Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/c1a241-e95c-4f27-9992-624d87d82ee2/1/apBb7RAQVRrlUQyuXu4LuZnSh44.mft
File: apBb7RAQVRrlUQyuXu4LuZnSh44.mft (raw, json)
Hash identifier: xO5eNK/BYXvqjJxZy+EQ5wsfifmhBDBBeqeu3RfH/ac=
Subject key identifier: B2:6E:3A:BE:E9:FE:31:54:22:FC:00:5B:78:E3:4B:E6:32:DC:49:B6
Authority key identifier: 6A:90:5B:ED:10:10:55:1A:E5:51:0C:AE:5E:EE:0B:B9:99:D2:87:8E
Certificate issuer: /CN=6a905bed1010551ae5510cae5eee0bb999d2878e
Certificate serial: 019F8F7F9EC8AD0F2354FC542173ADA7666F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/apBb7RAQVRrlUQyuXu4LuZnSh44.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/c1a241-e95c-4f27-9992-624d87d82ee2/1/apBb7RAQVRrlUQyuXu4LuZnSh44.mft
Manifest number: 3F
Signing time: Thu 23 Jul 2026 15:02:13 +0000
Manifest this update: Thu 23 Jul 2026 15:02:13 +0000
Manifest next update: Fri 24 Jul 2026 15:02:13 +0000
Files and hashes: 1: 8WO4H3LLmQjh35Y1DhdVPcJaeWw.asa (hash: sduouSzb9jUwQP/768gaM8wQLqZouXh1WtsTxFHYtIM=)
2: apBb7RAQVRrlUQyuXu4LuZnSh44.crl (hash: MuH2RSl/edx1dL7Mt0zlOab8RHMPDITqoRSi18dI1Ng=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/c1a241-e95c-4f27-9992-624d87d82ee2/1/apBb7RAQVRrlUQyuXu4LuZnSh44.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/c1a241-e95c-4f27-9992-624d87d82ee2/1/apBb7RAQVRrlUQyuXu4LuZnSh44.mft
rsync://rpki.ripe.net/repository/DEFAULT/apBb7RAQVRrlUQyuXu4LuZnSh44.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:7f:9e:c8:ad:0f:23:54:fc:54:21:73:ad:a7:66:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a905bed1010551ae5510cae5eee0bb999d2878e
Validity
Not Before: Jul 23 15:02:13 2026 GMT
Not After : Jul 24 15:02:13 2026 GMT
Subject: CN=b26e3abee9fe315422fc005b78e34be632dc49b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:a1:3a:32:81:f6:65:10:c2:23:09:8e:03:b6:
6a:b7:a6:ea:5c:c9:86:17:8d:2e:d7:77:cf:c2:12:
92:3d:8b:3f:f1:f7:e0:91:eb:ba:dc:55:47:f1:fe:
d8:53:07:c1:ff:93:9a:bd:fe:6a:bf:f2:bb:bd:14:
ff:00:d6:87:73:4d:4b:c2:ba:58:92:4e:9d:bc:f4:
b9:e7:6e:91:d0:f6:23:94:88:fd:b9:39:f1:6c:b4:
83:9e:0b:cd:97:bf:f1:19:5a:16:05:eb:57:0f:fc:
95:e4:fc:19:1b:31:6b:d1:d0:c4:9f:c4:90:c6:0b:
e3:05:b3:2f:7b:e6:64:71:8d:8b:45:34:ae:03:b4:
54:99:06:33:3b:5e:08:85:a2:33:ac:29:22:a1:1d:
5b:9a:02:3a:46:55:32:17:67:a9:99:9b:f2:48:db:
15:83:7c:16:15:97:9e:28:4d:93:7c:1d:7c:70:55:
a9:eb:e3:f1:0d:65:91:62:8c:13:c6:fa:fa:a4:8a:
69:c7:3f:aa:ed:2d:33:3d:ff:d3:a4:2f:14:67:dd:
89:60:0a:df:bc:d4:1f:e6:1d:c4:c8:cf:d2:c2:44:
af:10:b5:ad:4e:3f:b5:5f:3b:c2:44:f8:4e:3d:c6:
1d:d2:0d:46:9f:66:25:49:96:45:ed:e5:a5:1e:a8:
2d:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:6E:3A:BE:E9:FE:31:54:22:FC:00:5B:78:E3:4B:E6:32:DC:49:B6
X509v3 Authority Key Identifier:
keyid:6A:90:5B:ED:10:10:55:1A:E5:51:0C:AE:5E:EE:0B:B9:99:D2:87:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/apBb7RAQVRrlUQyuXu4LuZnSh44.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/c1a241-e95c-4f27-9992-624d87d82ee2/1/apBb7RAQVRrlUQyuXu4LuZnSh44.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/c1a241-e95c-4f27-9992-624d87d82ee2/1/apBb7RAQVRrlUQyuXu4LuZnSh44.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:bd:9f:ca:5c:6a:a3:58:84:96:95:d7:74:08:22:f3:1d:f5:
26:74:ba:0c:0f:a3:3d:6e:41:8a:fb:28:78:24:50:e4:e7:f9:
c6:3f:ae:52:dd:e6:93:c3:0e:1c:31:93:b8:6a:9e:f4:93:6e:
3a:18:36:87:f7:dd:de:ff:07:40:81:d7:25:57:4c:7c:e9:b7:
83:09:47:8a:89:f8:83:c5:57:39:31:e8:7f:b4:17:fb:4b:2d:
e0:36:43:a1:31:58:9e:10:b3:c9:fe:d2:c0:dc:d3:55:95:b0:
24:1a:45:8e:4c:0a:da:35:8b:72:3a:54:16:88:36:05:8a:cd:
7e:58:58:31:88:52:24:e5:0c:56:7b:f4:5e:70:ca:5f:3e:b6:
a9:8f:16:db:74:8b:8b:a4:08:82:45:85:c0:b6:5c:0f:6c:4a:
9c:11:75:0a:92:e6:73:cb:6c:79:98:43:61:17:7e:7b:42:3c:
cc:48:78:c7:7a:aa:3d:de:19:4c:ef:ba:23:64:57:23:2f:6b:
fb:09:7d:67:e3:f6:58:84:38:bf:15:21:aa:77:4e:f8:a9:d9:
35:f1:01:b6:8e:ed:22:19:56:f1:36:44:12:6a:bd:d7:1f:15:
12:e5:17:ad:f0:0f:35:30:02:ae:ad:92:69:6e:b5:16:a3:e3:
d1:61:6c:fa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+Pf57IrQ8jVPxUIXOtp2ZvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZhOTA1YmVkMTAxMDU1MWFlNTUxMGNhZTVlZWUwYmI5OTlk
Mjg3OGUwHhcNMjYwNzIzMTUwMjEzWhcNMjYwNzI0MTUwMjEzWjAzMTEwLwYDVQQD
EyhiMjZlM2FiZWU5ZmUzMTU0MjJmYzAwNWI3OGUzNGJlNjMyZGM0OWI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApaE6MoH2ZRDCIwmOA7Zqt6bqXMmG
F40u13fPwhKSPYs/8ffgkeu63FVH8f7YUwfB/5Oavf5qv/K7vRT/ANaHc01LwrpY
kk6dvPS5526R0PYjlIj9uTnxbLSDngvNl7/xGVoWBetXD/yV5PwZGzFr0dDEn8SQ
xgvjBbMve+ZkcY2LRTSuA7RUmQYzO14IhaIzrCkioR1bmgI6RlUyF2epmZvySNsV
g3wWFZeeKE2TfB18cFWp6+PxDWWRYowTxvr6pIppxz+q7S0zPf/TpC8UZ92JYArf
vNQf5h3EyM/SwkSvELWtTj+1XzvCRPhOPcYd0g1Gn2YlSZZF7eWlHqgtMwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLJuOr7p/jFUIvwAW3jjS+Yy3Em2MB8GA1UdIwQY
MBaAFGqQW+0QEFUa5VEMrl7uC7mZ0oeOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYXBCYjdSQVFWUnJsVVF5dVh1NEx1Wm5TaDQ0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS9jMWEyNDEtZTk1Yy00ZjI3LTk5OTIt
NjI0ZDg3ZDgyZWUyLzEvYXBCYjdSQVFWUnJsVVF5dVh1NEx1Wm5TaDQ0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMS9jMWEyNDEtZTk1Yy00ZjI3LTk5OTItNjI0ZDg3ZDgyZWUy
LzEvYXBCYjdSQVFWUnJsVVF5dVh1NEx1Wm5TaDQ0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIb2fylxq
o1iElpXXdAgi8x31JnS6DA+jPW5BivsoeCRQ5Of5xj+uUt3mk8MOHDGTuGqe9JNu
Ohg2h/fd3v8HQIHXJVdMfOm3gwlHion4g8VXOTHof7QX+0st4DZDoTFYnhCzyf7S
wNzTVZWwJBpFjkwK2jWLcjpUFog2BYrNflhYMYhSJOUMVnv0XnDKXz62qY8W23SL
i6QIgkWFwLZcD2xKnBF1CpLmc8tseZhDYRd+e0I8zEh4x3qqPd4ZTO+6I2RXIy9r
+wl9Z+P2WIQ4vxUhqndO+KnZNfEBto7tIhlW8TZEEmq91x8VEuUXrfAPNTACrq2S
aW61FqPj0WFs+g==
-----END CERTIFICATE-----
Generated at Thu Jul 23 20:05:00 2026 by rpki-client