Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/9ae221-c101-497f-91fe-508099c133bb/1/h3qtMHrTMOu4z0TsITiaFwQ2_VM.mft
File: h3qtMHrTMOu4z0TsITiaFwQ2_VM.mft (raw, json)
Hash identifier: DbWdSoBzrMNeYZoYObS7dJf/je+jhZHr2MSIWmEyhBs=
Subject key identifier: CA:66:8C:9F:99:E5:2A:10:64:7D:D4:E8:20:68:BF:BE:59:02:F6:37
Authority key identifier: 87:7A:AD:30:7A:D3:30:EB:B8:CF:44:EC:21:38:9A:17:04:36:FD:53
Certificate issuer: /CN=877aad307ad330ebb8cf44ec21389a170436fd53
Certificate serial: 019FAAF5D142CC54A7A27563C86A0FACB190
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h3qtMHrTMOu4z0TsITiaFwQ2_VM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/9ae221-c101-497f-91fe-508099c133bb/1/h3qtMHrTMOu4z0TsITiaFwQ2_VM.mft
Manifest number: 19D8
Signing time: Tue 28 Jul 2026 23:01:04 +0000
Manifest this update: Tue 28 Jul 2026 23:01:04 +0000
Manifest next update: Wed 29 Jul 2026 23:01:04 +0000
Files and hashes: 1: 4O7JXBvPOYztRW27KQbfsJapV8I.roa (hash: CnJtkzBJ3WzY6WSIQ98/SBNuBHldMzltsiyedt5bTUA=)
2: gP48O_sjBy8crhBkXhJMvckOd40.roa (hash: YjRHc0wBKAbt12RWFSPrs766F+2rkzk6tBEBo+GPgkI=)
3: glCPJ2S6o9uZKjCAdlQQmibg5oU.roa (hash: r5yLJSYgpWVCtbKMSEubh57fs1HDMOGe6waujl24LNg=)
4: h3qtMHrTMOu4z0TsITiaFwQ2_VM.crl (hash: 5d3tbPi06J9BQDsD/rf45bC2ASo+1MyZ7Um+85j1OS0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/9ae221-c101-497f-91fe-508099c133bb/1/h3qtMHrTMOu4z0TsITiaFwQ2_VM.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/9ae221-c101-497f-91fe-508099c133bb/1/h3qtMHrTMOu4z0TsITiaFwQ2_VM.mft
rsync://rpki.ripe.net/repository/DEFAULT/h3qtMHrTMOu4z0TsITiaFwQ2_VM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:f5:d1:42:cc:54:a7:a2:75:63:c8:6a:0f:ac:b1:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=877aad307ad330ebb8cf44ec21389a170436fd53
Validity
Not Before: Jul 28 23:01:04 2026 GMT
Not After : Jul 29 23:01:04 2026 GMT
Subject: CN=ca668c9f99e52a10647dd4e82068bfbe5902f637
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:60:9a:cf:cb:7f:ef:dc:a8:01:d5:8e:93:35:
ff:b5:81:47:ec:9c:66:24:65:be:c0:8f:d6:73:5a:
4d:85:37:27:9c:df:67:59:e7:bf:d0:ce:8f:03:fd:
8b:59:b7:a3:b8:19:46:64:41:33:98:9e:da:f5:85:
51:36:62:db:41:86:71:f1:33:45:2d:ce:5c:54:cb:
df:40:f8:a5:e7:c3:1b:15:5d:4e:55:26:d0:73:96:
32:1e:bf:34:ef:6f:1e:6d:d5:2e:6a:8e:7f:f1:87:
4b:04:68:d0:8b:df:43:d8:8f:2e:7a:77:3e:73:63:
47:e0:36:d1:36:2b:18:8c:16:de:79:47:f0:65:3b:
0f:01:01:ff:fe:b0:f1:7d:65:59:38:ff:49:27:eb:
32:e1:b8:1b:ed:5f:cf:ba:f7:60:70:5c:ab:78:f2:
24:59:41:d1:21:05:21:92:a4:29:53:cd:20:9d:2a:
05:77:07:a3:db:6a:09:24:13:b5:c6:63:29:78:64:
0d:46:f5:1c:5d:07:6d:33:26:78:30:76:3f:1c:de:
92:94:c8:81:0f:22:a4:6f:f1:0a:7e:af:cc:f7:f3:
9f:f2:8a:de:9b:9b:4b:c9:d3:86:5d:53:2f:46:1d:
1b:07:c2:88:e0:75:d0:df:33:a4:dc:48:bf:7e:5f:
9c:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:66:8C:9F:99:E5:2A:10:64:7D:D4:E8:20:68:BF:BE:59:02:F6:37
X509v3 Authority Key Identifier:
keyid:87:7A:AD:30:7A:D3:30:EB:B8:CF:44:EC:21:38:9A:17:04:36:FD:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h3qtMHrTMOu4z0TsITiaFwQ2_VM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/9ae221-c101-497f-91fe-508099c133bb/1/h3qtMHrTMOu4z0TsITiaFwQ2_VM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/9ae221-c101-497f-91fe-508099c133bb/1/h3qtMHrTMOu4z0TsITiaFwQ2_VM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:c9:4d:d1:a3:0c:83:4b:37:9c:a6:b4:9a:12:fe:4e:b1:70:
5b:a9:44:38:8f:4e:a0:f0:27:aa:04:54:5e:f9:fd:5c:30:f2:
a9:f6:c6:58:bb:dc:a0:2e:13:e9:b9:89:67:57:96:02:cf:76:
77:96:e4:c4:19:4e:d1:c4:96:e3:f0:f1:73:a4:79:81:1a:c1:
62:26:6e:03:69:27:f3:72:69:d1:9b:88:71:2f:13:b6:80:9e:
08:c5:15:a7:23:1c:08:91:23:39:02:0a:bd:9a:ed:cb:da:5e:
2e:7e:0f:3f:3c:f4:b4:f3:b1:a0:23:b8:ff:aa:be:f3:6f:9e:
bb:07:69:2f:6b:e4:30:f5:1b:04:62:99:24:ab:67:03:fa:ef:
f3:ad:77:c6:f1:de:6c:e9:24:cd:f4:23:8d:04:09:1c:75:b3:
f7:0b:ce:86:92:dc:2a:ec:18:60:6d:c2:c0:6e:54:35:67:07:
d4:0d:f4:f3:08:39:07:67:53:4b:38:5a:3f:7d:1b:8d:c2:3b:
52:19:c5:a6:9a:0b:b9:f0:0c:dd:bf:03:2f:57:d8:8a:a8:26:
c3:81:04:3d:ee:a4:d8:1f:be:0f:7e:1f:cf:de:62:9d:27:33:
5e:52:7c:19:c0:27:d7:d3:79:58:d6:e9:c5:31:c5:6c:18:88:
34:8a:36:89
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+q9dFCzFSnonVjyGoPrLGQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg3N2FhZDMwN2FkMzMwZWJiOGNmNDRlYzIxMzg5YTE3MDQz
NmZkNTMwHhcNMjYwNzI4MjMwMTA0WhcNMjYwNzI5MjMwMTA0WjAzMTEwLwYDVQQD
EyhjYTY2OGM5Zjk5ZTUyYTEwNjQ3ZGQ0ZTgyMDY4YmZiZTU5MDJmNjM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm2Caz8t/79yoAdWOkzX/tYFH7Jxm
JGW+wI/Wc1pNhTcnnN9nWee/0M6PA/2LWbejuBlGZEEzmJ7a9YVRNmLbQYZx8TNF
Lc5cVMvfQPil58MbFV1OVSbQc5YyHr80728ebdUuao5/8YdLBGjQi99D2I8uenc+
c2NH4DbRNisYjBbeeUfwZTsPAQH//rDxfWVZOP9JJ+sy4bgb7V/PuvdgcFyrePIk
WUHRIQUhkqQpU80gnSoFdwej22oJJBO1xmMpeGQNRvUcXQdtMyZ4MHY/HN6SlMiB
DyKkb/EKfq/M9/Of8orem5tLydOGXVMvRh0bB8KI4HXQ3zOk3Ei/fl+czwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMpmjJ+Z5SoQZH3U6CBov75ZAvY3MB8GA1UdIwQY
MBaAFId6rTB60zDruM9E7CE4mhcENv1TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaDNxdE1IclRNT3U0ejBUc0lUaWFGd1EyX1ZNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS85YWUyMjEtYzEwMS00OTdmLTkxZmUt
NTA4MDk5YzEzM2JiLzEvaDNxdE1IclRNT3U0ejBUc0lUaWFGd1EyX1ZNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYS85YWUyMjEtYzEwMS00OTdmLTkxZmUtNTA4MDk5YzEzM2Ji
LzEvaDNxdE1IclRNT3U0ejBUc0lUaWFGd1EyX1ZNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgslN0aMM
g0s3nKa0mhL+TrFwW6lEOI9OoPAnqgRUXvn9XDDyqfbGWLvcoC4T6bmJZ1eWAs92
d5bkxBlO0cSW4/Dxc6R5gRrBYiZuA2kn83Jp0ZuIcS8TtoCeCMUVpyMcCJEjOQIK
vZrty9peLn4PPzz0tPOxoCO4/6q+82+euwdpL2vkMPUbBGKZJKtnA/rv8613xvHe
bOkkzfQjjQQJHHWz9wvOhpLcKuwYYG3CwG5UNWcH1A308wg5B2dTSzhaP30bjcI7
UhnFppoLufAM3b8DL1fYiqgmw4EEPe6k2B++D34fz95inSczXlJ8GcAn19N5WNbp
xTHFbBiINIo2iQ==
-----END CERTIFICATE-----
Generated at Wed Jul 29 03:15:42 2026 by rpki-client