Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/aa06b6-e766-4ad9-aa7a-a4bbb1bc98c6/1/b_57IbYhg9Xj1K4bk_8AkJKCyRI.mft
File: b_57IbYhg9Xj1K4bk_8AkJKCyRI.mft (raw, json)
Hash identifier: uL//R/wYh6jjfyXLrCW5+zGp9wkjBPXOkdVRoxYMfsI=
Subject key identifier: 9A:E4:B2:D3:55:0B:AD:72:D0:A3:A0:33:C4:75:A1:9F:BD:34:BD:A9
Authority key identifier: 6F:FE:7B:21:B6:21:83:D5:E3:D4:AE:1B:93:FF:00:90:92:82:C9:12
Certificate issuer: /CN=6ffe7b21b62183d5e3d4ae1b93ff00909282c912
Certificate serial: 019FA7BD3A399B3B486180E1AD6E4A4EC51D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b_57IbYhg9Xj1K4bk_8AkJKCyRI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/aa06b6-e766-4ad9-aa7a-a4bbb1bc98c6/1/b_57IbYhg9Xj1K4bk_8AkJKCyRI.mft
Manifest number: 0A2C
Signing time: Tue 28 Jul 2026 08:00:23 +0000
Manifest this update: Tue 28 Jul 2026 08:00:23 +0000
Manifest next update: Wed 29 Jul 2026 08:00:23 +0000
Files and hashes: 1: CfaW0dz4EssFT4uPeycU_-E5pBA.roa (hash: 9n7jzXckIle53b2vQSpxdK5FHw2p4wSKjNLr3PO/AtM=)
2: b_57IbYhg9Xj1K4bk_8AkJKCyRI.crl (hash: 4D+WKtLNt+xwHA801fbZwAlh5Wu9hXPJA6g8/LdBG0w=)
3: ekljz6keL0jMzgXLL61-BbfOA_o.asa (hash: 6SVDUniDMkK7s4GO2Jl3pm29NsYfbDB+Ywpn4YNVyP0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/aa06b6-e766-4ad9-aa7a-a4bbb1bc98c6/1/b_57IbYhg9Xj1K4bk_8AkJKCyRI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/aa06b6-e766-4ad9-aa7a-a4bbb1bc98c6/1/b_57IbYhg9Xj1K4bk_8AkJKCyRI.mft
rsync://rpki.ripe.net/repository/DEFAULT/b_57IbYhg9Xj1K4bk_8AkJKCyRI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 07:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a7:bd:3a:39:9b:3b:48:61:80:e1:ad:6e:4a:4e:c5:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ffe7b21b62183d5e3d4ae1b93ff00909282c912
Validity
Not Before: Jul 28 08:00:23 2026 GMT
Not After : Jul 29 08:00:23 2026 GMT
Subject: CN=9ae4b2d3550bad72d0a3a033c475a19fbd34bda9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:8c:01:3c:ec:0a:98:4c:99:99:d5:de:08:96:
8c:7d:86:35:42:c6:96:0d:43:38:ba:64:d1:5b:90:
71:fb:fd:89:70:2a:23:48:bb:26:27:ac:e7:5c:b7:
43:50:ac:2e:9d:e5:7f:d8:3a:2b:6d:d2:a9:08:05:
e0:2a:c3:d8:2e:e5:46:0d:19:6d:c8:b9:4e:e1:f3:
a5:f7:16:dc:16:0b:42:2d:6b:d8:30:fb:9d:2c:a2:
0e:d9:00:53:83:b2:63:f8:0e:0d:17:06:6f:5b:45:
0e:82:80:53:1d:be:15:30:30:5c:65:16:2a:78:f7:
72:45:54:16:ae:b2:8d:6c:42:98:e2:d8:40:84:30:
3c:5a:1b:6b:e9:f1:97:53:f2:3f:6b:94:65:52:a5:
5b:45:e5:bf:f9:68:99:91:4a:f7:5f:c3:34:27:e6:
dc:2e:2c:a3:2d:03:c7:67:a5:31:de:ed:37:ba:97:
f0:7a:72:4f:88:22:4b:b7:e0:64:e5:11:94:99:a1:
66:92:03:85:98:45:18:f1:11:55:ac:39:f0:57:32:
d3:b8:f9:7b:ea:c2:41:0d:59:51:6e:01:63:22:83:
07:62:56:35:8a:fd:ff:26:2d:c7:4b:22:ae:d2:ef:
b7:60:bd:4e:96:25:2a:15:64:fb:89:37:c6:3d:de:
2c:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:E4:B2:D3:55:0B:AD:72:D0:A3:A0:33:C4:75:A1:9F:BD:34:BD:A9
X509v3 Authority Key Identifier:
