Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/bb3b29-81e5-45a2-81ec-25dd4cbb3698/1/aKjpPT9ZD0RQ0ds8IHRZgkQ1PpM.mft
File: aKjpPT9ZD0RQ0ds8IHRZgkQ1PpM.mft (raw, json)
Hash identifier: e6eG6ZwX5d4M5kipQXyfRZhu6mfpu8Wamx6i2fw7isc=
Subject key identifier: 45:F6:23:B3:45:8C:82:54:FF:0E:32:4A:A7:FC:4B:D3:13:86:E9:D2
Authority key identifier: 68:A8:E9:3D:3F:59:0F:44:50:D1:DB:3C:20:74:59:82:44:35:3E:93
Certificate issuer: /CN=68a8e93d3f590f4450d1db3c2074598244353e93
Certificate serial: 019FAA19BA0B806BFA829136A4129B88D6BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aKjpPT9ZD0RQ0ds8IHRZgkQ1PpM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/bb3b29-81e5-45a2-81ec-25dd4cbb3698/1/aKjpPT9ZD0RQ0ds8IHRZgkQ1PpM.mft
Manifest number: 19DF
Signing time: Tue 28 Jul 2026 19:00:40 +0000
Manifest this update: Tue 28 Jul 2026 19:00:40 +0000
Manifest next update: Wed 29 Jul 2026 19:00:40 +0000
Files and hashes: 1: aKjpPT9ZD0RQ0ds8IHRZgkQ1PpM.crl (hash: ix9iBSJvqfFwL+MoICjn/HgIt48UzOY+Lpc7idQMNAk=)
2: bKFR-ExETl9kc_NczqQy1RxK9rs.roa (hash: plcIB/DfvBpq4QLItxVjsjUSKb2BA3Zq8rL1ma4T6FY=)
3: pRSgM7v51dj4_nnKyTIe5vKbqck.roa (hash: zoPAj53DpixsBYDFs95Rz1APyotRYxKBCaNS8cQmVuY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/bb3b29-81e5-45a2-81ec-25dd4cbb3698/1/aKjpPT9ZD0RQ0ds8IHRZgkQ1PpM.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/bb3b29-81e5-45a2-81ec-25dd4cbb3698/1/aKjpPT9ZD0RQ0ds8IHRZgkQ1PpM.mft
rsync://rpki.ripe.net/repository/DEFAULT/aKjpPT9ZD0RQ0ds8IHRZgkQ1PpM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:19:ba:0b:80:6b:fa:82:91:36:a4:12:9b:88:d6:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68a8e93d3f590f4450d1db3c2074598244353e93
Validity
Not Before: Jul 28 19:00:40 2026 GMT
Not After : Jul 29 19:00:40 2026 GMT
Subject: CN=45f623b3458c8254ff0e324aa7fc4bd31386e9d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:68:02:49:61:38:2b:72:aa:65:7d:68:46:49:
57:74:54:dc:2d:26:de:02:65:68:d8:c2:2e:3d:07:
36:29:e7:74:71:eb:02:38:53:6e:21:7b:d2:1f:a0:
0b:3e:b2:24:d9:8b:1c:f2:08:44:34:db:b4:4a:20:
c2:79:a0:fd:99:0a:3c:e4:85:95:65:4d:f2:df:9d:
cb:07:ac:cd:53:f8:aa:61:82:ba:10:c3:37:b8:75:
42:e8:92:a5:5e:47:cd:1f:31:7f:bb:bb:76:fc:87:
3b:9d:af:8d:2d:9f:36:85:17:2f:f9:39:46:38:99:
e7:6d:ec:3e:38:b1:58:37:29:0d:e1:a4:e9:ae:0f:
e7:2b:1f:a0:78:c9:ed:ff:53:43:b0:d1:d1:a1:f0:
70:7a:50:eb:3b:f1:3a:06:5d:21:e9:b2:bb:13:cf:
52:b4:51:25:38:19:0f:5b:c4:8e:de:72:03:ca:d1:
a4:f7:53:0a:42:db:9f:6e:c1:dd:e8:d4:a3:f8:44:
75:8a:e8:8e:7f:69:7e:9b:8e:da:f8:30:a5:1f:61:
71:39:3a:55:fb:be:00:83:a8:67:48:a8:df:ba:c6:
11:d8:00:8f:77:55:9d:46:b9:65:dd:87:6b:04:aa:
a8:da:88:99:3f:33:13:b9:e7:4a:9b:04:db:24:90:
5a:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:F6:23:B3:45:8C:82:54:FF:0E:32:4A:A7:FC:4B:D3:13:86:E9:D2
X509v3 Authority Key Identifier:
