Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/f2b840-2c85-465b-8b93-5b5beb10513b/1/AcS3hNgWbovQ9H1yD95frsFkWzQ.mft
File: AcS3hNgWbovQ9H1yD95frsFkWzQ.mft (raw, json)
Hash identifier: ZeVoRVkI8Cu4WpaHaWtls6E8y5VrM5ZWtTmj0xpPtwk=
Subject key identifier: AF:AA:94:56:81:A2:FC:DD:3B:0C:D8:88:49:9C:7B:13:00:A6:3E:13
Authority key identifier: 01:C4:B7:84:D8:16:6E:8B:D0:F4:7D:72:0F:DE:5F:AE:C1:64:5B:34
Certificate issuer: /CN=01c4b784d8166e8bd0f47d720fde5faec1645b34
Certificate serial: 019FAB62EC71927E434FA833A1BC14276B15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AcS3hNgWbovQ9H1yD95frsFkWzQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/f2b840-2c85-465b-8b93-5b5beb10513b/1/AcS3hNgWbovQ9H1yD95frsFkWzQ.mft
Manifest number: 19D5
Signing time: Wed 29 Jul 2026 01:00:14 +0000
Manifest this update: Wed 29 Jul 2026 01:00:14 +0000
Manifest next update: Thu 30 Jul 2026 01:00:14 +0000
Files and hashes: 1: 4pvzkyd81z5apygQK8vaJvAnbgI.roa (hash: MyU3Vlx3nSujsQMgN+1tqcR+k9UJKWDtwwM9zel9Hmg=)
2: AcS3hNgWbovQ9H1yD95frsFkWzQ.crl (hash: abo6AZtaYIoICKZePApdKTio5+lwzgFW4sMcDaFSoRg=)
3: JtNLS6T33Iz4vUIQlrXh2Qn6brY.roa (hash: N9H/VOJgXqokBoKRK1wd1YbpfMsGShL1Jc64VDN5pRI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/f2b840-2c85-465b-8b93-5b5beb10513b/1/AcS3hNgWbovQ9H1yD95frsFkWzQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/f2b840-2c85-465b-8b93-5b5beb10513b/1/AcS3hNgWbovQ9H1yD95frsFkWzQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/AcS3hNgWbovQ9H1yD95frsFkWzQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:62:ec:71:92:7e:43:4f:a8:33:a1:bc:14:27:6b:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01c4b784d8166e8bd0f47d720fde5faec1645b34
Validity
Not Before: Jul 29 01:00:14 2026 GMT
Not After : Jul 30 01:00:14 2026 GMT
Subject: CN=afaa945681a2fcdd3b0cd888499c7b1300a63e13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:4f:76:4d:2b:eb:1c:af:8e:ea:cf:ab:c9:42:
3f:6a:e8:cc:12:90:70:e5:36:22:55:48:e6:f9:ce:
db:92:2b:c1:e5:9e:0f:38:25:0f:23:20:27:f1:89:
71:36:b4:f8:b6:81:d6:84:6e:84:59:51:51:0c:77:
43:17:6e:c7:c7:9c:fe:b2:16:ee:a7:49:61:aa:54:
6c:df:bf:45:21:33:72:23:e2:f2:43:1d:da:5e:d6:
b5:ca:1e:97:30:f6:5c:50:11:87:9f:7d:ff:ba:49:
93:f9:62:d3:e5:72:84:46:2d:0f:9f:94:93:ca:bc:
cf:39:f9:95:14:20:55:d5:d3:5a:89:6d:e0:7e:a5:
65:49:f8:32:04:46:4b:2f:33:9a:28:4a:1a:7b:d9:
62:1e:bf:05:fe:27:3f:92:2c:b5:8e:4a:38:a1:70:
aa:e0:8f:70:bb:70:79:60:eb:95:be:25:c7:07:7e:
3c:36:81:96:1d:71:d5:07:f1:fc:9f:68:a9:03:47:
10:28:74:da:5a:68:66:ff:87:9f:79:ea:9c:05:7e:
87:c4:ea:a1:75:d1:a7:41:2a:77:61:b6:dc:e3:43:
1f:24:a9:59:dd:e7:17:c9:fc:bb:c1:3b:61:4a:92:
67:f7:ed:d4:76:4a:fa:7f:f7:18:d0:11:a7:f2:c9:
4b:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:AA:94:56:81:A2:FC:DD:3B:0C:D8:88:49:9C:7B:13:00:A6:3E:13
X509v3 Authority Key Identifier:
keyid:01:C4:B7:84:D8:16:6E:8B:D0:F4:7D:72:0F:DE:5F:AE:C1:64:5B:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AcS3hNgWbovQ9H1yD95frsFkWzQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/f2b840-2c85-465b-8b93-5b5beb10513b/1/AcS3hNgWbovQ9H1yD95frsFkWzQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/f2b840-2c85-465b-8b93-5b5beb10513b/1/AcS3hNgWbovQ9H1yD95frsFkWzQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:18:60:17:9e:28:59:bc:9a:a4:02:b5:08:5e:d7:16:af:47:
a7:3a:3f:fb:30:60:03:45:a0:52:5c:c0:6a:5f:01:a6:43:b2:
a7:e3:e4:01:53:d9:9a:5c:51:4a:7a:4f:b9:9a:a1:ce:af:2f:
b7:0e:1b:42:1f:0a:9d:38:c6:ce:fd:84:fb:d4:58:d5:7e:bc:
9f:1e:81:fb:d8:36:48:76:0b:82:f3:af:76:f2:65:f4:b2:37:
40:ab:f4:97:fc:97:45:72:5d:18:e3:b0:48:1e:32:58:da:1c:
8c:e5:75:16:79:a8:ee:ed:0f:de:6a:1a:e1:90:c6:28:0a:8d:
b2:2d:f3:20:23:de:10:cb:81:d2:c6:65:bd:40:d8:cd:a9:48:
1f:af:a9:b2:58:9a:90:f2:a6:78:90:4d:73:2d:36:ec:0a:c6:
4e:ff:88:62:31:41:18:8d:30:94:55:93:b8:a6:07:53:cc:b9:
12:88:eb:4f:72:38:3b:0b:bd:0f:40:d0:44:48:f9:c4:61:f4:
68:f3:81:62:38:1d:00:7c:76:ef:8c:74:24:b9:72:28:6c:3d:
fe:b7:de:cc:a8:52:1a:db:69:ed:ab:7e:d1:49:8c:c9:fa:6f:
17:8d:47:8f:29:ec:e6:12:44:21:1a:7c:e0:b7:a4:77:16:19:
17:02:32:3a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+rYuxxkn5DT6gzobwUJ2sVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAxYzRiNzg0ZDgxNjZlOGJkMGY0N2Q3MjBmZGU1ZmFlYzE2
NDViMzQwHhcNMjYwNzI5MDEwMDE0WhcNMjYwNzMwMDEwMDE0WjAzMTEwLwYDVQQD
EyhhZmFhOTQ1NjgxYTJmY2RkM2IwY2Q4ODg0OTljN2IxMzAwYTYzZTEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsE92TSvrHK+O6s+ryUI/aujMEpBw
5TYiVUjm+c7bkivB5Z4POCUPIyAn8YlxNrT4toHWhG6EWVFRDHdDF27Hx5z+shbu
p0lhqlRs379FITNyI+LyQx3aXta1yh6XMPZcUBGHn33/ukmT+WLT5XKERi0Pn5ST
yrzPOfmVFCBV1dNaiW3gfqVlSfgyBEZLLzOaKEoae9liHr8F/ic/kiy1jko4oXCq
4I9wu3B5YOuVviXHB348NoGWHXHVB/H8n2ipA0cQKHTaWmhm/4efeeqcBX6HxOqh
ddGnQSp3Ybbc40MfJKlZ3ecXyfy7wTthSpJn9+3Udkr6f/cY0BGn8slLjwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK+qlFaBovzdOwzYiEmcexMApj4TMB8GA1UdIwQY
MBaAFAHEt4TYFm6L0PR9cg/eX67BZFs0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQWNTM2hOZ1dib3ZROUgxeUQ5NWZyc0ZrV3pRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS9mMmI4NDAtMmM4NS00NjViLThiOTMt
NWI1YmViMTA1MTNiLzEvQWNTM2hOZ1dib3ZROUgxeUQ5NWZyc0ZrV3pRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS9mMmI4NDAtMmM4NS00NjViLThiOTMtNWI1YmViMTA1MTNi
LzEvQWNTM2hOZ1dib3ZROUgxeUQ5NWZyc0ZrV3pRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvhhgF54o
WbyapAK1CF7XFq9Hpzo/+zBgA0WgUlzAal8BpkOyp+PkAVPZmlxRSnpPuZqhzq8v
tw4bQh8KnTjGzv2E+9RY1X68nx6B+9g2SHYLgvOvdvJl9LI3QKv0l/yXRXJdGOOw
SB4yWNocjOV1Fnmo7u0P3moa4ZDGKAqNsi3zICPeEMuB0sZlvUDYzalIH6+pslia
kPKmeJBNcy027ArGTv+IYjFBGI0wlFWTuKYHU8y5EojrT3I4Owu9D0DQREj5xGH0
aPOBYjgdAHx274x0JLlyKGw9/rfezKhSGttp7at+0UmMyfpvF41Hjyns5hJEIRp8
4LekdxYZFwIyOg==
-----END CERTIFICATE-----
Generated at Wed Jul 29 06:12:40 2026 by rpki-client