Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/b769e3-e215-44a5-8a2e-0e9df99d9339/1/aDei-kt4dzpmIA_qTFhQepLzEgM.mft
File: aDei-kt4dzpmIA_qTFhQepLzEgM.mft (raw, json)
Hash identifier: VRPmw7fLZ0SYsUNuGFxu/LmWRdRs9ml71bu1kK42xy4=
Subject key identifier: 70:D3:2E:A9:FE:3B:39:1E:4F:E6:57:31:A1:7B:83:E7:61:F5:30:3D
Authority key identifier: 68:37:A2:FA:4B:78:77:3A:66:20:0F:EA:4C:58:50:7A:92:F3:12:03
Certificate issuer: /CN=6837a2fa4b78773a66200fea4c58507a92f31203
Certificate serial: 019F932461DC4FE58E3F7EE60E97A2FB8E68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aDei-kt4dzpmIA_qTFhQepLzEgM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/b769e3-e215-44a5-8a2e-0e9df99d9339/1/aDei-kt4dzpmIA_qTFhQepLzEgM.mft
Manifest number: 0719
Signing time: Fri 24 Jul 2026 08:01:02 +0000
Manifest this update: Fri 24 Jul 2026 08:01:02 +0000
Manifest next update: Sat 25 Jul 2026 08:01:02 +0000
Files and hashes: 1: 4iNI26R-dGov0Tl2yDZjMNRLbfA.roa (hash: Mbs7tF0S261BkHnLQzWDasyVwFU+7wR+ArpU3P29zD8=)
2: aDei-kt4dzpmIA_qTFhQepLzEgM.crl (hash: 7tyxCk+PbNdvGtG2g7crhr/+M07zjut4C+uswWzhtLc=)
3: dE-JGprnxw6rfyqiHGwVstJ3B-s.roa (hash: P5+Wa8hBNG0OAzbkWpR9P6pZV6VqpgnBr0Mr7oMWvCQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/b769e3-e215-44a5-8a2e-0e9df99d9339/1/aDei-kt4dzpmIA_qTFhQepLzEgM.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/b769e3-e215-44a5-8a2e-0e9df99d9339/1/aDei-kt4dzpmIA_qTFhQepLzEgM.mft
rsync://rpki.ripe.net/repository/DEFAULT/aDei-kt4dzpmIA_qTFhQepLzEgM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:24:61:dc:4f:e5:8e:3f:7e:e6:0e:97:a2:fb:8e:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6837a2fa4b78773a66200fea4c58507a92f31203
Validity
Not Before: Jul 24 08:01:02 2026 GMT
Not After : Jul 25 08:01:02 2026 GMT
Subject: CN=70d32ea9fe3b391e4fe65731a17b83e761f5303d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:3d:24:7d:da:c1:26:c4:f0:c8:d8:0f:99:49:
f1:57:4c:e9:15:5b:c1:a9:2a:60:ff:3a:f4:0b:74:
6c:a9:b1:ac:47:20:da:6d:f9:ae:4d:6b:69:46:60:
2d:ff:46:6f:08:d7:1c:f5:d9:90:7b:8d:f6:0a:da:
f6:3e:2b:e3:ec:c8:da:a3:5c:ba:5f:0e:1a:79:45:
59:fb:72:02:28:d6:27:52:fd:31:b4:a9:38:e5:33:
fa:55:93:12:e4:74:92:4b:85:89:61:9e:21:c9:4e:
c9:7c:b0:74:b3:8c:55:5f:73:55:bb:2d:88:db:d9:
88:d8:66:fc:80:ae:d2:59:0f:25:fc:56:9f:46:9d:
8f:2c:b4:91:cd:5a:0a:62:87:a2:57:7a:b9:06:3f:
bf:4c:0e:a0:e6:e8:8e:56:95:3f:98:be:24:44:c9:
8a:ef:02:48:38:6b:fb:91:89:c4:49:17:be:47:3e:
67:cf:54:2f:b1:eb:09:21:97:08:30:6a:b1:33:84:
6c:d1:e4:26:c5:47:9b:8e:9a:8e:57:92:6a:9b:3a:
83:c6:b0:61:7d:68:cb:44:89:9b:6c:f6:a6:e0:64:
7b:9d:7c:8e:41:da:75:00:b5:e1:d9:bb:df:98:7d:
66:4e:ef:8c:ac:62:3e:eb:ba:ea:33:a7:40:9b:8e:
73:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:D3:2E:A9:FE:3B:39:1E:4F:E6:57:31:A1:7B:83:E7:61:F5:30:3D
X509v3 Authority Key Identifier:
