Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c7/6356b9-c49f-4b4d-8e29-362ffe8ee270/1/aRJCwzvC4unkWFCg_GSrLHUGpLg.mft
File: aRJCwzvC4unkWFCg_GSrLHUGpLg.mft (raw, json)
Hash identifier: xhcuhOMbzX9c4TQ7GBFTh9WUex1pBFRzgPknSbj9wXY=
Subject key identifier: 56:EE:34:5E:B4:89:B8:37:40:D3:CE:B4:A4:7F:04:E1:CC:7F:5D:F7
Authority key identifier: 69:12:42:C3:3B:C2:E2:E9:E4:58:50:A0:FC:64:AB:2C:75:06:A4:B8
Certificate issuer: /CN=691242c33bc2e2e9e45850a0fc64ab2c7506a4b8
Certificate serial: 01A1C6D6598492A2484A2201C7C05EF9BF75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aRJCwzvC4unkWFCg_GSrLHUGpLg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/6356b9-c49f-4b4d-8e29-362ffe8ee270/1/aRJCwzvC4unkWFCg_GSrLHUGpLg.mft
Manifest number: 19DF
Signing time: Tue 10 Nov 2026 19:01:38 +0000
Manifest this update: Tue 10 Nov 2026 19:01:38 +0000
Manifest next update: Wed 11 Nov 2026 19:01:38 +0000
Files and hashes: 1: 9Tx6X9m9kHnyZo6Sbb77ie6N9JU.roa (hash: 51qlFEt7ImYM42zkx6CqPj6U5NF6HAtJZkurWYKoa7k=)
2: AV7Zqoz_I8_VtA4jvx2_5ASct5c.roa (hash: atMPgRGqsPQYurIN2nF56uTQOvoNuMbY4V1WXvm2t6k=)
3: EzRGNzhdlKjrbsDuAmITDc0zggQ.roa (hash: Bi2YLEA9YF03NCwaBNKNXeFcw1yeMv46EtFHmDY/TH8=)
4: HFUXrWib3cLz8rTtStx7pLSts40.roa (hash: 96N/dVun4UvEatMwgA8wS1Cv0SN64AyZ/K5utVWayag=)
5: HG3YvVVl9lXqqG-gJlg1NjTaZAo.roa (hash: dSK/D5z2ZtFnegudAJnV9TUDuJyO1UlbvLNBkTDWBcg=)
6: YeiyJoy5H_MNeil65OjoObeNzwo.roa (hash: RcUl/pWFLN4opKw53YV9g0qIhTFEHzbUwIM8agvIUmk=)
7: aRJCwzvC4unkWFCg_GSrLHUGpLg.crl (hash: EYUlZifCkq+0Fg9g15FH30rTCUGgTSX9/VcfYLXtWNA=)
8: h6SMhG3P9zxf_dHX3xoxyNBMGR4.roa (hash: b0rWEYGwa7xjd8bh0IRkVhSdpTV7x20TYWLjgsw3Vkk=)
9: nQD1CGA0fFxqB5jFdVE9KyClo5c.roa (hash: 14Z5xwdLDF0hr7ZlyjxAbNr7/dynl3kWmXO/VVy34xQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/6356b9-c49f-4b4d-8e29-362ffe8ee270/1/aRJCwzvC4unkWFCg_GSrLHUGpLg.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/6356b9-c49f-4b4d-8e29-362ffe8ee270/1/aRJCwzvC4unkWFCg_GSrLHUGpLg.mft
rsync://rpki.ripe.net/repository/DEFAULT/aRJCwzvC4unkWFCg_GSrLHUGpLg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Nov 2026 16:12:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:c6:d6:59:84:92:a2:48:4a:22:01:c7:c0:5e:f9:bf:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=691242c33bc2e2e9e45850a0fc64ab2c7506a4b8
Validity
Not Before: Nov 10 19:01:38 2026 GMT
Not After : Nov 11 19:01:38 2026 GMT
Subject: CN=56ee345eb489b83740d3ceb4a47f04e1cc7f5df7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:4f:0b:d7:a7:98:87:a1:94:e4:d5:26:23:c0:
e3:3b:b7:1e:bf:fd:64:db:b9:90:9a:e5:26:c7:2b:
4a:48:b8:87:6e:29:4c:79:fc:76:0d:a4:59:5d:0c:
79:69:49:e1:b5:b4:61:68:dc:94:71:1f:37:77:46:
a3:2b:a4:2d:e9:c0:3a:d3:57:22:b8:5a:f9:30:ab:
95:71:a1:c2:cd:c1:4b:6b:d0:bc:f1:65:ce:a0:bc:
01:42:8d:0f:69:c8:95:5a:64:81:89:5e:9a:7d:c0:
09:a7:99:a8:eb:9a:1d:2e:79:29:a9:94:7a:00:5a:
88:43:06:96:6c:db:7a:45:1e:45:3f:43:c4:f6:43:
49:dd:ce:ea:cf:3a:67:9d:0b:19:d3:f5:36:75:09:
b6:a0:62:fb:7c:ef:95:1e:90:1f:e4:a1:a5:8c:70:
74:46:9c:81:4c:bc:2b:5b:f9:ed:f6:e0:c9:01:b5:
d8:cc:15:c4:fa:45:51:d2:09:9f:6c:5f:93:0d:d7:
f8:46:6c:e1:20:23:91:05:b1:da:eb:d9:26:4c:29:
5e:8a:b1:72:ac:78:32:69:73:e4:81:32:40:c5:64:
