Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/3f8107-fc15-4c71-81d4-5238b03545ca/1/aYVKV6sNijySLI9qeaqP6KaiwJ4.mft
File: aYVKV6sNijySLI9qeaqP6KaiwJ4.mft (raw, json)
Hash identifier: ygYjv+zI3jcJudmLRrGxi8AFAigUvWx5K2yW6piT8rY=
Subject key identifier: 82:B2:BB:82:F0:09:11:2B:13:71:83:53:47:5D:E5:37:83:25:18:45
Authority key identifier: 69:85:4A:57:AB:0D:8A:3C:92:2C:8F:6A:79:AA:8F:E8:A6:A2:C0:9E
Certificate issuer: /CN=69854a57ab0d8a3c922c8f6a79aa8fe8a6a2c09e
Certificate serial: 019F94366F4F6DA5DB99DCE209DD9F4D46AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aYVKV6sNijySLI9qeaqP6KaiwJ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/3f8107-fc15-4c71-81d4-5238b03545ca/1/aYVKV6sNijySLI9qeaqP6KaiwJ4.mft
Manifest number: 142A
Signing time: Fri 24 Jul 2026 13:00:23 +0000
Manifest this update: Fri 24 Jul 2026 13:00:23 +0000
Manifest next update: Sat 25 Jul 2026 13:00:23 +0000
Files and hashes: 1: aYVKV6sNijySLI9qeaqP6KaiwJ4.crl (hash: Jf3HafxjF14qAtklvrT3+Mc4AFTFd9BSE7QKSTXb+eg=)
2: udJoXx6SrWMuMK6jZ122dieN47A.roa (hash: XPA3Wkk2p2nbhHbQxZ80mWOEn3OR3Bs5szWaHz85HJo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/3f8107-fc15-4c71-81d4-5238b03545ca/1/aYVKV6sNijySLI9qeaqP6KaiwJ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/3f8107-fc15-4c71-81d4-5238b03545ca/1/aYVKV6sNijySLI9qeaqP6KaiwJ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/aYVKV6sNijySLI9qeaqP6KaiwJ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:36:6f:4f:6d:a5:db:99:dc:e2:09:dd:9f:4d:46:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69854a57ab0d8a3c922c8f6a79aa8fe8a6a2c09e
Validity
Not Before: Jul 24 13:00:23 2026 GMT
Not After : Jul 25 13:00:23 2026 GMT
Subject: CN=82b2bb82f009112b13718353475de53783251845
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:2e:c4:25:6d:cd:ac:95:99:d5:69:3b:13:2d:
47:fb:e3:f4:cb:b8:da:cf:ce:f0:43:5f:c6:b9:e5:
68:c0:25:a7:0e:38:ab:8c:7b:06:a3:19:34:d9:9b:
4c:12:96:bd:a8:4a:06:2d:b5:96:da:d0:ad:f6:86:
1f:5f:49:74:42:80:3c:b7:5d:20:2e:f3:c8:bf:04:
de:82:f3:e5:6d:cc:32:f1:4f:73:f0:01:3a:f5:29:
61:76:55:b2:a9:9c:27:4c:4a:8d:d1:e4:67:9e:c5:
83:bd:75:c0:cd:cd:75:d8:12:6d:00:93:66:47:6c:
43:78:39:85:d1:2b:57:c0:16:90:54:c0:0b:70:fb:
bc:38:61:6d:b7:33:35:6c:6f:9e:a6:cd:58:b0:3f:
51:67:2e:01:69:e3:82:78:44:41:25:1f:cd:9a:12:
9e:dd:d9:f8:eb:56:10:c0:bf:f4:2e:ed:dd:9b:6c:
b9:62:1d:e9:d1:1a:2d:f7:1a:7c:4f:60:ef:b3:00:
13:e7:5a:99:c3:fa:7d:06:71:a6:cc:1c:af:34:28:
4c:ae:a3:7d:69:e9:b7:6e:10:75:0b:f0:8c:36:51:
19:9b:7e:f0:03:06:6b:35:4a:9f:8a:60:84:56:b6:
d1:f9:9e:54:26:50:ad:0c:b8:12:bd:43:a9:9a:d9:
84:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:B2:BB:82:F0:09:11:2B:13:71:83:53:47:5D:E5:37:83:25:18:45
X509v3 Authority Key Identifier:
keyid:69:85:4A:57:AB:0D:8A:3C:92:2C:8F:6A:79:AA:8F:E8:A6:A2:C0:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aYVKV6sNijySLI9qeaqP6KaiwJ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/3f8107-fc15-4c71-81d4-5238b03545ca/1/aYVKV6sNijySLI9qeaqP6KaiwJ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/3f8107-fc15-4c71-81d4-5238b03545ca/1/aYVKV6sNijySLI9qeaqP6KaiwJ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:d4:33:f4:05:09:a6:b1:f3:24:fa:fc:ca:52:11:a2:b0:9a:
23:c7:79:dc:46:a2:17:46:ed:4c:b9:fa:00:68:fb:9c:1e:13:
4d:cd:c4:19:ab:81:4a:a2:76:c4:b7:02:97:47:01:de:83:15:
66:6d:f1:9a:1a:ec:38:bd:a2:c7:e2:be:29:0b:60:68:84:08:
70:ea:75:1e:60:a2:27:da:c5:eb:1c:e5:94:3c:9d:3b:83:47:
dd:79:11:d7:e9:34:a9:62:32:ba:e8:4e:bc:b1:11:69:79:a3:
18:1d:8e:9d:77:6d:c3:be:32:e5:cd:1c:72:71:c5:30:63:e6:
2a:ea:c3:f2:de:80:43:97:91:ed:ac:68:5a:82:84:6a:7b:75:
d8:7e:ed:22:41:de:8e:3e:ef:1b:15:e7:61:87:52:17:99:b8:
57:d7:28:d4:8c:61:5f:24:46:ff:84:b7:9d:44:73:4a:0f:9a:
4c:5e:ec:8b:8a:f3:d0:26:42:3d:04:e4:60:1b:b3:7c:8a:86:
ed:4c:73:e9:9e:d5:db:e4:53:e5:0d:87:39:39:70:e0:b0:09:
e5:cd:55:c1:a2:b3:07:33:26:78:71:0a:e5:3f:1e:e5:a3:f8:
90:93:0e:43:4a:15:20:7e:58:ed:5d:7f:78:ce:31:6f:8c:95:
89:fe:3f:9a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+UNm9PbaXbmdziCd2fTUauMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY5ODU0YTU3YWIwZDhhM2M5MjJjOGY2YTc5YWE4ZmU4YTZh
MmMwOWUwHhcNMjYwNzI0MTMwMDIzWhcNMjYwNzI1MTMwMDIzWjAzMTEwLwYDVQQD
Eyg4MmIyYmI4MmYwMDkxMTJiMTM3MTgzNTM0NzVkZTUzNzgzMjUxODQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5S7EJW3NrJWZ1Wk7Ey1H++P0y7ja
z87wQ1/GueVowCWnDjirjHsGoxk02ZtMEpa9qEoGLbWW2tCt9oYfX0l0QoA8t10g
LvPIvwTegvPlbcwy8U9z8AE69SlhdlWyqZwnTEqN0eRnnsWDvXXAzc112BJtAJNm
R2xDeDmF0StXwBaQVMALcPu8OGFttzM1bG+eps1YsD9RZy4BaeOCeERBJR/NmhKe
3dn461YQwL/0Lu3dm2y5Yh3p0Rot9xp8T2DvswAT51qZw/p9BnGmzByvNChMrqN9
aem3bhB1C/CMNlEZm37wAwZrNUqfimCEVrbR+Z5UJlCtDLgSvUOpmtmE+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIKyu4LwCRErE3GDU0dd5TeDJRhFMB8GA1UdIwQY
MBaAFGmFSlerDYo8kiyPanmqj+imosCeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYVlWS1Y2c05panlTTEk5cWVhcVA2S2Fpd0o0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS8zZjgxMDctZmMxNS00YzcxLTgxZDQt
NTIzOGIwMzU0NWNhLzEvYVlWS1Y2c05panlTTEk5cWVhcVA2S2Fpd0o0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMS8zZjgxMDctZmMxNS00YzcxLTgxZDQtNTIzOGIwMzU0NWNh
LzEvYVlWS1Y2c05panlTTEk5cWVhcVA2S2Fpd0o0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWNQz9AUJ
prHzJPr8ylIRorCaI8d53EaiF0btTLn6AGj7nB4TTc3EGauBSqJ2xLcCl0cB3oMV
Zm3xmhrsOL2ix+K+KQtgaIQIcOp1HmCiJ9rF6xzllDydO4NH3XkR1+k0qWIyuuhO
vLERaXmjGB2OnXdtw74y5c0ccnHFMGPmKurD8t6AQ5eR7axoWoKEant12H7tIkHe
jj7vGxXnYYdSF5m4V9co1IxhXyRG/4S3nURzSg+aTF7si4rz0CZCPQTkYBuzfIqG
7Uxz6Z7V2+RT5Q2HOTlw4LAJ5c1VwaKzBzMmeHEK5T8e5aP4kJMOQ0oVIH5Y7V1/
eM4xb4yVif4/mg==
-----END CERTIFICATE-----
Generated at Fri Jul 24 18:52:50 2026 by rpki-client