Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/fbc141-99fc-4f83-b585-0fe6f55db3f6/1/Ap6YM29qbMnbzx7LSJVYDwlOPis.mft
File: Ap6YM29qbMnbzx7LSJVYDwlOPis.mft (raw, json)
Hash identifier: FsuNhPTHM3umDkibKKp2mFiuUYR+XprsYHN/ukniTrQ=
Subject key identifier: BC:4F:2A:63:BE:86:13:12:53:07:30:33:55:C6:E3:15:08:73:58:46
Authority key identifier: 02:9E:98:33:6F:6A:6C:C9:DB:CF:1E:CB:48:95:58:0F:09:4E:3E:2B
Certificate issuer: /CN=029e98336f6a6cc9dbcf1ecb4895580f094e3e2b
Certificate serial: 019F905A52F3480E47EDDED3FDC0C1805AED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ap6YM29qbMnbzx7LSJVYDwlOPis.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/fbc141-99fc-4f83-b585-0fe6f55db3f6/1/Ap6YM29qbMnbzx7LSJVYDwlOPis.mft
Manifest number: 10B7
Signing time: Thu 23 Jul 2026 19:01:06 +0000
Manifest this update: Thu 23 Jul 2026 19:01:06 +0000
Manifest next update: Fri 24 Jul 2026 19:01:06 +0000
Files and hashes: 1: Ap6YM29qbMnbzx7LSJVYDwlOPis.crl (hash: HYRh7HbTCbG8iaahFiq4ObEirJwIlK48Z33UdiE6T0Y=)
2: p_4t5r1LIVM__Crw-eZAOlvObAY.roa (hash: 5BvLVMvi5NBU8nHQD8cDw6h+veyzG8axQK09AoRrWAs=)
3: zBYtGjJx0SDgAamEQM20aTAainM.roa (hash: SpCq7G69+l1y5Xw0RtXWj3cYKHjMPmny1b0+UtkUplE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/fbc141-99fc-4f83-b585-0fe6f55db3f6/1/Ap6YM29qbMnbzx7LSJVYDwlOPis.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/fbc141-99fc-4f83-b585-0fe6f55db3f6/1/Ap6YM29qbMnbzx7LSJVYDwlOPis.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ap6YM29qbMnbzx7LSJVYDwlOPis.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 19:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:5a:52:f3:48:0e:47:ed:de:d3:fd:c0:c1:80:5a:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=029e98336f6a6cc9dbcf1ecb4895580f094e3e2b
Validity
Not Before: Jul 23 19:01:06 2026 GMT
Not After : Jul 24 19:01:06 2026 GMT
Subject: CN=bc4f2a63be8613125307303355c6e31508735846
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:f2:78:c6:ee:fd:32:94:64:d1:0a:83:13:3a:
d8:0e:a6:f6:24:11:40:71:da:1d:49:27:b8:1d:37:
c8:b1:7f:63:ba:16:94:fd:60:36:9d:4b:2d:73:d8:
f4:61:f4:16:51:1b:8c:ab:26:df:93:16:bf:16:82:
d7:06:41:d4:65:56:60:a9:48:59:18:c1:aa:43:27:
60:95:04:09:82:83:d3:a2:65:f3:f1:23:d7:87:93:
e4:e7:64:8a:72:c6:93:2d:58:6f:23:83:f4:b0:be:
99:65:93:27:c4:14:f6:7c:c8:5e:6d:bb:83:6b:94:
f3:bd:c6:d6:96:d4:f6:5f:cf:25:cc:3e:eb:c3:b9:
a6:c0:80:4a:df:23:50:5a:de:75:81:87:02:ce:ef:
a8:ec:db:5b:4b:48:39:fc:98:ed:09:6e:63:ca:9f:
c2:a0:24:41:1f:46:3f:4b:1b:79:47:11:3f:af:81:
69:07:8b:ef:84:e6:55:56:81:38:5c:ce:4a:98:2d:
45:08:22:fc:82:83:11:67:d6:70:36:5d:17:a2:80:
bf:b8:64:f8:7a:36:de:24:35:df:5e:92:90:8b:87:
6f:b5:b8:25:16:37:87:6d:a8:48:13:86:54:f7:2d:
ca:d8:7c:21:8c:3c:57:73:f5:8e:f4:48:1e:56:ed:
61:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:4F:2A:63:BE:86:13:12:53:07:30:33:55:C6:E3:15:08:73:58:46
X509v3 Authority Key Identifier:
keyid:02:9E:98:33:6F:6A:6C:C9:DB:CF:1E:CB:48:95:58:0F:09:4E:3E:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ap6YM29qbMnbzx7LSJVYDwlOPis.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/fbc141-99fc-4f83-b585-0fe6f55db3f6/1/Ap6YM29qbMnbzx7LSJVYDwlOPis.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/fbc141-99fc-4f83-b585-0fe6f55db3f6/1/Ap6YM29qbMnbzx7LSJVYDwlOPis.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:86:f7:e3:46:4f:7e:e4:6c:d8:e1:c5:56:5d:90:6b:6e:65:
e4:31:28:c5:bc:59:16:3e:3e:1b:60:c3:30:b2:af:9e:1e:b9:
13:28:af:ba:63:d2:2e:99:19:00:83:69:8b:ab:ec:20:5a:e9:
2a:b9:86:b6:70:a9:1a:91:7b:7f:64:1f:36:c8:c3:12:e3:db:
15:e8:09:55:5a:47:65:7b:50:a8:c2:9f:f4:a4:06:2b:51:dd:
d4:9b:2d:19:d2:43:21:c1:6a:57:d8:bd:86:e9:3d:c1:46:4e:
4a:88:f3:2d:76:2d:f1:73:44:34:ba:3a:3b:f7:64:e5:21:fc:
dc:1e:6c:0c:0a:0e:ee:91:17:26:71:24:bd:24:55:6c:66:9f:
1f:d7:74:bd:5b:3f:92:30:97:1f:8b:81:6c:9f:e0:c1:ba:c4:
41:b6:d7:2a:6d:35:65:21:6b:64:23:f7:b2:62:c4:2a:09:51:
ee:06:1f:56:9d:f2:30:c8:33:c5:eb:a0:6d:16:56:82:5c:fb:
55:11:d7:b0:46:62:f8:08:40:4a:a8:8d:bd:0b:f4:65:dc:e4:
87:fe:2a:83:f3:49:f1:07:d1:f6:4f:4d:39:70:7d:cc:84:52:
6b:a7:d7:d0:9c:f8:c3:af:de:a5:3a:f1:fb:93:a5:4b:15:0c:
ed:08:35:71
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+QWlLzSA5H7d7T/cDBgFrtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAyOWU5ODMzNmY2YTZjYzlkYmNmMWVjYjQ4OTU1ODBmMDk0
ZTNlMmIwHhcNMjYwNzIzMTkwMTA2WhcNMjYwNzI0MTkwMTA2WjAzMTEwLwYDVQQD
EyhiYzRmMmE2M2JlODYxMzEyNTMwNzMwMzM1NWM2ZTMxNTA4NzM1ODQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvPJ4xu79MpRk0QqDEzrYDqb2JBFA
cdodSSe4HTfIsX9juhaU/WA2nUstc9j0YfQWURuMqybfkxa/FoLXBkHUZVZgqUhZ
GMGqQydglQQJgoPTomXz8SPXh5Pk52SKcsaTLVhvI4P0sL6ZZZMnxBT2fMhebbuD
a5TzvcbWltT2X88lzD7rw7mmwIBK3yNQWt51gYcCzu+o7NtbS0g5/JjtCW5jyp/C
oCRBH0Y/Sxt5RxE/r4FpB4vvhOZVVoE4XM5KmC1FCCL8goMRZ9ZwNl0XooC/uGT4
ejbeJDXfXpKQi4dvtbglFjeHbahIE4ZU9y3K2HwhjDxXc/WO9EgeVu1hBwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLxPKmO+hhMSUwcwM1XG4xUIc1hGMB8GA1UdIwQY
MBaAFAKemDNvamzJ288ey0iVWA8JTj4rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQXA2WU0yOXFiTW5ieng3TFNKVllEd2xPUGlzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS9mYmMxNDEtOTlmYy00ZjgzLWI1ODUt
MGZlNmY1NWRiM2Y2LzEvQXA2WU0yOXFiTW5ieng3TFNKVllEd2xPUGlzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82YS9mYmMxNDEtOTlmYy00ZjgzLWI1ODUtMGZlNmY1NWRiM2Y2
LzEvQXA2WU0yOXFiTW5ieng3TFNKVllEd2xPUGlzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT4b340ZP
fuRs2OHFVl2Qa25l5DEoxbxZFj4+G2DDMLKvnh65EyivumPSLpkZAINpi6vsIFrp
KrmGtnCpGpF7f2QfNsjDEuPbFegJVVpHZXtQqMKf9KQGK1Hd1JstGdJDIcFqV9i9
huk9wUZOSojzLXYt8XNENLo6O/dk5SH83B5sDAoO7pEXJnEkvSRVbGafH9d0vVs/
kjCXH4uBbJ/gwbrEQbbXKm01ZSFrZCP3smLEKglR7gYfVp3yMMgzxeugbRZWglz7
VRHXsEZi+AhASqiNvQv0Zdzkh/4qg/NJ8QfR9k9NOXB9zIRSa6fX0Jz4w6/epTrx
+5OlSxUM7Qg1cQ==
-----END CERTIFICATE-----
Generated at Fri Jul 24 05:11:20 2026 by rpki-client