Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/632e89-8842-48b1-9dcf-2aeadb966b76/1/a7ptDw-bGff0POtD5zWaPYTpnZk.mft
File: a7ptDw-bGff0POtD5zWaPYTpnZk.mft (raw, json)
Hash identifier: s7U5G4Ub8GDafkSeT1T9sIZHzSmh1GMLnDD+xQor0Xo=
Subject key identifier: BA:F3:80:72:F7:47:A0:05:33:AC:91:97:29:C3:30:1C:EC:82:E7:0C
Authority key identifier: 6B:BA:6D:0F:0F:9B:19:F7:F4:3C:EB:43:E7:35:9A:3D:84:E9:9D:99
Certificate issuer: /CN=6bba6d0f0f9b19f7f43ceb43e7359a3d84e99d99
Certificate serial: 019F8FEC22DEE1173BF687546EDE3E4D7348
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a7ptDw-bGff0POtD5zWaPYTpnZk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/632e89-8842-48b1-9dcf-2aeadb966b76/1/a7ptDw-bGff0POtD5zWaPYTpnZk.mft
Manifest number: 19CF
Signing time: Thu 23 Jul 2026 17:00:45 +0000
Manifest this update: Thu 23 Jul 2026 17:00:45 +0000
Manifest next update: Fri 24 Jul 2026 17:00:45 +0000
Files and hashes: 1: 1FeE-xe_EaE3XH3Ygeo7C-eUXd8.asa (hash: 6bN7q1BQMUp1hzHOMNiQw/jYHXi6V75/bSdbFIE5Wyg=)
2: Iz0LT_Qe2YCy1jRQ8uxVx9mEXjU.roa (hash: sj0aNBI2t2YqU/+4g0EyWrm6gSCBWXNbag0SeNr1xIk=)
3: a7ptDw-bGff0POtD5zWaPYTpnZk.crl (hash: yS8sLjmSRElJRzrWRIxpu+6Q09gI6/SiKqE7p8wozLM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/632e89-8842-48b1-9dcf-2aeadb966b76/1/a7ptDw-bGff0POtD5zWaPYTpnZk.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/632e89-8842-48b1-9dcf-2aeadb966b76/1/a7ptDw-bGff0POtD5zWaPYTpnZk.mft
rsync://rpki.ripe.net/repository/DEFAULT/a7ptDw-bGff0POtD5zWaPYTpnZk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:ec:22:de:e1:17:3b:f6:87:54:6e:de:3e:4d:73:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6bba6d0f0f9b19f7f43ceb43e7359a3d84e99d99
Validity
Not Before: Jul 23 17:00:45 2026 GMT
Not After : Jul 24 17:00:45 2026 GMT
Subject: CN=baf38072f747a00533ac919729c3301cec82e70c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:5f:70:a8:c5:d8:20:82:eb:c8:7e:d4:3b:2d:
46:5e:ca:eb:4e:37:cd:d1:85:bb:e0:e0:e4:b5:0a:
ef:35:d0:28:02:fa:03:ab:fe:53:c7:af:55:3d:99:
d1:f1:5c:dd:26:53:1f:d2:aa:23:8c:bf:ba:5a:f3:
b4:a5:58:92:02:7e:f4:f7:41:1c:3f:06:a6:36:61:
b4:a7:60:1e:40:dd:47:6d:60:1e:79:87:10:f8:4d:
e8:8d:d1:23:31:84:56:24:ca:69:c1:b7:23:19:ed:
56:26:93:6a:f4:9b:16:32:31:9f:b4:ea:64:04:09:
e5:fc:7f:1d:09:e0:27:20:4f:37:21:3b:bc:e7:6c:
7c:15:3e:b9:e4:15:d6:8a:26:5a:98:88:f5:c8:d8:
46:e3:7c:d6:b2:2f:c6:f7:5a:d1:48:f4:17:69:50:
83:e1:1b:71:2c:a1:fe:63:b9:ef:90:e6:9f:e5:3d:
f9:8f:1b:4d:63:30:fb:75:aa:b0:96:da:7a:b7:83:
55:54:21:73:88:2c:f5:e3:55:64:0c:b8:04:ea:7a:
c3:66:19:16:bc:3c:bc:43:85:e0:84:37:ea:7d:dc:
87:2d:0f:20:a6:62:c6:c2:fb:ce:41:ca:86:f6:08:
64:66:3b:d7:4e:85:69:2f:05:af:72:b0:9b:08:9d:
82:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:F3:80:72:F7:47:A0:05:33:AC:91:97:29:C3:30:1C:EC:82:E7:0C
X509v3 Authority Key Identifier:
keyid:6B:BA:6D:0F:0F:9B:19:F7:F4:3C:EB:43:E7:35:9A:3D:84:E9:9D:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7ptDw-bGff0POtD5zWaPYTpnZk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/632e89-8842-48b1-9dcf-2aeadb966b76/1/a7ptDw-bGff0POtD5zWaPYTpnZk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/632e89-8842-48b1-9dcf-2aeadb966b76/1/a7ptDw-bGff0POtD5zWaPYTpnZk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:a2:38:04:5d:dc:71:f0:2c:62:77:8f:23:e5:01:ef:0c:93:
64:22:e3:51:d9:d4:ad:48:7b:38:eb:ce:8d:3a:20:8a:1b:5d:
30:d3:69:96:7e:6a:7f:1a:43:5b:0c:46:2d:a5:e2:af:6c:cc:
b3:65:04:ec:d9:71:58:3b:78:60:18:14:c8:d3:fe:60:20:df:
03:c1:28:15:94:01:9c:8f:b6:cb:ff:13:0e:c8:87:ad:57:62:
84:b2:92:bf:45:8b:0a:d4:5d:b6:6b:95:5a:6c:1e:58:ee:d5:
14:94:84:92:84:26:89:16:98:be:58:e0:d3:df:f5:8b:15:89:
cb:3f:ea:e5:0f:16:95:6c:a8:ac:98:9f:64:fd:5c:38:5b:6e:
d6:49:ca:86:e7:eb:6c:0a:0f:d9:e9:e2:76:ab:2a:4d:38:0b:
5e:ab:21:cd:e0:29:c7:97:49:c0:d7:38:18:b1:62:35:8c:70:
34:15:50:25:a0:e0:47:fa:f0:58:8c:25:cf:ee:f6:35:2b:d1:
6e:59:41:f2:11:61:11:60:b5:44:78:6b:b8:66:26:dd:9e:44:
43:c1:a5:3a:76:67:15:03:74:eb:3d:8c:27:43:44:b1:46:36:
03:36:04:8e:83:9a:2b:d2:11:53:43:23:9d:81:27:0f:90:3f:
85:95:2c:c8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+P7CLe4Rc79odUbt4+TXNIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZiYmE2ZDBmMGY5YjE5ZjdmNDNjZWI0M2U3MzU5YTNkODRl
OTlkOTkwHhcNMjYwNzIzMTcwMDQ1WhcNMjYwNzI0MTcwMDQ1WjAzMTEwLwYDVQQD
EyhiYWYzODA3MmY3NDdhMDA1MzNhYzkxOTcyOWMzMzAxY2VjODJlNzBjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiV9wqMXYIILryH7UOy1GXsrrTjfN
0YW74ODktQrvNdAoAvoDq/5Tx69VPZnR8VzdJlMf0qojjL+6WvO0pViSAn7090Ec
PwamNmG0p2AeQN1HbWAeeYcQ+E3ojdEjMYRWJMppwbcjGe1WJpNq9JsWMjGftOpk
BAnl/H8dCeAnIE83ITu852x8FT655BXWiiZamIj1yNhG43zWsi/G91rRSPQXaVCD
4RtxLKH+Y7nvkOaf5T35jxtNYzD7daqwltp6t4NVVCFziCz141VkDLgE6nrDZhkW
vDy8Q4XghDfqfdyHLQ8gpmLGwvvOQcqG9ghkZjvXToVpLwWvcrCbCJ2CGwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLrzgHL3R6AFM6yRlynDMBzsgucMMB8GA1UdIwQY
MBaAFGu6bQ8Pmxn39DzrQ+c1mj2E6Z2ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYTdwdER3LWJHZmYwUE90RDV6V2FQWVRwblprLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi82MzJlODktODg0Mi00OGIxLTlkY2Yt
MmFlYWRiOTY2Yjc2LzEvYTdwdER3LWJHZmYwUE90RDV6V2FQWVRwblprLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMi82MzJlODktODg0Mi00OGIxLTlkY2YtMmFlYWRiOTY2Yjc2
LzEvYTdwdER3LWJHZmYwUE90RDV6V2FQWVRwblprLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD6I4BF3c
cfAsYnePI+UB7wyTZCLjUdnUrUh7OOvOjTogihtdMNNpln5qfxpDWwxGLaXir2zM
s2UE7NlxWDt4YBgUyNP+YCDfA8EoFZQBnI+2y/8TDsiHrVdihLKSv0WLCtRdtmuV
WmweWO7VFJSEkoQmiRaYvljg09/1ixWJyz/q5Q8WlWyorJifZP1cOFtu1knKhufr
bAoP2enidqsqTTgLXqshzeApx5dJwNc4GLFiNYxwNBVQJaDgR/rwWIwlz+72NSvR
bllB8hFhEWC1RHhruGYm3Z5EQ8GlOnZnFQN06z2MJ0NEsUY2AzYEjoOaK9IRU0Mj
nYEnD5A/hZUsyA==
-----END CERTIFICATE-----
Generated at Thu Jul 23 20:02:56 2026 by rpki-client