Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/1308bb-2d48-42c6-9ad7-e0e798c325d3/1/a3fOhCRDu4qW_CUJDZ66_5Vnol4.mft
File: a3fOhCRDu4qW_CUJDZ66_5Vnol4.mft (raw, json)
Hash identifier: J6Dx+xd/PYlvNNHdebLJrsw9x1TiNWzWGZwNS07Mhqg=
Subject key identifier: 4E:C2:86:45:7C:9E:0A:20:2B:FE:94:9A:D7:53:9F:FF:13:95:1E:8F
Authority key identifier: 6B:77:CE:84:24:43:BB:8A:96:FC:25:09:0D:9E:BA:FF:95:67:A2:5E
Certificate issuer: /CN=6b77ce842443bb8a96fc25090d9ebaff9567a25e
Certificate serial: 019F91DA6907CD47E7EE8471D5B68765FC28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a3fOhCRDu4qW_CUJDZ66_5Vnol4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/1308bb-2d48-42c6-9ad7-e0e798c325d3/1/a3fOhCRDu4qW_CUJDZ66_5Vnol4.mft
Manifest number: 8A
Signing time: Fri 24 Jul 2026 02:00:37 +0000
Manifest this update: Fri 24 Jul 2026 02:00:37 +0000
Manifest next update: Sat 25 Jul 2026 02:00:37 +0000
Files and hashes: 1: AYWssxj1PLbVr_URF-ZIiz6BS4I.roa (hash: 9obR855p0IhaLrIXPPGSL2nYoYCxku1wM9uG/XbR5LA=)
2: a3fOhCRDu4qW_CUJDZ66_5Vnol4.crl (hash: Xiw9c00Ylxg6zonOgVI1zXtg2Pf6shUDtlJ8/C4N1uY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/1308bb-2d48-42c6-9ad7-e0e798c325d3/1/a3fOhCRDu4qW_CUJDZ66_5Vnol4.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/1308bb-2d48-42c6-9ad7-e0e798c325d3/1/a3fOhCRDu4qW_CUJDZ66_5Vnol4.mft
rsync://rpki.ripe.net/repository/DEFAULT/a3fOhCRDu4qW_CUJDZ66_5Vnol4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:da:69:07:cd:47:e7:ee:84:71:d5:b6:87:65:fc:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b77ce842443bb8a96fc25090d9ebaff9567a25e
Validity
Not Before: Jul 24 02:00:37 2026 GMT
Not After : Jul 25 02:00:37 2026 GMT
Subject: CN=4ec286457c9e0a202bfe949ad7539fff13951e8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:3d:02:06:ea:19:6c:67:5a:25:5d:67:61:7d:
1d:c4:10:85:81:be:d1:29:d6:c8:de:36:9c:39:2f:
b5:b2:6c:e6:90:0c:e5:71:93:b6:03:50:6d:4e:26:
8b:ef:c8:84:dd:57:41:37:95:25:25:79:77:0a:68:
bc:52:01:c4:d8:d9:03:ef:44:e2:7d:42:22:51:55:
8e:59:78:86:3c:7c:dd:17:17:f4:9a:f1:d9:80:62:
ed:1a:44:46:96:70:bb:ff:61:72:7d:a1:14:fa:84:
85:48:9f:37:3d:89:20:81:5e:a8:8e:88:72:c9:f0:
c6:ca:92:22:01:d1:60:c1:86:10:3a:51:f0:de:76:
01:7c:97:29:cf:ab:7c:f3:ce:76:f0:45:a1:01:2f:
94:5d:50:bc:e2:9c:76:00:3f:f7:b8:45:a4:21:40:
7a:a9:41:0a:25:09:f5:94:c4:6e:82:8f:f9:06:9b:
26:57:62:31:14:e9:b8:28:a1:93:a8:5b:07:5f:8f:
da:12:bf:4a:5f:f5:95:ad:77:5f:16:70:36:fd:65:
cf:b7:0c:1e:2f:ba:94:a4:92:db:4f:a0:f1:df:5a:
fb:c5:33:2d:0b:fb:b9:9c:b6:b7:f6:3a:75:dc:30:
c6:9d:15:0f:53:ae:8a:77:6f:1e:4b:e1:3b:27:9d:
8c:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:C2:86:45:7C:9E:0A:20:2B:FE:94:9A:D7:53:9F:FF:13:95:1E:8F
X509v3 Authority Key Identifier:
keyid:6B:77:CE:84:24:43:BB:8A:96:FC:25:09:0D:9E:BA:FF:95:67:A2:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3fOhCRDu4qW_CUJDZ66_5Vnol4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/1308bb-2d48-42c6-9ad7-e0e798c325d3/1/a3fOhCRDu4qW_CUJDZ66_5Vnol4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/1308bb-2d48-42c6-9ad7-e0e798c325d3/1/a3fOhCRDu4qW_CUJDZ66_5Vnol4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:4a:d7:59:a1:5b:25:e5:cc:d5:f9:cb:c8:cb:1a:70:6c:79:
96:f8:1b:fd:e3:b9:83:52:ad:2c:62:de:37:bc:4d:8b:b6:a9:
c7:da:2f:dc:41:43:be:ce:af:9d:72:32:84:41:a6:9a:9f:f3:
9c:ce:05:e6:9b:95:4f:b4:27:61:ce:6f:ba:59:12:ec:83:4c:
db:a8:67:38:de:47:42:f3:7f:36:01:1d:7d:e1:a1:a4:d2:ab:
cb:e0:ca:4c:62:13:c0:33:db:eb:0b:22:56:da:f3:2d:5e:dd:
2a:67:2f:99:a6:c1:15:82:d8:9b:6b:9d:3b:f4:3d:1a:2c:7c:
da:eb:f0:cc:5d:dd:8f:56:66:9a:3f:8c:61:cf:43:90:54:ab:
79:da:32:be:0f:12:60:7e:44:be:91:68:e9:e8:b7:51:77:88:
ae:6c:59:cb:93:5d:ee:69:e7:f1:be:8e:6e:d5:c7:6d:80:63:
a6:61:f5:31:45:6d:d5:4e:ce:92:fb:22:73:2d:0f:a3:eb:33:
36:03:62:78:82:12:91:85:f8:ea:b5:69:94:c3:0a:bf:0d:bf:
6f:c6:05:99:c6:73:f1:ee:66:84:20:87:cf:63:88:ff:a5:f3:
c2:b2:6f:fa:ad:dc:5a:29:72:c4:4f:27:29:2f:c8:fc:e3:9e:
be:45:6c:d2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+R2mkHzUfn7oRx1baHZfwoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZiNzdjZTg0MjQ0M2JiOGE5NmZjMjUwOTBkOWViYWZmOTU2
N2EyNWUwHhcNMjYwNzI0MDIwMDM3WhcNMjYwNzI1MDIwMDM3WjAzMTEwLwYDVQQD
Eyg0ZWMyODY0NTdjOWUwYTIwMmJmZTk0OWFkNzUzOWZmZjEzOTUxZThmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjj0CBuoZbGdaJV1nYX0dxBCFgb7R
KdbI3jacOS+1smzmkAzlcZO2A1BtTiaL78iE3VdBN5UlJXl3Cmi8UgHE2NkD70Ti
fUIiUVWOWXiGPHzdFxf0mvHZgGLtGkRGlnC7/2FyfaEU+oSFSJ83PYkggV6ojohy
yfDGypIiAdFgwYYQOlHw3nYBfJcpz6t888528EWhAS+UXVC84px2AD/3uEWkIUB6
qUEKJQn1lMRugo/5BpsmV2IxFOm4KKGTqFsHX4/aEr9KX/WVrXdfFnA2/WXPtwwe
L7qUpJLbT6Dx31r7xTMtC/u5nLa39jp13DDGnRUPU66Kd28eS+E7J52MPwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE7ChkV8ngogK/6UmtdTn/8TlR6PMB8GA1UdIwQY
MBaAFGt3zoQkQ7uKlvwlCQ2euv+VZ6JeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYTNmT2hDUkR1NHFXX0NVSkRaNjZfNVZub2w0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC8xMzA4YmItMmQ0OC00MmM2LTlhZDct
ZTBlNzk4YzMyNWQzLzEvYTNmT2hDUkR1NHFXX0NVSkRaNjZfNVZub2w0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC8xMzA4YmItMmQ0OC00MmM2LTlhZDctZTBlNzk4YzMyNWQz
LzEvYTNmT2hDUkR1NHFXX0NVSkRaNjZfNVZub2w0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATUrXWaFb
JeXM1fnLyMsacGx5lvgb/eO5g1KtLGLeN7xNi7apx9ov3EFDvs6vnXIyhEGmmp/z
nM4F5puVT7QnYc5vulkS7INM26hnON5HQvN/NgEdfeGhpNKry+DKTGITwDPb6wsi
VtrzLV7dKmcvmabBFYLYm2udO/Q9Gix82uvwzF3dj1Zmmj+MYc9DkFSredoyvg8S
YH5EvpFo6ei3UXeIrmxZy5Nd7mnn8b6ObtXHbYBjpmH1MUVt1U7Okvsicy0Po+sz
NgNieIISkYX46rVplMMKvw2/b8YFmcZz8e5mhCCHz2OI/6XzwrJv+q3cWilyxE8n
KS/I/OOevkVs0g==
-----END CERTIFICATE-----
Generated at Fri Jul 24 05:15:24 2026 by rpki-client