keyid:68:A8:E9:3D:3F:59:0F:44:50:D1:DB:3C:20:74:59:82:44:35:3E:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aKjpPT9ZD0RQ0ds8IHRZgkQ1PpM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/bb3b29-81e5-45a2-81ec-25dd4cbb3698/1/aKjpPT9ZD0RQ0ds8IHRZgkQ1PpM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/bb3b29-81e5-45a2-81ec-25dd4cbb3698/1/aKjpPT9ZD0RQ0ds8IHRZgkQ1PpM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:f0:5c:4a:e6:c9:78:20:12:d4:f2:9f:0d:e6:f5:dc:af:2f:
d9:92:62:16:14:71:97:29:16:a3:77:59:19:ad:47:70:85:36:
bb:25:89:57:7b:e5:f6:1f:cd:e8:45:a6:7b:1e:49:c6:d2:98:
7d:6a:80:82:46:7f:0a:05:53:14:50:ed:6e:1e:9e:bb:2f:da:
7c:0b:57:00:17:60:99:d0:44:09:68:3e:4d:28:d0:92:d4:04:
da:88:71:e5:aa:f6:84:de:fe:09:94:c3:46:82:f0:10:7f:f8:
6f:0d:88:41:e3:82:b3:1d:cc:08:c5:5c:60:9c:97:9b:61:26:
af:22:b3:ac:6a:76:70:10:6a:71:f1:e0:b9:29:61:b1:83:a0:
f8:0f:c0:8f:a2:7d:d8:d5:ac:c7:e1:66:53:e0:45:2f:d5:82:
ad:e5:e7:4f:23:95:b8:25:12:2c:9c:30:a0:e8:54:19:a8:cf:
3a:4a:6d:2e:8b:1a:8b:d4:49:81:4a:17:98:e8:cc:ab:2c:81:
77:5f:fe:19:0b:b9:d1:e1:84:6f:61:cc:7c:0f:aa:81:27:47:
73:f5:1b:0f:47:e7:29:57:29:75:4f:02:7b:82:98:c0:7d:d6:
49:6a:72:a0:78:c7:50:93:c9:42:e2:27:bb:0d:ce:3e:74:88:
1b:f9:d8:fb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+qGboLgGv6gpE2pBKbiNa6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY4YThlOTNkM2Y1OTBmNDQ1MGQxZGIzYzIwNzQ1OTgyNDQz
NTNlOTMwHhcNMjYwNzI4MTkwMDQwWhcNMjYwNzI5MTkwMDQwWjAzMTEwLwYDVQQD
Eyg0NWY2MjNiMzQ1OGM4MjU0ZmYwZTMyNGFhN2ZjNGJkMzEzODZlOWQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuWgCSWE4K3KqZX1oRklXdFTcLSbe
AmVo2MIuPQc2Ked0cesCOFNuIXvSH6ALPrIk2Ysc8ghENNu0SiDCeaD9mQo85IWV
ZU3y353LB6zNU/iqYYK6EMM3uHVC6JKlXkfNHzF/u7t2/Ic7na+NLZ82hRcv+TlG
OJnnbew+OLFYNykN4aTprg/nKx+geMnt/1NDsNHRofBwelDrO/E6Bl0h6bK7E89S
tFElOBkPW8SO3nIDytGk91MKQtufbsHd6NSj+ER1iuiOf2l+m47a+DClH2FxOTpV
+74Ag6hnSKjfusYR2ACPd1WdRrll3YdrBKqo2oiZPzMTuedKmwTbJJBaMwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEX2I7NFjIJU/w4ySqf8S9MThunSMB8GA1UdIwQY
MBaAFGio6T0/WQ9EUNHbPCB0WYJENT6TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYUtqcFBUOVpEMFJRMGRzOElIUlpna1ExUHBNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS9iYjNiMjktODFlNS00NWEyLTgxZWMt
MjVkZDRjYmIzNjk4LzEvYUtqcFBUOVpEMFJRMGRzOElIUlpna1ExUHBNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYS9iYjNiMjktODFlNS00NWEyLTgxZWMtMjVkZDRjYmIzNjk4
LzEvYUtqcFBUOVpEMFJRMGRzOElIUlpna1ExUHBNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF/BcSubJ
eCAS1PKfDeb13K8v2ZJiFhRxlykWo3dZGa1HcIU2uyWJV3vl9h/N6EWmex5JxtKY
fWqAgkZ/CgVTFFDtbh6euy/afAtXABdgmdBECWg+TSjQktQE2ohx5ar2hN7+CZTD
RoLwEH/4bw2IQeOCsx3MCMVcYJyXm2EmryKzrGp2cBBqcfHguSlhsYOg+A/Aj6J9
2NWsx+FmU+BFL9WCreXnTyOVuCUSLJwwoOhUGajPOkptLosai9RJgUoXmOjMqyyB
d1/+GQu50eGEb2HMfA+qgSdHc/UbD0fnKVcpdU8Ce4KYwH3WSWpyoHjHUJPJQuIn
uw3OPnSIG/nY+w==
-----END CERTIFICATE-----
Generated at Tue Jul 28 23:22:03 2026 by rpki-client