Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/d0be06-ef5f-4418-af1c-320936288e95/1/668NIPmOOiBVDJltdCkmiPDSJ50.mft
File: 668NIPmOOiBVDJltdCkmiPDSJ50.mft (raw, json)
Hash identifier: h9DCXZng0EuynUpPaczqO+sQnHonpQbEHSiDC8ZsC7k=
Subject key identifier: BC:DB:5A:02:7B:0A:44:5F:7E:40:73:AC:63:0D:A8:C4:F3:F3:18:E0
Authority key identifier: EB:AF:0D:20:F9:8E:3A:20:55:0C:99:6D:74:29:26:88:F0:D2:27:9D
Certificate issuer: /CN=ebaf0d20f98e3a20550c996d74292688f0d2279d
Certificate serial: 019F916D85F5F0968B4445097672EA36AF57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/668NIPmOOiBVDJltdCkmiPDSJ50.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/d0be06-ef5f-4418-af1c-320936288e95/1/668NIPmOOiBVDJltdCkmiPDSJ50.mft
Manifest number: 01A3
Signing time: Fri 24 Jul 2026 00:01:41 +0000
Manifest this update: Fri 24 Jul 2026 00:01:41 +0000
Manifest next update: Sat 25 Jul 2026 00:01:41 +0000
Files and hashes: 1: 668NIPmOOiBVDJltdCkmiPDSJ50.crl (hash: PdFQ3L1AEJWY5mu/UoYcOvLQ4E1nToltpYxOfuEC5zs=)
2: 8_uN9lxayPNFYSFMe_-SzdqsN_M.roa (hash: JquMORB08SkqUpDd0r0GoDrQiAxCIucTbEwQ0tt/Va0=)
3: EgUddJnQyW-DZo-6cboASv4IDkM.roa (hash: E6KKUo7CLQIRbYpxq6kq88AYxp+VGIoTBpmzfke9TAA=)
4: SEYQgtC_8BplrZD7grL5ljlcID0.roa (hash: Ee29iLIQ6Fe9LUgXTWVjmo6kKFtR4CoXYo22/zo9Gpw=)
5: VpPugUwpNHHib5991tPCGdRefFY.roa (hash: EpUcGsNtANn2I92T+Rtp83mAtSBCb2jhc++YQOzThrE=)
6: vcuseHHUp2SFcc7WFCquL547C34.roa (hash: W+undj5Tz3EQlz8nELOD/EX3UtN6Yso7VOiTqtTp3ys=)
7: vk3vIZrZ9FMklVLLHWzL1-UixoU.roa (hash: tn/h/KlQHmIkGxmpVq1uDx8JRv/7qIwfuJJhsLuiJGY=)
8: zRMtSyG0erquHg8eDcLfOh4BpSs.roa (hash: fv01yx8YQE61hN1VLmCbWMtgYoNsmN10wZe2YdF/txM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/d0be06-ef5f-4418-af1c-320936288e95/1/668NIPmOOiBVDJltdCkmiPDSJ50.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/d0be06-ef5f-4418-af1c-320936288e95/1/668NIPmOOiBVDJltdCkmiPDSJ50.mft
rsync://rpki.ripe.net/repository/DEFAULT/668NIPmOOiBVDJltdCkmiPDSJ50.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:6d:85:f5:f0:96:8b:44:45:09:76:72:ea:36:af:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebaf0d20f98e3a20550c996d74292688f0d2279d
Validity
Not Before: Jul 24 00:01:41 2026 GMT
Not After : Jul 25 00:01:41 2026 GMT
Subject: CN=bcdb5a027b0a445f7e4073ac630da8c4f3f318e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:62:3f:4c:9a:29:97:58:93:be:c8:8e:04:bc:
6c:ba:75:17:bd:c0:c3:6c:95:8c:8a:54:1d:bc:ec:
c5:fb:db:2e:04:09:0a:23:b4:41:a3:d7:69:42:20:
65:61:96:7d:3f:ab:38:e2:19:3b:ab:f4:a0:05:be:
1c:a9:aa:4e:19:a8:3a:6c:bf:34:55:95:1a:bd:61:
23:49:c5:6c:5b:65:78:96:62:a5:97:2a:53:19:86:
21:b6:ca:e1:6d:90:8e:fd:24:0d:35:01:95:81:d4:
41:8a:a1:42:d7:4c:27:57:ba:6f:d0:f0:cd:91:de:
4f:1c:b8:4a:92:cb:b6:9d:e5:6b:87:46:36:79:2a:
3d:de:fd:fc:ab:5d:1e:06:a5:d8:90:b0:2c:48:4e:
85:42:6c:f3:f8:d9:16:e4:15:21:37:f2:7f:f2:6a:
d5:a3:d3:96:0c:36:d1:20:ac:70:ca:93:1b:2b:a7:
6d:e6:cc:13:2c:c4:92:6a:8b:4c:68:06:82:ac:b4:
07:9d:ce:9a:20:0d:c3:94:30:94:37:96:73:91:4c:
48:6e:08:fb:d2:ab:e3:95:00:0d:dc:d0:77:a0:14:
e6:d9:72:dd:5f:2a:04:75:8f:c9:3d:4a:52:ce:ca:
