Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/e37d1d-d4fb-496c-af49-3420684c7e41/1/aNVC9HJ2FI-se4mU780q8Q56SEo.mft
File: aNVC9HJ2FI-se4mU780q8Q56SEo.mft (raw, json)
Hash identifier: iWWDY+0sgPXPlGVKouG1obesAMN0xG6Rx93SLZNTc1k=
Subject key identifier: 92:BB:99:20:6D:4A:F8:72:1A:63:FD:63:DD:FC:B8:FF:B3:BD:68:57
Authority key identifier: 68:D5:42:F4:72:76:14:8F:AC:7B:89:94:EF:CD:2A:F1:0E:7A:48:4A
Certificate issuer: /CN=68d542f47276148fac7b8994efcd2af10e7a484a
Certificate serial: 019FAA88BEAF72C974E45CD3E2497043052E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aNVC9HJ2FI-se4mU780q8Q56SEo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/e37d1d-d4fb-496c-af49-3420684c7e41/1/aNVC9HJ2FI-se4mU780q8Q56SEo.mft
Manifest number: 4D
Signing time: Tue 28 Jul 2026 21:01:56 +0000
Manifest this update: Tue 28 Jul 2026 21:01:56 +0000
Manifest next update: Wed 29 Jul 2026 21:01:56 +0000
Files and hashes: 1: HSSRUKBEGAwzctbuSfK5pqFW7og.roa (hash: JzHF9cnYKiNULXtoW5fjwRQd1kJW6OGN1ZbOkNwiJFU=)
2: aNVC9HJ2FI-se4mU780q8Q56SEo.crl (hash: HnLdyIcJi8aeI+xH/pophxC2ZZ4EajNieicvFwi18FU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/e37d1d-d4fb-496c-af49-3420684c7e41/1/aNVC9HJ2FI-se4mU780q8Q56SEo.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/e37d1d-d4fb-496c-af49-3420684c7e41/1/aNVC9HJ2FI-se4mU780q8Q56SEo.mft
rsync://rpki.ripe.net/repository/DEFAULT/aNVC9HJ2FI-se4mU780q8Q56SEo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 21:01:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:88:be:af:72:c9:74:e4:5c:d3:e2:49:70:43:05:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68d542f47276148fac7b8994efcd2af10e7a484a
Validity
Not Before: Jul 28 21:01:56 2026 GMT
Not After : Jul 29 21:01:56 2026 GMT
Subject: CN=92bb99206d4af8721a63fd63ddfcb8ffb3bd6857
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:10:4e:ee:68:e7:6d:ae:31:2d:48:80:4a:76:
92:38:70:a0:ac:1f:a3:09:37:90:5b:e5:87:3f:9d:
1a:34:60:2d:5a:e6:5b:1b:cf:e8:58:36:86:e9:97:
db:d4:90:59:b1:c7:1b:88:5e:53:ca:9e:fb:93:2b:
a9:c4:f8:66:c9:44:06:62:fd:3f:49:fd:f7:64:83:
db:bd:c8:78:ea:18:0d:ef:8a:fc:bd:78:fb:49:72:
e7:c4:e9:f4:ff:e9:f0:e9:50:31:a9:fd:8b:78:1a:
44:b9:4d:ee:9b:02:59:42:24:f7:7f:0d:15:af:db:
1b:4a:f3:80:7f:23:e2:0f:b9:3a:42:24:00:11:92:
46:a4:71:8e:1d:90:b1:96:f7:30:bf:37:d3:eb:da:
ea:44:35:a0:07:bb:ec:5d:08:29:21:84:42:fc:5c:
1a:7e:9b:27:8f:c9:0a:a6:1f:78:c9:4f:bc:b0:dd:
08:a2:17:11:cc:b8:61:a8:14:54:fd:59:a5:4e:ad:
f0:9b:68:4b:d3:7a:3a:ba:2a:bf:af:48:7d:f3:55:
7e:f7:b5:5b:db:c6:16:34:29:49:9d:ec:65:4b:5f:
f6:fd:3a:89:ba:15:71:96:1f:9f:69:09:5d:0b:bb:
64:a6:44:3e:ce:92:67:e6:6f:24:6e:b2:29:4e:03:
ca:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:BB:99:20:6D:4A:F8:72:1A:63:FD:63:DD:FC:B8:FF:B3:BD:68:57
X509v3 Authority Key Identifier:
