Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/bd9e55-d20a-4259-b712-d7582589bb59/1/A7sK13ZWE5U7krbL9M2pP5wTcuY.mft
File: A7sK13ZWE5U7krbL9M2pP5wTcuY.mft (raw, json)
Hash identifier: xpSaPzblqCOMHMpRpNLg9u0BHMVIJzRzT/TCyEC/TYA=
Subject key identifier: 75:CD:5E:22:91:AE:FF:BC:1E:E4:F9:F5:FA:65:0C:FA:91:10:25:FD
Authority key identifier: 03:BB:0A:D7:76:56:13:95:3B:92:B6:CB:F4:CD:A9:3F:9C:13:72:E6
Certificate issuer: /CN=03bb0ad7765613953b92b6cbf4cda93f9c1372e6
Certificate serial: 019FA7BD92EE2FE588C5E2F680AF08C81018
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A7sK13ZWE5U7krbL9M2pP5wTcuY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/bd9e55-d20a-4259-b712-d7582589bb59/1/A7sK13ZWE5U7krbL9M2pP5wTcuY.mft
Manifest number: 0656
Signing time: Tue 28 Jul 2026 08:00:46 +0000
Manifest this update: Tue 28 Jul 2026 08:00:46 +0000
Manifest next update: Wed 29 Jul 2026 08:00:46 +0000
Files and hashes: 1: 8ysjWfo50oYB18bxQ9D9a3-kZCE.asa (hash: 3Bf1TDm5M4w9EIZ76rBYWXtw2Bws6ycg1lO/t+ClFIU=)
2: A7sK13ZWE5U7krbL9M2pP5wTcuY.crl (hash: s6MCkt1b2OV8KR0Gl/T3VD51hLZnR6Ft3u0BYocOCtg=)
3: DBrxR8mTi6SEhBmvb30k8Eb8j2s.roa (hash: h24c3qKtryXONntLsae9vJY3swqsjyg/ugcW2+IoENk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/bd9e55-d20a-4259-b712-d7582589bb59/1/A7sK13ZWE5U7krbL9M2pP5wTcuY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/bd9e55-d20a-4259-b712-d7582589bb59/1/A7sK13ZWE5U7krbL9M2pP5wTcuY.mft
rsync://rpki.ripe.net/repository/DEFAULT/A7sK13ZWE5U7krbL9M2pP5wTcuY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 08:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a7:bd:92:ee:2f:e5:88:c5:e2:f6:80:af:08:c8:10:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03bb0ad7765613953b92b6cbf4cda93f9c1372e6
Validity
Not Before: Jul 28 08:00:46 2026 GMT
Not After : Jul 29 08:00:46 2026 GMT
Subject: CN=75cd5e2291aeffbc1ee4f9f5fa650cfa911025fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:a4:28:5d:87:1c:68:9a:27:10:3d:b1:33:7a:
c4:db:b6:26:61:be:09:3b:c9:b1:68:23:db:e1:48:
0d:94:9e:50:5f:ad:d1:b4:47:46:f6:2b:2f:be:8f:
6a:bf:46:ef:3c:89:ba:02:67:c2:13:59:32:9b:7c:
0e:11:af:31:75:3b:cf:5d:82:db:cd:7b:29:80:65:
64:1a:44:96:51:38:c7:bd:9f:3b:38:7f:a0:92:72:
69:65:28:d7:e8:af:1c:1c:f6:da:9d:43:97:dc:f0:
f4:cf:8c:83:5b:b1:d3:ea:df:42:09:8b:80:a8:44:
f0:77:6d:3c:eb:17:5e:db:21:5a:27:e7:3a:aa:77:
28:08:03:11:df:29:9c:42:d0:15:c1:4c:4b:60:f1:
85:f7:46:2f:c0:a0:12:36:98:ce:d5:69:21:3c:9f:
a6:fe:78:3a:82:49:4b:9f:44:d1:8e:c1:cf:2a:d4:
c6:77:84:7a:81:99:5f:9e:ae:92:5d:ba:0c:81:6a:
82:aa:ea:30:70:32:d8:d3:fe:bc:08:22:2f:3c:4a:
54:e8:09:9b:d8:75:96:92:38:19:52:b3:e3:9b:6f:
24:b7:2d:ea:ef:98:66:6c:97:03:83:cc:bd:d1:cb:
d8:01:72:45:f1:c5:b8:17:88:4b:0d:e7:a4:b8:d3:
da:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:CD:5E:22:91:AE:FF:BC:1E:E4:F9:F5:FA:65:0C:FA:91:10:25:FD
X509v3 Authority Key Identifier:
keyid:03:BB:0A:D7:76:56:13:95:3B:92:B6:CB:F4:CD:A9:3F:9C:13:72:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A7sK13ZWE5U7krbL9M2pP5wTcuY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/bd9e55-d20a-4259-b712-d7582589bb59/1/A7sK13ZWE5U7krbL9M2pP5wTcuY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/bd9e55-d20a-4259-b712-d7582589bb59/1/A7sK13ZWE5U7krbL9M2pP5wTcuY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:2e:aa:5d:2e:5e:34:76:ee:17:91:32:c0:86:6d:9f:c6:75:
a1:f3:a9:29:59:80:39:e3:0a:96:26:bb:72:81:f5:eb:27:ec:
78:cb:b4:5e:e8:aa:9a:db:af:1f:c2:e8:3b:c1:c3:19:16:2e:
a5:06:c0:19:c0:d6:bc:fe:bd:19:b8:a0:1c:84:bc:e2:e7:ff:
62:aa:9b:17:87:b2:e0:4b:a0:49:a8:ff:f8:b8:f0:0c:51:4b:
22:f2:16:db:00:f3:4b:79:90:0f:0d:4e:e2:f4:62:7b:1d:18:
05:31:ae:78:6e:c7:ed:51:25:8d:9d:e3:83:05:93:5f:01:b9:
09:13:c3:36:46:f9:b6:1c:51:e7:fb:d1:d8:bf:17:16:81:39:
19:ee:f5:27:6a:72:89:35:5a:e0:55:b5:22:6d:34:f9:24:59:
75:be:1e:33:34:30:e5:69:cc:cc:9d:a3:57:18:46:d3:34:9c:
a3:34:03:ee:4e:e8:05:2b:d9:4b:0f:37:c6:c1:7c:92:bb:e4:
42:62:de:fc:6b:82:ba:e8:1f:7d:2a:55:47:03:fd:3c:43:d7:
b0:a1:e8:31:bb:1b:f3:5e:ab:1e:91:ac:f1:6a:41:8d:e6:e4:
58:83:d2:32:77:fb:30:98:2b:9c:9b:95:4f:36:ae:ad:fd:c0:
9c:59:d5:0a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+nvZLuL+WIxeL2gK8IyBAYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAzYmIwYWQ3NzY1NjEzOTUzYjkyYjZjYmY0Y2RhOTNmOWMx
MzcyZTYwHhcNMjYwNzI4MDgwMDQ2WhcNMjYwNzI5MDgwMDQ2WjAzMTEwLwYDVQQD
Eyg3NWNkNWUyMjkxYWVmZmJjMWVlNGY5ZjVmYTY1MGNmYTkxMTAyNWZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyqQoXYccaJonED2xM3rE27YmYb4J
O8mxaCPb4UgNlJ5QX63RtEdG9isvvo9qv0bvPIm6AmfCE1kym3wOEa8xdTvPXYLb
zXspgGVkGkSWUTjHvZ87OH+gknJpZSjX6K8cHPbanUOX3PD0z4yDW7HT6t9CCYuA
qETwd2086xde2yFaJ+c6qncoCAMR3ymcQtAVwUxLYPGF90YvwKASNpjO1WkhPJ+m
/ng6gklLn0TRjsHPKtTGd4R6gZlfnq6SXboMgWqCquowcDLY0/68CCIvPEpU6Amb
2HWWkjgZUrPjm28kty3q75hmbJcDg8y90cvYAXJF8cW4F4hLDeekuNPa0QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHXNXiKRrv+8HuT59fplDPqRECX9MB8GA1UdIwQY
MBaAFAO7Ctd2VhOVO5K2y/TNqT+cE3LmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQTdzSzEzWldFNVU3a3JiTDlNMnBQNXdUY3VZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi9iZDllNTUtZDIwYS00MjU5LWI3MTIt
ZDc1ODI1ODliYjU5LzEvQTdzSzEzWldFNVU3a3JiTDlNMnBQNXdUY3VZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNi9iZDllNTUtZDIwYS00MjU5LWI3MTItZDc1ODI1ODliYjU5
LzEvQTdzSzEzWldFNVU3a3JiTDlNMnBQNXdUY3VZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiy6qXS5e
NHbuF5EywIZtn8Z1ofOpKVmAOeMKlia7coH16yfseMu0XuiqmtuvH8LoO8HDGRYu
pQbAGcDWvP69GbigHIS84uf/YqqbF4ey4EugSaj/+LjwDFFLIvIW2wDzS3mQDw1O
4vRiex0YBTGueG7H7VEljZ3jgwWTXwG5CRPDNkb5thxR5/vR2L8XFoE5Ge71J2py
iTVa4FW1Im00+SRZdb4eMzQw5WnMzJ2jVxhG0zScozQD7k7oBSvZSw83xsF8krvk
QmLe/GuCuugffSpVRwP9PEPXsKHoMbsb816rHpGs8WpBjebkWIPSMnf7MJgrnJuV
Tzaurf3AnFnVCg==
-----END CERTIFICATE-----
Generated at Tue Jul 28 16:06:01 2026 by rpki-client