Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/c3289f-76e9-4893-9cd1-a65fbd830358/1/a-qEqFfnGtEjL5o2v0j40kqaA_s.mft
File: a-qEqFfnGtEjL5o2v0j40kqaA_s.mft (raw, json)
Hash identifier: RRHhd1GR8C2iVFhpYjiAqr3VUZhLReUOuRhEVcCgyk8=
Subject key identifier: D1:AF:2E:1F:AC:EB:A9:B5:B7:F5:46:3D:04:95:5A:CF:A1:D5:17:D0
Authority key identifier: 6B:EA:84:A8:57:E7:1A:D1:23:2F:9A:36:BF:48:F8:D2:4A:9A:03:FB
Certificate issuer: /CN=6bea84a857e71ad1232f9a36bf48f8d24a9a03fb
Certificate serial: 019FA898DD7710B3D544221416EA61E6AF46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a-qEqFfnGtEjL5o2v0j40kqaA_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/c3289f-76e9-4893-9cd1-a65fbd830358/1/a-qEqFfnGtEjL5o2v0j40kqaA_s.mft
Manifest number: 4C
Signing time: Tue 28 Jul 2026 12:00:18 +0000
Manifest this update: Tue 28 Jul 2026 12:00:18 +0000
Manifest next update: Wed 29 Jul 2026 12:00:18 +0000
Files and hashes: 1: 3VtMLjenBkjVF4KJLk56mIMtUJI.roa (hash: JPKF0zVe4MNxHQFbONgwYXIrgpkaeNZgOLOSWhU/gyE=)
2: a-qEqFfnGtEjL5o2v0j40kqaA_s.crl (hash: s3s/VsEy1x/FT5AieZ6ovvlR3M2BAK8/M2SmhLg+vKU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/c3289f-76e9-4893-9cd1-a65fbd830358/1/a-qEqFfnGtEjL5o2v0j40kqaA_s.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/c3289f-76e9-4893-9cd1-a65fbd830358/1/a-qEqFfnGtEjL5o2v0j40kqaA_s.mft
rsync://rpki.ripe.net/repository/DEFAULT/a-qEqFfnGtEjL5o2v0j40kqaA_s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 12:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:98:dd:77:10:b3:d5:44:22:14:16:ea:61:e6:af:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6bea84a857e71ad1232f9a36bf48f8d24a9a03fb
Validity
Not Before: Jul 28 12:00:18 2026 GMT
Not After : Jul 29 12:00:18 2026 GMT
Subject: CN=d1af2e1faceba9b5b7f5463d04955acfa1d517d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:97:26:73:81:f3:8f:ed:85:84:98:c6:eb:06:
21:99:bf:7a:a1:ba:b6:5f:37:d8:d2:e8:0e:4f:b2:
05:e7:96:fb:eb:f7:d6:28:59:23:38:21:49:e0:84:
f7:44:4f:e3:c5:80:08:a0:86:51:9a:3f:4c:8e:7c:
97:6e:1b:dd:ef:c1:d9:ff:19:ae:d9:17:96:e7:3a:
5b:ab:e4:c3:0e:57:63:d7:e6:95:75:c4:51:73:9a:
6b:a2:18:38:d6:7e:3c:b4:ac:1c:fe:65:00:e7:b9:
b0:02:f5:9b:a8:d2:08:2a:73:61:4c:f6:9a:88:67:
29:00:71:81:0e:b6:40:34:11:68:d6:ee:a5:56:d5:
cd:b5:e8:6b:95:fb:eb:3b:73:82:69:ed:64:3c:e5:
ca:9a:3c:a7:61:f7:98:20:84:dc:06:33:06:02:c9:
71:fa:b7:c5:13:44:3f:14:d2:16:a8:ae:3a:83:d5:
66:2d:24:40:d2:8b:c4:e0:b1:b2:d5:03:85:d2:f6:
4b:25:70:a0:a8:fd:95:c3:fc:77:66:a2:69:31:c7:
b4:66:93:cb:d2:81:9a:17:a8:d5:51:7f:b9:33:5d:
c3:43:7e:3a:db:c6:78:04:db:35:a6:76:dd:5b:06:
64:17:3a:09:0c:31:fe:a2:c8:87:21:38:5c:e0:07:
6f:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:AF:2E:1F:AC:EB:A9:B5:B7:F5:46:3D:04:95:5A:CF:A1:D5:17:D0
X509v3 Authority Key Identifier:
keyid:6B:EA:84:A8:57:E7:1A:D1:23:2F:9A:36:BF:48:F8:D2:4A:9A:03:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a-qEqFfnGtEjL5o2v0j40kqaA_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/c3289f-76e9-4893-9cd1-a65fbd830358/1/a-qEqFfnGtEjL5o2v0j40kqaA_s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/c3289f-76e9-4893-9cd1-a65fbd830358/1/a-qEqFfnGtEjL5o2v0j40kqaA_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:79:42:f4:88:a8:c9:a9:17:16:63:a3:e9:a6:eb:21:4b:db:
de:af:49:8d:c9:76:df:d4:1f:c2:01:16:db:ef:cb:50:c4:d3:
e9:34:48:4e:bb:e9:77:80:f0:20:7e:e0:b0:1a:16:d3:54:8e:
11:30:bb:7e:42:52:af:e3:ef:9c:d6:5e:99:3b:51:59:a9:62:
e0:84:ec:75:48:5c:bf:7d:6b:73:e8:27:d6:30:95:2e:ea:d8:
90:a9:a2:e4:35:e3:22:37:be:65:73:2e:71:d0:22:92:ef:37:
2f:4e:b9:b3:43:a3:da:5c:1f:d7:a3:7a:a1:50:b5:51:db:1f:
37:25:02:bc:05:98:19:ac:b9:ab:d5:73:3b:18:11:cf:89:0c:
5b:63:ef:2c:ab:f8:f2:d9:dc:54:d6:2f:60:b4:bd:cb:c6:7e:
57:6d:98:ea:02:60:82:18:5d:ef:0d:d8:d0:94:4b:39:e2:e0:
1d:bb:ae:ec:d7:8a:4e:b9:b1:39:d8:cd:b3:57:25:65:28:63:
6e:9a:66:ed:fb:98:fd:8a:54:69:f4:a8:f7:e5:40:54:a4:e8:
23:43:b4:bf:1c:b9:8c:9a:58:c5:46:24:04:30:11:f4:12:5f:
75:d0:b0:89:27:ec:63:99:c2:b9:33:01:61:48:0d:37:11:49:
de:30:cd:a5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+omN13ELPVRCIUFuph5q9GMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZiZWE4NGE4NTdlNzFhZDEyMzJmOWEzNmJmNDhmOGQyNGE5
YTAzZmIwHhcNMjYwNzI4MTIwMDE4WhcNMjYwNzI5MTIwMDE4WjAzMTEwLwYDVQQD
EyhkMWFmMmUxZmFjZWJhOWI1YjdmNTQ2M2QwNDk1NWFjZmExZDUxN2QwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs5cmc4Hzj+2FhJjG6wYhmb96obq2
XzfY0ugOT7IF55b76/fWKFkjOCFJ4IT3RE/jxYAIoIZRmj9MjnyXbhvd78HZ/xmu
2ReW5zpbq+TDDldj1+aVdcRRc5prohg41n48tKwc/mUA57mwAvWbqNIIKnNhTPaa
iGcpAHGBDrZANBFo1u6lVtXNtehrlfvrO3OCae1kPOXKmjynYfeYIITcBjMGAslx
+rfFE0Q/FNIWqK46g9VmLSRA0ovE4LGy1QOF0vZLJXCgqP2Vw/x3ZqJpMce0ZpPL
0oGaF6jVUX+5M13DQ34628Z4BNs1pnbdWwZkFzoJDDH+osiHIThc4AdvrwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNGvLh+s66m1t/VGPQSVWs+h1RfQMB8GA1UdIwQY
MBaAFGvqhKhX5xrRIy+aNr9I+NJKmgP7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYS1xRXFGZm5HdEVqTDVvMnYwajQwa3FhQV9zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC9jMzI4OWYtNzZlOS00ODkzLTljZDEt
YTY1ZmJkODMwMzU4LzEvYS1xRXFGZm5HdEVqTDVvMnYwajQwa3FhQV9zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNC9jMzI4OWYtNzZlOS00ODkzLTljZDEtYTY1ZmJkODMwMzU4
LzEvYS1xRXFGZm5HdEVqTDVvMnYwajQwa3FhQV9zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFXlC9Iio
yakXFmOj6abrIUvb3q9Jjcl239QfwgEW2+/LUMTT6TRITrvpd4DwIH7gsBoW01SO
ETC7fkJSr+PvnNZemTtRWali4ITsdUhcv31rc+gn1jCVLurYkKmi5DXjIje+ZXMu
cdAiku83L065s0Oj2lwf16N6oVC1UdsfNyUCvAWYGay5q9VzOxgRz4kMW2PvLKv4
8tncVNYvYLS9y8Z+V22Y6gJgghhd7w3Y0JRLOeLgHbuu7NeKTrmxOdjNs1clZShj
bppm7fuY/YpUafSo9+VAVKToI0O0vxy5jJpYxUYkBDAR9BJfddCwiSfsY5nCuTMB
YUgNNxFJ3jDNpQ==
-----END CERTIFICATE-----
Generated at Tue Jul 28 19:07:51 2026 by rpki-client