Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/46bd33-b527-462e-81e0-8677b3dd8707/1/AV8OZlqcdCI8S_4nChZZreTO8x8.mft
File: AV8OZlqcdCI8S_4nChZZreTO8x8.mft (raw, json)
Hash identifier: yw/lLU+MZxhayAbqopOjse/0M1VGk/NFAE1f7KWeA90=
Subject key identifier: 6D:67:89:C3:3B:9C:30:CF:0E:E7:45:67:68:52:3B:5B:51:F5:97:E3
Authority key identifier: 01:5F:0E:66:5A:9C:74:22:3C:4B:FE:27:0A:16:59:AD:E4:CE:F3:1F
Certificate issuer: /CN=015f0e665a9c74223c4bfe270a1659ade4cef31f
Certificate serial: 019F9022FD36D7A7E36B16A804A3FCA46378
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AV8OZlqcdCI8S_4nChZZreTO8x8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/46bd33-b527-462e-81e0-8677b3dd8707/1/AV8OZlqcdCI8S_4nChZZreTO8x8.mft
Manifest number: 04EB
Signing time: Thu 23 Jul 2026 18:00:39 +0000
Manifest this update: Thu 23 Jul 2026 18:00:39 +0000
Manifest next update: Fri 24 Jul 2026 18:00:39 +0000
Files and hashes: 1: A9rhd59_7voAjZbMragLA3ftrbw.roa (hash: jQKHOIkJndimLRm6Iut1TREkFlVZwkrcXKBUSUJBxdk=)
2: AV8OZlqcdCI8S_4nChZZreTO8x8.crl (hash: nHkrkaWoWDlzy5Balw348A/walX5Z6nfA9PZicYduoc=)
3: ofJXmIsyK_jDudPiA8bDAQbKAlU.roa (hash: +olJpgKdSnPRSUcTlissuMFWoxiuQFVYufPs4uhUsXc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/46bd33-b527-462e-81e0-8677b3dd8707/1/AV8OZlqcdCI8S_4nChZZreTO8x8.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/46bd33-b527-462e-81e0-8677b3dd8707/1/AV8OZlqcdCI8S_4nChZZreTO8x8.mft
rsync://rpki.ripe.net/repository/DEFAULT/AV8OZlqcdCI8S_4nChZZreTO8x8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:22:fd:36:d7:a7:e3:6b:16:a8:04:a3:fc:a4:63:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=015f0e665a9c74223c4bfe270a1659ade4cef31f
Validity
Not Before: Jul 23 18:00:39 2026 GMT
Not After : Jul 24 18:00:39 2026 GMT
Subject: CN=6d6789c33b9c30cf0ee7456768523b5b51f597e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:57:76:bd:28:cf:aa:39:fe:ff:db:86:0d:dd:
56:38:ff:b7:e2:3e:d8:9a:6f:25:5b:f8:a6:61:a3:
bc:db:c5:85:05:06:91:55:76:93:03:55:da:01:ff:
51:5c:bd:c2:32:71:45:2d:5b:36:2d:e4:c8:92:45:
f0:3d:84:30:31:40:36:11:f9:65:06:2c:0c:09:e7:
0c:04:b1:fb:46:6b:91:51:0b:fb:a4:60:88:e1:63:
50:c4:a8:59:55:00:2a:73:b0:78:f3:ea:28:25:a1:
4d:b5:51:04:b7:4b:3a:48:04:44:e3:69:e7:af:cb:
a8:2e:4f:59:55:09:93:2b:e1:0e:29:c3:a4:8d:99:
21:d9:e4:ac:e0:9f:29:c6:83:1f:75:73:9e:4f:57:
ad:69:d2:88:d1:12:d0:57:62:c5:63:b9:61:c8:ac:
f5:c8:16:e5:d4:b8:1e:e2:64:51:f1:a2:c9:59:34:
eb:c4:09:2d:f3:2a:b6:29:59:25:8c:40:c2:ae:36:
45:f8:6e:1c:8d:13:01:a0:ff:3f:99:f7:7b:14:a8:
76:04:76:e4:43:1e:89:59:54:aa:20:60:67:ae:15:
90:93:f6:a5:ca:40:6f:e4:1c:e2:63:cf:a2:1e:8b:
41:4d:5f:a0:3b:44:33:83:f9:d2:e9:fc:fe:4d:eb:
1c:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:67:89:C3:3B:9C:30:CF:0E:E7:45:67:68:52:3B:5B:51:F5:97:E3
X509v3 Authority Key Identifier:
keyid:01:5F:0E:66:5A:9C:74:22:3C:4B:FE:27:0A:16:59:AD:E4:CE:F3:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AV8OZlqcdCI8S_4nChZZreTO8x8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/46bd33-b527-462e-81e0-8677b3dd8707/1/AV8OZlqcdCI8S_4nChZZreTO8x8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/46bd33-b527-462e-81e0-8677b3dd8707/1/AV8OZlqcdCI8S_4nChZZreTO8x8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:6e:6e:28:96:12:10:38:f1:0d:b6:c9:34:fb:0a:0e:f8:e2:
f1:81:2e:bf:55:20:ef:1e:c9:14:64:aa:46:da:1b:ad:f0:cf:
3b:cb:d3:27:5a:b4:7d:d7:2f:c9:ca:e5:13:24:f8:fe:15:73:
6c:01:76:07:0f:83:32:1a:d0:bf:ca:75:e8:56:48:28:ac:e9:
85:b1:12:ab:07:c3:53:82:7e:05:48:0e:9f:53:e3:1c:30:ae:
e3:79:ba:9f:6d:3f:ca:ec:cf:33:2b:a4:be:19:92:fb:04:28:
55:b4:92:d2:bb:25:99:e5:6b:c5:ca:93:de:cb:89:4c:9b:f6:
bc:05:e2:64:ad:76:d4:41:8e:42:fc:34:21:a8:73:b7:d9:c8:
f1:fc:6c:50:8c:e7:0a:d8:70:b8:44:e8:aa:2e:fc:cf:21:04:
16:7f:77:39:b2:bb:5f:dd:4b:3e:12:a4:d0:c7:45:25:b3:44:
4a:19:d1:09:a9:03:33:9b:f1:69:54:42:89:b2:72:45:6b:7e:
e8:04:c6:e0:5c:a5:1a:05:d7:20:d3:f9:db:9f:bb:b5:98:1c:
c8:f1:34:c6:6f:45:e0:cd:34:07:08:5b:ae:c0:a1:c3:d4:43:
62:5f:e9:f5:29:93:c4:0b:34:f2:24:00:d6:2f:dc:75:e5:7f:
2d:72:7a:18
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+QIv0216fjaxaoBKP8pGN4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAxNWYwZTY2NWE5Yzc0MjIzYzRiZmUyNzBhMTY1OWFkZTRj
ZWYzMWYwHhcNMjYwNzIzMTgwMDM5WhcNMjYwNzI0MTgwMDM5WjAzMTEwLwYDVQQD
Eyg2ZDY3ODljMzNiOWMzMGNmMGVlNzQ1Njc2ODUyM2I1YjUxZjU5N2UzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtVd2vSjPqjn+/9uGDd1WOP+34j7Y
mm8lW/imYaO828WFBQaRVXaTA1XaAf9RXL3CMnFFLVs2LeTIkkXwPYQwMUA2Efll
BiwMCecMBLH7RmuRUQv7pGCI4WNQxKhZVQAqc7B48+ooJaFNtVEEt0s6SARE42nn
r8uoLk9ZVQmTK+EOKcOkjZkh2eSs4J8pxoMfdXOeT1etadKI0RLQV2LFY7lhyKz1
yBbl1Lge4mRR8aLJWTTrxAkt8yq2KVkljEDCrjZF+G4cjRMBoP8/mfd7FKh2BHbk
Qx6JWVSqIGBnrhWQk/alykBv5BziY8+iHotBTV+gO0Qzg/nS6fz+Tesc+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG1nicM7nDDPDudFZ2hSO1tR9ZfjMB8GA1UdIwQY
MBaAFAFfDmZanHQiPEv+JwoWWa3kzvMfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQVY4T1pscWNkQ0k4U180bkNoWlpyZVRPOHg4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni80NmJkMzMtYjUyNy00NjJlLTgxZTAt
ODY3N2IzZGQ4NzA3LzEvQVY4T1pscWNkQ0k4U180bkNoWlpyZVRPOHg4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni80NmJkMzMtYjUyNy00NjJlLTgxZTAtODY3N2IzZGQ4NzA3
LzEvQVY4T1pscWNkQ0k4U180bkNoWlpyZVRPOHg4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmm5uKJYS
EDjxDbbJNPsKDvji8YEuv1Ug7x7JFGSqRtobrfDPO8vTJ1q0fdcvycrlEyT4/hVz
bAF2Bw+DMhrQv8p16FZIKKzphbESqwfDU4J+BUgOn1PjHDCu43m6n20/yuzPMyuk
vhmS+wQoVbSS0rslmeVrxcqT3suJTJv2vAXiZK121EGOQvw0Iahzt9nI8fxsUIzn
CthwuEToqi78zyEEFn93ObK7X91LPhKk0MdFJbNEShnRCakDM5vxaVRCibJyRWt+
6ATG4FylGgXXINP525+7tZgcyPE0xm9F4M00BwhbrsChw9RDYl/p9SmTxAs08iQA
1i/cdeV/LXJ6GA==
-----END CERTIFICATE-----
Generated at Fri Jul 24 00:17:39 2026 by rpki-client