Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/bc5034-600a-49b3-84b9-ac1edbb477c0/1/aMIVYLEiGc-Oq1X3TZjy6a7VF0Y.mft
File: aMIVYLEiGc-Oq1X3TZjy6a7VF0Y.mft (raw, json)
Hash identifier: +3MiRMgbHs5YBBtUTf9TnnmP44mi3dvuNMG5HgWTi9s=
Subject key identifier: 37:4B:D0:B0:84:F4:F7:97:7E:C2:D3:A7:B4:A0:51:3D:AF:24:95:6C
Authority key identifier: 68:C2:15:60:B1:22:19:CF:8E:AB:55:F7:4D:98:F2:E9:AE:D5:17:46
Certificate issuer: /CN=68c21560b12219cf8eab55f74d98f2e9aed51746
Certificate serial: 019F92ED14F7AC2012BA0C10D37F15A79AD9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aMIVYLEiGc-Oq1X3TZjy6a7VF0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/bc5034-600a-49b3-84b9-ac1edbb477c0/1/aMIVYLEiGc-Oq1X3TZjy6a7VF0Y.mft
Manifest number: 19C9
Signing time: Fri 24 Jul 2026 07:00:38 +0000
Manifest this update: Fri 24 Jul 2026 07:00:38 +0000
Manifest next update: Sat 25 Jul 2026 07:00:38 +0000
Files and hashes: 1: aMIVYLEiGc-Oq1X3TZjy6a7VF0Y.crl (hash: ieefN/aYFtZZTTKc0cW+out1VsXtK8sMUA+Nk8YuLGo=)
2: vog51KGgHd0dKzK6jl8SFvGeQr0.roa (hash: NjFEPRuXVC6oTMw2/sjvsPbGX/HK2xYJiVPG08AEZw4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/bc5034-600a-49b3-84b9-ac1edbb477c0/1/aMIVYLEiGc-Oq1X3TZjy6a7VF0Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/bc5034-600a-49b3-84b9-ac1edbb477c0/1/aMIVYLEiGc-Oq1X3TZjy6a7VF0Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/aMIVYLEiGc-Oq1X3TZjy6a7VF0Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 07:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:ed:14:f7:ac:20:12:ba:0c:10:d3:7f:15:a7:9a:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68c21560b12219cf8eab55f74d98f2e9aed51746
Validity
Not Before: Jul 24 07:00:38 2026 GMT
Not After : Jul 25 07:00:38 2026 GMT
Subject: CN=374bd0b084f4f7977ec2d3a7b4a0513daf24956c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:cb:92:8a:ec:dd:72:ae:9a:c9:ae:0a:9a:d9:
d4:84:fb:81:4e:1c:6d:d3:3f:ff:4b:e7:a0:8f:51:
56:19:e7:2d:dc:07:0f:9c:af:28:1b:1f:65:a8:f7:
01:bd:78:9b:ed:b2:e5:46:51:0a:3f:e8:cc:3a:d8:
2e:ce:58:e0:69:87:96:3e:07:af:d6:44:76:ae:1c:
ad:94:49:65:0c:06:5b:ce:09:2a:09:5a:df:a8:32:
c2:fe:a3:bf:ea:44:1d:74:c1:78:d2:52:35:d4:5c:
a2:f7:48:a7:1c:6e:cc:41:39:ce:31:a5:9c:c6:f7:
da:92:f4:e5:5f:df:a5:73:da:c4:49:ec:8b:6e:52:
b6:9c:71:a7:f6:34:18:45:d5:38:43:c6:6f:57:c5:
d9:c1:37:4b:34:62:90:ee:94:57:34:73:0d:f2:40:
f3:4a:32:df:80:25:ce:53:76:fb:9c:ff:0f:ac:41:
3b:17:42:91:da:41:90:c8:59:03:b1:23:f5:fb:1f:
d6:c8:50:0b:17:91:96:fb:d8:8a:69:7c:69:53:46:
19:b2:2f:f6:d0:fa:e6:09:0d:21:68:03:02:86:f8:
66:a7:8f:6c:52:73:13:b7:06:40:5e:4e:0b:61:6a:
f5:10:fa:c8:46:ac:d6:b0:2e:c2:a8:1e:52:2b:8e:
38:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:4B:D0:B0:84:F4:F7:97:7E:C2:D3:A7:B4:A0:51:3D:AF:24:95:6C
X509v3 Authority Key Identifier:
keyid:68:C2:15:60:B1:22:19:CF:8E:AB:55:F7:4D:98:F2:E9:AE:D5:17:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aMIVYLEiGc-Oq1X3TZjy6a7VF0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/bc5034-600a-49b3-84b9-ac1edbb477c0/1/aMIVYLEiGc-Oq1X3TZjy6a7VF0Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/bc5034-600a-49b3-84b9-ac1edbb477c0/1/aMIVYLEiGc-Oq1X3TZjy6a7VF0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:e5:25:56:92:6e:1b:0c:0c:e6:69:94:5e:06:d8:34:e9:f0:
47:00:54:81:85:7a:22:cf:bc:ec:25:fb:0b:66:78:ae:1c:97:
89:67:8b:47:65:5b:d1:bf:21:76:0c:39:5d:70:dc:64:af:c2:
ca:43:09:55:cb:00:50:ca:3c:06:a7:ac:77:f1:a7:09:86:ee:
02:0a:9a:05:5a:5c:ff:e4:69:f7:9f:d3:25:90:9c:48:97:08:
81:39:81:60:97:28:42:91:af:71:b8:6a:00:45:59:78:70:9b:
c3:a1:bd:29:ec:ae:6f:05:03:ed:0f:1e:78:c3:37:8e:70:95:
4f:7d:f8:59:dd:be:ed:2e:df:c1:63:46:17:c1:19:b5:97:da:
91:81:dc:fd:ff:1f:68:5a:85:d6:1b:5b:27:33:1b:d8:3c:64:
f3:f4:e3:11:7d:10:dc:1a:f7:68:32:9a:08:af:c6:d3:04:39:
cb:b8:72:0c:a1:91:ed:e4:44:0b:2b:5a:8c:93:60:25:a1:f2:
f7:a9:dd:57:3e:cb:eb:d9:3c:5b:ca:29:6e:a2:fb:55:c5:16:
75:e3:58:53:7e:5b:4a:22:b7:c8:4e:8c:ad:04:31:35:14:e8:
0e:98:09:72:79:9b:b9:e0:1c:c1:29:50:3d:c5:30:e0:1e:2f:
c2:a4:f5:39
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+S7RT3rCASugwQ038Vp5rZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY4YzIxNTYwYjEyMjE5Y2Y4ZWFiNTVmNzRkOThmMmU5YWVk
NTE3NDYwHhcNMjYwNzI0MDcwMDM4WhcNMjYwNzI1MDcwMDM4WjAzMTEwLwYDVQQD
EygzNzRiZDBiMDg0ZjRmNzk3N2VjMmQzYTdiNGEwNTEzZGFmMjQ5NTZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy8uSiuzdcq6aya4KmtnUhPuBThxt
0z//S+egj1FWGect3AcPnK8oGx9lqPcBvXib7bLlRlEKP+jMOtguzljgaYeWPgev
1kR2rhytlEllDAZbzgkqCVrfqDLC/qO/6kQddMF40lI11Fyi90inHG7MQTnOMaWc
xvfakvTlX9+lc9rESeyLblK2nHGn9jQYRdU4Q8ZvV8XZwTdLNGKQ7pRXNHMN8kDz
SjLfgCXOU3b7nP8PrEE7F0KR2kGQyFkDsSP1+x/WyFALF5GW+9iKaXxpU0YZsi/2
0PrmCQ0haAMChvhmp49sUnMTtwZAXk4LYWr1EPrIRqzWsC7CqB5SK444owIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDdL0LCE9PeXfsLTp7SgUT2vJJVsMB8GA1UdIwQY
MBaAFGjCFWCxIhnPjqtV902Y8umu1RdGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYU1JVllMRWlHYy1PcTFYM1Raank2YTdWRjBZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC9iYzUwMzQtNjAwYS00OWIzLTg0Yjkt
YWMxZWRiYjQ3N2MwLzEvYU1JVllMRWlHYy1PcTFYM1Raank2YTdWRjBZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MC9iYzUwMzQtNjAwYS00OWIzLTg0YjktYWMxZWRiYjQ3N2Mw
LzEvYU1JVllMRWlHYy1PcTFYM1Raank2YTdWRjBZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA+UlVpJu
GwwM5mmUXgbYNOnwRwBUgYV6Is+87CX7C2Z4rhyXiWeLR2Vb0b8hdgw5XXDcZK/C
ykMJVcsAUMo8Bqesd/GnCYbuAgqaBVpc/+Rp95/TJZCcSJcIgTmBYJcoQpGvcbhq
AEVZeHCbw6G9KeyubwUD7Q8eeMM3jnCVT334Wd2+7S7fwWNGF8EZtZfakYHc/f8f
aFqF1htbJzMb2Dxk8/TjEX0Q3Br3aDKaCK/G0wQ5y7hyDKGR7eRECytajJNgJaHy
96ndVz7L69k8W8opbqL7VcUWdeNYU35bSiK3yE6MrQQxNRToDpgJcnmbueAcwSlQ
PcUw4B4vwqT1OQ==
-----END CERTIFICATE-----
Generated at Fri Jul 24 14:40:35 2026 by rpki-client