keyid:68:D5:42:F4:72:76:14:8F:AC:7B:89:94:EF:CD:2A:F1:0E:7A:48:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aNVC9HJ2FI-se4mU780q8Q56SEo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/e37d1d-d4fb-496c-af49-3420684c7e41/1/aNVC9HJ2FI-se4mU780q8Q56SEo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/e37d1d-d4fb-496c-af49-3420684c7e41/1/aNVC9HJ2FI-se4mU780q8Q56SEo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:aa:41:5d:dd:7c:31:59:ed:92:cf:bd:63:a8:d8:e1:b1:25:
e8:24:36:f5:e3:cd:ae:fc:86:ef:e1:35:8b:90:72:c2:05:cd:
df:0a:93:87:96:1f:3d:a4:91:89:8b:a6:d3:0a:66:1c:24:40:
20:00:b4:e3:dd:8b:d8:cc:02:b3:86:7e:8c:58:a8:cd:5b:8d:
c9:5a:e1:54:14:68:d8:45:6b:c0:af:05:71:30:81:5e:7f:30:
4f:2b:4f:0a:99:66:b4:37:73:29:38:86:5d:76:b4:6a:fe:15:
65:1e:33:8b:51:b6:7d:45:92:ab:f4:b9:c3:1e:c6:71:9c:e0:
0c:bf:0a:9b:f9:a3:a3:4c:8c:56:c1:f6:db:8d:cd:77:91:95:
7e:16:a6:b7:92:f8:3f:27:ca:05:b0:1b:ac:f4:cb:88:2b:e9:
22:f9:4c:0c:fb:b5:2d:42:51:d4:5b:cc:28:38:f9:c3:83:ef:
20:4e:b5:85:cd:7c:ef:42:3e:1e:55:85:d6:ad:3a:d6:11:a8:
c1:ce:d4:be:55:b4:d2:e8:26:df:0a:4e:2f:4a:f4:eb:79:bc:
65:97:47:1f:e6:cb:7e:30:95:b5:e6:0f:2d:b3:1f:f1:29:2a:
b0:2f:a6:8c:f6:73:82:c5:c1:77:df:59:3f:4c:9f:28:16:16:
23:cb:82:b1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+qiL6vcsl05FzT4klwQwUuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY4ZDU0MmY0NzI3NjE0OGZhYzdiODk5NGVmY2QyYWYxMGU3
YTQ4NGEwHhcNMjYwNzI4MjEwMTU2WhcNMjYwNzI5MjEwMTU2WjAzMTEwLwYDVQQD
Eyg5MmJiOTkyMDZkNGFmODcyMWE2M2ZkNjNkZGZjYjhmZmIzYmQ2ODU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiRBO7mjnba4xLUiASnaSOHCgrB+j
CTeQW+WHP50aNGAtWuZbG8/oWDaG6Zfb1JBZsccbiF5Typ77kyupxPhmyUQGYv0/
Sf33ZIPbvch46hgN74r8vXj7SXLnxOn0/+nw6VAxqf2LeBpEuU3umwJZQiT3fw0V
r9sbSvOAfyPiD7k6QiQAEZJGpHGOHZCxlvcwvzfT69rqRDWgB7vsXQgpIYRC/Fwa
fpsnj8kKph94yU+8sN0IohcRzLhhqBRU/VmlTq3wm2hL03o6uiq/r0h981V+97Vb
28YWNClJnexlS1/2/TqJuhVxlh+faQldC7tkpkQ+zpJn5m8kbrIpTgPKKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJK7mSBtSvhyGmP9Y938uP+zvWhXMB8GA1UdIwQY
MBaAFGjVQvRydhSPrHuJlO/NKvEOekhKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYU5WQzlISjJGSS1zZTRtVTc4MHE4UTU2U0VvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi9lMzdkMWQtZDRmYi00OTZjLWFmNDkt
MzQyMDY4NGM3ZTQxLzEvYU5WQzlISjJGSS1zZTRtVTc4MHE4UTU2U0VvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Mi9lMzdkMWQtZDRmYi00OTZjLWFmNDktMzQyMDY4NGM3ZTQx
LzEvYU5WQzlISjJGSS1zZTRtVTc4MHE4UTU2U0VvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQKpBXd18
MVntks+9Y6jY4bEl6CQ29ePNrvyG7+E1i5BywgXN3wqTh5YfPaSRiYum0wpmHCRA
IAC0492L2MwCs4Z+jFiozVuNyVrhVBRo2EVrwK8FcTCBXn8wTytPCplmtDdzKTiG
XXa0av4VZR4zi1G2fUWSq/S5wx7GcZzgDL8Km/mjo0yMVsH2243Nd5GVfhamt5L4
PyfKBbAbrPTLiCvpIvlMDPu1LUJR1FvMKDj5w4PvIE61hc1870I+HlWF1q061hGo
wc7UvlW00ugm3wpOL0r063m8ZZdHH+bLfjCVteYPLbMf8SkqsC+mjPZzgsXBd99Z
P0yfKBYWI8uCsQ==
-----END CERTIFICATE-----
Generated at Wed Jul 29 07:23:50 2026 by rpki-client