Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/515240-b594-469b-a992-ec72d6ada04a/1/aYhRnekYGF-24euv0eCDXKoRMuQ.mft
File: aYhRnekYGF-24euv0eCDXKoRMuQ.mft (raw, json)
Hash identifier: MxQLWC23bQ2ux/sXdJjhRl5+wtnTMU2+6DGYo5IGqL0=
Subject key identifier: 18:48:B7:D6:21:4F:F9:3D:04:95:2F:40:B0:D7:F2:3B:39:E4:14:92
Authority key identifier: 69:88:51:9D:E9:18:18:5F:B6:E1:EB:AF:D1:E0:83:5C:AA:11:32:E4
Certificate issuer: /CN=6988519de918185fb6e1ebafd1e0835caa1132e4
Certificate serial: 019F8F7F34C4D764866B5CFF2AE96417815F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aYhRnekYGF-24euv0eCDXKoRMuQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/515240-b594-469b-a992-ec72d6ada04a/1/aYhRnekYGF-24euv0eCDXKoRMuQ.mft
Manifest number: 148E
Signing time: Thu 23 Jul 2026 15:01:46 +0000
Manifest this update: Thu 23 Jul 2026 15:01:46 +0000
Manifest next update: Fri 24 Jul 2026 15:01:46 +0000
Files and hashes: 1: Rj654wxOc7CYmhdeFWwzAPTGmcY.roa (hash: bE/60tP6y/3xEx8we1t/vv11WKgWD0rrGL4Yu6/Wkw8=)
2: UNFdj_dmEx775tbeS-AdmcBAiAE.roa (hash: GIoAJC41bvDl3yvA5gqVhCuJLL8h9+anwpxNy9MCtyo=)
3: aYhRnekYGF-24euv0eCDXKoRMuQ.crl (hash: isdgkmIP23wPP0cDMHkkF7bKYUjNvY38vPeN9Pcpgzg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/515240-b594-469b-a992-ec72d6ada04a/1/aYhRnekYGF-24euv0eCDXKoRMuQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/515240-b594-469b-a992-ec72d6ada04a/1/aYhRnekYGF-24euv0eCDXKoRMuQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/aYhRnekYGF-24euv0eCDXKoRMuQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:7f:34:c4:d7:64:86:6b:5c:ff:2a:e9:64:17:81:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6988519de918185fb6e1ebafd1e0835caa1132e4
Validity
Not Before: Jul 23 15:01:46 2026 GMT
Not After : Jul 24 15:01:46 2026 GMT
Subject: CN=1848b7d6214ff93d04952f40b0d7f23b39e41492
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fd:b0:16:0f:ca:78:35:03:a3:4e:da:3b:be:a4:
51:85:87:e2:a4:bc:75:29:03:56:ca:17:f1:5d:b8:
47:a7:2c:69:d1:59:38:8e:f2:61:f1:2b:8f:99:f5:
27:8a:0e:1b:84:2c:ed:73:fb:12:5b:df:d6:3e:83:
52:ac:9b:aa:3f:c9:b9:b8:a7:46:e3:e3:28:8b:b3:
4f:53:70:91:b3:c1:23:40:06:e3:61:f5:22:07:4c:
6c:08:63:6e:05:56:31:b6:38:f7:35:0a:1d:89:14:
d4:94:23:e1:ed:1b:97:72:b9:23:8b:73:1b:bd:df:
ba:52:2a:5c:09:17:c9:37:6b:5e:ca:d9:20:91:96:
52:b5:d5:71:e3:af:49:36:9e:97:9d:fc:2d:69:d1:
fa:a2:72:ea:dc:4c:ed:31:40:d6:d6:ac:20:14:a6:
a0:c4:01:a6:77:f1:57:a0:6a:12:50:c6:66:ab:dd:
04:96:65:2d:fc:ea:3d:c5:90:97:d2:65:d8:b9:62:
d5:c5:1e:49:27:c8:93:a0:65:1c:27:f7:2b:77:c5:
3f:08:d1:24:ee:c6:94:13:29:bd:c0:5d:a8:93:01:
67:85:b2:90:51:6a:53:92:3d:29:48:5d:4e:b3:ac:
23:57:09:43:b7:bc:ca:15:af:ac:f2:ad:53:59:d4:
16:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:48:B7:D6:21:4F:F9:3D:04:95:2F:40:B0:D7:F2:3B:39:E4:14:92
X509v3 Authority Key Identifier:
