.mft
rsync://rpki.ripe.net/repository/DEFAULT/a8vbb9OedvAEhAEuExRrIYdVw_s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:29:17:fa:f2:1e:23:20:ef:02:81:f5:b5:cd:04:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6bcbdb6fd39e76f00484012e13146b218755c3fb
Validity
Not Before: Mar 26 08:00:51 2026 GMT
Not After : Mar 27 08:00:51 2026 GMT
Subject: CN=ec39eaf964af6d6ef7703db6a378cc7b1c516039
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:94:fc:e7:44:b3:33:2e:96:9d:c9:bf:ac:6a:
0d:f8:9d:60:de:25:5c:a2:d0:cb:e9:7e:29:9f:0e:
bf:54:27:07:a5:16:d7:88:c6:77:ef:e9:b2:a8:cd:
69:76:26:ff:9f:ac:aa:23:a0:44:2a:74:1e:c9:fd:
a7:01:96:81:92:20:a2:0d:cd:1a:96:3b:00:19:ba:
3d:96:de:7b:2c:fb:27:a9:6f:1d:20:63:9a:20:f8:
de:e7:39:12:e3:cb:94:45:c8:01:8f:87:bf:b5:e3:
d7:ce:e7:8d:35:25:e6:8a:45:63:3f:86:8e:64:a1:
ac:cb:45:e6:3e:34:b2:36:87:df:af:a9:1c:e4:c6:
6a:ba:3f:f9:8f:d6:43:8d:12:ed:9b:ac:87:b2:18:
8f:f3:60:92:55:6f:74:78:6d:37:e5:a5:ff:24:c8:
b2:67:fc:20:64:e8:4b:0b:d6:2b:8c:10:f5:e7:ca:
84:a3:70:f2:47:7b:48:1f:25:8e:5c:12:6b:85:10:
f5:9e:25:97:a8:f1:3d:45:46:d8:bd:26:06:71:3c:
54:c6:7c:03:0f:7a:e9:a0:dc:c8:c4:02:17:63:af:
43:96:c4:f0:fc:68:54:08:aa:5c:ee:f6:9a:61:45:
d3:23:63:2a:08:88:78:b0:75:c9:41:0b:74:50:7b:
65:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:39:EA:F9:64:AF:6D:6E:F7:70:3D:B6:A3:78:CC:7B:1C:51:60:39
X509v3 Authority Key Identifier:
keyid:6B:CB:DB:6F:D3:9E:76:F0:04:84:01:2E:13:14:6B:21:87:55:C3:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8vbb9OedvAEhAEuExRrIYdVw_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/74d876-05a8-4b10-90e2-c9da030af326/1/a8vbb9OedvAEhAEuExRrIYdVw_s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/74d876-05a8-4b10-90e2-c9da030af326/1/a8vbb9OedvAEhAEuExRrIYdVw_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:7b:9f:cc:b6:87:2d:09:95:04:b7:60:57:1a:e3:76:de:c9:
d0:52:b1:e0:c1:1b:81:b9:59:13:64:08:23:8f:45:2a:9f:a9:
f9:dc:66:c0:30:68:4c:ee:42:a6:58:8f:51:82:1e:9c:4b:58:
de:6a:83:55:43:e7:f2:85:3d:d5:1c:92:65:62:c7:48:4a:6b:
d9:a1:26:1e:fe:ab:07:aa:1d:6f:92:62:7c:da:64:d6:b8:58:
cf:a8:ca:d2:35:4b:1c:a4:9b:fb:58:d7:a1:fb:aa:4a:5c:d1:
da:bd:73:2c:54:ef:1e:1a:44:5f:ad:fa:47:2d:6b:9d:0a:ef:
89:ba:a4:28:5c:47:b0:8e:a0:35:bc:77:bd:b1:d7:cf:12:c0:
33:a2:6a:b1:f2:75:41:c0:f9:b3:f7:7f:03:75:bd:22:b6:85:
30:18:ed:b1:14:d5:87:c5:e8:f4:0d:17:8a:61:b8:8f:e3:32:
42:2b:73:17:e7:2d:4f:96:98:ad:5d:d3:2c:4d:34:ec:f0:d2:
ab:ac:2a:3e:34:c6:80:55:72:78:0f:97:5b:32:7f:d3:5f:c7:
de:de:9f:d2:8f:a9:cf:dd:7d:ab:e8:c6:7b:71:e8:83:6b:36:
45:36:07:c0:a0:be:ed:e7:ad:60:46:79:c5:2b:a5:b4:30:ba:
b4:15:de:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:50:13 2026 by rpki-client