Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/54687f-efa5-4620-8619-3155ba8cb74f/1/AQYAvmmMGrl4Y85ZFZESZctaPJ8.mft
File: AQYAvmmMGrl4Y85ZFZESZctaPJ8.mft (raw, json)
Hash identifier: R3mKaCMhL17rchyjQghvetsXhZEqC963ljO5pmtt6qI=
Subject key identifier: B8:3C:BA:C2:D9:71:13:ED:1B:C8:0B:C6:7D:F0:E0:42:D7:70:2A:C3
Authority key identifier: 01:06:00:BE:69:8C:1A:B9:78:63:CE:59:15:91:12:65:CB:5A:3C:9F
Certificate issuer: /CN=010600be698c1ab97863ce5915911265cb5a3c9f
Certificate serial: 019FAC77221FBF00E15BE35E2CADADBF1CD5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AQYAvmmMGrl4Y85ZFZESZctaPJ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/54687f-efa5-4620-8619-3155ba8cb74f/1/AQYAvmmMGrl4Y85ZFZESZctaPJ8.mft
Manifest number: 4E
Signing time: Wed 29 Jul 2026 06:01:56 +0000
Manifest this update: Wed 29 Jul 2026 06:01:56 +0000
Manifest next update: Thu 30 Jul 2026 06:01:56 +0000
Files and hashes: 1: 7BjvQpy7047hVApDh8x9Qe4DOoo.roa (hash: kKvjJ/MF8w1jZR9VtACZyBX/W/6HjlaX9dgOqUUswo4=)
2: AQYAvmmMGrl4Y85ZFZESZctaPJ8.crl (hash: 67ZtPR2UFNFkhSs1mTJjXCRMOprXYePdeFL2Aukx/XM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/54687f-efa5-4620-8619-3155ba8cb74f/1/AQYAvmmMGrl4Y85ZFZESZctaPJ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/54687f-efa5-4620-8619-3155ba8cb74f/1/AQYAvmmMGrl4Y85ZFZESZctaPJ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/AQYAvmmMGrl4Y85ZFZESZctaPJ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 06:01:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:77:22:1f:bf:00:e1:5b:e3:5e:2c:ad:ad:bf:1c:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=010600be698c1ab97863ce5915911265cb5a3c9f
Validity
Not Before: Jul 29 06:01:56 2026 GMT
Not After : Jul 30 06:01:56 2026 GMT
Subject: CN=b83cbac2d97113ed1bc80bc67df0e042d7702ac3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:fc:ba:d1:a3:6a:f9:8e:71:b8:00:de:93:b9:
01:ed:e0:12:a2:49:97:43:b8:2c:dc:0b:e7:af:0e:
6e:02:fc:76:5e:08:cd:22:de:b8:f4:f0:62:c9:9f:
21:1e:25:db:64:28:d1:91:ce:bc:11:b7:dc:ac:bf:
6f:69:7c:3a:b8:92:6e:80:9c:95:84:99:36:b8:08:
5e:de:f3:60:bc:37:36:d1:92:ed:2b:c3:d8:8b:71:
f5:39:92:0c:0c:e1:46:c8:63:7e:24:bb:da:4d:f8:
05:80:c6:3f:ec:92:3d:16:2c:aa:bc:cf:da:2b:6f:
cd:a2:6a:d0:46:ae:4c:25:ab:84:23:6a:3c:bd:dc:
a6:05:7a:c4:0e:03:87:57:aa:6c:38:6b:eb:be:98:
7b:c4:37:8c:33:7e:67:bd:ed:d8:de:fc:f2:0b:40:
32:ce:1c:5c:08:ac:c9:96:ca:04:25:74:a9:87:dc:
b3:a2:13:78:d8:bd:d0:77:dc:5b:d9:9e:9f:da:b2:
34:7f:8d:8d:65:86:d5:0a:bf:c7:41:63:88:1a:3a:
cb:95:8f:2a:39:50:87:78:28:18:fe:4d:71:f2:21:
7b:b4:bf:c1:fe:f3:66:1f:48:2e:05:a5:ac:9a:f3:
87:aa:fc:79:45:7a:21:f7:21:9f:18:d4:9c:af:8f:
6f:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:3C:BA:C2:D9:71:13:ED:1B:C8:0B:C6:7D:F0:E0:42:D7:70:2A:C3
X509v3 Authority Key Identifier:
keyid:01:06:00:BE:69:8C:1A:B9:78:63:CE:59:15:91:12:65:CB:5A:3C:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AQYAvmmMGrl4Y85ZFZESZctaPJ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/54687f-efa5-4620-8619-3155ba8cb74f/1/AQYAvmmMGrl4Y85ZFZESZctaPJ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/54687f-efa5-4620-8619-3155ba8cb74f/1/AQYAvmmMGrl4Y85ZFZESZctaPJ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:4a:1d:3f:bd:85:37:20:9a:b0:4e:5f:f0:ef:8a:12:00:78:
7b:71:6d:12:db:49:ee:d5:eb:a1:4b:80:11:a1:61:df:3a:7b:
93:2c:99:53:88:44:36:66:3b:5b:ad:02:2b:bf:8e:a2:21:21:
93:2a:a5:1a:e0:e6:51:28:7d:0c:4d:08:90:5b:81:1f:97:88:
7d:fb:cd:74:ef:10:21:e1:11:b0:6f:51:3d:fa:bf:95:8b:d8:
ab:34:e1:42:99:ce:f9:a0:1b:29:51:2b:5b:1f:aa:87:f8:c3:
8d:13:06:06:fc:fb:bd:3d:a4:24:da:64:e1:0c:ef:55:a0:be:
ca:9d:8b:21:9c:fe:e6:42:8a:51:8c:a5:8e:82:04:a3:2d:24:
a3:b3:9b:a4:7c:93:87:9a:f4:6e:9d:94:40:77:18:ac:86:94:
9f:d1:bc:49:5e:9f:2f:a3:e5:61:0d:13:34:2a:b9:7b:b6:96:
a9:51:01:7d:94:3e:fb:ba:7b:84:4c:83:fd:a3:e3:74:4c:14:
fe:c4:0b:1e:8e:8c:82:bb:aa:e6:41:ae:94:1b:8b:ef:16:f5:
ae:f0:a5:4f:3d:db:9c:f4:53:b8:0d:b1:03:ac:d2:49:8c:a8:
7c:0b:9a:9e:ff:e7:8f:14:7d:3d:ca:ab:66:c1:44:f5:40:ee:
55:54:02:bf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+sdyIfvwDhW+NeLK2tvxzVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAxMDYwMGJlNjk4YzFhYjk3ODYzY2U1OTE1OTExMjY1Y2I1
YTNjOWYwHhcNMjYwNzI5MDYwMTU2WhcNMjYwNzMwMDYwMTU2WjAzMTEwLwYDVQQD
EyhiODNjYmFjMmQ5NzExM2VkMWJjODBiYzY3ZGYwZTA0MmQ3NzAyYWMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnPy60aNq+Y5xuADek7kB7eASokmX
Q7gs3Avnrw5uAvx2XgjNIt649PBiyZ8hHiXbZCjRkc68EbfcrL9vaXw6uJJugJyV
hJk2uAhe3vNgvDc20ZLtK8PYi3H1OZIMDOFGyGN+JLvaTfgFgMY/7JI9FiyqvM/a
K2/NomrQRq5MJauEI2o8vdymBXrEDgOHV6psOGvrvph7xDeMM35nve3Y3vzyC0Ay
zhxcCKzJlsoEJXSph9yzohN42L3Qd9xb2Z6f2rI0f42NZYbVCr/HQWOIGjrLlY8q
OVCHeCgY/k1x8iF7tL/B/vNmH0guBaWsmvOHqvx5RXoh9yGfGNScr49viwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLg8usLZcRPtG8gLxn3w4ELXcCrDMB8GA1UdIwQY
MBaAFAEGAL5pjBq5eGPOWRWREmXLWjyfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQVFZQXZtbU1Hcmw0WTg1WkZaRVNaY3RhUEo4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC81NDY4N2YtZWZhNS00NjIwLTg2MTkt
MzE1NWJhOGNiNzRmLzEvQVFZQXZtbU1Hcmw0WTg1WkZaRVNaY3RhUEo4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NC81NDY4N2YtZWZhNS00NjIwLTg2MTktMzE1NWJhOGNiNzRm
LzEvQVFZQXZtbU1Hcmw0WTg1WkZaRVNaY3RhUEo4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWUodP72F
NyCasE5f8O+KEgB4e3FtEttJ7tXroUuAEaFh3zp7kyyZU4hENmY7W60CK7+OoiEh
kyqlGuDmUSh9DE0IkFuBH5eIffvNdO8QIeERsG9RPfq/lYvYqzThQpnO+aAbKVEr
Wx+qh/jDjRMGBvz7vT2kJNpk4QzvVaC+yp2LIZz+5kKKUYyljoIEoy0ko7ObpHyT
h5r0bp2UQHcYrIaUn9G8SV6fL6PlYQ0TNCq5e7aWqVEBfZQ++7p7hEyD/aPjdEwU
/sQLHo6Mgruq5kGulBuL7xb1rvClTz3bnPRTuA2xA6zSSYyofAuanv/njxR9Pcqr
ZsFE9UDuVVQCvw==
-----END CERTIFICATE-----
Generated at Wed Jul 29 10:20:42 2026 by rpki-client