Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/2ba25a-0abd-4550-bca4-0b7f15b509cb/1/p67mdiDZwK5j0pV4XJ2VbwY8IcM.mft
File: p67mdiDZwK5j0pV4XJ2VbwY8IcM.mft (raw, json)
Hash identifier: m8mSaD9lRfZFn/w9owJvkpUT4GFiCVWNix4BM43fLa4=
Subject key identifier: 37:E7:B4:96:00:65:06:6A:FC:D9:2B:00:88:85:10:0D:96:05:5E:14
Authority key identifier: A7:AE:E6:76:20:D9:C0:AE:63:D2:95:78:5C:9D:95:6F:06:3C:21:C3
Certificate issuer: /CN=a7aee67620d9c0ae63d295785c9d956f063c21c3
Certificate serial: 019FAAF52AAF65AD82720A5EC1EBF3B8BF93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p67mdiDZwK5j0pV4XJ2VbwY8IcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/2ba25a-0abd-4550-bca4-0b7f15b509cb/1/p67mdiDZwK5j0pV4XJ2VbwY8IcM.mft
Manifest number: 18A3
Signing time: Tue 28 Jul 2026 23:00:21 +0000
Manifest this update: Tue 28 Jul 2026 23:00:21 +0000
Manifest next update: Wed 29 Jul 2026 23:00:21 +0000
Files and hashes: 1: 5xWsJLB1rOrqA4DS2BwAZY-uRwg.roa (hash: JIN7iifBaNIG0jSwJOMYaoCb6Od3dAZF5qeWgFbXbiY=)
2: meAessKCpmwe8fOAgZe9YU9MTiw.roa (hash: 50h4K5YSYsz32EpIZ2NW1nDqeDeoSpSQ6hoQmydaO20=)
3: nSbiFuonVVedtf1Mjw5hb4zONuc.roa (hash: J6+zjZkHNoFOiT1a2hQNHKdZUcl8pIjHWjIqVGiuISk=)
4: p67mdiDZwK5j0pV4XJ2VbwY8IcM.crl (hash: Hy/Dx6qYDE71kS0a4hArWZhtqkiwF29/m6vVb2ELADI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/2ba25a-0abd-4550-bca4-0b7f15b509cb/1/p67mdiDZwK5j0pV4XJ2VbwY8IcM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/2ba25a-0abd-4550-bca4-0b7f15b509cb/1/p67mdiDZwK5j0pV4XJ2VbwY8IcM.mft
rsync://rpki.ripe.net/repository/DEFAULT/p67mdiDZwK5j0pV4XJ2VbwY8IcM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:f5:2a:af:65:ad:82:72:0a:5e:c1:eb:f3:b8:bf:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7aee67620d9c0ae63d295785c9d956f063c21c3
Validity
Not Before: Jul 28 23:00:21 2026 GMT
Not After : Jul 29 23:00:21 2026 GMT
Subject: CN=37e7b4960065066afcd92b008885100d96055e14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:fd:79:7b:a0:7e:21:6e:ef:21:4a:c4:ef:5e:
d3:77:e8:06:79:dc:f1:3a:15:77:20:af:46:25:ae:
ec:f6:72:ea:bf:4d:3c:71:07:17:75:1d:f6:35:d1:
08:43:19:ee:5c:15:bb:49:4e:23:97:ae:fd:fb:cd:
a3:a0:b2:89:b5:59:0c:1f:47:75:da:f2:0b:99:7c:
cd:a1:ac:38:4e:c5:4e:06:b1:0e:cb:df:e6:d2:fa:
f9:87:d5:ef:d4:15:47:30:7d:b7:07:e9:81:1e:c9:
80:d6:83:4e:ed:a5:c5:d8:d6:e8:d0:fa:37:6d:11:
49:40:34:98:1b:1d:d0:df:e3:0d:53:04:f0:f0:65:
d0:ad:17:c3:8e:74:91:d0:d8:8e:5b:cb:56:23:d7:
37:07:96:4c:d0:4e:25:81:ea:cb:b3:f3:fb:32:8a:
7a:d8:0c:e0:d1:e7:ce:27:83:38:58:a0:4a:b7:87:
f9:ac:96:2e:9d:3d:94:e8:27:16:34:4f:97:48:b7:
c2:8e:5f:66:c8:bf:a0:1b:e5:8e:be:f4:71:40:16:
98:4b:ff:ea:ab:e2:c2:b5:79:18:32:4e:0d:3a:40:
a6:58:3a:11:a9:13:17:5f:3a:cc:95:67:59:c5:53:
29:a5:b4:04:b2:f5:be:a9:94:b4:0d:10:94:98:fb:
c9:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:E7:B4:96:00:65:06:6A:FC:D9:2B:00:88:85:10:0D:96:05:5E:14
X509v3 Authority Key Identifier:
