Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/d7fadc-1ebf-42da-9b22-a60c20c8f717/1/ACyIZbwqB-Ss_rJjtNnPYkYP1SM.mft
File: ACyIZbwqB-Ss_rJjtNnPYkYP1SM.mft (raw, json)
Hash identifier: fX1FUc+1ta2d0FlD8SWz6qnD4HFLDpWK5rdBES+7Pss=
Subject key identifier: E4:88:8A:23:11:5F:4A:E0:F6:58:2D:A6:78:FF:AB:0D:04:D0:DB:9A
Authority key identifier: 00:2C:88:65:BC:2A:07:E4:AC:FE:B2:63:B4:D9:CF:62:46:0F:D5:23
Certificate issuer: /CN=002c8865bc2a07e4acfeb263b4d9cf62460fd523
Certificate serial: 019FA93DADD8ED1972E14AEFDD7797522AA4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ACyIZbwqB-Ss_rJjtNnPYkYP1SM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/d7fadc-1ebf-42da-9b22-a60c20c8f717/1/ACyIZbwqB-Ss_rJjtNnPYkYP1SM.mft
Manifest number: 1004
Signing time: Tue 28 Jul 2026 15:00:19 +0000
Manifest this update: Tue 28 Jul 2026 15:00:19 +0000
Manifest next update: Wed 29 Jul 2026 15:00:19 +0000
Files and hashes: 1: 2N3mFTgRGbmrw_7vATxV81Kq2dE.roa (hash: /FX8Wxrk3OXbha8szh70fBjGa2R8m1TJYbOuwC3Rhiw=)
2: ACyIZbwqB-Ss_rJjtNnPYkYP1SM.crl (hash: rn3M0HLeKGdN/PX0CCB/aYRBHLFK7Hd04/cQaMo9d2Y=)
3: dvLxlkeTDaml7PrAVt8aczTEUAc.roa (hash: mpKOb113r9nmfGJNe12CHy39u2fx6Hc3Jd1CYKZC8AI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/d7fadc-1ebf-42da-9b22-a60c20c8f717/1/ACyIZbwqB-Ss_rJjtNnPYkYP1SM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/d7fadc-1ebf-42da-9b22-a60c20c8f717/1/ACyIZbwqB-Ss_rJjtNnPYkYP1SM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ACyIZbwqB-Ss_rJjtNnPYkYP1SM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:3d:ad:d8:ed:19:72:e1:4a:ef:dd:77:97:52:2a:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=002c8865bc2a07e4acfeb263b4d9cf62460fd523
Validity
Not Before: Jul 28 15:00:19 2026 GMT
Not After : Jul 29 15:00:19 2026 GMT
Subject: CN=e4888a23115f4ae0f6582da678ffab0d04d0db9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:bc:74:72:36:c3:c7:fd:75:1b:dd:88:c3:27:
c6:f6:90:34:14:43:93:36:dd:f6:92:f8:b6:49:7a:
83:5b:82:aa:b7:3c:fa:d1:5a:6b:a5:df:a3:05:89:
40:b4:ec:b9:eb:71:80:f3:86:cd:b0:39:71:1e:70:
e1:fb:ae:ab:6d:a6:34:a7:9b:63:3d:f7:8b:3a:d2:
04:3c:ce:ef:02:fa:d0:f9:b7:82:14:1c:e3:15:9c:
3a:7c:25:86:ef:a0:df:22:68:72:ee:33:98:da:9d:
e6:9d:5e:81:f9:af:99:23:bb:78:90:c1:4e:c5:bc:
fe:2a:c6:7f:a9:0a:a2:7d:52:1a:81:bb:95:69:87:
9d:77:3e:3c:8b:4f:57:a9:cf:2d:05:4e:e7:af:ce:
ae:fb:4b:d4:f2:a6:9e:e3:b9:76:0f:b7:4b:41:57:
05:4b:9b:61:d2:ec:d9:0b:ba:3f:7c:29:7d:46:96:
a5:cf:05:ff:d4:2b:18:65:66:a6:56:ab:6d:54:e0:
17:94:c0:05:50:40:74:a8:f7:23:35:cb:ff:62:50:
aa:8a:c4:48:8f:98:4e:28:bf:cb:2b:9c:7c:1f:04:
4c:7b:22:b3:af:05:e2:e5:42:59:ca:95:c9:dc:2a:
c9:a7:6f:87:fb:e7:70:93:b2:e7:7e:ff:87:d0:4e:
d8:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:88:8A:23:11:5F:4A:E0:F6:58:2D:A6:78:FF:AB:0D:04:D0:DB:9A
X509v3 Authority Key Identifier:
keyid:00:2C:88:65:BC:2A:07:E4:AC:FE:B2:63:B4:D9:CF:62:46:0F:D5:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ACyIZbwqB-Ss_rJjtNnPYkYP1SM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/d7fadc-1ebf-42da-9b22-a60c20c8f717/1/ACyIZbwqB-Ss_rJjtNnPYkYP1SM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/d7fadc-1ebf-42da-9b22-a60c20c8f717/1/ACyIZbwqB-Ss_rJjtNnPYkYP1SM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:52:84:3f:2c:67:5a:2b:79:4d:bf:1c:80:bb:9b:9c:4e:41:
0e:49:be:56:e1:e2:f4:a6:80:34:ca:f2:b6:cc:fb:49:46:ca:
66:23:11:52:cd:86:63:36:24:f3:40:59:84:eb:6f:d9:67:1a:
a7:ab:9e:f0:26:4e:34:6c:ee:fb:c5:b2:3b:18:14:77:d5:c7:
b4:56:2a:5a:93:35:99:7d:9c:c3:9d:3a:42:86:73:d7:89:45:
7f:16:25:8e:6e:c4:c6:39:80:0c:e5:a5:a2:5c:58:a3:ba:da:
84:a8:05:f8:9f:2d:08:21:6a:fa:d7:8c:c2:39:4e:55:46:0e:
ad:f5:d0:30:ff:5b:4f:90:20:40:27:97:97:b3:68:e7:3a:1a:
41:78:7d:dd:9b:82:80:93:87:44:78:1c:d4:1e:0c:1b:31:96:
f9:df:32:5a:95:d5:46:96:4c:e8:91:2f:32:38:2d:ed:3d:06:
46:14:0a:9e:98:a6:7c:97:df:c5:44:74:4d:41:3a:f5:d0:01:
bc:49:69:ec:25:27:67:de:e8:eb:c2:e7:58:cc:3c:9a:34:c7:
98:52:af:37:6d:f9:b5:aa:b4:30:98:54:51:14:7a:d3:a5:28:
e2:57:a3:04:ea:0a:6a:96:9e:5f:9d:1e:8a:2a:da:3f:1a:62:
e8:dd:3d:47
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+pPa3Y7Rly4Urv3XeXUiqkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAwMmM4ODY1YmMyYTA3ZTRhY2ZlYjI2M2I0ZDljZjYyNDYw
ZmQ1MjMwHhcNMjYwNzI4MTUwMDE5WhcNMjYwNzI5MTUwMDE5WjAzMTEwLwYDVQQD
EyhlNDg4OGEyMzExNWY0YWUwZjY1ODJkYTY3OGZmYWIwZDA0ZDBkYjlhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxbx0cjbDx/11G92IwyfG9pA0FEOT
Nt32kvi2SXqDW4Kqtzz60Vprpd+jBYlAtOy563GA84bNsDlxHnDh+66rbaY0p5tj
PfeLOtIEPM7vAvrQ+beCFBzjFZw6fCWG76DfImhy7jOY2p3mnV6B+a+ZI7t4kMFO
xbz+KsZ/qQqifVIagbuVaYeddz48i09Xqc8tBU7nr86u+0vU8qae47l2D7dLQVcF
S5th0uzZC7o/fCl9RpalzwX/1CsYZWamVqttVOAXlMAFUEB0qPcjNcv/YlCqisRI
j5hOKL/LK5x8HwRMeyKzrwXi5UJZypXJ3CrJp2+H++dwk7Lnfv+H0E7YTwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOSIiiMRX0rg9lgtpnj/qw0E0NuaMB8GA1UdIwQY
MBaAFAAsiGW8KgfkrP6yY7TZz2JGD9UjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQUN5SVpid3FCLVNzX3JKanROblBZa1lQMVNNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi9kN2ZhZGMtMWViZi00MmRhLTliMjIt
YTYwYzIwYzhmNzE3LzEvQUN5SVpid3FCLVNzX3JKanROblBZa1lQMVNNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNi9kN2ZhZGMtMWViZi00MmRhLTliMjItYTYwYzIwYzhmNzE3
LzEvQUN5SVpid3FCLVNzX3JKanROblBZa1lQMVNNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT1KEPyxn
Wit5Tb8cgLubnE5BDkm+VuHi9KaANMrytsz7SUbKZiMRUs2GYzYk80BZhOtv2Wca
p6ue8CZONGzu+8WyOxgUd9XHtFYqWpM1mX2cw506QoZz14lFfxYljm7ExjmADOWl
olxYo7rahKgF+J8tCCFq+teMwjlOVUYOrfXQMP9bT5AgQCeXl7No5zoaQXh93ZuC
gJOHRHgc1B4MGzGW+d8yWpXVRpZM6JEvMjgt7T0GRhQKnpimfJffxUR0TUE69dAB
vElp7CUnZ97o68LnWMw8mjTHmFKvN235taq0MJhUURR606Uo4lejBOoKapaeX50e
iiraPxpi6N09Rw==
-----END CERTIFICATE-----
Generated at Tue Jul 28 23:28:02 2026 by rpki-client