keyid:69:88:51:9D:E9:18:18:5F:B6:E1:EB:AF:D1:E0:83:5C:AA:11:32:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aYhRnekYGF-24euv0eCDXKoRMuQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/515240-b594-469b-a992-ec72d6ada04a/1/aYhRnekYGF-24euv0eCDXKoRMuQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/515240-b594-469b-a992-ec72d6ada04a/1/aYhRnekYGF-24euv0eCDXKoRMuQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:13:7f:e0:f6:07:5e:19:9f:d6:e6:c0:a5:30:a5:5e:6f:f4:
00:93:19:02:4e:5e:1b:1e:f2:4a:85:c9:16:af:9b:f1:ba:22:
d9:07:4e:90:b1:41:7a:35:e5:ac:37:d6:af:93:f3:e7:76:2d:
c7:22:ea:ac:1d:55:2e:11:13:eb:a8:1c:24:86:fd:3f:b9:ef:
b3:c8:70:0e:73:a0:8c:5a:30:16:db:9f:ee:eb:39:9a:f5:02:
b5:47:e4:95:f9:e5:c6:19:db:d1:9c:28:19:9d:54:b3:f2:a0:
60:9e:dc:19:a1:4c:51:55:fa:2b:0d:69:fa:97:4f:c5:fc:41:
f5:af:ac:67:c7:eb:7b:ed:d4:1a:bd:b9:3b:5b:ad:dc:68:06:
c9:b8:3a:9c:a4:1d:41:0e:a8:13:b3:e5:d4:59:cc:a8:f9:ec:
30:df:1f:aa:0b:fe:a6:87:d7:e8:1c:76:78:27:38:08:75:47:
58:e7:3c:22:fa:ca:cc:84:2d:49:1b:8a:5d:e2:fd:35:f5:a7:
d9:23:5a:8c:96:c9:ec:b6:f4:b2:36:46:aa:59:e9:f6:6c:f3:
f4:89:de:23:cc:1a:70:f6:49:b0:a2:3f:55:e9:8c:f7:d3:7c:
5a:5d:9b:a2:3a:10:34:5d:66:99:0a:e1:bc:c6:57:9f:68:57:
9f:2c:d0:f3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+PfzTE12SGa1z/KulkF4FfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY5ODg1MTlkZTkxODE4NWZiNmUxZWJhZmQxZTA4MzVjYWEx
MTMyZTQwHhcNMjYwNzIzMTUwMTQ2WhcNMjYwNzI0MTUwMTQ2WjAzMTEwLwYDVQQD
EygxODQ4YjdkNjIxNGZmOTNkMDQ5NTJmNDBiMGQ3ZjIzYjM5ZTQxNDkyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA/bAWD8p4NQOjTto7vqRRhYfipLx1
KQNWyhfxXbhHpyxp0Vk4jvJh8SuPmfUnig4bhCztc/sSW9/WPoNSrJuqP8m5uKdG
4+Moi7NPU3CRs8EjQAbjYfUiB0xsCGNuBVYxtjj3NQodiRTUlCPh7RuXcrkji3Mb
vd+6UipcCRfJN2teytkgkZZStdVx469JNp6XnfwtadH6onLq3EztMUDW1qwgFKag
xAGmd/FXoGoSUMZmq90ElmUt/Oo9xZCX0mXYuWLVxR5JJ8iToGUcJ/crd8U/CNEk
7saUEym9wF2okwFnhbKQUWpTkj0pSF1Os6wjVwlDt7zKFa+s8q1TWdQWiQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBhIt9YhT/k9BJUvQLDX8js55BSSMB8GA1UdIwQY
MBaAFGmIUZ3pGBhftuHrr9Hgg1yqETLkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYVloUm5la1lHRi0yNGV1djBlQ0RYS29STXVRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS81MTUyNDAtYjU5NC00NjliLWE5OTIt
ZWM3MmQ2YWRhMDRhLzEvYVloUm5la1lHRi0yNGV1djBlQ0RYS29STXVRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OS81MTUyNDAtYjU5NC00NjliLWE5OTItZWM3MmQ2YWRhMDRh
LzEvYVloUm5la1lHRi0yNGV1djBlQ0RYS29STXVRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPhN/4PYH
Xhmf1ubApTClXm/0AJMZAk5eGx7ySoXJFq+b8boi2QdOkLFBejXlrDfWr5Pz53Yt
xyLqrB1VLhET66gcJIb9P7nvs8hwDnOgjFowFtuf7us5mvUCtUfklfnlxhnb0Zwo
GZ1Us/KgYJ7cGaFMUVX6Kw1p+pdPxfxB9a+sZ8fre+3UGr25O1ut3GgGybg6nKQd
QQ6oE7Pl1FnMqPnsMN8fqgv+pofX6Bx2eCc4CHVHWOc8IvrKzIQtSRuKXeL9NfWn
2SNajJbJ7Lb0sjZGqlnp9mzz9IneI8wacPZJsKI/VemM99N8Wl2bojoQNF1mmQrh
vMZXn2hXnyzQ8w==
-----END CERTIFICATE-----
Generated at Fri Jul 24 00:23:48 2026 by rpki-client