Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/efa18d-0907-4593-abb8-94802636bad9/1/aMXwmzqQOVDz_NGyVQhu3kh26xE.mft
File: aMXwmzqQOVDz_NGyVQhu3kh26xE.mft (raw, json)
Hash identifier: YuljDJTJD3V4IHlyM3QO4StgkJd4Tn+dSqw2lcHGtjA=
Subject key identifier: 91:F5:76:D4:CA:19:B7:6B:D8:65:01:95:CC:8A:F6:A0:5E:68:23:17
Authority key identifier: 68:C5:F0:9B:3A:90:39:50:F3:FC:D1:B2:55:08:6E:DE:48:76:EB:11
Certificate issuer: /CN=68c5f09b3a903950f3fcd1b255086ede4876eb11
Certificate serial: 019FAB9A638EEE71D005FD72760964F6DED0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aMXwmzqQOVDz_NGyVQhu3kh26xE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/efa18d-0907-4593-abb8-94802636bad9/1/aMXwmzqQOVDz_NGyVQhu3kh26xE.mft
Manifest number: 1928
Signing time: Wed 29 Jul 2026 02:00:49 +0000
Manifest this update: Wed 29 Jul 2026 02:00:49 +0000
Manifest next update: Thu 30 Jul 2026 02:00:49 +0000
Files and hashes: 1: HqknbCtl1Axe3TPw1P6jDONpLVc.roa (hash: ZnfnJYZ+e5B0J97RREAVHfbNjcFtOONy33iXAx75Pag=)
2: XUSo3Kod1tZHWF61VODjOx3wrpM.roa (hash: QhGQD15vAX85W4GYn0mpZU7ZappGzzCqkYs2qWxrAto=)
3: aMXwmzqQOVDz_NGyVQhu3kh26xE.crl (hash: woZIhXXygq8pbpajwSWlE04WNjM7CBzmP6yRAri5H/g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/efa18d-0907-4593-abb8-94802636bad9/1/aMXwmzqQOVDz_NGyVQhu3kh26xE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/efa18d-0907-4593-abb8-94802636bad9/1/aMXwmzqQOVDz_NGyVQhu3kh26xE.mft
rsync://rpki.ripe.net/repository/DEFAULT/aMXwmzqQOVDz_NGyVQhu3kh26xE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:9a:63:8e:ee:71:d0:05:fd:72:76:09:64:f6:de:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68c5f09b3a903950f3fcd1b255086ede4876eb11
Validity
Not Before: Jul 29 02:00:49 2026 GMT
Not After : Jul 30 02:00:49 2026 GMT
Subject: CN=91f576d4ca19b76bd8650195cc8af6a05e682317
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:1a:19:4c:8f:b7:a1:f3:92:33:87:89:6f:ce:
29:dd:3b:96:51:b2:93:44:13:62:1e:a7:30:89:5a:
2c:f6:95:44:24:87:78:78:50:7c:0c:53:e8:f8:df:
b9:32:df:1b:94:44:20:15:58:77:d1:67:7e:8a:86:
bd:74:19:17:a9:e3:a9:54:77:29:2d:ab:62:78:a6:
87:ec:59:29:3a:46:c8:fa:10:ae:a5:14:66:8f:94:
a3:ad:8e:0b:4c:1c:a7:52:4e:5e:1b:0b:07:87:e9:
81:a0:bb:b0:d0:87:f3:f1:41:1c:7c:57:94:dd:f3:
56:46:86:4b:3e:9b:64:b1:ef:f4:c7:40:e5:70:bb:
79:d3:a7:e5:c6:33:82:b1:26:36:25:84:61:f2:04:
e7:97:c6:0d:f6:b5:90:12:0e:23:ee:44:c4:1c:1d:
96:f6:8a:d6:4f:9c:c3:ed:ac:02:b6:7e:4c:63:cf:
e0:64:64:54:93:5a:47:70:e3:e9:68:f6:4e:cc:7f:
46:6f:ff:3b:d8:ee:10:66:b5:49:8c:48:83:d0:89:
a1:ac:97:52:64:14:8f:f0:46:d3:34:cd:38:49:c7:
67:e9:36:2a:a2:4d:1a:86:af:e7:1f:57:11:8c:68:
0e:fa:f8:53:b9:5e:6b:47:d5:69:c8:14:0e:5d:07:
52:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:F5:76:D4:CA:19:B7:6B:D8:65:01:95:CC:8A:F6:A0:5E:68:23:17
X509v3 Authority Key Identifier:
