Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/6e272d-add1-41ec-954b-220bc43cd246/1/aJwdYcDzPDCwC1yoChXR0lVsB0M.mft
File: aJwdYcDzPDCwC1yoChXR0lVsB0M.mft (raw, json)
Hash identifier: gzSMvepvSE/eGmfXC1RqeVMLK38+aMUlrBXWtOKJYik=
Subject key identifier: 7A:D0:A9:D9:9B:6C:EB:73:87:2B:74:7C:44:6E:63:19:33:8A:37:BC
Authority key identifier: 68:9C:1D:61:C0:F3:3C:30:B0:0B:5C:A8:0A:15:D1:D2:55:6C:07:43
Certificate issuer: /CN=689c1d61c0f33c30b00b5ca80a15d1d2556c0743
Certificate serial: 019F93241602E07B7D673F63239A6BC2694F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aJwdYcDzPDCwC1yoChXR0lVsB0M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/6e272d-add1-41ec-954b-220bc43cd246/1/aJwdYcDzPDCwC1yoChXR0lVsB0M.mft
Manifest number: 02A5
Signing time: Fri 24 Jul 2026 08:00:43 +0000
Manifest this update: Fri 24 Jul 2026 08:00:43 +0000
Manifest next update: Sat 25 Jul 2026 08:00:43 +0000
Files and hashes: 1: _TtZJ5msDlGsiXnHSOsz0-Eiy9I.roa (hash: c2TwS42atkIHb7NKIN/wGgnVceX4RG+uR7le8c7mQSI=)
2: aJwdYcDzPDCwC1yoChXR0lVsB0M.crl (hash: wh64WHXDvFUSMZ7dBCIsDIZuKfrHe0U0jeBIjwzX3H4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/6e272d-add1-41ec-954b-220bc43cd246/1/aJwdYcDzPDCwC1yoChXR0lVsB0M.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/6e272d-add1-41ec-954b-220bc43cd246/1/aJwdYcDzPDCwC1yoChXR0lVsB0M.mft
rsync://rpki.ripe.net/repository/DEFAULT/aJwdYcDzPDCwC1yoChXR0lVsB0M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:24:16:02:e0:7b:7d:67:3f:63:23:9a:6b:c2:69:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=689c1d61c0f33c30b00b5ca80a15d1d2556c0743
Validity
Not Before: Jul 24 08:00:43 2026 GMT
Not After : Jul 25 08:00:43 2026 GMT
Subject: CN=7ad0a9d99b6ceb73872b747c446e6319338a37bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:47:f7:f7:47:c6:1e:09:56:1e:8c:8d:3e:c8:
f5:33:d5:41:28:ba:3a:37:1e:9c:63:74:5b:43:bc:
ff:0f:10:46:bb:9e:43:85:60:1a:e3:78:43:94:8e:
77:3f:df:36:69:63:71:04:71:81:31:45:37:57:cd:
fb:86:40:65:10:dc:42:33:d3:3d:62:32:79:43:9f:
42:49:83:c8:62:39:86:c7:17:bb:4f:a2:4d:34:c9:
01:dc:cf:79:06:d9:ee:63:62:01:f2:01:11:3b:05:
ee:93:6b:f6:73:2f:94:e6:1d:7d:be:c9:00:b2:40:
43:1e:ae:4e:e3:ec:86:76:4e:ac:28:9c:2f:bf:58:
5c:7a:78:93:6e:4f:93:7b:86:c3:ab:fa:25:0f:06:
93:b0:c2:e6:cc:09:5d:ee:8f:1c:ba:e0:d5:68:24:
16:dc:49:15:ca:ae:1c:75:1c:ce:df:63:dc:0d:5a:
49:16:f6:94:63:99:96:21:4b:91:c5:15:57:3b:f9:
d5:72:f4:49:ee:cc:fe:2e:02:28:9c:09:16:3e:d6:
e5:2b:29:8d:61:05:7d:89:63:65:c4:3f:a2:5f:f4:
15:0f:a5:d3:e0:6e:20:0d:3c:98:18:8e:74:53:db:
46:bb:91:c3:c9:be:fb:5d:d2:a0:8b:3a:ff:12:36:
99:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:D0:A9:D9:9B:6C:EB:73:87:2B:74:7C:44:6E:63:19:33:8A:37:BC
X509v3 Authority Key Identifier:
keyid:68:9C:1D:61:C0:F3:3C:30:B0:0B:5C:A8:0A:15:D1:D2:55:6C:07:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aJwdYcDzPDCwC1yoChXR0lVsB0M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/6e272d-add1-41ec-954b-220bc43cd246/1/aJwdYcDzPDCwC1yoChXR0lVsB0M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/6e272d-add1-41ec-954b-220bc43cd246/1/aJwdYcDzPDCwC1yoChXR0lVsB0M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:6b:e8:9d:b8:0c:90:ef:60:31:8b:4e:48:a7:0b:11:ab:55:
dd:4c:af:85:f2:9d:a4:27:53:ce:8a:05:eb:bb:2b:83:7f:0d:
0e:2f:08:7e:de:71:2b:0a:24:56:e5:82:e5:f7:c1:a9:03:31:
11:67:30:27:3c:1f:fe:e7:3c:3c:2a:a9:df:9f:85:cf:c1:bf:
ad:03:83:8e:d8:f7:8d:30:f5:9c:eb:ba:04:a4:0f:97:c3:ef:
15:9d:ca:eb:13:e7:74:ed:a8:20:91:be:6c:29:24:27:37:37:
eb:e7:85:dd:5c:97:e7:f6:84:9c:5b:48:36:e0:3c:43:2d:41:
d5:12:bf:68:c9:a1:c1:a9:4b:5a:68:07:e8:d8:99:9f:61:b0:
59:db:b0:b8:e2:66:9b:e7:a8:8e:2e:e0:d3:1c:d3:3d:3a:aa:
ab:68:0f:1f:c0:44:50:a9:2c:53:fb:a8:97:cc:8f:02:c6:9a:
4f:73:0d:85:de:a0:c1:14:10:b2:34:ed:ec:5b:c3:8f:2f:cc:
bc:90:34:62:73:86:15:c3:4a:e7:0a:79:8f:03:42:cd:fc:5d:
2f:53:d2:8f:c1:a3:17:31:a1:36:a4:4c:9d:db:7c:75:e9:5e:
b7:e6:6b:b7:ed:a5:33:a6:aa:db:28:31:07:17:88:ea:7d:72:
43:60:00:75
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+TJBYC4Ht9Zz9jI5prwmlPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY4OWMxZDYxYzBmMzNjMzBiMDBiNWNhODBhMTVkMWQyNTU2
YzA3NDMwHhcNMjYwNzI0MDgwMDQzWhcNMjYwNzI1MDgwMDQzWjAzMTEwLwYDVQQD
Eyg3YWQwYTlkOTliNmNlYjczODcyYjc0N2M0NDZlNjMxOTMzOGEzN2JjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwkf390fGHglWHoyNPsj1M9VBKLo6
Nx6cY3RbQ7z/DxBGu55DhWAa43hDlI53P982aWNxBHGBMUU3V837hkBlENxCM9M9
YjJ5Q59CSYPIYjmGxxe7T6JNNMkB3M95BtnuY2IB8gEROwXuk2v2cy+U5h19vskA
skBDHq5O4+yGdk6sKJwvv1hceniTbk+Te4bDq/olDwaTsMLmzAld7o8cuuDVaCQW
3EkVyq4cdRzO32PcDVpJFvaUY5mWIUuRxRVXO/nVcvRJ7sz+LgIonAkWPtblKymN
YQV9iWNlxD+iX/QVD6XT4G4gDTyYGI50U9tGu5HDyb77XdKgizr/EjaZRwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHrQqdmbbOtzhyt0fERuYxkzije8MB8GA1UdIwQY
MBaAFGicHWHA8zwwsAtcqAoV0dJVbAdDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYUp3ZFljRHpQREN3QzF5b0NoWFIwbFZzQjBNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS82ZTI3MmQtYWRkMS00MWVjLTk1NGIt
MjIwYmM0M2NkMjQ2LzEvYUp3ZFljRHpQREN3QzF5b0NoWFIwbFZzQjBNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OS82ZTI3MmQtYWRkMS00MWVjLTk1NGItMjIwYmM0M2NkMjQ2
LzEvYUp3ZFljRHpQREN3QzF5b0NoWFIwbFZzQjBNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEmvonbgM
kO9gMYtOSKcLEatV3UyvhfKdpCdTzooF67srg38NDi8Ift5xKwokVuWC5ffBqQMx
EWcwJzwf/uc8PCqp35+Fz8G/rQODjtj3jTD1nOu6BKQPl8PvFZ3K6xPndO2oIJG+
bCkkJzc36+eF3VyX5/aEnFtINuA8Qy1B1RK/aMmhwalLWmgH6NiZn2GwWduwuOJm
m+eoji7g0xzTPTqqq2gPH8BEUKksU/uol8yPAsaaT3MNhd6gwRQQsjTt7FvDjy/M
vJA0YnOGFcNK5wp5jwNCzfxdL1PSj8GjFzGhNqRMndt8delet+Zrt+2lM6aq2ygx
BxeI6n1yQ2AAdQ==
-----END CERTIFICATE-----
Generated at Fri Jul 24 14:17:47 2026 by rpki-client