Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/595024-8bff-4f18-8ccb-69a44f048db8/1/ayKtTPZHpItjH_hPIn6gJSEwVS0.mft
File: ayKtTPZHpItjH_hPIn6gJSEwVS0.mft (raw, json)
Hash identifier: hCR7onTgLT1GNVzXn0PsuW/VvpBpoSa4hZlaJOzsKo0=
Subject key identifier: 3C:0D:F4:1B:1F:47:CF:AF:D2:1D:37:EC:11:FB:66:C0:5C:86:F2:12
Authority key identifier: 6B:22:AD:4C:F6:47:A4:8B:63:1F:F8:4F:22:7E:A0:25:21:30:55:2D
Certificate issuer: /CN=6b22ad4cf647a48b631ff84f227ea0252130552d
Certificate serial: 019F939244CE22CF544502D40F4B1EB17F06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ayKtTPZHpItjH_hPIn6gJSEwVS0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/595024-8bff-4f18-8ccb-69a44f048db8/1/ayKtTPZHpItjH_hPIn6gJSEwVS0.mft
Manifest number: 163B
Signing time: Fri 24 Jul 2026 10:01:04 +0000
Manifest this update: Fri 24 Jul 2026 10:01:04 +0000
Manifest next update: Sat 25 Jul 2026 10:01:04 +0000
Files and hashes: 1: WrRSKzPOj6BgLow6AweYah_e1dA.roa (hash: zp8UwEZpI6bsmG4yaK4JetrekeKEEBLqIzJ3Rz0Eig8=)
2: ayKtTPZHpItjH_hPIn6gJSEwVS0.crl (hash: cpsCZ7p4VxYHH/vxxqxJz0ixMWLZa5r6un2lZ0WxEzk=)
3: uR1vfe6fR6lmKLx_KpYnu1pkQe8.roa (hash: rrB4HqghjaNhMjUMgJmTsjzw4hoiQcENyKRyhlNILHk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/595024-8bff-4f18-8ccb-69a44f048db8/1/ayKtTPZHpItjH_hPIn6gJSEwVS0.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/595024-8bff-4f18-8ccb-69a44f048db8/1/ayKtTPZHpItjH_hPIn6gJSEwVS0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ayKtTPZHpItjH_hPIn6gJSEwVS0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:92:44:ce:22:cf:54:45:02:d4:0f:4b:1e:b1:7f:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b22ad4cf647a48b631ff84f227ea0252130552d
Validity
Not Before: Jul 24 10:01:04 2026 GMT
Not After : Jul 25 10:01:04 2026 GMT
Subject: CN=3c0df41b1f47cfafd21d37ec11fb66c05c86f212
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:47:72:c2:4b:73:c4:2c:98:a5:ff:cb:78:b4:
a7:d5:cd:26:af:c5:9b:a1:e3:31:f0:3a:46:24:06:
95:77:dc:19:33:22:96:75:7a:fa:5c:b1:dc:a0:0b:
25:62:4b:17:b6:bd:01:44:e2:04:63:eb:73:28:26:
a3:89:c0:3a:5e:32:9b:e5:4f:21:0f:c2:77:2a:e7:
0f:c3:24:8f:d4:d3:a4:38:9a:f1:57:60:08:76:af:
12:16:36:73:c4:af:62:85:0b:94:22:6e:fd:20:f6:
bc:ed:07:b9:55:fe:de:19:e7:6f:cb:f9:b5:30:0a:
6f:ef:60:5c:51:30:6f:9c:ec:af:d7:d4:8c:13:51:
d0:fe:4f:ae:e2:c4:ff:9c:17:dc:3a:d5:8c:65:66:
85:8a:53:61:28:2b:3c:25:d2:d9:07:01:98:3d:c4:
99:8a:c5:2d:91:16:38:94:4d:94:b9:e2:e9:b2:be:
21:10:12:4e:e8:9e:e8:b4:1a:54:49:2f:ae:df:71:
6d:3b:e6:ed:f0:3f:2e:4f:f4:1e:c0:f2:af:ac:90:
c5:73:5e:fc:33:c9:62:20:80:af:f5:26:3e:a6:65:
7c:fc:d6:ff:36:44:e5:4e:c5:55:29:cd:78:c5:3b:
1a:a7:2a:0b:e4:8f:6a:82:a7:74:96:a7:14:6b:6d:
58:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:0D:F4:1B:1F:47:CF:AF:D2:1D:37:EC:11:FB:66:C0:5C:86:F2:12
X509v3 Authority Key Identifier:
keyid:6B:22:AD:4C:F6:47:A4:8B:63:1F:F8:4F:22:7E:A0:25:21:30:55:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ayKtTPZHpItjH_hPIn6gJSEwVS0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/595024-8bff-4f18-8ccb-69a44f048db8/1/ayKtTPZHpItjH_hPIn6gJSEwVS0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/595024-8bff-4f18-8ccb-69a44f048db8/1/ayKtTPZHpItjH_hPIn6gJSEwVS0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:91:f2:af:e5:2f:aa:53:70:93:ea:7c:25:e1:eb:2f:0c:f3:
23:0e:59:69:f0:1b:12:dd:76:40:1a:1b:fc:2a:13:cd:07:39:
de:4e:50:aa:3b:c4:01:b7:2c:d9:1b:a9:cb:1a:5a:7c:df:f9:
de:5a:16:19:45:84:12:35:f2:73:d8:37:ea:52:33:71:60:d8:
bd:4b:18:f9:b1:41:10:2e:e5:e3:47:5b:88:ef:28:6c:78:e1:
20:5f:e3:58:13:ef:e8:f4:68:09:96:54:13:8d:ff:de:69:46:
f6:d7:97:05:f9:31:aa:48:b0:02:8d:2a:e3:74:89:b2:80:79:
26:aa:76:80:9a:07:06:92:fa:d6:6a:9b:9b:3a:1e:17:4e:f9:
ba:7b:44:48:cd:18:dd:16:e5:39:d5:3e:60:99:7a:42:81:55:
d1:04:3b:1b:e7:08:fe:b2:7a:e2:85:8c:f7:37:7a:82:f0:12:
d7:fa:fd:9b:a5:3e:1d:8c:cd:a5:a1:16:ed:4a:b8:fa:4d:ca:
29:0a:bb:6f:db:5b:61:d8:64:66:cf:36:f9:e3:b5:ea:a9:aa:
0f:89:ce:c1:0b:27:66:70:6e:45:f5:27:78:a1:79:86:47:78:
d4:9d:1f:a8:ee:5f:ab:30:be:62:91:5b:5a:c1:29:e6:10:50:
d0:e3:bf:84
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+TkkTOIs9URQLUD0sesX8GMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZiMjJhZDRjZjY0N2E0OGI2MzFmZjg0ZjIyN2VhMDI1MjEz
MDU1MmQwHhcNMjYwNzI0MTAwMTA0WhcNMjYwNzI1MTAwMTA0WjAzMTEwLwYDVQQD
EygzYzBkZjQxYjFmNDdjZmFmZDIxZDM3ZWMxMWZiNjZjMDVjODZmMjEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0EdywktzxCyYpf/LeLSn1c0mr8Wb
oeMx8DpGJAaVd9wZMyKWdXr6XLHcoAslYksXtr0BROIEY+tzKCajicA6XjKb5U8h
D8J3KucPwySP1NOkOJrxV2AIdq8SFjZzxK9ihQuUIm79IPa87Qe5Vf7eGedvy/m1
MApv72BcUTBvnOyv19SME1HQ/k+u4sT/nBfcOtWMZWaFilNhKCs8JdLZBwGYPcSZ
isUtkRY4lE2UueLpsr4hEBJO6J7otBpUSS+u33FtO+bt8D8uT/QewPKvrJDFc178
M8liIICv9SY+pmV8/Nb/NkTlTsVVKc14xTsapyoL5I9qgqd0lqcUa21YgwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDwN9BsfR8+v0h037BH7ZsBchvISMB8GA1UdIwQY
MBaAFGsirUz2R6SLYx/4TyJ+oCUhMFUtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYXlLdFRQWkhwSXRqSF9oUEluNmdKU0V3VlMwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC81OTUwMjQtOGJmZi00ZjE4LThjY2It
NjlhNDRmMDQ4ZGI4LzEvYXlLdFRQWkhwSXRqSF9oUEluNmdKU0V3VlMwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC81OTUwMjQtOGJmZi00ZjE4LThjY2ItNjlhNDRmMDQ4ZGI4
LzEvYXlLdFRQWkhwSXRqSF9oUEluNmdKU0V3VlMwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIpHyr+Uv
qlNwk+p8JeHrLwzzIw5ZafAbEt12QBob/CoTzQc53k5QqjvEAbcs2RupyxpafN/5
3loWGUWEEjXyc9g36lIzcWDYvUsY+bFBEC7l40dbiO8obHjhIF/jWBPv6PRoCZZU
E43/3mlG9teXBfkxqkiwAo0q43SJsoB5Jqp2gJoHBpL61mqbmzoeF075untESM0Y
3RblOdU+YJl6QoFV0QQ7G+cI/rJ64oWM9zd6gvAS1/r9m6U+HYzNpaEW7Uq4+k3K
KQq7b9tbYdhkZs82+eO16qmqD4nOwQsnZnBuRfUneKF5hkd41J0fqO5fqzC+YpFb
WsEp5hBQ0OO/hA==
-----END CERTIFICATE-----
Generated at Fri Jul 24 16:16:59 2026 by rpki-client