keyid:68:C5:F0:9B:3A:90:39:50:F3:FC:D1:B2:55:08:6E:DE:48:76:EB:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aMXwmzqQOVDz_NGyVQhu3kh26xE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/efa18d-0907-4593-abb8-94802636bad9/1/aMXwmzqQOVDz_NGyVQhu3kh26xE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/efa18d-0907-4593-abb8-94802636bad9/1/aMXwmzqQOVDz_NGyVQhu3kh26xE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:0a:8c:34:29:12:e9:6b:b9:c9:04:9f:12:d3:41:e5:e9:2c:
3c:5a:9d:f1:cf:6d:bd:95:8a:b9:d8:51:4d:52:06:32:f9:fb:
6e:a6:b4:a4:ab:77:0c:47:cf:b4:03:b0:2b:0f:7e:c5:b8:cc:
ba:30:bf:30:56:d5:32:f1:29:fe:de:cf:71:70:50:0c:f8:17:
2f:1a:87:95:32:e8:16:7f:83:17:74:47:0c:b2:1d:9d:9e:d0:
d3:20:88:32:7d:5a:92:04:10:c5:00:38:a4:cb:01:9f:3a:1e:
2c:ef:9e:e9:59:b7:ea:08:2e:3b:78:07:e5:42:88:78:ae:69:
99:79:1e:65:27:6b:d1:04:18:27:55:47:c6:5b:93:51:9f:0a:
a2:74:d8:b1:a5:2a:08:95:a0:f9:36:ff:44:01:41:88:28:69:
b2:2c:13:f1:cb:2d:e4:0f:24:81:50:8d:51:f6:ca:aa:34:24:
ee:c8:6a:d9:38:71:2a:bf:b7:fe:0a:92:81:14:ea:73:cd:0c:
ba:b1:d5:a9:f2:1e:67:1b:57:41:0a:63:16:c6:ef:d1:46:04:
02:00:1a:4a:00:0f:c5:48:fb:3f:77:3a:f3:55:51:69:d5:ca:
b8:51:e3:d6:fa:88:4a:34:9b:64:64:f1:41:d8:b2:32:49:4e:
f2:db:01:8d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+rmmOO7nHQBf1ydglk9t7QMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY4YzVmMDliM2E5MDM5NTBmM2ZjZDFiMjU1MDg2ZWRlNDg3
NmViMTEwHhcNMjYwNzI5MDIwMDQ5WhcNMjYwNzMwMDIwMDQ5WjAzMTEwLwYDVQQD
Eyg5MWY1NzZkNGNhMTliNzZiZDg2NTAxOTVjYzhhZjZhMDVlNjgyMzE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkRoZTI+3ofOSM4eJb84p3TuWUbKT
RBNiHqcwiVos9pVEJId4eFB8DFPo+N+5Mt8blEQgFVh30Wd+ioa9dBkXqeOpVHcp
LatieKaH7FkpOkbI+hCupRRmj5SjrY4LTBynUk5eGwsHh+mBoLuw0Ifz8UEcfFeU
3fNWRoZLPptkse/0x0DlcLt506flxjOCsSY2JYRh8gTnl8YN9rWQEg4j7kTEHB2W
9orWT5zD7awCtn5MY8/gZGRUk1pHcOPpaPZOzH9Gb/872O4QZrVJjEiD0ImhrJdS
ZBSP8EbTNM04Scdn6TYqok0ahq/nH1cRjGgO+vhTuV5rR9VpyBQOXQdSOQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJH1dtTKGbdr2GUBlcyK9qBeaCMXMB8GA1UdIwQY
MBaAFGjF8Js6kDlQ8/zRslUIbt5IdusRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYU1Yd216cVFPVkR6X05HeVZRaHUza2gyNnhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy9lZmExOGQtMDkwNy00NTkzLWFiYjgt
OTQ4MDI2MzZiYWQ5LzEvYU1Yd216cVFPVkR6X05HeVZRaHUza2gyNnhFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNy9lZmExOGQtMDkwNy00NTkzLWFiYjgtOTQ4MDI2MzZiYWQ5
LzEvYU1Yd216cVFPVkR6X05HeVZRaHUza2gyNnhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfgqMNCkS
6Wu5yQSfEtNB5eksPFqd8c9tvZWKudhRTVIGMvn7bqa0pKt3DEfPtAOwKw9+xbjM
ujC/MFbVMvEp/t7PcXBQDPgXLxqHlTLoFn+DF3RHDLIdnZ7Q0yCIMn1akgQQxQA4
pMsBnzoeLO+e6Vm36gguO3gH5UKIeK5pmXkeZSdr0QQYJ1VHxluTUZ8KonTYsaUq
CJWg+Tb/RAFBiChpsiwT8cst5A8kgVCNUfbKqjQk7shq2ThxKr+3/gqSgRTqc80M
urHVqfIeZxtXQQpjFsbv0UYEAgAaSgAPxUj7P3c681VRadXKuFHj1vqISjSbZGTx
QdiyMklO8tsBjQ==
-----END CERTIFICATE-----
Generated at Wed Jul 29 09:41:20 2026 by rpki-client