keyid:68:37:A2:FA:4B:78:77:3A:66:20:0F:EA:4C:58:50:7A:92:F3:12:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aDei-kt4dzpmIA_qTFhQepLzEgM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/b769e3-e215-44a5-8a2e-0e9df99d9339/1/aDei-kt4dzpmIA_qTFhQepLzEgM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/b769e3-e215-44a5-8a2e-0e9df99d9339/1/aDei-kt4dzpmIA_qTFhQepLzEgM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:1f:05:75:ab:8a:3f:4e:90:c2:2c:dd:ff:64:e5:4a:49:07:
cf:ab:da:8f:91:e7:dd:89:de:45:86:17:ce:88:5d:54:ec:b1:
33:64:a9:26:6b:a9:bf:30:0f:32:ab:e8:39:d5:47:b0:fc:77:
b6:16:4b:dc:66:a5:ea:b7:c0:8a:d7:b9:c4:44:53:d0:af:a0:
0f:ab:e1:23:fb:ae:89:f3:40:0a:08:36:b9:75:c3:71:74:c3:
e3:7a:67:20:2f:81:68:6a:93:f2:d0:54:15:e6:a0:be:fd:94:
ca:f6:26:c9:fe:58:70:de:1b:37:50:c0:50:f3:ec:ed:a2:af:
95:98:1c:9b:54:6c:72:23:78:58:b7:65:3d:f0:d1:c0:dd:08:
e6:1d:be:79:37:b4:76:ff:93:4a:99:7d:f3:9a:aa:8a:de:ef:
2a:94:e6:15:bc:60:4c:46:6b:c7:80:92:88:74:18:17:28:50:
a5:49:18:6b:4f:b5:37:26:1a:7d:2a:2b:30:ef:ef:2f:47:94:
c1:f8:84:2b:e6:ec:70:08:ef:8d:11:84:52:c9:97:61:7a:80:
29:e0:a9:16:e7:cf:9e:f2:9d:ec:22:09:37:20:04:2c:d5:bd:
88:14:3a:33:36:3a:ac:94:c6:2c:11:49:14:51:eb:b6:cd:cf:
48:99:f2:50
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+TJGHcT+WOP37mDpei+45oMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY4MzdhMmZhNGI3ODc3M2E2NjIwMGZlYTRjNTg1MDdhOTJm
MzEyMDMwHhcNMjYwNzI0MDgwMTAyWhcNMjYwNzI1MDgwMTAyWjAzMTEwLwYDVQQD
Eyg3MGQzMmVhOWZlM2IzOTFlNGZlNjU3MzFhMTdiODNlNzYxZjUzMDNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsj0kfdrBJsTwyNgPmUnxV0zpFVvB
qSpg/zr0C3RsqbGsRyDabfmuTWtpRmAt/0ZvCNcc9dmQe432Ctr2Pivj7Mjao1y6
Xw4aeUVZ+3ICKNYnUv0xtKk45TP6VZMS5HSSS4WJYZ4hyU7JfLB0s4xVX3NVuy2I
29mI2Gb8gK7SWQ8l/FafRp2PLLSRzVoKYoeiV3q5Bj+/TA6g5uiOVpU/mL4kRMmK
7wJIOGv7kYnESRe+Rz5nz1QvsesJIZcIMGqxM4Rs0eQmxUebjpqOV5JqmzqDxrBh
fWjLRImbbPam4GR7nXyOQdp1ALXh2bvfmH1mTu+MrGI+67rqM6dAm45zlwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHDTLqn+OzkeT+ZXMaF7g+dh9TA9MB8GA1UdIwQY
MBaAFGg3ovpLeHc6ZiAP6kxYUHqS8xIDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYURlaS1rdDRkenBtSUFfcVRGaFFlcEx6RWdNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy9iNzY5ZTMtZTIxNS00NGE1LThhMmUt
MGU5ZGY5OWQ5MzM5LzEvYURlaS1rdDRkenBtSUFfcVRGaFFlcEx6RWdNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNy9iNzY5ZTMtZTIxNS00NGE1LThhMmUtMGU5ZGY5OWQ5MzM5
LzEvYURlaS1rdDRkenBtSUFfcVRGaFFlcEx6RWdNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALR8FdauK
P06Qwizd/2TlSkkHz6vaj5Hn3YneRYYXzohdVOyxM2SpJmupvzAPMqvoOdVHsPx3
thZL3Gal6rfAite5xERT0K+gD6vhI/uuifNACgg2uXXDcXTD43pnIC+BaGqT8tBU
Feagvv2UyvYmyf5YcN4bN1DAUPPs7aKvlZgcm1RsciN4WLdlPfDRwN0I5h2+eTe0
dv+TSpl985qqit7vKpTmFbxgTEZrx4CSiHQYFyhQpUkYa0+1NyYafSorMO/vL0eU
wfiEK+bscAjvjRGEUsmXYXqAKeCpFufPnvKd7CIJNyAELNW9iBQ6MzY6rJTGLBFJ
FFHrts3PSJnyUA==
-----END CERTIFICATE-----
Generated at Fri Jul 24 13:08:18 2026 by rpki-client