Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/160a77-756d-441a-86c3-0e5392757f82/1/458aboTAJ378tW2UKw615FZHESk.mft
File: 458aboTAJ378tW2UKw615FZHESk.mft (raw, json)
Hash identifier: 4UBU64mrNWnqPWEe2021XK/CIrAtfa7Bu+m0hkf4V0M=
Subject key identifier: A8:70:4C:DB:C0:42:38:DE:C2:72:F1:04:32:02:92:9C:BB:CE:77:E9
Authority key identifier: E3:9F:1A:6E:84:C0:27:7E:FC:B5:6D:94:2B:0E:B5:E4:56:47:11:29
Certificate issuer: /CN=e39f1a6e84c0277efcb56d942b0eb5e456471129
Certificate serial: 019FA9AC4C59D521E3F51F4417EB08D3EF52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/458aboTAJ378tW2UKw615FZHESk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/160a77-756d-441a-86c3-0e5392757f82/1/458aboTAJ378tW2UKw615FZHESk.mft
Manifest number: 19DA
Signing time: Tue 28 Jul 2026 17:01:08 +0000
Manifest this update: Tue 28 Jul 2026 17:01:08 +0000
Manifest next update: Wed 29 Jul 2026 17:01:08 +0000
Files and hashes: 1: 458aboTAJ378tW2UKw615FZHESk.crl (hash: qmhyqzcoGtFc0RF3/0U18oVB1yYzbCx86LkKFyusqQ8=)
2: oUGkPZTPkKHGPI9Jz6IXcq74MlY.roa (hash: kW23YRINjjPil+PnE7QgBUdKf6Li2ZuNouz/Gf0yezE=)
3: q5YOOrxuiSWXoPgrKO2ByRV2Pag.roa (hash: MIH8GtLHKwDBxta0prsle3vWb5PxVdZjd+6vSDHesjk=)
4: zhvANJOvIZUMm3XZ4zAx_z-cOFc.roa (hash: ra8TIJdqXnbc9kZExeXfpCuOK6FblyvfQ8K4O5SfJHg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/160a77-756d-441a-86c3-0e5392757f82/1/458aboTAJ378tW2UKw615FZHESk.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/160a77-756d-441a-86c3-0e5392757f82/1/458aboTAJ378tW2UKw615FZHESk.mft
rsync://rpki.ripe.net/repository/DEFAULT/458aboTAJ378tW2UKw615FZHESk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 17:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:ac:4c:59:d5:21:e3:f5:1f:44:17:eb:08:d3:ef:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e39f1a6e84c0277efcb56d942b0eb5e456471129
Validity
Not Before: Jul 28 17:01:08 2026 GMT
Not After : Jul 29 17:01:08 2026 GMT
Subject: CN=a8704cdbc04238dec272f1043202929cbbce77e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:a5:23:a1:58:df:5c:0c:23:b4:84:2c:9f:8b:
c9:4d:28:3e:f8:54:d9:c2:b1:29:3d:01:16:d2:97:
a7:29:89:59:b8:ab:17:a7:e8:51:c0:08:a9:51:6c:
a7:6c:65:33:6d:6c:f7:35:44:3d:04:27:ca:f7:b4:
d4:ea:d1:45:0d:5c:e9:1a:cd:ed:38:37:3a:fc:49:
78:d0:9c:7d:60:14:64:25:96:c2:cd:02:19:d3:7a:
de:24:03:76:b3:88:fb:07:7e:ef:c9:5b:56:67:17:
d4:36:41:2f:a5:05:8c:94:0f:96:24:92:c7:35:fa:
7f:3d:1f:88:d2:d0:03:65:1f:61:19:0b:f9:b4:1b:
53:bb:c7:d1:8a:51:2c:57:20:e0:c5:db:53:63:86:
d7:4e:6c:b9:f1:bb:7b:19:96:e1:91:c7:fe:4a:fe:
74:1b:75:e7:d6:f5:59:bb:63:61:c9:00:1c:c6:d0:
ab:cc:28:5b:2f:f3:90:f7:aa:18:9e:6d:bc:a9:6d:
e9:1a:af:3b:6e:9a:db:00:40:5c:7d:d7:97:3e:be:
9a:fa:c5:d5:5c:de:0f:66:89:e7:fa:1b:cd:ea:3c:
f2:9c:c0:15:68:50:27:84:c8:a0:1c:3c:3e:ea:8a:
b6:e4:4b:b2:9a:20:0f:78:0f:2a:35:c6:b4:f3:ad:
26:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:70:4C:DB:C0:42:38:DE:C2:72:F1:04:32:02:92:9C:BB:CE:77:E9
