Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/0622ad-c653-4708-a3c2-af426baa357a/1/thPokOXEBwqIMnayyfd3sQYjxvk.mft
File: thPokOXEBwqIMnayyfd3sQYjxvk.mft (raw, json)
Hash identifier: gV8KQbSEqNY7nBftmU8+7r5cl6auOodqyrhVkgRj/ho=
Subject key identifier: B3:1F:92:57:99:F4:15:49:F7:24:0D:F3:6A:DE:80:63:27:A2:A6:7C
Authority key identifier: B6:13:E8:90:E5:C4:07:0A:88:32:76:B2:C9:F7:77:B1:06:23:C6:F9
Certificate issuer: /CN=b613e890e5c4070a883276b2c9f777b10623c6f9
Certificate serial: 019FA89948A1DB8701FF68239200C18789B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/thPokOXEBwqIMnayyfd3sQYjxvk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/0622ad-c653-4708-a3c2-af426baa357a/1/thPokOXEBwqIMnayyfd3sQYjxvk.mft
Manifest number: 67
Signing time: Tue 28 Jul 2026 12:00:45 +0000
Manifest this update: Tue 28 Jul 2026 12:00:45 +0000
Manifest next update: Wed 29 Jul 2026 12:00:45 +0000
Files and hashes: 1: iSTwcsDq44xmj4bDTIa6k6RLQKI.roa (hash: qWNdY8B5/pf+1M3HkKeiYMgI3P7SCbr9CH/em0VTbyE=)
2: thPokOXEBwqIMnayyfd3sQYjxvk.crl (hash: VSEhGgLa37G3OVWuoMbZ8V9ZoZ8EcwpUd/IlZ7VeCAo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/0622ad-c653-4708-a3c2-af426baa357a/1/thPokOXEBwqIMnayyfd3sQYjxvk.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/0622ad-c653-4708-a3c2-af426baa357a/1/thPokOXEBwqIMnayyfd3sQYjxvk.mft
rsync://rpki.ripe.net/repository/DEFAULT/thPokOXEBwqIMnayyfd3sQYjxvk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 12:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:99:48:a1:db:87:01:ff:68:23:92:00:c1:87:89:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b613e890e5c4070a883276b2c9f777b10623c6f9
Validity
Not Before: Jul 28 12:00:45 2026 GMT
Not After : Jul 29 12:00:45 2026 GMT
Subject: CN=b31f925799f41549f7240df36ade806327a2a67c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:bf:a0:fc:2c:a9:e0:85:44:f9:b4:4e:af:02:
0e:61:22:e3:d9:70:ca:ec:84:ce:59:f7:e2:ea:37:
0a:41:cb:06:a4:c4:a8:1f:66:95:c7:e0:de:8d:40:
3e:e5:25:7e:2d:3a:48:b5:2c:0f:d4:30:c9:9a:91:
a1:99:62:97:3c:c9:ea:4b:2b:70:39:6c:04:70:45:
ab:76:ff:5c:88:00:a7:fb:3b:77:39:a3:f3:42:de:
bc:87:64:d9:c0:93:dd:08:1b:fa:d4:42:b2:e4:80:
b5:9b:2e:fc:f2:af:62:cd:e8:23:7b:80:64:11:4c:
25:3e:ec:30:ae:e3:5d:e5:7b:22:ac:d8:2f:15:ba:
7b:79:38:bf:76:e6:ce:71:4f:c2:46:cb:3b:a5:12:
e6:70:09:02:89:b0:a4:98:55:3c:71:d9:ad:e9:d3:
fd:bb:66:ee:76:5c:3e:03:da:09:d2:34:9a:ee:7c:
72:66:97:20:67:31:76:69:19:e7:a2:9b:35:95:27:
39:72:4d:72:51:44:ec:65:34:b0:69:c8:a8:d7:82:
42:ae:14:26:a3:f5:0c:ed:9e:e2:8c:bd:f8:75:cd:
9d:f5:0a:02:f6:51:bf:39:36:78:cf:8a:15:85:a7:
d4:f9:32:12:5a:85:ed:8e:ce:ec:34:c3:97:64:ba:
05:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:1F:92:57:99:F4:15:49:F7:24:0D:F3:6A:DE:80:63:27:A2:A6:7C
X509v3 Authority Key Identifier:
keyid:B6:13:E8:90:E5:C4:07:0A:88:32:76:B2:C9:F7:77:B1:06:23:C6:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/thPokOXEBwqIMnayyfd3sQYjxvk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/0622ad-c653-4708-a3c2-af426baa357a/1/thPokOXEBwqIMnayyfd3sQYjxvk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/0622ad-c653-4708-a3c2-af426baa357a/1/thPokOXEBwqIMnayyfd3sQYjxvk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:68:59:3a:9a:ec:59:fa:4c:46:6d:79:71:6a:b6:96:3e:8d:
c5:19:d9:35:98:3e:bb:90:49:39:bd:8e:2b:a0:12:ee:e5:32:
95:14:01:5c:ea:33:aa:0c:88:2b:39:c5:09:c6:21:fc:4e:c5:
59:3b:8f:f8:56:c1:89:58:d4:e5:66:7d:dd:2b:b7:00:3d:a8:
6c:40:0e:84:31:87:83:a2:12:59:62:59:a6:40:54:38:32:22:
b5:48:92:f3:05:1e:98:97:25:ea:49:6a:33:f8:b2:27:77:27:
88:d4:8f:46:be:bb:3a:4e:66:c6:85:4c:fb:81:fb:58:95:c8:
1d:80:cd:ad:f9:1e:50:bf:19:5a:54:a2:72:5a:83:62:45:a0:
0e:f6:e5:d9:3b:38:b6:ac:45:55:25:a2:6a:23:4a:e7:0b:1d:
04:95:7b:01:f6:d1:60:9b:cb:f3:1c:9f:58:e9:b0:3a:3f:c1:
3d:81:61:af:7e:3a:0e:13:6a:a4:fe:f7:70:6f:b3:a6:45:9d:
a4:ca:69:a9:f2:af:6b:66:92:cc:71:60:f8:08:55:cd:3a:e4:
7d:c8:19:ef:18:6d:00:5b:2f:b0:eb:b6:65:52:bc:67:be:15:
3e:2c:0d:4e:1b:e3:ec:dc:95:7a:ac:42:3c:10:41:99:3d:9d:
47:e5:ed:f6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+omUih24cB/2gjkgDBh4mzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI2MTNlODkwZTVjNDA3MGE4ODMyNzZiMmM5Zjc3N2IxMDYy
M2M2ZjkwHhcNMjYwNzI4MTIwMDQ1WhcNMjYwNzI5MTIwMDQ1WjAzMTEwLwYDVQQD
EyhiMzFmOTI1Nzk5ZjQxNTQ5ZjcyNDBkZjM2YWRlODA2MzI3YTJhNjdjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv7+g/Cyp4IVE+bROrwIOYSLj2XDK
7ITOWffi6jcKQcsGpMSoH2aVx+DejUA+5SV+LTpItSwP1DDJmpGhmWKXPMnqSytw
OWwEcEWrdv9ciACn+zt3OaPzQt68h2TZwJPdCBv61EKy5IC1my788q9izegje4Bk
EUwlPuwwruNd5XsirNgvFbp7eTi/dubOcU/CRss7pRLmcAkCibCkmFU8cdmt6dP9
u2budlw+A9oJ0jSa7nxyZpcgZzF2aRnnops1lSc5ck1yUUTsZTSwacio14JCrhQm
o/UM7Z7ijL34dc2d9QoC9lG/OTZ4z4oVhafU+TISWoXtjs7sNMOXZLoFQQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLMfkleZ9BVJ9yQN82regGMnoqZ8MB8GA1UdIwQY
MBaAFLYT6JDlxAcKiDJ2ssn3d7EGI8b5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdGhQb2tPWEVCd3FJTW5heXlmZDNzUVlqeHZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi8wNjIyYWQtYzY1My00NzA4LWEzYzIt
YWY0MjZiYWEzNTdhLzEvdGhQb2tPWEVCd3FJTW5heXlmZDNzUVlqeHZrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yi8wNjIyYWQtYzY1My00NzA4LWEzYzItYWY0MjZiYWEzNTdh
LzEvdGhQb2tPWEVCd3FJTW5heXlmZDNzUVlqeHZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARGhZOprs
WfpMRm15cWq2lj6NxRnZNZg+u5BJOb2OK6AS7uUylRQBXOozqgyIKznFCcYh/E7F
WTuP+FbBiVjU5WZ93Su3AD2obEAOhDGHg6ISWWJZpkBUODIitUiS8wUemJcl6klq
M/iyJ3cniNSPRr67Ok5mxoVM+4H7WJXIHYDNrfkeUL8ZWlSiclqDYkWgDvbl2Ts4
tqxFVSWiaiNK5wsdBJV7AfbRYJvL8xyfWOmwOj/BPYFhr346DhNqpP73cG+zpkWd
pMppqfKva2aSzHFg+AhVzTrkfcgZ7xhtAFsvsOu2ZVK8Z74VPiwNThvj7NyVeqxC
PBBBmT2dR+Xt9g==
-----END CERTIFICATE-----
Generated at Tue Jul 28 21:04:31 2026 by rpki-client