Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/ed69dc-80d7-4336-a22d-848af698d0d8/1/g6yI8BcMv-RGz9MaWCPN4OCTGZo.mft
File: g6yI8BcMv-RGz9MaWCPN4OCTGZo.mft (raw, json)
Hash identifier: 7rXf6azFEs0E8l8KevfXfnvAiKOYlL6sgK/vB/ThlgE=
Subject key identifier: A2:93:1D:FD:A7:3D:DC:4D:B3:48:51:D8:EC:21:B0:C1:F6:6C:CF:DD
Authority key identifier: 83:AC:88:F0:17:0C:BF:E4:46:CF:D3:1A:58:23:CD:E0:E0:93:19:9A
Certificate issuer: /CN=83ac88f0170cbfe446cfd31a5823cde0e093199a
Certificate serial: 019FACACB50F6E9E9605D666D07C211BFE4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g6yI8BcMv-RGz9MaWCPN4OCTGZo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/ed69dc-80d7-4336-a22d-848af698d0d8/1/g6yI8BcMv-RGz9MaWCPN4OCTGZo.mft
Manifest number: 1969
Signing time: Wed 29 Jul 2026 07:00:27 +0000
Manifest this update: Wed 29 Jul 2026 07:00:27 +0000
Manifest next update: Thu 30 Jul 2026 07:00:27 +0000
Files and hashes: 1: 4otQnggN5_uQC9wKi00qa0eySrY.roa (hash: mMnLCC58FrEpo9AcseP6Ttc1YSWB7rt8x7N2xaBJU6E=)
2: g6yI8BcMv-RGz9MaWCPN4OCTGZo.crl (hash: VAWWEPZGaENW3OyZ2OvUwyZmCaMW6lcDSB20av2FEOk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/ed69dc-80d7-4336-a22d-848af698d0d8/1/g6yI8BcMv-RGz9MaWCPN4OCTGZo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/ed69dc-80d7-4336-a22d-848af698d0d8/1/g6yI8BcMv-RGz9MaWCPN4OCTGZo.mft
rsync://rpki.ripe.net/repository/DEFAULT/g6yI8BcMv-RGz9MaWCPN4OCTGZo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:ac:b5:0f:6e:9e:96:05:d6:66:d0:7c:21:1b:fe:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83ac88f0170cbfe446cfd31a5823cde0e093199a
Validity
Not Before: Jul 29 07:00:27 2026 GMT
Not After : Jul 30 07:00:27 2026 GMT
Subject: CN=a2931dfda73ddc4db34851d8ec21b0c1f66ccfdd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:f9:66:f1:e5:ef:cf:e2:77:54:39:82:97:1a:
57:5c:bf:35:13:82:d3:0d:a1:a4:d9:8c:d0:0b:82:
5f:4a:fb:85:39:c9:57:93:3d:eb:dc:40:b9:6f:99:
1f:a1:a2:1b:68:99:63:f9:1c:ca:e6:c3:09:26:ff:
01:a6:f8:08:6f:f4:ce:85:90:cf:dd:a1:d9:72:34:
b4:c1:64:08:b3:bd:f5:97:b9:75:18:6b:2e:c5:48:
20:ec:d3:d0:53:c5:c3:2f:77:c1:80:c9:16:22:53:
32:e7:63:fa:cf:ae:6f:48:c0:47:15:53:2a:95:65:
5f:b3:42:e2:a0:5e:50:5c:7c:9f:39:6c:72:b9:01:
7a:22:ed:f7:13:0c:8d:64:c0:d9:28:bc:b3:0b:7e:
7b:15:78:d9:0a:13:05:88:4d:a8:4d:f4:14:73:ab:
43:10:2f:8f:d4:e1:5a:d0:63:1f:7f:e1:3a:b3:6d:
0b:65:e9:1b:29:39:53:8b:6b:52:dd:94:04:17:de:
cc:ad:be:98:2e:ec:e7:b1:d2:1d:b8:f8:54:7b:f8:
17:74:7b:fd:2e:42:c4:e9:82:01:f6:cd:7c:4e:43:
b3:81:6e:f8:e1:5d:40:23:0f:97:f0:18:85:15:2e:
55:c2:30:b9:6b:df:c8:39:18:e8:43:97:ff:02:63:
4b:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:93:1D:FD:A7:3D:DC:4D:B3:48:51:D8:EC:21:B0:C1:F6:6C:CF:DD
X509v3 Authority Key Identifier:
keyid:83:AC:88:F0:17:0C:BF:E4:46:CF:D3:1A:58:23:CD:E0:E0:93:19:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g6yI8BcMv-RGz9MaWCPN4OCTGZo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ed69dc-80d7-4336-a22d-848af698d0d8/1/g6yI8BcMv-RGz9MaWCPN4OCTGZo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ed69dc-80d7-4336-a22d-848af698d0d8/1/g6yI8BcMv-RGz9MaWCPN4OCTGZo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:63:60:bd:60:16:1b:1c:6d:1d:68:d0:78:c9:47:5d:43:35:
58:d2:da:5b:34:fe:2a:bb:7b:4b:64:f0:29:26:fe:73:2c:3b:
e5:d6:b5:5e:30:b6:cb:01:6d:a0:ad:34:fe:1e:9b:00:ff:43:
d1:f5:63:f0:f1:41:ae:e6:dc:06:11:a2:e5:b6:f1:b1:9c:72:
63:4a:0e:a4:72:b6:58:67:a6:a0:5d:94:e8:c7:eb:46:58:a9:
af:d0:92:5e:90:33:31:4c:84:24:e3:56:4d:d0:c3:52:f9:d1:
44:ac:2c:68:a3:57:7a:2b:b1:9b:c6:70:35:f4:0e:6d:14:a1:
c7:9d:68:39:aa:cf:d4:e0:0d:fa:db:bc:4e:64:13:54:2c:40:
10:83:17:19:f0:7a:c9:c7:64:aa:81:a2:70:9c:68:6e:e8:0e:
72:6b:84:be:57:6f:7f:c7:a5:46:ad:6c:ca:01:32:39:c2:97:
56:1c:ef:e0:fc:ab:6e:dd:7b:3a:ee:8e:9a:41:5a:2e:49:1b:
b6:be:ff:60:e4:49:0b:e2:21:2d:9d:22:7d:48:a7:50:a0:4d:
17:37:ba:b7:9a:f9:60:b0:c1:7f:2b:ca:69:db:bf:29:77:f9:
f7:4f:c6:2c:0e:03:86:c3:87:8a:78:d2:43:fd:c9:64:9a:ee:
61:52:4b:b3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+srLUPbp6WBdZm0HwhG/5LMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgzYWM4OGYwMTcwY2JmZTQ0NmNmZDMxYTU4MjNjZGUwZTA5
MzE5OWEwHhcNMjYwNzI5MDcwMDI3WhcNMjYwNzMwMDcwMDI3WjAzMTEwLwYDVQQD
EyhhMjkzMWRmZGE3M2RkYzRkYjM0ODUxZDhlYzIxYjBjMWY2NmNjZmRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxflm8eXvz+J3VDmClxpXXL81E4LT
DaGk2YzQC4JfSvuFOclXkz3r3EC5b5kfoaIbaJlj+RzK5sMJJv8BpvgIb/TOhZDP
3aHZcjS0wWQIs731l7l1GGsuxUgg7NPQU8XDL3fBgMkWIlMy52P6z65vSMBHFVMq
lWVfs0LioF5QXHyfOWxyuQF6Iu33EwyNZMDZKLyzC357FXjZChMFiE2oTfQUc6tD
EC+P1OFa0GMff+E6s20LZekbKTlTi2tS3ZQEF97Mrb6YLuznsdIduPhUe/gXdHv9
LkLE6YIB9s18TkOzgW744V1AIw+X8BiFFS5VwjC5a9/IORjoQ5f/AmNLzwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKKTHf2nPdxNs0hR2OwhsMH2bM/dMB8GA1UdIwQY
MBaAFIOsiPAXDL/kRs/TGlgjzeDgkxmaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZzZ5SThCY012LVJHejlNYVdDUE40T0NUR1pvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9lZDY5ZGMtODBkNy00MzM2LWEyMmQt
ODQ4YWY2OThkMGQ4LzEvZzZ5SThCY012LVJHejlNYVdDUE40T0NUR1pvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMy9lZDY5ZGMtODBkNy00MzM2LWEyMmQtODQ4YWY2OThkMGQ4
LzEvZzZ5SThCY012LVJHejlNYVdDUE40T0NUR1pvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABWNgvWAW
GxxtHWjQeMlHXUM1WNLaWzT+Krt7S2TwKSb+cyw75da1XjC2ywFtoK00/h6bAP9D
0fVj8PFBrubcBhGi5bbxsZxyY0oOpHK2WGemoF2U6MfrRlipr9CSXpAzMUyEJONW
TdDDUvnRRKwsaKNXeiuxm8ZwNfQObRShx51oOarP1OAN+tu8TmQTVCxAEIMXGfB6
ycdkqoGicJxobugOcmuEvldvf8elRq1sygEyOcKXVhzv4Pyrbt17Ou6OmkFaLkkb
tr7/YORJC+IhLZ0ifUinUKBNFze6t5r5YLDBfyvKadu/KXf590/GLA4DhsOHinjS
Q/3JZJruYVJLsw==
-----END CERTIFICATE-----
Generated at Wed Jul 29 09:39:44 2026 by rpki-client