keyid:A7:AE:E6:76:20:D9:C0:AE:63:D2:95:78:5C:9D:95:6F:06:3C:21:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p67mdiDZwK5j0pV4XJ2VbwY8IcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/2ba25a-0abd-4550-bca4-0b7f15b509cb/1/p67mdiDZwK5j0pV4XJ2VbwY8IcM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/2ba25a-0abd-4550-bca4-0b7f15b509cb/1/p67mdiDZwK5j0pV4XJ2VbwY8IcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:e0:35:37:6b:9c:9e:ec:f0:b0:ba:29:0a:ef:4f:6b:5c:c5:
57:d0:dc:79:08:bb:a1:eb:d1:d1:9f:c9:88:c8:b8:ad:d6:fc:
3a:76:75:6d:55:36:ca:41:d1:c2:e8:ef:11:b1:48:9b:8b:00:
e0:25:ea:70:63:f7:1f:7d:b5:05:87:63:8e:72:fb:85:5d:fe:
35:83:04:7b:39:51:67:c3:ed:58:0e:0b:25:92:50:d8:71:c7:
e3:bf:be:0d:9d:31:71:f1:c8:32:4e:1c:18:cd:26:1d:69:b8:
c1:2e:77:d1:e4:97:d8:e7:82:a7:a1:b1:14:69:76:3d:34:25:
81:b8:48:89:57:12:96:85:dd:e6:c9:d1:1b:a2:f8:1e:4d:c3:
a0:87:77:e8:65:3d:0c:d3:c8:05:54:ec:61:95:5d:14:bd:72:
ed:93:26:b3:b9:6c:20:5d:90:cb:5d:d4:71:02:a1:bb:79:99:
d7:fc:ec:ac:2c:b1:12:74:e8:70:59:d0:86:83:3b:01:74:9b:
c9:1e:56:bf:5a:1f:12:3f:57:50:69:d5:b5:83:d9:44:57:3c:
89:f7:78:dc:f1:bf:6f:a6:49:3b:32:74:f1:ad:4f:b2:fc:ea:
04:52:b7:a6:17:d3:3c:f7:a5:41:22:8c:42:f8:38:fa:35:d7:
c3:24:60:02
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+q9SqvZa2CcgpewevzuL+TMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE3YWVlNjc2MjBkOWMwYWU2M2QyOTU3ODVjOWQ5NTZmMDYz
YzIxYzMwHhcNMjYwNzI4MjMwMDIxWhcNMjYwNzI5MjMwMDIxWjAzMTEwLwYDVQQD
EygzN2U3YjQ5NjAwNjUwNjZhZmNkOTJiMDA4ODg1MTAwZDk2MDU1ZTE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw/15e6B+IW7vIUrE717Td+gGedzx
OhV3IK9GJa7s9nLqv008cQcXdR32NdEIQxnuXBW7SU4jl679+82joLKJtVkMH0d1
2vILmXzNoaw4TsVOBrEOy9/m0vr5h9Xv1BVHMH23B+mBHsmA1oNO7aXF2Nbo0Po3
bRFJQDSYGx3Q3+MNUwTw8GXQrRfDjnSR0NiOW8tWI9c3B5ZM0E4lgerLs/P7Mop6
2Azg0efOJ4M4WKBKt4f5rJYunT2U6CcWNE+XSLfCjl9myL+gG+WOvvRxQBaYS//q
q+LCtXkYMk4NOkCmWDoRqRMXXzrMlWdZxVMppbQEsvW+qZS0DRCUmPvJywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDfntJYAZQZq/NkrAIiFEA2WBV4UMB8GA1UdIwQY
MBaAFKeu5nYg2cCuY9KVeFydlW8GPCHDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcDY3bWRpRFp3SzVqMHBWNFhKMlZid1k4SWNNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC8yYmEyNWEtMGFiZC00NTUwLWJjYTQt
MGI3ZjE1YjUwOWNiLzEvcDY3bWRpRFp3SzVqMHBWNFhKMlZid1k4SWNNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOC8yYmEyNWEtMGFiZC00NTUwLWJjYTQtMGI3ZjE1YjUwOWNi
LzEvcDY3bWRpRFp3SzVqMHBWNFhKMlZid1k4SWNNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEuA1N2uc
nuzwsLopCu9Pa1zFV9DceQi7oevR0Z/JiMi4rdb8OnZ1bVU2ykHRwujvEbFIm4sA
4CXqcGP3H321BYdjjnL7hV3+NYMEezlRZ8PtWA4LJZJQ2HHH47++DZ0xcfHIMk4c
GM0mHWm4wS530eSX2OeCp6GxFGl2PTQlgbhIiVcSloXd5snRG6L4Hk3DoId36GU9
DNPIBVTsYZVdFL1y7ZMms7lsIF2Qy13UcQKhu3mZ1/zsrCyxEnTocFnQhoM7AXSb
yR5Wv1ofEj9XUGnVtYPZRFc8ifd43PG/b6ZJOzJ08a1PsvzqBFK3phfTPPelQSKM
Qvg4+jXXwyRgAg==
-----END CERTIFICATE-----
Generated at Wed Jul 29 06:44:48 2026 by rpki-client