Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/9fe49f-9ed0-4db3-9be5-5c690447ba89/1/ac7WLmmPOc-za-DE0cmEBfZ641A.mft
File: ac7WLmmPOc-za-DE0cmEBfZ641A.mft (raw, json)
Hash identifier: Vbc4a4TCRNpjr+C/4LvOz16IRPKSOGKWCx6RrOKHJDk=
Subject key identifier: 17:3F:D7:1A:1D:06:00:54:BD:96:36:8F:33:22:9F:CA:B6:F8:E9:7B
Authority key identifier: 69:CE:D6:2E:69:8F:39:CF:B3:6B:E0:C4:D1:C9:84:05:F6:7A:E3:50
Certificate issuer: /CN=69ced62e698f39cfb36be0c4d1c98405f67ae350
Certificate serial: 019F8F7F4EE5C6EA84ECFE95EE8116B63983
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ac7WLmmPOc-za-DE0cmEBfZ641A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/9fe49f-9ed0-4db3-9be5-5c690447ba89/1/ac7WLmmPOc-za-DE0cmEBfZ641A.mft
Manifest number: 3F
Signing time: Thu 23 Jul 2026 15:01:52 +0000
Manifest this update: Thu 23 Jul 2026 15:01:52 +0000
Manifest next update: Fri 24 Jul 2026 15:01:52 +0000
Files and hashes: 1: 8ds30e27s4jEGttTs6YlBQM3z5s.roa (hash: fhyuHvz2U+aS6Bex74blw3zMPMfs8rwkJE+Axsibwvc=)
2: DABiD7uw5X1UDgK0KYm4pTweBTs.roa (hash: CdIof73ob606H6HEETNJAXQA/8lVWBNHp980E+YLvcU=)
3: XHiCg7-vOaMABA4CYBKSVf3rQRk.roa (hash: g1IQNPouH48EoFzQdEYNrlJEZkzgvbZrvrkCirhFzgo=)
4: ac7WLmmPOc-za-DE0cmEBfZ641A.crl (hash: l5i5njGCqitA7QPgdiBE7I4bv2nTLOE9kayAXH6bcRc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/9fe49f-9ed0-4db3-9be5-5c690447ba89/1/ac7WLmmPOc-za-DE0cmEBfZ641A.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/9fe49f-9ed0-4db3-9be5-5c690447ba89/1/ac7WLmmPOc-za-DE0cmEBfZ641A.mft
rsync://rpki.ripe.net/repository/DEFAULT/ac7WLmmPOc-za-DE0cmEBfZ641A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:7f:4e:e5:c6:ea:84:ec:fe:95:ee:81:16:b6:39:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69ced62e698f39cfb36be0c4d1c98405f67ae350
Validity
Not Before: Jul 23 15:01:52 2026 GMT
Not After : Jul 24 15:01:52 2026 GMT
Subject: CN=173fd71a1d060054bd96368f33229fcab6f8e97b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:69:cf:c0:72:3a:a6:fc:b7:2c:84:0f:a0:27:
40:7d:e6:50:7c:dd:aa:d5:3f:ba:c1:8b:70:4c:df:
eb:31:f5:96:0c:63:71:97:0b:e2:47:67:df:e6:f7:
ff:4b:87:3e:91:f3:62:86:1d:17:00:6f:4a:06:42:
05:d2:06:48:86:22:eb:fc:40:97:67:47:6c:32:ba:
cc:19:f6:fb:ba:66:b2:e6:f6:1f:41:52:9c:bb:49:
13:9f:a2:bf:94:46:85:f3:79:44:7d:3e:38:46:0e:
7c:1f:32:f7:23:39:46:94:9e:1c:01:03:d0:10:79:
95:68:fb:88:4d:87:c0:42:b2:0b:2c:5b:50:75:5a:
50:47:d7:78:06:7c:f8:58:9c:af:33:47:48:09:d2:
b5:f8:56:51:87:9b:4c:70:f0:d4:54:cc:3f:1d:6a:
85:54:91:3c:49:6b:e5:9c:3b:04:b1:17:69:35:65:
53:1e:1c:4a:68:cf:e4:25:d1:66:59:97:98:80:7d:
10:1d:77:6a:c0:20:09:19:00:99:16:ca:79:e1:e2:
9e:dd:33:dd:7f:0d:1c:97:45:40:a5:32:5b:7c:a4:
3e:03:73:d6:41:e2:03:33:27:e2:a1:2c:de:61:19:
94:5b:3c:46:bb:05:8d:c2:01:a4:86:41:e5:45:6b:
91:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:3F:D7:1A:1D:06:00:54:BD:96:36:8F:33:22:9F:CA:B6:F8:E9:7B
X509v3 Authority Key Identifier:
keyid:69:CE:D6:2E:69:8F:39:CF:B3:6B:E0:C4:D1:C9:84:05:F6:7A:E3:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac7WLmmPOc-za-DE0cmEBfZ641A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/9fe49f-9ed0-4db3-9be5-5c690447ba89/1/ac7WLmmPOc-za-DE0cmEBfZ641A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/9fe49f-9ed0-4db3-9be5-5c690447ba89/1/ac7WLmmPOc-za-DE0cmEBfZ641A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:a2:88:f0:b8:c8:ba:50:ce:f4:fb:8b:c9:8a:01:5f:79:ec:
5c:26:95:ac:c8:aa:90:b6:69:28:64:a8:01:d3:95:c4:81:47:
0e:20:e8:37:d0:a2:72:af:b1:15:e1:ed:00:81:c3:76:be:d9:
09:2d:d6:94:27:f6:a6:1e:a8:d0:2c:7a:65:62:27:09:84:c9:
1b:5d:2a:30:a2:c8:bd:0f:aa:a1:35:e8:f3:7d:e2:2c:c0:d8:
9e:70:4f:44:2f:00:98:e0:be:5d:65:a9:41:c3:91:58:d5:87:
0e:63:a0:ae:d2:8b:39:0a:b8:02:65:7a:fe:80:b2:5d:1f:47:
d9:77:1e:b3:e6:6c:96:58:ff:5e:06:72:9c:d5:9f:e1:83:2f:
b1:ac:e0:0d:58:cc:81:10:9d:ff:75:dd:88:d3:64:b9:39:07:
26:86:76:c8:30:cb:a5:9e:df:3a:b0:43:9c:ca:68:e2:b0:17:
44:d9:fd:75:45:10:15:9a:4b:f1:aa:b8:48:47:72:ab:18:5d:
66:fb:70:16:07:3d:54:b4:b7:c8:82:68:eb:94:f9:98:9e:ff:
6e:57:fd:4e:d7:dd:a8:eb:96:6e:aa:b5:a3:11:eb:1b:f3:46:
04:53:c6:f4:ed:91:05:cb:37:27:f3:db:b3:79:3d:4a:74:e3:
1c:6d:fe:f1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+Pf07lxuqE7P6V7oEWtjmDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY5Y2VkNjJlNjk4ZjM5Y2ZiMzZiZTBjNGQxYzk4NDA1ZjY3
YWUzNTAwHhcNMjYwNzIzMTUwMTUyWhcNMjYwNzI0MTUwMTUyWjAzMTEwLwYDVQQD
EygxNzNmZDcxYTFkMDYwMDU0YmQ5NjM2OGYzMzIyOWZjYWI2ZjhlOTdiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh2nPwHI6pvy3LIQPoCdAfeZQfN2q
1T+6wYtwTN/rMfWWDGNxlwviR2ff5vf/S4c+kfNihh0XAG9KBkIF0gZIhiLr/ECX
Z0dsMrrMGfb7umay5vYfQVKcu0kTn6K/lEaF83lEfT44Rg58HzL3IzlGlJ4cAQPQ
EHmVaPuITYfAQrILLFtQdVpQR9d4Bnz4WJyvM0dICdK1+FZRh5tMcPDUVMw/HWqF
VJE8SWvlnDsEsRdpNWVTHhxKaM/kJdFmWZeYgH0QHXdqwCAJGQCZFsp54eKe3TPd
fw0cl0VApTJbfKQ+A3PWQeIDMyfioSzeYRmUWzxGuwWNwgGkhkHlRWuRBwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBc/1xodBgBUvZY2jzMin8q2+Ol7MB8GA1UdIwQY
MBaAFGnO1i5pjznPs2vgxNHJhAX2euNQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYWM3V0xtbVBPYy16YS1ERTBjbUVCZlo2NDFBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi85ZmU0OWYtOWVkMC00ZGIzLTliZTUt
NWM2OTA0NDdiYTg5LzEvYWM3V0xtbVBPYy16YS1ERTBjbUVCZlo2NDFBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Zi85ZmU0OWYtOWVkMC00ZGIzLTliZTUtNWM2OTA0NDdiYTg5
LzEvYWM3V0xtbVBPYy16YS1ERTBjbUVCZlo2NDFBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtKKI8LjI
ulDO9PuLyYoBX3nsXCaVrMiqkLZpKGSoAdOVxIFHDiDoN9Cicq+xFeHtAIHDdr7Z
CS3WlCf2ph6o0Cx6ZWInCYTJG10qMKLIvQ+qoTXo833iLMDYnnBPRC8AmOC+XWWp
QcORWNWHDmOgrtKLOQq4AmV6/oCyXR9H2Xces+Zsllj/XgZynNWf4YMvsazgDVjM
gRCd/3XdiNNkuTkHJoZ2yDDLpZ7fOrBDnMpo4rAXRNn9dUUQFZpL8aq4SEdyqxhd
ZvtwFgc9VLS3yIJo65T5mJ7/blf9TtfdqOuWbqq1oxHrG/NGBFPG9O2RBcs3J/Pb
s3k9SnTjHG3+8Q==
-----END CERTIFICATE-----
Generated at Thu Jul 23 23:58:51 2026 by rpki-client