39:3c:e7:37:10:86:4c:0c:3c:96:23:56:06:41:fa:
88:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:DB:5A:02:7B:0A:44:5F:7E:40:73:AC:63:0D:A8:C4:F3:F3:18:E0
X509v3 Authority Key Identifier:
keyid:EB:AF:0D:20:F9:8E:3A:20:55:0C:99:6D:74:29:26:88:F0:D2:27:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/668NIPmOOiBVDJltdCkmiPDSJ50.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/d0be06-ef5f-4418-af1c-320936288e95/1/668NIPmOOiBVDJltdCkmiPDSJ50.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/d0be06-ef5f-4418-af1c-320936288e95/1/668NIPmOOiBVDJltdCkmiPDSJ50.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:75:ef:50:f6:9e:e2:bc:6a:ec:b8:51:73:e8:ea:2a:fc:5d:
b9:d7:4a:05:9d:c0:30:53:18:82:55:87:93:db:88:ab:65:cf:
94:db:70:fc:44:3c:a0:e1:1f:19:f3:49:32:05:ab:6f:cf:2e:
13:dd:14:6f:ca:4a:cd:be:76:ca:8e:89:a5:a8:9e:d5:35:2a:
10:7a:f0:27:20:28:e1:04:d6:77:83:54:3c:be:21:64:40:66:
af:5b:25:29:8c:d1:ab:aa:94:4e:3d:2b:2d:b5:f7:aa:d0:8a:
4a:36:1a:4f:35:82:4d:2c:f8:a3:11:c7:42:91:d1:84:a7:40:
02:f7:74:e5:ca:86:ff:6f:56:12:4f:3b:3a:7d:2b:a8:37:19:
8a:f3:36:a6:2f:ac:2f:52:5d:c5:4e:06:dd:8c:88:34:c9:f5:
d3:1b:13:5c:b7:20:da:8e:a4:c2:83:3d:b6:4f:f0:73:84:67:
6c:8c:df:8f:09:9b:7f:15:85:2d:28:8c:f5:93:62:77:a5:1b:
06:2e:39:a8:b7:f0:7c:1e:e0:a6:81:86:69:5e:25:57:e3:20:
e9:64:48:4f:df:fa:4e:d5:c2:22:49:a2:71:65:e0:eb:c7:39:
2e:27:41:35:d4:7e:3e:8e:f0:bc:be:d9:5d:ae:d2:27:d7:c8:
c1:28:91:bc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+RbYX18JaLREUJdnLqNq9XMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGViYWYwZDIwZjk4ZTNhMjA1NTBjOTk2ZDc0MjkyNjg4ZjBk
MjI3OWQwHhcNMjYwNzI0MDAwMTQxWhcNMjYwNzI1MDAwMTQxWjAzMTEwLwYDVQQD
EyhiY2RiNWEwMjdiMGE0NDVmN2U0MDczYWM2MzBkYThjNGYzZjMxOGUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh2I/TJopl1iTvsiOBLxsunUXvcDD
bJWMilQdvOzF+9suBAkKI7RBo9dpQiBlYZZ9P6s44hk7q/SgBb4cqapOGag6bL80
VZUavWEjScVsW2V4lmKllypTGYYhtsrhbZCO/SQNNQGVgdRBiqFC10wnV7pv0PDN
kd5PHLhKksu2neVrh0Y2eSo93v38q10eBqXYkLAsSE6FQmzz+NkW5BUhN/J/8mrV
o9OWDDbRIKxwypMbK6dt5swTLMSSaotMaAaCrLQHnc6aIA3DlDCUN5ZzkUxIbgj7
0qvjlQAN3NB3oBTm2XLdXyoEdY/JPUpSzso5POc3EIZMDDyWI1YGQfqIzwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLzbWgJ7CkRffkBzrGMNqMTz8xjgMB8GA1UdIwQY
MBaAFOuvDSD5jjogVQyZbXQpJojw0iedMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNjY4TklQbU9PaUJWREpsdGRDa21pUERTSjUwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC9kMGJlMDYtZWY1Zi00NDE4LWFmMWMt
MzIwOTM2Mjg4ZTk1LzEvNjY4TklQbU9PaUJWREpsdGRDa21pUERTSjUwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNC9kMGJlMDYtZWY1Zi00NDE4LWFmMWMtMzIwOTM2Mjg4ZTk1
LzEvNjY4TklQbU9PaUJWREpsdGRDa21pUERTSjUwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeXXvUPae
4rxq7LhRc+jqKvxduddKBZ3AMFMYglWHk9uIq2XPlNtw/EQ8oOEfGfNJMgWrb88u
E90Ub8pKzb52yo6Jpaie1TUqEHrwJyAo4QTWd4NUPL4hZEBmr1slKYzRq6qUTj0r
LbX3qtCKSjYaTzWCTSz4oxHHQpHRhKdAAvd05cqG/29WEk87On0rqDcZivM2pi+s
L1JdxU4G3YyINMn10xsTXLcg2o6kwoM9tk/wc4RnbIzfjwmbfxWFLSiM9ZNid6Ub
Bi45qLfwfB7gpoGGaV4lV+Mg6WRIT9/6TtXCIkmicWXg68c5LidBNdR+Po7wvL7Z
Xa7SJ9fIwSiRvA==
-----END CERTIFICATE-----
Generated at Fri Jul 24 04:55:44 2026 by rpki-client