X509v3 Authority Key Identifier:
keyid:E3:9F:1A:6E:84:C0:27:7E:FC:B5:6D:94:2B:0E:B5:E4:56:47:11:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/458aboTAJ378tW2UKw615FZHESk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/160a77-756d-441a-86c3-0e5392757f82/1/458aboTAJ378tW2UKw615FZHESk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/160a77-756d-441a-86c3-0e5392757f82/1/458aboTAJ378tW2UKw615FZHESk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:a0:19:c5:d5:1c:77:f8:09:65:cd:4e:c2:81:38:88:7a:77:
c0:90:e4:9e:c3:99:04:19:83:36:18:13:81:ad:e4:8b:98:8d:
fe:75:96:aa:a3:8a:11:c0:e0:2f:3d:89:a7:3b:95:68:25:aa:
24:5d:a7:e0:19:bc:9f:7b:f7:44:01:0b:9f:9a:2c:74:ac:61:
71:0f:16:86:a2:bf:5c:88:9c:4a:0a:64:be:de:35:c9:2b:0a:
7e:e5:f3:dc:8c:b4:03:80:6a:db:4a:4a:02:06:b9:da:24:b4:
c7:1e:41:93:cc:37:dd:3b:a2:2a:38:ef:d2:d4:e1:bd:93:cb:
04:11:b3:4b:f8:42:35:07:0e:a1:9c:d8:ee:a0:b7:fb:62:e9:
16:62:45:a1:11:54:d4:4d:7a:2a:8f:56:46:71:b3:a3:b5:b2:
1f:46:6d:34:99:be:ad:b4:a0:79:49:71:3f:7f:aa:0e:8e:0e:
35:15:f2:47:ec:6b:2c:30:9b:65:07:e3:c5:91:c7:21:8e:92:
39:a0:9b:f4:85:91:fd:32:63:41:2e:7c:9e:44:de:66:f0:b5:
07:5f:21:f6:5d:dd:04:38:e3:e0:69:52:a7:98:cd:dc:84:74:
49:66:02:c7:10:b3:e7:79:6c:e1:2f:7b:0c:88:1e:74:94:2b:
0d:bc:37:2a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+prExZ1SHj9R9EF+sI0+9SMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUzOWYxYTZlODRjMDI3N2VmY2I1NmQ5NDJiMGViNWU0NTY0
NzExMjkwHhcNMjYwNzI4MTcwMTA4WhcNMjYwNzI5MTcwMTA4WjAzMTEwLwYDVQQD
EyhhODcwNGNkYmMwNDIzOGRlYzI3MmYxMDQzMjAyOTI5Y2JiY2U3N2U5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs6UjoVjfXAwjtIQsn4vJTSg++FTZ
wrEpPQEW0penKYlZuKsXp+hRwAipUWynbGUzbWz3NUQ9BCfK97TU6tFFDVzpGs3t
ODc6/El40Jx9YBRkJZbCzQIZ03reJAN2s4j7B37vyVtWZxfUNkEvpQWMlA+WJJLH
Nfp/PR+I0tADZR9hGQv5tBtTu8fRilEsVyDgxdtTY4bXTmy58bt7GZbhkcf+Sv50
G3Xn1vVZu2NhyQAcxtCrzChbL/OQ96oYnm28qW3pGq87bprbAEBcfdeXPr6a+sXV
XN4PZonn+hvN6jzynMAVaFAnhMigHDw+6oq25EuymiAPeA8qNca0860mIwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKhwTNvAQjjewnLxBDICkpy7znfpMB8GA1UdIwQY
MBaAFOOfGm6EwCd+/LVtlCsOteRWRxEpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNDU4YWJvVEFKMzc4dFcyVUt3NjE1RlpIRVNrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS8xNjBhNzctNzU2ZC00NDFhLTg2YzMt
MGU1MzkyNzU3ZjgyLzEvNDU4YWJvVEFKMzc4dFcyVUt3NjE1RlpIRVNrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZS8xNjBhNzctNzU2ZC00NDFhLTg2YzMtMGU1MzkyNzU3Zjgy
LzEvNDU4YWJvVEFKMzc4dFcyVUt3NjE1RlpIRVNrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOqAZxdUc
d/gJZc1OwoE4iHp3wJDknsOZBBmDNhgTga3ki5iN/nWWqqOKEcDgLz2JpzuVaCWq
JF2n4Bm8n3v3RAELn5osdKxhcQ8WhqK/XIicSgpkvt41ySsKfuXz3Iy0A4Bq20pK
Aga52iS0xx5Bk8w33TuiKjjv0tThvZPLBBGzS/hCNQcOoZzY7qC3+2LpFmJFoRFU
1E16Ko9WRnGzo7WyH0ZtNJm+rbSgeUlxP3+qDo4ONRXyR+xrLDCbZQfjxZHHIY6S
OaCb9IWR/TJjQS58nkTeZvC1B18h9l3dBDjj4GlSp5jN3IR0SWYCxxCz53ls4S97
DIgedJQrDbw3Kg==
-----END CERTIFICATE-----
Generated at Wed Jul 29 01:35:40 2026 by rpki-client