Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/51a655-2735-49ef-80df-b316db5938ff/1/aNJK3cw9W3egmakHEiJSpHyPYxA.mft
File: aNJK3cw9W3egmakHEiJSpHyPYxA.mft (raw, json)
Hash identifier: ZokKy5y/y4NBibfm7lx4tETNUpbl8IF5gJe5yITPBg0=
Subject key identifier: 5C:6E:24:ED:3E:78:61:68:4F:67:C7:C3:76:E3:EF:44:45:90:DA:66
Authority key identifier: 68:D2:4A:DD:CC:3D:5B:77:A0:99:A9:07:12:22:52:A4:7C:8F:63:10
Certificate issuer: /CN=68d24addcc3d5b77a099a907122252a47c8f6310
Certificate serial: 019FAB9A57E53C4F9C64FFAB6DED65920974
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aNJK3cw9W3egmakHEiJSpHyPYxA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/51a655-2735-49ef-80df-b316db5938ff/1/aNJK3cw9W3egmakHEiJSpHyPYxA.mft
Manifest number: 16CC
Signing time: Wed 29 Jul 2026 02:00:46 +0000
Manifest this update: Wed 29 Jul 2026 02:00:46 +0000
Manifest next update: Thu 30 Jul 2026 02:00:46 +0000
Files and hashes: 1: 3YSDswVguWbvrvj4E3sCx_uL70g.roa (hash: ja7wL0FwxnohJuxFrehQHPScGACnDNS5Cog9I6ahHZE=)
2: 9NyFHYTj3seW0uDQ9d-qMgihTFQ.roa (hash: 2XDA2KE71Iz1cppVJlV/1O+Z0hd+0MetH5FlOTLgBBc=)
3: CqG9BYoqBVbUiaYPUEt4pjlBhyg.roa (hash: cvOnYEAZf07u8Yg8vFOi6MSfTj+LKt401Iv8GxS5fdw=)
4: aNJK3cw9W3egmakHEiJSpHyPYxA.crl (hash: Jyi113Trm3CA0OISD0vHXUXiC1rr+nDSe/Fq/RLS7sQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/51a655-2735-49ef-80df-b316db5938ff/1/aNJK3cw9W3egmakHEiJSpHyPYxA.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/51a655-2735-49ef-80df-b316db5938ff/1/aNJK3cw9W3egmakHEiJSpHyPYxA.mft
rsync://rpki.ripe.net/repository/DEFAULT/aNJK3cw9W3egmakHEiJSpHyPYxA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:9a:57:e5:3c:4f:9c:64:ff:ab:6d:ed:65:92:09:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68d24addcc3d5b77a099a907122252a47c8f6310
Validity
Not Before: Jul 29 02:00:46 2026 GMT
Not After : Jul 30 02:00:46 2026 GMT
Subject: CN=5c6e24ed3e7861684f67c7c376e3ef444590da66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:4f:be:bb:13:f6:38:a8:61:71:e6:e1:51:b6:
4d:c9:ea:b4:8f:4c:c4:da:49:d1:c9:cc:0f:0b:23:
3f:f3:d4:45:eb:71:19:3f:c2:eb:b8:85:9c:d3:0a:
a7:4c:43:87:8a:a1:f2:85:e9:e1:3a:00:67:e9:9c:
92:6d:21:e0:00:2f:ba:7f:47:25:9f:fa:db:73:7c:
28:73:5c:27:0f:ae:c0:31:62:ec:e6:f0:59:3c:8d:
73:2f:9c:90:c6:f3:ed:93:c3:64:94:fe:d2:fd:74:
a2:5f:07:c5:b1:a3:e6:55:a2:58:2a:36:d4:e3:95:
fa:ef:c9:99:6d:0c:4b:e6:fa:3f:e1:bc:93:b0:74:
b5:f4:74:8e:c0:05:b2:f6:fe:96:77:4b:99:01:7e:
6c:b9:86:f3:74:ec:c6:4a:57:29:f6:c4:21:b3:74:
1a:6e:c4:47:66:a2:0d:c0:1e:36:10:b3:20:1c:4c:
5e:ca:6f:82:38:58:54:e8:b5:95:5c:4f:39:47:70:
2f:fc:04:e5:4e:57:69:d1:51:99:a7:c5:4c:73:87:
57:92:2c:01:f3:ed:96:25:d4:bc:56:08:ea:52:72:
21:e9:49:1c:ba:62:d0:31:9d:cb:1b:07:6b:6d:f1:
34:f4:8c:70:f6:ab:e6:04:fc:b0:c0:26:f1:f7:7d:
32:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:6E:24:ED:3E:78:61:68:4F:67:C7:C3:76:E3:EF:44:45:90:DA:66
X509v3 Authority Key Identifier:
keyid:68:D2:4A:DD:CC:3D:5B:77:A0:99:A9:07:12:22:52:A4:7C:8F:63:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aNJK3cw9W3egmakHEiJSpHyPYxA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/51a655-2735-49ef-80df-b316db5938ff/1/aNJK3cw9W3egmakHEiJSpHyPYxA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/51a655-2735-49ef-80df-b316db5938ff/1/aNJK3cw9W3egmakHEiJSpHyPYxA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:4e:24:d1:cf:7e:03:dc:47:9d:0d:42:9a:a2:90:89:50:3d:
25:1b:7d:6a:92:47:d9:8e:f5:35:7a:0d:51:c4:9b:c6:20:13:
8b:75:f3:73:1d:71:d9:75:b8:a1:fa:49:2a:01:65:3f:c8:60:
b0:b7:85:f4:c5:3b:c1:d5:26:04:5b:5c:c7:a0:be:d8:0a:47:
14:d5:5e:82:b7:a7:00:5d:78:0e:06:8a:0c:cb:1d:33:10:51:
3b:d2:e3:b4:ad:5b:50:69:7e:05:34:50:91:8d:88:86:82:97:
a1:15:63:6f:18:62:82:85:0c:e5:32:61:b4:f8:90:e7:7f:a9:
9d:6e:8f:46:71:60:71:bf:75:b8:6a:da:d3:a2:96:14:a5:3a:
eb:4f:7d:c2:37:6a:84:a2:de:e1:17:f2:5b:21:1d:6c:2e:5c:
1e:9f:50:b3:31:9e:ff:07:0c:5b:5c:3f:64:de:7c:bc:f8:95:
0a:3e:e0:63:00:80:93:05:7d:47:7c:de:7a:8c:c3:ba:e2:aa:
d4:7f:ce:80:8d:68:45:03:84:84:b7:70:aa:7f:4d:1a:96:c7:
2a:43:77:45:84:ab:04:f8:7d:de:b7:5f:1d:cf:54:30:c3:f6:
ed:7d:97:b1:c2:02:15:2b:00:2f:06:74:47:b9:33:1e:e1:75:
ce:ac:73:41
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+rmlflPE+cZP+rbe1lkgl0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY4ZDI0YWRkY2MzZDViNzdhMDk5YTkwNzEyMjI1MmE0N2M4
ZjYzMTAwHhcNMjYwNzI5MDIwMDQ2WhcNMjYwNzMwMDIwMDQ2WjAzMTEwLwYDVQQD
Eyg1YzZlMjRlZDNlNzg2MTY4NGY2N2M3YzM3NmUzZWY0NDQ1OTBkYTY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArk++uxP2OKhhcebhUbZNyeq0j0zE
2knRycwPCyM/89RF63EZP8LruIWc0wqnTEOHiqHyhenhOgBn6ZySbSHgAC+6f0cl
n/rbc3woc1wnD67AMWLs5vBZPI1zL5yQxvPtk8NklP7S/XSiXwfFsaPmVaJYKjbU
45X678mZbQxL5vo/4byTsHS19HSOwAWy9v6Wd0uZAX5suYbzdOzGSlcp9sQhs3Qa
bsRHZqINwB42ELMgHExeym+COFhU6LWVXE85R3Av/ATlTldp0VGZp8VMc4dXkiwB
8+2WJdS8VgjqUnIh6UkcumLQMZ3LGwdrbfE09Ixw9qvmBPywwCbx930yXQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFxuJO0+eGFoT2fHw3bj70RFkNpmMB8GA1UdIwQY
MBaAFGjSSt3MPVt3oJmpBxIiUqR8j2MQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYU5KSzNjdzlXM2VnbWFrSEVpSlNwSHlQWXhBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi81MWE2NTUtMjczNS00OWVmLTgwZGYt
YjMxNmRiNTkzOGZmLzEvYU5KSzNjdzlXM2VnbWFrSEVpSlNwSHlQWXhBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Mi81MWE2NTUtMjczNS00OWVmLTgwZGYtYjMxNmRiNTkzOGZm
LzEvYU5KSzNjdzlXM2VnbWFrSEVpSlNwSHlQWXhBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuk4k0c9+
A9xHnQ1CmqKQiVA9JRt9apJH2Y71NXoNUcSbxiATi3Xzcx1x2XW4ofpJKgFlP8hg
sLeF9MU7wdUmBFtcx6C+2ApHFNVegrenAF14DgaKDMsdMxBRO9LjtK1bUGl+BTRQ
kY2IhoKXoRVjbxhigoUM5TJhtPiQ53+pnW6PRnFgcb91uGra06KWFKU66099wjdq
hKLe4RfyWyEdbC5cHp9QszGe/wcMW1w/ZN58vPiVCj7gYwCAkwV9R3zeeozDuuKq
1H/OgI1oRQOEhLdwqn9NGpbHKkN3RYSrBPh93rdfHc9UMMP27X2XscICFSsALwZ0
R7kzHuF1zqxzQQ==
-----END CERTIFICATE-----
Generated at Wed Jul 29 09:16:31 2026 by rpki-client