Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/233948-f9a3-4b44-a4a9-4149de528833/1/A61jZSMe15OWlAkgFJ33HAqgjh8.mft
File: A61jZSMe15OWlAkgFJ33HAqgjh8.mft (raw, json)
Hash identifier: Hl3uhOFf/Ca1Dkcq464XyWkT0GXL0UsNR3szQ8kyzBA=
Subject key identifier: AC:96:34:33:CC:2C:ED:50:63:55:D3:A9:04:90:8A:AD:BA:81:CB:BE
Authority key identifier: 03:AD:63:65:23:1E:D7:93:96:94:09:20:14:9D:F7:1C:0A:A0:8E:1F
Certificate issuer: /CN=03ad6365231ed79396940920149df71c0aa08e1f
Certificate serial: 019F93C8BA8B735861622647197B902F12F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A61jZSMe15OWlAkgFJ33HAqgjh8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/233948-f9a3-4b44-a4a9-4149de528833/1/A61jZSMe15OWlAkgFJ33HAqgjh8.mft
Manifest number: 0AA6
Signing time: Fri 24 Jul 2026 11:00:33 +0000
Manifest this update: Fri 24 Jul 2026 11:00:33 +0000
Manifest next update: Sat 25 Jul 2026 11:00:33 +0000
Files and hashes: 1: 1-9EYds5QZQE-vovjbt_drwBxnu4.roa (hash: ul50Tik7XID6y3g8duwa0RTiUsbpmAyvina9WBduoA0=)
2: A61jZSMe15OWlAkgFJ33HAqgjh8.crl (hash: Bm5OFKbolWhx8iZte5KN55CiCSSW5uj16U+dNbVzmrQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/233948-f9a3-4b44-a4a9-4149de528833/1/A61jZSMe15OWlAkgFJ33HAqgjh8.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/233948-f9a3-4b44-a4a9-4149de528833/1/A61jZSMe15OWlAkgFJ33HAqgjh8.mft
rsync://rpki.ripe.net/repository/DEFAULT/A61jZSMe15OWlAkgFJ33HAqgjh8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:c8:ba:8b:73:58:61:62:26:47:19:7b:90:2f:12:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03ad6365231ed79396940920149df71c0aa08e1f
Validity
Not Before: Jul 24 11:00:33 2026 GMT
Not After : Jul 25 11:00:33 2026 GMT
Subject: CN=ac963433cc2ced506355d3a904908aadba81cbbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:4f:9d:88:d6:6a:30:46:d4:ef:22:34:93:3c:
e6:87:56:c4:db:f6:d1:0b:06:5d:6c:a0:26:63:e8:
4a:72:0d:97:ce:bf:9b:5f:c6:d1:51:81:72:3a:23:
c6:be:b0:f1:08:88:ed:15:8c:c7:c0:14:48:13:df:
e3:fd:7a:25:a0:18:bd:8c:12:38:45:3f:0e:11:54:
ba:0f:62:2c:7c:05:b6:fe:55:a7:c8:af:ae:e5:66:
be:f3:88:b3:92:fb:5b:d4:1f:89:69:3a:d5:89:af:
98:c3:ca:cd:20:78:c7:b6:2d:31:8e:cc:e9:f2:c1:
b5:70:68:27:9e:af:03:db:22:2e:ba:5a:44:82:aa:
1a:a1:bf:b1:13:05:bb:b8:34:f8:70:3f:44:10:70:
8a:b2:f3:28:55:ca:7c:c5:d8:3b:6b:33:ac:ad:31:
91:7f:bf:61:47:c0:26:7e:9b:7a:c7:fe:a4:7e:da:
9b:f4:da:94:6d:ea:33:b9:22:10:c7:08:79:76:66:
22:67:6e:8e:dc:80:c9:e7:e4:f4:f3:51:87:59:2e:
14:38:b2:e9:58:7c:aa:d4:f3:29:42:ea:9a:67:ab:
7d:6e:21:d8:ef:7e:de:c5:60:b1:ce:ac:51:8d:c9:
d2:9b:12:23:fd:8b:06:94:e6:62:4b:b4:e1:73:b6:
47:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:96:34:33:CC:2C:ED:50:63:55:D3:A9:04:90:8A:AD:BA:81:CB:BE
X509v3 Authority Key Identifier:
keyid:03:AD:63:65:23:1E:D7:93:96:94:09:20:14:9D:F7:1C:0A:A0:8E:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A61jZSMe15OWlAkgFJ33HAqgjh8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/233948-f9a3-4b44-a4a9-4149de528833/1/A61jZSMe15OWlAkgFJ33HAqgjh8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/233948-f9a3-4b44-a4a9-4149de528833/1/A61jZSMe15OWlAkgFJ33HAqgjh8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:1d:2c:9a:f7:96:ae:b2:eb:b5:0c:4c:bb:8a:36:d1:ef:f5:
46:f3:d8:b1:f0:2b:af:b9:f7:56:a1:93:27:32:83:16:2f:01:
c1:8e:7a:25:92:4d:55:14:bb:05:f0:93:14:7d:95:7d:99:48:
8d:88:8b:93:48:d9:08:9d:24:90:c8:bd:b2:20:ab:da:53:56:
93:88:42:ca:6e:36:9c:c6:b1:c4:eb:e1:e8:de:30:62:0b:ef:
8f:cd:18:de:4b:80:df:61:65:ca:7a:56:43:e0:2e:58:83:47:
25:34:be:88:89:a0:ff:e8:04:21:74:84:fd:d5:dd:0f:7c:a6:
f4:96:58:8d:52:64:ea:0d:18:74:60:b5:e2:48:e3:de:66:15:
38:ca:5a:f9:8c:f3:fa:40:a4:82:97:95:d1:4b:8d:e5:e8:bc:
b0:1b:87:08:b2:a9:e2:de:ad:1d:ec:2e:8a:93:db:23:02:29:
f7:ae:dc:f1:13:d4:03:76:45:d0:59:a6:f9:df:a5:2c:c6:55:
2d:33:2d:74:90:41:39:48:29:94:a1:f6:9d:08:e5:f8:ec:01:
85:dd:bf:34:e4:f7:ab:7f:6e:d6:04:d2:b0:3a:04:f3:11:9a:
71:3d:02:33:45:5e:0f:1c:49:79:6f:31:6e:2f:1a:d9:1b:bf:
b4:3a:b9:d1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+TyLqLc1hhYiZHGXuQLxLzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAzYWQ2MzY1MjMxZWQ3OTM5Njk0MDkyMDE0OWRmNzFjMGFh
MDhlMWYwHhcNMjYwNzI0MTEwMDMzWhcNMjYwNzI1MTEwMDMzWjAzMTEwLwYDVQQD
EyhhYzk2MzQzM2NjMmNlZDUwNjM1NWQzYTkwNDkwOGFhZGJhODFjYmJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuk+diNZqMEbU7yI0kzzmh1bE2/bR
CwZdbKAmY+hKcg2Xzr+bX8bRUYFyOiPGvrDxCIjtFYzHwBRIE9/j/XoloBi9jBI4
RT8OEVS6D2IsfAW2/lWnyK+u5Wa+84izkvtb1B+JaTrVia+Yw8rNIHjHti0xjszp
8sG1cGgnnq8D2yIuulpEgqoaob+xEwW7uDT4cD9EEHCKsvMoVcp8xdg7azOsrTGR
f79hR8Amfpt6x/6kftqb9NqUbeozuSIQxwh5dmYiZ26O3IDJ5+T081GHWS4UOLLp
WHyq1PMpQuqaZ6t9biHY737exWCxzqxRjcnSmxIj/YsGlOZiS7Thc7ZHSwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKyWNDPMLO1QY1XTqQSQiq26gcu+MB8GA1UdIwQY
MBaAFAOtY2UjHteTlpQJIBSd9xwKoI4fMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQTYxalpTTWUxNU9XbEFrZ0ZKMzNIQXFnamg4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy8yMzM5NDgtZjlhMy00YjQ0LWE0YTkt
NDE0OWRlNTI4ODMzLzEvQTYxalpTTWUxNU9XbEFrZ0ZKMzNIQXFnamg4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNy8yMzM5NDgtZjlhMy00YjQ0LWE0YTktNDE0OWRlNTI4ODMz
LzEvQTYxalpTTWUxNU9XbEFrZ0ZKMzNIQXFnamg4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFx0smveW
rrLrtQxMu4o20e/1RvPYsfArr7n3VqGTJzKDFi8BwY56JZJNVRS7BfCTFH2VfZlI
jYiLk0jZCJ0kkMi9siCr2lNWk4hCym42nMaxxOvh6N4wYgvvj80Y3kuA32FlynpW
Q+AuWINHJTS+iImg/+gEIXSE/dXdD3ym9JZYjVJk6g0YdGC14kjj3mYVOMpa+Yzz
+kCkgpeV0UuN5ei8sBuHCLKp4t6tHewuipPbIwIp967c8RPUA3ZF0Fmm+d+lLMZV
LTMtdJBBOUgplKH2nQjl+OwBhd2/NOT3q39u1gTSsDoE8xGacT0CM0VeDxxJeW8x
bi8a2Ru/tDq50Q==
-----END CERTIFICATE-----
Generated at Fri Jul 24 18:51:34 2026 by rpki-client