Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/6db797-a3d3-4241-903a-0c66840198d0/1/ao7dovIciF--ZyhiGLgxjWrSOJY.mft
File: ao7dovIciF--ZyhiGLgxjWrSOJY.mft (raw, json)
Hash identifier: I+yNmfd/1Pt1bqlWw2BRM66OAtO+qJRWwy2tsRgwOYI=
Subject key identifier: 2E:DD:40:F9:2C:BB:1F:5D:83:0F:C3:A9:1F:2D:DE:C2:B4:4C:03:5A
Authority key identifier: 6A:8E:DD:A2:F2:1C:88:5F:BE:67:28:62:18:B8:31:8D:6A:D2:38:96
Certificate issuer: /CN=6a8edda2f21c885fbe67286218b8318d6ad23896
Certificate serial: 019F9436F74746C460E2D18002DF03D6356B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ao7dovIciF--ZyhiGLgxjWrSOJY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/6db797-a3d3-4241-903a-0c66840198d0/1/ao7dovIciF--ZyhiGLgxjWrSOJY.mft
Manifest number: 0C81
Signing time: Fri 24 Jul 2026 13:00:57 +0000
Manifest this update: Fri 24 Jul 2026 13:00:57 +0000
Manifest next update: Sat 25 Jul 2026 13:00:57 +0000
Files and hashes: 1: IMvi_cxz_R-ayNNId6HH2kVVpAQ.roa (hash: 6IK4Qty1bIRA82kzLZxrqtFW3xfyNSEpnkEntDA5sT8=)
2: XGNpEJyZ5ofWurDz4XnNulUh5Qc.roa (hash: ApJMkAtwvgFPQPDi80cwWPLVrZBQ049k8CTijiz27yI=)
3: ao7dovIciF--ZyhiGLgxjWrSOJY.crl (hash: H7XZAligHS8+NZykQKRUGNb/HiJO2jfVJ8qd3tdx/1M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/6db797-a3d3-4241-903a-0c66840198d0/1/ao7dovIciF--ZyhiGLgxjWrSOJY.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/6db797-a3d3-4241-903a-0c66840198d0/1/ao7dovIciF--ZyhiGLgxjWrSOJY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ao7dovIciF--ZyhiGLgxjWrSOJY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:36:f7:47:46:c4:60:e2:d1:80:02:df:03:d6:35:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a8edda2f21c885fbe67286218b8318d6ad23896
Validity
Not Before: Jul 24 13:00:57 2026 GMT
Not After : Jul 25 13:00:57 2026 GMT
Subject: CN=2edd40f92cbb1f5d830fc3a91f2ddec2b44c035a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:bc:d7:27:44:bd:e3:9e:78:39:98:4f:8b:0a:
b2:12:c7:34:07:11:34:61:09:4f:4c:61:7f:59:37:
21:31:82:3f:7f:5b:53:fb:da:7b:e9:25:b0:82:73:
40:c2:76:5f:f7:9c:07:ae:5e:d4:30:0e:0c:82:c0:
ba:94:32:57:3f:28:e3:0e:eb:16:3d:2e:ad:00:e4:
ce:fb:ce:55:b3:a1:7f:ed:e8:02:f4:b6:d3:db:b9:
03:79:e4:78:37:68:62:0f:8c:d1:b4:57:fe:16:6f:
80:7e:ea:6d:92:31:85:8d:0a:20:04:10:f5:3c:36:
be:8c:9f:08:75:f6:b5:00:dc:44:6d:86:08:b5:4a:
b0:5e:81:44:d7:da:43:ea:99:f3:12:93:ae:ad:b3:
09:a3:fb:48:02:29:e9:42:ba:3d:d5:da:28:4c:e6:
c4:85:24:fd:27:1c:82:75:ac:ea:56:61:14:12:b1:
86:88:59:85:d6:de:5e:37:4a:40:ac:99:ea:07:ef:
8a:e9:b4:12:39:e6:65:11:4a:3c:8a:33:cd:71:05:
4b:7e:1d:f4:98:39:61:2e:99:41:88:2a:8a:80:c9:
54:91:b4:ea:32:ef:5c:79:60:8d:a1:c9:4c:86:2b:
ca:7a:bc:f2:a3:b6:68:c6:49:11:bd:ad:3b:08:de:
f3:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:DD:40:F9:2C:BB:1F:5D:83:0F:C3:A9:1F:2D:DE:C2:B4:4C:03:5A
X509v3 Authority Key Identifier:
keyid:6A:8E:DD:A2:F2:1C:88:5F:BE:67:28:62:18:B8:31:8D:6A:D2:38:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ao7dovIciF--ZyhiGLgxjWrSOJY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/6db797-a3d3-4241-903a-0c66840198d0/1/ao7dovIciF--ZyhiGLgxjWrSOJY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/6db797-a3d3-4241-903a-0c66840198d0/1/ao7dovIciF--ZyhiGLgxjWrSOJY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:6f:ba:8d:48:66:23:6d:7f:82:64:e1:23:21:cc:6d:ed:d7:
9a:2b:d8:35:cd:11:43:9e:dd:59:9b:64:32:03:fb:18:42:14:
54:a6:8e:df:21:2b:42:a4:23:fc:27:f5:6b:bb:88:58:fd:d2:
45:e9:96:8d:d8:de:5f:63:79:e9:ce:8b:00:8c:b7:79:b7:ad:
ef:da:44:bb:d4:49:a4:73:1d:4d:12:be:b5:13:8d:f9:2b:e8:
af:16:0b:c3:b7:de:ed:d4:c6:b7:16:40:2f:b2:3d:ca:1b:a0:
ec:56:dd:00:24:f3:f2:4e:fc:bb:c5:f4:cb:57:49:0d:5a:94:
33:97:26:5b:8d:b6:2b:e5:31:66:7d:83:c7:15:3b:d5:1f:52:
bb:f8:9e:fc:da:71:28:e5:49:41:d3:fb:a2:a5:de:91:c6:27:
28:0a:25:34:ba:15:fa:c8:37:72:db:b2:ca:cd:cf:16:a6:53:
36:48:22:98:81:1c:75:4b:01:ab:5b:ec:2b:ae:36:0e:15:7c:
ca:2b:f7:6a:0a:ad:4b:ad:41:47:5d:6f:2d:68:68:fa:d6:f2:
95:89:2d:65:72:c6:7c:1d:a3:7a:4f:fa:e4:10:85:db:a5:17:
85:16:0d:10:f9:31:e3:d4:8e:77:be:25:45:73:24:91:a9:ab:
33:1d:3f:e9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+UNvdHRsRg4tGAAt8D1jVrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZhOGVkZGEyZjIxYzg4NWZiZTY3Mjg2MjE4YjgzMThkNmFk
MjM4OTYwHhcNMjYwNzI0MTMwMDU3WhcNMjYwNzI1MTMwMDU3WjAzMTEwLwYDVQQD
EygyZWRkNDBmOTJjYmIxZjVkODMwZmMzYTkxZjJkZGVjMmI0NGMwMzVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3bzXJ0S94554OZhPiwqyEsc0BxE0
YQlPTGF/WTchMYI/f1tT+9p76SWwgnNAwnZf95wHrl7UMA4MgsC6lDJXPyjjDusW
PS6tAOTO+85Vs6F/7egC9LbT27kDeeR4N2hiD4zRtFf+Fm+AfuptkjGFjQogBBD1
PDa+jJ8Idfa1ANxEbYYItUqwXoFE19pD6pnzEpOurbMJo/tIAinpQro91dooTObE
hST9JxyCdazqVmEUErGGiFmF1t5eN0pArJnqB++K6bQSOeZlEUo8ijPNcQVLfh30
mDlhLplBiCqKgMlUkbTqMu9ceWCNoclMhivKerzyo7ZoxkkRva07CN7z8QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC7dQPksux9dgw/DqR8t3sK0TANaMB8GA1UdIwQY
MBaAFGqO3aLyHIhfvmcoYhi4MY1q0jiWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYW83ZG92SWNpRi0tWnloaUdMZ3hqV3JTT0pZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS82ZGI3OTctYTNkMy00MjQxLTkwM2Et
MGM2Njg0MDE5OGQwLzEvYW83ZG92SWNpRi0tWnloaUdMZ3hqV3JTT0pZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS82ZGI3OTctYTNkMy00MjQxLTkwM2EtMGM2Njg0MDE5OGQw
LzEvYW83ZG92SWNpRi0tWnloaUdMZ3hqV3JTT0pZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQm+6jUhm
I21/gmThIyHMbe3XmivYNc0RQ57dWZtkMgP7GEIUVKaO3yErQqQj/Cf1a7uIWP3S
RemWjdjeX2N56c6LAIy3ebet79pEu9RJpHMdTRK+tRON+SvorxYLw7fe7dTGtxZA
L7I9yhug7FbdACTz8k78u8X0y1dJDVqUM5cmW422K+UxZn2DxxU71R9Su/ie/Npx
KOVJQdP7oqXekcYnKAolNLoV+sg3ctuyys3PFqZTNkgimIEcdUsBq1vsK642DhV8
yiv3agqtS61BR11vLWho+tbylYktZXLGfB2jek/65BCF26UXhRYNEPkx49SOd74l
RXMkkamrMx0/6Q==
-----END CERTIFICATE-----
Generated at Fri Jul 24 15:16:51 2026 by rpki-client