Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/74d876-05a8-4b10-90e2-c9da030af326/1/a8vbb9OedvAEhAEuExRrIYdVw_s.mft
File: a8vbb9OedvAEhAEuExRrIYdVw_s.mft (raw, json)
Hash identifier: xDlV4OIc7H9lbxN2rNp28PB3LfKdtNXkKG/sroknyTc=
Subject key identifier: 19:B2:F1:EA:85:FD:D8:C4:3A:46:31:09:1F:DF:F1:FE:59:5D:54:E8
Authority key identifier: 6B:CB:DB:6F:D3:9E:76:F0:04:84:01:2E:13:14:6B:21:87:55:C3:FB
Certificate issuer: /CN=6bcbdb6fd39e76f00484012e13146b218755c3fb
Certificate serial: 019FAA50FAFF74FDFFA05BC8F8B6EAA77899
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a8vbb9OedvAEhAEuExRrIYdVw_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/74d876-05a8-4b10-90e2-c9da030af326/1/a8vbb9OedvAEhAEuExRrIYdVw_s.mft
Manifest number: 18CE
Signing time: Tue 28 Jul 2026 20:01:01 +0000
Manifest this update: Tue 28 Jul 2026 20:01:01 +0000
Manifest next update: Wed 29 Jul 2026 20:01:01 +0000
Files and hashes: 1: CaMOrAz-3VjPqu-gbyeJ5_Cx7NM.roa (hash: rD2u98MLb0jiD+OOiIWSkvqJ6RlBaZKAcES5KA3b+A4=)
2: a8vbb9OedvAEhAEuExRrIYdVw_s.crl (hash: 6ccmMWVyBsZyTcLYIaQhW7uPUGIuleMUdoO5BFnpLqs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/74d876-05a8-4b10-90e2-c9da030af326/1/a8vbb9OedvAEhAEuExRrIYdVw_s.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/74d876-05a8-4b10-90e2-c9da030af326/1/a8vbb9OedvAEhAEuExRrIYdVw_s.mft
rsync://rpki.ripe.net/repository/DEFAULT/a8vbb9OedvAEhAEuExRrIYdVw_s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 20:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:50:fa:ff:74:fd:ff:a0:5b:c8:f8:b6:ea:a7:78:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6bcbdb6fd39e76f00484012e13146b218755c3fb
Validity
Not Before: Jul 28 20:01:01 2026 GMT
Not After : Jul 29 20:01:01 2026 GMT
Subject: CN=19b2f1ea85fdd8c43a4631091fdff1fe595d54e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:9e:dd:7a:8c:7e:41:11:0a:c9:75:1e:67:d7:
67:8c:92:02:84:66:b9:13:72:4e:88:e3:8d:64:3f:
aa:2d:9c:cc:ab:64:08:ca:88:73:32:50:0b:39:7f:
0f:db:4b:6b:b9:31:55:0a:92:a8:39:0a:bb:8c:1d:
fa:25:34:53:4e:f4:56:ec:a6:74:f0:62:52:65:55:
0f:7d:a2:ed:9f:9c:01:9b:b3:c6:e8:c7:ae:cd:ec:
fb:22:02:49:55:40:34:f0:90:c6:1c:20:c5:44:61:
d0:c3:e6:87:83:61:39:a7:be:7e:2b:e9:5c:4e:69:
04:7a:19:5c:3b:67:f7:4e:4c:fc:e2:65:32:7f:85:
74:42:0b:61:38:fc:e8:ad:a9:49:a5:cf:f6:2d:69:
f0:21:78:40:0c:6c:d0:43:7b:26:6f:48:53:e9:dc:
68:5a:1f:a0:cd:32:90:87:9f:bc:e2:8c:24:a0:6f:
71:e7:10:81:b7:ec:1a:e0:a4:7c:16:bc:ea:fa:a9:
b0:24:a8:e5:27:06:4a:4d:22:21:b2:39:9f:0a:ab:
92:aa:84:28:08:30:c0:1a:6b:e6:08:7d:39:b1:5e:
81:5b:df:17:16:31:13:43:45:88:28:f2:4d:50:5d:
e5:a0:12:c2:a2:7a:b5:22:c1:66:0c:5c:b4:50:f8:
7b:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:B2:F1:EA:85:FD:D8:C4:3A:46:31:09:1F:DF:F1:FE:59:5D:54:E8
X509v3 Authority Key Identifier:
keyid:6B:CB:DB:6F:D3:9E:76:F0:04:84:01:2E:13:14:6B:21:87:55:C3:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8vbb9OedvAEhAEuExRrIYdVw_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/74d876-05a8-4b10-90e2-c9da030af326/1/a8vbb9OedvAEhAEuExRrIYdVw_s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/74d876-05a8-4b10-90e2-c9da030af326/1/a8vbb9OedvAEhAEuExRrIYdVw_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:fb:79:4c:a8:ab:af:ef:67:6c:9d:86:45:df:65:87:f9:27:
f6:65:21:89:ad:22:73:17:c7:50:f9:7b:62:ee:0e:26:be:35:
b0:72:56:e4:a3:35:e3:54:c7:bb:d8:5b:bc:b2:f8:46:ce:c4:
05:b2:70:d7:79:39:ae:90:aa:3b:3b:99:07:ca:f9:71:6d:a5:
7b:20:8d:48:2b:5d:12:0b:a5:8e:54:de:2c:81:f7:bb:e3:70:
7f:25:13:c6:e8:d3:74:9f:64:c9:64:7e:d7:9a:ac:02:3a:9a:
4f:df:b6:f6:66:15:21:c1:1d:f0:8a:4e:3a:9b:99:f5:25:a2:
06:99:6d:16:46:ca:04:22:9f:29:65:a5:0a:2c:23:54:45:15:
d9:8f:ca:6f:80:ff:50:94:6a:a7:82:06:ca:43:f7:07:6a:c8:
a1:45:86:b9:f0:69:48:88:c0:aa:fb:b7:2c:6e:34:23:aa:ae:
c8:2a:ba:b9:90:27:df:bf:45:e2:dc:e1:3b:59:42:f0:7b:3b:
48:45:a6:79:d7:6d:49:37:f5:9e:53:f0:ee:4d:4e:38:fc:80:
f1:e2:1d:25:ba:13:3a:95:e2:e6:9a:f9:92:37:d0:a4:28:f8:
74:a1:b5:7c:ba:35:f7:65:4a:75:99:7f:4a:fc:3a:d8:03:21:
46:5a:72:3a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+qUPr/dP3/oFvI+Lbqp3iZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZiY2JkYjZmZDM5ZTc2ZjAwNDg0MDEyZTEzMTQ2YjIxODc1
NWMzZmIwHhcNMjYwNzI4MjAwMTAxWhcNMjYwNzI5MjAwMTAxWjAzMTEwLwYDVQQD
EygxOWIyZjFlYTg1ZmRkOGM0M2E0NjMxMDkxZmRmZjFmZTU5NWQ1NGU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqp7deox+QREKyXUeZ9dnjJIChGa5
E3JOiOONZD+qLZzMq2QIyohzMlALOX8P20truTFVCpKoOQq7jB36JTRTTvRW7KZ0
8GJSZVUPfaLtn5wBm7PG6Meuzez7IgJJVUA08JDGHCDFRGHQw+aHg2E5p75+K+lc
TmkEehlcO2f3Tkz84mUyf4V0QgthOPzoralJpc/2LWnwIXhADGzQQ3smb0hT6dxo
Wh+gzTKQh5+84owkoG9x5xCBt+wa4KR8Frzq+qmwJKjlJwZKTSIhsjmfCquSqoQo
CDDAGmvmCH05sV6BW98XFjETQ0WIKPJNUF3loBLConq1IsFmDFy0UPh7hwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBmy8eqF/djEOkYxCR/f8f5ZXVToMB8GA1UdIwQY
MBaAFGvL22/TnnbwBIQBLhMUayGHVcP7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYTh2YmI5T2VkdkFFaEFFdUV4UnJJWWRWd19zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi83NGQ4NzYtMDVhOC00YjEwLTkwZTIt
YzlkYTAzMGFmMzI2LzEvYTh2YmI5T2VkdkFFaEFFdUV4UnJJWWRWd19zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMi83NGQ4NzYtMDVhOC00YjEwLTkwZTItYzlkYTAzMGFmMzI2
LzEvYTh2YmI5T2VkdkFFaEFFdUV4UnJJWWRWd19zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjPt5TKir
r+9nbJ2GRd9lh/kn9mUhia0icxfHUPl7Yu4OJr41sHJW5KM141THu9hbvLL4Rs7E
BbJw13k5rpCqOzuZB8r5cW2leyCNSCtdEguljlTeLIH3u+NwfyUTxujTdJ9kyWR+
15qsAjqaT9+29mYVIcEd8IpOOpuZ9SWiBpltFkbKBCKfKWWlCiwjVEUV2Y/Kb4D/
UJRqp4IGykP3B2rIoUWGufBpSIjAqvu3LG40I6quyCq6uZAn379F4tzhO1lC8Hs7
SEWmeddtSTf1nlPw7k1OOPyA8eIdJboTOpXi5pr5kjfQpCj4dKG1fLo192VKdZl/
Svw62AMhRlpyOg==
-----END CERTIFICATE-----
Generated at Wed Jul 29 05:27:41 2026 by rpki-client