keyid:6F:FE:7B:21:B6:21:83:D5:E3:D4:AE:1B:93:FF:00:90:92:82:C9:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b_57IbYhg9Xj1K4bk_8AkJKCyRI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/aa06b6-e766-4ad9-aa7a-a4bbb1bc98c6/1/b_57IbYhg9Xj1K4bk_8AkJKCyRI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/aa06b6-e766-4ad9-aa7a-a4bbb1bc98c6/1/b_57IbYhg9Xj1K4bk_8AkJKCyRI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:e4:2e:ea:fe:c7:93:6f:7a:7a:d5:6e:54:25:f3:fc:ea:2f:
87:f6:83:a6:1c:71:63:e4:f2:90:e9:de:4c:db:2b:47:b8:ea:
d5:28:5f:d5:59:fa:f3:e1:fb:a9:17:b5:ad:60:7a:e4:9c:07:
5a:03:9c:23:b8:97:13:98:bc:3c:39:cc:a4:68:22:bf:ae:11:
03:fc:92:5c:34:06:d9:46:c2:11:13:51:7c:8e:a6:76:9f:16:
91:76:9c:88:05:ed:f4:24:4e:9e:91:71:ef:88:94:c9:7d:fd:
06:ed:e0:b5:78:91:56:22:12:2c:15:df:e2:d1:65:a2:fd:06:
48:fe:79:f2:82:3a:0b:b0:39:44:af:c4:54:c8:78:93:ab:b3:
8b:eb:5d:9b:49:2a:94:b0:0a:76:04:1d:09:6f:f6:4c:74:94:
16:c5:a9:9b:f1:82:e6:32:e9:84:9c:d8:d2:f4:c4:eb:56:fb:
e1:d4:cb:7f:48:3b:c2:95:73:83:90:c0:ca:f0:ae:6e:20:d7:
4f:66:b0:9d:40:29:a1:01:33:ee:8e:8e:85:15:1a:a1:a4:ed:
fc:d4:45:8a:5c:a7:46:72:95:03:69:db:9e:35:93:22:30:48:
7f:04:9e:f8:72:08:ae:0a:0f:60:71:b6:67:fb:b7:76:cf:df:
b2:ba:37:f7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+nvTo5mztIYYDhrW5KTsUdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmZmU3YjIxYjYyMTgzZDVlM2Q0YWUxYjkzZmYwMDkwOTI4
MmM5MTIwHhcNMjYwNzI4MDgwMDIzWhcNMjYwNzI5MDgwMDIzWjAzMTEwLwYDVQQD
Eyg5YWU0YjJkMzU1MGJhZDcyZDBhM2EwMzNjNDc1YTE5ZmJkMzRiZGE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoYwBPOwKmEyZmdXeCJaMfYY1QsaW
DUM4umTRW5Bx+/2JcCojSLsmJ6znXLdDUKwuneV/2DorbdKpCAXgKsPYLuVGDRlt
yLlO4fOl9xbcFgtCLWvYMPudLKIO2QBTg7Jj+A4NFwZvW0UOgoBTHb4VMDBcZRYq
ePdyRVQWrrKNbEKY4thAhDA8Whtr6fGXU/I/a5RlUqVbReW/+WiZkUr3X8M0J+bc
LiyjLQPHZ6Ux3u03upfwenJPiCJLt+Bk5RGUmaFmkgOFmEUY8RFVrDnwVzLTuPl7
6sJBDVlRbgFjIoMHYlY1iv3/Ji3HSyKu0u+3YL1OliUqFWT7iTfGPd4sXQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJrkstNVC61y0KOgM8R1oZ+9NL2pMB8GA1UdIwQY
MBaAFG/+eyG2IYPV49SuG5P/AJCSgskSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYl81N0liWWhnOVhqMUs0YmtfOEFrSktDeVJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi9hYTA2YjYtZTc2Ni00YWQ5LWFhN2Et
YTRiYmIxYmM5OGM2LzEvYl81N0liWWhnOVhqMUs0YmtfOEFrSktDeVJJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNi9hYTA2YjYtZTc2Ni00YWQ5LWFhN2EtYTRiYmIxYmM5OGM2
LzEvYl81N0liWWhnOVhqMUs0YmtfOEFrSktDeVJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAruQu6v7H
k296etVuVCXz/Oovh/aDphxxY+TykOneTNsrR7jq1Shf1Vn68+H7qRe1rWB65JwH
WgOcI7iXE5i8PDnMpGgiv64RA/ySXDQG2UbCERNRfI6mdp8WkXaciAXt9CROnpFx
74iUyX39Bu3gtXiRViISLBXf4tFlov0GSP558oI6C7A5RK/EVMh4k6uzi+tdm0kq
lLAKdgQdCW/2THSUFsWpm/GC5jLphJzY0vTE61b74dTLf0g7wpVzg5DAyvCubiDX
T2awnUApoQEz7o6OhRUaoaTt/NRFilynRnKVA2nbnjWTIjBIfwSe+HIIrgoPYHG2
Z/u3ds/fsro39w==
-----END CERTIFICATE-----
Generated at Tue Jul 28 14:44:14 2026 by rpki-client