12:4e:50:22:df:1d:10:3d:90:e7:53:ca:e9:a8:62:
89:81:8e:0f:50:b1:68:3e:c6:6e:88:12:0f:45:cb:
f0:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:EE:34:5E:B4:89:B8:37:40:D3:CE:B4:A4:7F:04:E1:CC:7F:5D:F7
X509v3 Authority Key Identifier:
keyid:69:12:42:C3:3B:C2:E2:E9:E4:58:50:A0:FC:64:AB:2C:75:06:A4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aRJCwzvC4unkWFCg_GSrLHUGpLg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/6356b9-c49f-4b4d-8e29-362ffe8ee270/1/aRJCwzvC4unkWFCg_GSrLHUGpLg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/6356b9-c49f-4b4d-8e29-362ffe8ee270/1/aRJCwzvC4unkWFCg_GSrLHUGpLg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:b7:d5:ca:7e:03:11:13:52:ce:d1:bd:7a:42:31:f7:88:01:
85:3b:f8:48:c4:5e:87:b8:ef:d4:49:3d:33:0e:30:96:d4:eb:
6b:65:46:ff:00:53:f4:8f:d8:a2:1b:dd:3a:00:ce:4e:de:78:
e3:7b:6f:df:88:3d:e4:bb:f8:32:3b:91:62:2b:16:4e:d8:8e:
f6:21:91:72:15:7b:c3:cb:2f:fd:21:ad:ad:8e:2a:35:3e:66:
05:30:0d:79:e2:a0:97:f9:0a:4c:07:21:71:44:5e:77:db:5b:
a1:49:8c:09:cf:21:01:b4:3d:8e:28:ac:aa:93:22:c6:32:19:
82:c3:d9:99:07:2a:41:a4:7c:28:c3:c6:0a:3f:aa:0e:a7:d3:
03:26:dc:07:a5:db:7f:69:d0:88:95:4d:06:05:a1:d9:41:cc:
95:23:48:0b:35:ca:db:07:21:c0:a5:ce:ed:75:ad:08:f6:10:
ec:e6:ca:69:4b:37:65:fd:54:34:8f:65:ad:ce:26:14:f6:0e:
98:95:9f:12:c4:67:a3:2d:96:3b:b3:04:2c:ed:22:41:cc:a3:
53:bc:0f:64:02:e3:a0:e9:69:ac:76:7d:2a:39:b2:00:cc:26:
0c:51:9a:35:9e:a2:9b:dd:37:f8:b7:8d:8d:25:9d:66:34:c1:
1c:f5:f8:bb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaHG1lmEkqJISiIBx8Be+b91MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY5MTI0MmMzM2JjMmUyZTllNDU4NTBhMGZjNjRhYjJjNzUw
NmE0YjgwHhcNMjYxMTEwMTkwMTM4WhcNMjYxMTExMTkwMTM4WjAzMTEwLwYDVQQD
Eyg1NmVlMzQ1ZWI0ODliODM3NDBkM2NlYjRhNDdmMDRlMWNjN2Y1ZGY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw08L16eYh6GU5NUmI8DjO7cev/1k
27mQmuUmxytKSLiHbilMefx2DaRZXQx5aUnhtbRhaNyUcR83d0ajK6Qt6cA601ci
uFr5MKuVcaHCzcFLa9C88WXOoLwBQo0PaciVWmSBiV6afcAJp5mo65odLnkpqZR6
AFqIQwaWbNt6RR5FP0PE9kNJ3c7qzzpnnQsZ0/U2dQm2oGL7fO+VHpAf5KGljHB0
RpyBTLwrW/nt9uDJAbXYzBXE+kVR0gmfbF+TDdf4RmzhICORBbHa69kmTCleirFy
rHgyaXPkgTJAxWQSTlAi3x0QPZDnU8rpqGKJgY4PULFoPsZuiBIPRcvw6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFbuNF60ibg3QNPOtKR/BOHMf133MB8GA1UdIwQY
MBaAFGkSQsM7wuLp5FhQoPxkqyx1BqS4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYVJKQ3d6dkM0dW5rV0ZDZ19HU3JMSFVHcExnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy82MzU2YjktYzQ5Zi00YjRkLThlMjkt
MzYyZmZlOGVlMjcwLzEvYVJKQ3d6dkM0dW5rV0ZDZ19HU3JMSFVHcExnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy82MzU2YjktYzQ5Zi00YjRkLThlMjktMzYyZmZlOGVlMjcw
LzEvYVJKQ3d6dkM0dW5rV0ZDZ19HU3JMSFVHcExnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXrfVyn4D
ERNSztG9ekIx94gBhTv4SMReh7jv1Ek9Mw4wltTra2VG/wBT9I/YohvdOgDOTt54
43tv34g95Lv4MjuRYisWTtiO9iGRchV7w8sv/SGtrY4qNT5mBTANeeKgl/kKTAch
cURed9tboUmMCc8hAbQ9jiisqpMixjIZgsPZmQcqQaR8KMPGCj+qDqfTAybcB6Xb
f2nQiJVNBgWh2UHMlSNICzXK2wchwKXO7XWtCPYQ7ObKaUs3Zf1UNI9lrc4mFPYO
mJWfEsRnoy2WO7MELO0iQcyjU7wPZALjoOlprHZ9KjmyAMwmDFGaNZ6im903+LeN
jSWdZjTBHPX4uw==
-----END CERTIFICATE-----
Generated at Wed Nov 11 00:38:08 2026 by rpki-client