Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/c1a241-e95c-4f27-9992-624d87d82ee2/1/apBb7RAQVRrlUQyuXu4LuZnSh44.mft
File: apBb7RAQVRrlUQyuXu4LuZnSh44.mft (raw, json)
Hash identifier: ILYN7eKJU/oPsLhmfXO7tPtgKH6oFErcUdlaZtNaUYE=
Subject key identifier: A8:2D:E4:39:C7:BF:50:CF:6C:20:E2:F2:F7:A8:2B:91:57:40:FB:1B
Authority key identifier: 6A:90:5B:ED:10:10:55:1A:E5:51:0C:AE:5E:EE:0B:B9:99:D2:87:8E
Certificate issuer: /CN=6a905bed1010551ae5510cae5eee0bb999d2878e
Certificate serial: 019FA89A673FD8667742076EF91859D4FA8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/apBb7RAQVRrlUQyuXu4LuZnSh44.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/c1a241-e95c-4f27-9992-624d87d82ee2/1/apBb7RAQVRrlUQyuXu4LuZnSh44.mft
Manifest number: 4C
Signing time: Tue 28 Jul 2026 12:01:59 +0000
Manifest this update: Tue 28 Jul 2026 12:01:59 +0000
Manifest next update: Wed 29 Jul 2026 12:01:59 +0000
Files and hashes: 1: 8WO4H3LLmQjh35Y1DhdVPcJaeWw.asa (hash: sduouSzb9jUwQP/768gaM8wQLqZouXh1WtsTxFHYtIM=)
2: apBb7RAQVRrlUQyuXu4LuZnSh44.crl (hash: dnF31akTQfxOhAjVsNIY7fbKtytNksOz4XRSnP5iErE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/c1a241-e95c-4f27-9992-624d87d82ee2/1/apBb7RAQVRrlUQyuXu4LuZnSh44.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/c1a241-e95c-4f27-9992-624d87d82ee2/1/apBb7RAQVRrlUQyuXu4LuZnSh44.mft
rsync://rpki.ripe.net/repository/DEFAULT/apBb7RAQVRrlUQyuXu4LuZnSh44.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 07:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:9a:67:3f:d8:66:77:42:07:6e:f9:18:59:d4:fa:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a905bed1010551ae5510cae5eee0bb999d2878e
Validity
Not Before: Jul 28 12:01:59 2026 GMT
Not After : Jul 29 12:01:59 2026 GMT
Subject: CN=a82de439c7bf50cf6c20e2f2f7a82b915740fb1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:e6:95:fb:85:6a:7e:6d:1f:47:35:3d:8c:de:
ce:41:92:8d:33:5f:a7:b3:f9:00:3c:93:96:01:da:
cf:b7:b6:29:9f:08:28:a7:86:3e:d8:df:d6:c9:0f:
a7:f9:01:a6:49:db:d4:0e:85:25:74:ec:5c:31:44:
39:ae:08:16:c9:14:5d:3a:c9:13:4b:92:c6:0c:c4:
ce:f5:8b:b0:fc:f7:65:41:b0:36:81:0c:3d:43:b6:
19:6c:91:80:da:83:7f:01:17:14:31:10:15:19:b4:
d8:01:aa:f8:ea:ae:65:8a:55:0e:06:cc:79:a2:01:
09:10:ae:d6:b8:ba:65:3c:bc:d2:e6:b8:5e:c8:d3:
e7:82:98:fc:c0:ff:33:0e:2b:b4:72:44:f1:7d:5e:
aa:64:ac:5d:5f:d8:bd:c3:ae:94:8e:2a:ed:00:25:
2f:85:f9:fb:d8:07:0b:70:0d:df:45:9a:87:78:79:
ab:50:5c:c0:86:ca:02:74:4f:a8:dc:6c:c9:9d:fb:
eb:6d:d0:9b:9a:dc:df:f6:e5:c6:a1:35:f6:a2:b5:
f2:cb:c9:77:ac:3f:e0:a7:48:4d:fd:a7:49:f1:21:
de:cd:82:87:32:60:76:3d:18:54:a6:ff:20:5b:8c:
75:95:7f:4f:23:70:d4:4c:f1:6e:4e:f9:f5:e9:ee:
b2:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:2D:E4:39:C7:BF:50:CF:6C:20:E2:F2:F7:A8:2B:91:57:40:FB:1B
X509v3 Authority Key Identifier:
keyid:6A:90:5B:ED:10:10:55:1A:E5:51:0C:AE:5E:EE:0B:B9:99:D2:87:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/apBb7RAQVRrlUQyuXu4LuZnSh44.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/c1a241-e95c-4f27-9992-624d87d82ee2/1/apBb7RAQVRrlUQyuXu4LuZnSh44.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/c1a241-e95c-4f27-9992-624d87d82ee2/1/apBb7RAQVRrlUQyuXu4LuZnSh44.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:c8:b8:3f:12:1a:65:67:b8:9f:56:3e:43:4d:ba:e1:7a:af:
eb:de:49:2e:b1:3d:9b:d2:2c:6c:7a:ab:81:29:b1:c5:6a:85:
f3:47:d2:3f:4f:69:34:47:33:7e:e5:d2:a0:16:d2:f3:d4:11:
5a:83:09:f3:ec:a9:9e:1f:df:98:9d:c2:e1:50:08:ef:f8:60:
a0:cc:22:3f:f1:d7:4d:13:86:ba:91:33:e4:80:7d:6d:ca:53:
1e:4c:42:69:3b:c2:7a:9b:dc:63:75:86:c9:75:8d:5a:4f:7b:
69:93:2f:66:ac:72:ba:05:0b:b1:c7:cc:ec:04:ec:a8:7a:13:
62:1f:d1:cd:17:a4:4b:ca:c1:b1:2d:65:c0:72:88:76:5e:f5:
c6:3f:70:12:98:0e:67:d0:c8:82:5c:31:e5:12:79:f3:ef:7a:
da:08:86:e1:65:9f:51:98:9b:07:8e:07:c4:ce:a1:3f:dc:7a:
d1:3c:ce:ed:4a:ec:8c:da:60:99:3a:77:29:82:36:ab:6c:d9:
20:54:94:27:21:d1:e3:a1:bf:77:e3:11:76:49:13:97:66:30:
56:6f:ab:cf:c8:26:12:48:92:4e:f3:3a:02:19:bd:33:6d:65:
aa:f5:1a:5e:aa:99:0b:4e:5d:34:67:22:36:88:eb:31:17:4b:
4b:b5:bb:5b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+ommc/2GZ3Qgdu+RhZ1PqMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZhOTA1YmVkMTAxMDU1MWFlNTUxMGNhZTVlZWUwYmI5OTlk
Mjg3OGUwHhcNMjYwNzI4MTIwMTU5WhcNMjYwNzI5MTIwMTU5WjAzMTEwLwYDVQQD
EyhhODJkZTQzOWM3YmY1MGNmNmMyMGUyZjJmN2E4MmI5MTU3NDBmYjFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlOaV+4Vqfm0fRzU9jN7OQZKNM1+n
s/kAPJOWAdrPt7Ypnwgop4Y+2N/WyQ+n+QGmSdvUDoUldOxcMUQ5rggWyRRdOskT
S5LGDMTO9Yuw/PdlQbA2gQw9Q7YZbJGA2oN/ARcUMRAVGbTYAar46q5lilUOBsx5
ogEJEK7WuLplPLzS5rheyNPngpj8wP8zDiu0ckTxfV6qZKxdX9i9w66UjirtACUv
hfn72AcLcA3fRZqHeHmrUFzAhsoCdE+o3GzJnfvrbdCbmtzf9uXGoTX2orXyy8l3
rD/gp0hN/adJ8SHezYKHMmB2PRhUpv8gW4x1lX9PI3DUTPFuTvn16e6yqQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKgt5DnHv1DPbCDi8veoK5FXQPsbMB8GA1UdIwQY
MBaAFGqQW+0QEFUa5VEMrl7uC7mZ0oeOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYXBCYjdSQVFWUnJsVVF5dVh1NEx1Wm5TaDQ0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS9jMWEyNDEtZTk1Yy00ZjI3LTk5OTIt
NjI0ZDg3ZDgyZWUyLzEvYXBCYjdSQVFWUnJsVVF5dVh1NEx1Wm5TaDQ0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMS9jMWEyNDEtZTk1Yy00ZjI3LTk5OTItNjI0ZDg3ZDgyZWUy
LzEvYXBCYjdSQVFWUnJsVVF5dVh1NEx1Wm5TaDQ0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKMi4PxIa
ZWe4n1Y+Q0264Xqv695JLrE9m9IsbHqrgSmxxWqF80fSP09pNEczfuXSoBbS89QR
WoMJ8+ypnh/fmJ3C4VAI7/hgoMwiP/HXTROGupEz5IB9bcpTHkxCaTvCepvcY3WG
yXWNWk97aZMvZqxyugULscfM7ATsqHoTYh/RzRekS8rBsS1lwHKIdl71xj9wEpgO
Z9DIglwx5RJ58+962giG4WWfUZibB44HxM6hP9x60TzO7UrsjNpgmTp3KYI2q2zZ
IFSUJyHR46G/d+MRdkkTl2YwVm+rz8gmEkiSTvM6Ahm9M21lqvUaXqqZC05dNGci
NojrMRdLS7W7Ww==
-----END CERTIFICATE-----
Generated at Tue Jul 28 13:33:01 2026 by rpki-client