Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/390e80-3214-4ac5-bb50-a26cb6429486/1/aEVaOTm6y6pZGMft1UZOEbocjN0.mft
File: aEVaOTm6y6pZGMft1UZOEbocjN0.mft (raw, json)
Hash identifier: yDJb+zlRteZR1ZQmgKWP0U5j4rDx50fHbVFmqnWdua4=
Subject key identifier: 3F:C6:A9:FA:62:67:F4:48:33:5F:A7:B6:48:26:4D:00:4A:A5:09:F6
Authority key identifier: 68:45:5A:39:39:BA:CB:AA:59:18:C7:ED:D5:46:4E:11:BA:1C:8C:DD
Certificate issuer: /CN=68455a3939bacbaa5918c7edd5464e11ba1c8cdd
Certificate serial: 019FAA1AC1882C6E19FB4DDFFFA86A5B9D33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aEVaOTm6y6pZGMft1UZOEbocjN0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/390e80-3214-4ac5-bb50-a26cb6429486/1/aEVaOTm6y6pZGMft1UZOEbocjN0.mft
Manifest number: 043B
Signing time: Tue 28 Jul 2026 19:01:47 +0000
Manifest this update: Tue 28 Jul 2026 19:01:47 +0000
Manifest next update: Wed 29 Jul 2026 19:01:47 +0000
Files and hashes: 1: _XeETx4mh6Plm0BK-RBuP2zSujs.roa (hash: xDOylPin64Mcz52VO00yVSOPCA3wH6/qSwl1hwhbWC4=)
2: aEVaOTm6y6pZGMft1UZOEbocjN0.crl (hash: lKb+4kdHjMKuQSCldYpwrUG7p8qK3NHGwwWy+nRv2yA=)
3: yEqniktZbtzkmkZc_KMxAGvhuuU.roa (hash: pfRE4hx//8zmgvIA0elXhM8ZhL1kk+eFoYZAKrtL3rs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/390e80-3214-4ac5-bb50-a26cb6429486/1/aEVaOTm6y6pZGMft1UZOEbocjN0.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/390e80-3214-4ac5-bb50-a26cb6429486/1/aEVaOTm6y6pZGMft1UZOEbocjN0.mft
rsync://rpki.ripe.net/repository/DEFAULT/aEVaOTm6y6pZGMft1UZOEbocjN0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 19:01:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:1a:c1:88:2c:6e:19:fb:4d:df:ff:a8:6a:5b:9d:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68455a3939bacbaa5918c7edd5464e11ba1c8cdd
Validity
Not Before: Jul 28 19:01:47 2026 GMT
Not After : Jul 29 19:01:47 2026 GMT
Subject: CN=3fc6a9fa6267f448335fa7b648264d004aa509f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:af:df:a0:97:34:06:84:9d:a5:c1:0f:c7:66:
70:4c:2d:76:8f:9e:64:b6:e4:96:27:3b:c5:29:d1:
06:fb:cd:c4:7a:ce:b9:34:0f:06:11:ec:7f:06:5b:
8c:98:3f:2a:46:7f:82:3f:10:33:c4:a6:d8:6c:9b:
1d:70:7a:cf:b6:8f:bb:0e:39:28:ff:33:92:da:ce:
6e:30:6c:d8:2b:c0:72:b1:0a:d9:a2:83:3f:da:57:
bb:b2:32:96:a1:da:d1:ba:3b:ec:28:9d:1e:3b:48:
c1:25:af:75:27:83:13:6a:16:47:3a:87:4a:1d:bc:
90:0d:4d:b9:65:d1:f0:ea:ea:83:ca:a6:b1:53:b9:
65:ca:25:ef:61:90:15:f3:cc:cc:ee:6e:6c:2f:3c:
25:0b:1b:a5:d1:41:c9:28:0b:0f:76:e8:66:33:10:
09:06:58:83:89:1c:6a:db:e4:db:90:7d:40:c7:20:
79:bb:77:b5:79:fd:10:ea:ca:f6:22:57:62:68:03:
39:85:f0:86:9a:51:8b:c0:65:ae:d4:ba:fb:b5:ab:
07:27:33:b3:b5:3e:11:59:5f:53:03:de:21:6e:97:
76:95:66:f8:96:dd:dd:0e:8b:0c:3f:53:94:7e:97:
d4:8a:1b:48:52:ad:14:f4:28:f1:d6:f8:13:db:5e:
92:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:C6:A9:FA:62:67:F4:48:33:5F:A7:B6:48:26:4D:00:4A:A5:09:F6
X509v3 Authority Key Identifier:
keyid:68:45:5A:39:39:BA:CB:AA:59:18:C7:ED:D5:46:4E:11:BA:1C:8C:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aEVaOTm6y6pZGMft1UZOEbocjN0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/390e80-3214-4ac5-bb50-a26cb6429486/1/aEVaOTm6y6pZGMft1UZOEbocjN0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/390e80-3214-4ac5-bb50-a26cb6429486/1/aEVaOTm6y6pZGMft1UZOEbocjN0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:83:ae:ee:48:95:cc:01:9b:a9:40:a3:57:1c:0f:5e:d8:24:
ae:d9:44:8e:46:eb:f6:43:07:dc:2d:2d:7e:46:e2:80:a2:f6:
be:a7:42:0c:e7:ae:8a:05:b2:9d:bb:8e:00:c1:e4:e8:ea:7f:
e0:ef:cf:0d:b7:b9:8b:7e:d1:7d:9b:05:71:05:3b:ef:5b:f8:
43:04:e4:a7:5e:ab:81:19:56:f6:b3:f5:9a:32:d0:9d:3d:ea:
88:ac:94:57:0d:72:9b:0c:c5:33:18:17:f4:86:f8:22:a3:67:
36:8f:27:59:77:6e:16:9c:00:89:1a:28:39:33:98:c9:0d:75:
1d:8d:8a:59:24:26:60:da:64:25:1f:20:ce:e0:70:6d:93:b1:
0d:8a:ba:1c:8a:fe:1d:51:c3:9f:0c:22:20:88:14:a1:8a:a4:
1a:69:24:be:03:42:0c:19:53:bf:e6:d8:43:9d:49:a2:b9:65:
fb:00:31:56:ad:5e:87:c5:f6:24:41:b9:68:d6:2a:cc:4c:fc:
94:3a:ba:2a:2b:ca:2a:c2:fe:6b:b8:fc:86:dd:50:16:9c:09:
35:ec:86:6b:be:20:4a:93:8c:ff:3d:16:54:8d:0b:4a:dd:87:
87:d2:b5:61:53:bd:0b:d6:58:e0:83:bc:05:72:12:c9:0a:96:
a0:d3:ba:bb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+qGsGILG4Z+03f/6hqW50zMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY4NDU1YTM5MzliYWNiYWE1OTE4YzdlZGQ1NDY0ZTExYmEx
YzhjZGQwHhcNMjYwNzI4MTkwMTQ3WhcNMjYwNzI5MTkwMTQ3WjAzMTEwLwYDVQQD
EygzZmM2YTlmYTYyNjdmNDQ4MzM1ZmE3YjY0ODI2NGQwMDRhYTUwOWY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx6/foJc0BoSdpcEPx2ZwTC12j55k
tuSWJzvFKdEG+83Ees65NA8GEex/BluMmD8qRn+CPxAzxKbYbJsdcHrPto+7Djko
/zOS2s5uMGzYK8BysQrZooM/2le7sjKWodrRujvsKJ0eO0jBJa91J4MTahZHOodK
HbyQDU25ZdHw6uqDyqaxU7llyiXvYZAV88zM7m5sLzwlCxul0UHJKAsPduhmMxAJ
BliDiRxq2+TbkH1AxyB5u3e1ef0Q6sr2IldiaAM5hfCGmlGLwGWu1Lr7tasHJzOz
tT4RWV9TA94hbpd2lWb4lt3dDosMP1OUfpfUihtIUq0U9Cjx1vgT216SVQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD/GqfpiZ/RIM1+ntkgmTQBKpQn2MB8GA1UdIwQY
MBaAFGhFWjk5usuqWRjH7dVGThG6HIzdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYUVWYU9UbTZ5NnBaR01mdDFVWk9FYm9jak4wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi8zOTBlODAtMzIxNC00YWM1LWJiNTAt
YTI2Y2I2NDI5NDg2LzEvYUVWYU9UbTZ5NnBaR01mdDFVWk9FYm9jak4wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Zi8zOTBlODAtMzIxNC00YWM1LWJiNTAtYTI2Y2I2NDI5NDg2
LzEvYUVWYU9UbTZ5NnBaR01mdDFVWk9FYm9jak4wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATIOu7kiV
zAGbqUCjVxwPXtgkrtlEjkbr9kMH3C0tfkbigKL2vqdCDOeuigWynbuOAMHk6Op/
4O/PDbe5i37RfZsFcQU771v4QwTkp16rgRlW9rP1mjLQnT3qiKyUVw1ymwzFMxgX
9Ib4IqNnNo8nWXduFpwAiRooOTOYyQ11HY2KWSQmYNpkJR8gzuBwbZOxDYq6HIr+
HVHDnwwiIIgUoYqkGmkkvgNCDBlTv+bYQ51Jorll+wAxVq1eh8X2JEG5aNYqzEz8
lDq6KivKKsL+a7j8ht1QFpwJNeyGa74gSpOM/z0WVI0LSt2Hh9K1YVO9C9ZY4IO8
BXISyQqWoNO6uw==
-----END CERTIFICATE-----
Generated at Wed Jul 29 01:08:40 2026 by rpki-client