Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/54af68-4074-45c9-95e9-57d5f401b564/1/a2zHkGlbcZuSPHTSD6t-Y8GLxzY.mft
File: a2zHkGlbcZuSPHTSD6t-Y8GLxzY.mft (raw, json)
Hash identifier: yw5uu4aEBRQ06PJWObCYPHC6fdr++FThmUcVrRM/Lqo=
Subject key identifier: 84:13:66:FB:D6:38:6E:C1:27:D8:78:50:61:AC:48:FC:6D:DA:EF:0F
Authority key identifier: 6B:6C:C7:90:69:5B:71:9B:92:3C:74:D2:0F:AB:7E:63:C1:8B:C7:36
Certificate issuer: /CN=6b6cc790695b719b923c74d20fab7e63c18bc736
Certificate serial: 019FAD518ED3A5510DD23F9B9C9BD866C6E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a2zHkGlbcZuSPHTSD6t-Y8GLxzY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/54af68-4074-45c9-95e9-57d5f401b564/1/a2zHkGlbcZuSPHTSD6t-Y8GLxzY.mft
Manifest number: 1966
Signing time: Wed 29 Jul 2026 10:00:31 +0000
Manifest this update: Wed 29 Jul 2026 10:00:31 +0000
Manifest next update: Thu 30 Jul 2026 10:00:31 +0000
Files and hashes: 1: a2zHkGlbcZuSPHTSD6t-Y8GLxzY.crl (hash: t2hDc3/zbjnlWM4Ay1SB+K0tWjsyeLJTP7KBur6jKYk=)
2: d05NZs7Vp4A4bdkkXQCy0ZcAG_M.roa (hash: pxpY0wF8UltIS3jIz+gxPx1Ot7KUGL05x2qdaWnLALU=)
3: s6-TiC2j7Ecuhv-qeQB3bnHtNz4.roa (hash: 9N+X2B0X/bMumZQ9VQKQ2LEJ87GkVTxZeac/M5p+KhU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/54af68-4074-45c9-95e9-57d5f401b564/1/a2zHkGlbcZuSPHTSD6t-Y8GLxzY.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/54af68-4074-45c9-95e9-57d5f401b564/1/a2zHkGlbcZuSPHTSD6t-Y8GLxzY.mft
rsync://rpki.ripe.net/repository/DEFAULT/a2zHkGlbcZuSPHTSD6t-Y8GLxzY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ad:51:8e:d3:a5:51:0d:d2:3f:9b:9c:9b:d8:66:c6:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b6cc790695b719b923c74d20fab7e63c18bc736
Validity
Not Before: Jul 29 10:00:31 2026 GMT
Not After : Jul 30 10:00:31 2026 GMT
Subject: CN=841366fbd6386ec127d8785061ac48fc6ddaef0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:36:1f:38:64:9a:6c:db:0d:6b:10:89:b4:93:
a4:2b:52:77:ac:e2:39:cb:18:b4:97:68:01:f5:65:
bd:12:e9:90:7c:36:9d:39:1a:ab:4b:64:fe:50:3c:
f4:fd:a1:32:42:7a:0d:72:6d:45:76:3c:7a:62:25:
08:00:0c:f9:51:f5:a5:37:9f:2e:1a:41:45:1f:4f:
52:9d:04:3e:f1:69:c7:84:d3:22:f4:e8:bb:42:7f:
cd:35:31:ec:f7:39:0f:0d:ee:fb:e7:45:84:dc:44:
c1:ef:fd:f0:77:eb:f6:6b:c6:09:62:80:02:e6:22:
07:9a:23:df:5d:ca:0e:34:26:34:0f:cc:d5:1c:dd:
5a:1e:8b:91:e5:e2:e7:98:0f:2e:61:9c:68:74:b1:
ea:91:26:5e:91:fd:c3:50:b3:d3:bf:ff:ac:bd:1c:
42:c2:f2:a2:73:93:1d:5d:8d:92:a6:b7:96:72:87:
56:cc:ba:f4:5b:b8:7d:fb:b4:8f:95:50:d3:82:9d:
b9:6d:18:71:95:41:a1:dd:d4:e8:01:cc:23:b5:7b:
b8:f0:ab:22:18:e6:8f:3d:bd:91:5a:3b:df:f6:41:
29:f1:35:26:e4:22:57:53:ef:e8:f3:8b:ec:28:28:
60:9c:03:83:f2:64:bb:e7:f4:df:5f:b0:ce:aa:ce:
ba:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:13:66:FB:D6:38:6E:C1:27:D8:78:50:61:AC:48:FC:6D:DA:EF:0F
X509v3 Authority Key Identifier:
keyid:6B:6C:C7:90:69:5B:71:9B:92:3C:74:D2:0F:AB:7E:63:C1:8B:C7:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2zHkGlbcZuSPHTSD6t-Y8GLxzY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/54af68-4074-45c9-95e9-57d5f401b564/1/a2zHkGlbcZuSPHTSD6t-Y8GLxzY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/54af68-4074-45c9-95e9-57d5f401b564/1/a2zHkGlbcZuSPHTSD6t-Y8GLxzY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:ee:96:a4:c7:20:fd:42:d1:21:68:e3:68:cc:6f:42:43:58:
4d:92:ff:f3:e3:09:f8:c7:db:87:46:e5:1b:85:a9:ba:89:52:
ea:92:de:cc:47:4a:28:be:2c:37:58:50:1d:3e:be:96:ce:c4:
2d:59:40:75:db:32:12:f0:16:9b:44:2b:14:54:16:e6:6f:5c:
a3:be:1d:0e:d3:b8:da:66:17:c4:42:9a:b5:3f:ef:1f:d1:f6:
74:24:5d:4f:11:fc:66:99:cc:dc:64:d8:be:d0:b5:48:2d:76:
75:1c:db:0c:8b:99:04:07:8d:5f:46:86:51:48:3d:d1:5f:53:
12:a2:53:78:20:6f:a1:e2:5a:13:e5:9c:8c:a7:3d:03:50:a7:
0f:18:0a:bb:d2:65:dc:bb:98:a2:be:c3:95:d1:bb:8c:bb:20:
ff:1e:5c:40:cd:83:5b:1f:5e:25:68:fd:5f:f0:7c:87:d5:fd:
05:88:e3:82:4e:d4:02:21:31:de:35:4f:79:6f:b0:2e:6c:53:
9d:4a:3c:f7:23:10:4c:d7:6a:49:b7:1c:74:ce:73:09:78:16:
1a:16:c5:3b:17:12:29:37:f9:85:c9:6f:4c:fd:a0:f1:76:24:
e4:d9:53:91:a7:6f:ee:f9:57:cc:ea:d0:bc:ce:65:33:0d:79:
5e:c7:63:99
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+tUY7TpVEN0j+bnJvYZsbkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZiNmNjNzkwNjk1YjcxOWI5MjNjNzRkMjBmYWI3ZTYzYzE4
YmM3MzYwHhcNMjYwNzI5MTAwMDMxWhcNMjYwNzMwMTAwMDMxWjAzMTEwLwYDVQQD
Eyg4NDEzNjZmYmQ2Mzg2ZWMxMjdkODc4NTA2MWFjNDhmYzZkZGFlZjBmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0zYfOGSabNsNaxCJtJOkK1J3rOI5
yxi0l2gB9WW9EumQfDadORqrS2T+UDz0/aEyQnoNcm1Fdjx6YiUIAAz5UfWlN58u
GkFFH09SnQQ+8WnHhNMi9Oi7Qn/NNTHs9zkPDe7750WE3ETB7/3wd+v2a8YJYoAC
5iIHmiPfXcoONCY0D8zVHN1aHouR5eLnmA8uYZxodLHqkSZekf3DULPTv/+svRxC
wvKic5MdXY2SpreWcodWzLr0W7h9+7SPlVDTgp25bRhxlUGh3dToAcwjtXu48Ksi
GOaPPb2RWjvf9kEp8TUm5CJXU+/o84vsKChgnAOD8mS75/TfX7DOqs662wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIQTZvvWOG7BJ9h4UGGsSPxt2u8PMB8GA1UdIwQY
MBaAFGtsx5BpW3Gbkjx00g+rfmPBi8c2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYTJ6SGtHbGJjWnVTUEhUU0Q2dC1ZOEdMeHpZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi81NGFmNjgtNDA3NC00NWM5LTk1ZTkt
NTdkNWY0MDFiNTY0LzEvYTJ6SGtHbGJjWnVTUEhUU0Q2dC1ZOEdMeHpZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNi81NGFmNjgtNDA3NC00NWM5LTk1ZTktNTdkNWY0MDFiNTY0
LzEvYTJ6SGtHbGJjWnVTUEhUU0Q2dC1ZOEdMeHpZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIu6WpMcg
/ULRIWjjaMxvQkNYTZL/8+MJ+Mfbh0blG4WpuolS6pLezEdKKL4sN1hQHT6+ls7E
LVlAddsyEvAWm0QrFFQW5m9co74dDtO42mYXxEKatT/vH9H2dCRdTxH8ZpnM3GTY
vtC1SC12dRzbDIuZBAeNX0aGUUg90V9TEqJTeCBvoeJaE+WcjKc9A1CnDxgKu9Jl
3LuYor7DldG7jLsg/x5cQM2DWx9eJWj9X/B8h9X9BYjjgk7UAiEx3jVPeW+wLmxT
nUo89yMQTNdqSbccdM5zCXgWGhbFOxcSKTf5hclvTP2g8XYk5NlTkadv7vlXzOrQ
vM5lMw15XsdjmQ==
-----END CERTIFICATE-----
Generated at Wed Jul 29 12:51:16 2026 by rpki-client