Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/d6de0b-9e38-4244-b9f3-93ba820a75b7/1/aoKFGhN-YFmlwZ4lJ_OepsrXxKo.mft
File: aoKFGhN-YFmlwZ4lJ_OepsrXxKo.mft (raw, json)
Hash identifier: Xvxq3F5JCHUw0rfD6mGKFqTfxg8xwy7MiLAPtpG+il8=
Subject key identifier: 96:4F:3B:45:2F:5D:E7:B8:4D:E2:0F:1D:8C:51:39:1F:F8:15:96:DA
Authority key identifier: 6A:82:85:1A:13:7E:60:59:A5:C1:9E:25:27:F3:9E:A6:CA:D7:C4:AA
Certificate issuer: /CN=6a82851a137e6059a5c19e2527f39ea6cad7c4aa
Certificate serial: 019F8F7ED91F7FC2481A247830CA44992230
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aoKFGhN-YFmlwZ4lJ_OepsrXxKo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/d6de0b-9e38-4244-b9f3-93ba820a75b7/1/aoKFGhN-YFmlwZ4lJ_OepsrXxKo.mft
Manifest number: 40
Signing time: Thu 23 Jul 2026 15:01:22 +0000
Manifest this update: Thu 23 Jul 2026 15:01:22 +0000
Manifest next update: Fri 24 Jul 2026 15:01:22 +0000
Files and hashes: 1: 9FkvkvYKkpvtxRzhjS2Dl3OyIC8.roa (hash: ++BWUNm5eh2q9n/GsxysekfFrNVNQyGEMNFnVvfJnvw=)
2: GmPMqm-sExPGS5qeFQnTPPpdDUg.asa (hash: auZklUf5YgGzAAHvLeEe5ft8gS41CAy8rwwpS4z5H3A=)
3: aoKFGhN-YFmlwZ4lJ_OepsrXxKo.crl (hash: Y7arn8eLlcF3/gAbOIJdp/L+JEq35IG6TekpqA7Ac90=)
4: xDdkyYp6QT-6exThNJOY2QGkx2k.roa (hash: IFSLHxTz5eB1n+A0D/T5f1vKzmvjNloM94tpDCBISCg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/d6de0b-9e38-4244-b9f3-93ba820a75b7/1/aoKFGhN-YFmlwZ4lJ_OepsrXxKo.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/d6de0b-9e38-4244-b9f3-93ba820a75b7/1/aoKFGhN-YFmlwZ4lJ_OepsrXxKo.mft
rsync://rpki.ripe.net/repository/DEFAULT/aoKFGhN-YFmlwZ4lJ_OepsrXxKo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:7e:d9:1f:7f:c2:48:1a:24:78:30:ca:44:99:22:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a82851a137e6059a5c19e2527f39ea6cad7c4aa
Validity
Not Before: Jul 23 15:01:22 2026 GMT
Not After : Jul 24 15:01:22 2026 GMT
Subject: CN=964f3b452f5de7b84de20f1d8c51391ff81596da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:c5:f7:43:8e:8e:eb:53:72:f7:d6:82:b9:8f:
6f:ef:f9:92:da:c4:55:20:fa:46:fe:88:03:d6:d9:
23:90:b8:d1:1e:bd:2e:9c:64:6c:9d:7e:d2:85:0f:
b3:9f:28:1e:91:30:7a:22:99:02:b8:c3:18:fc:e8:
63:a4:bb:3c:9c:bf:04:8e:07:b3:27:2c:03:74:13:
01:85:71:b5:90:61:92:ce:2f:a1:38:ec:b8:31:9e:
a3:3b:c2:7d:a9:76:8c:bd:10:81:36:1c:dc:21:57:
11:c2:f8:07:42:d2:4c:2a:bc:d2:9b:42:78:1e:84:
4b:86:40:6e:ed:87:72:82:d1:18:cc:3a:7d:95:75:
b6:ac:76:bb:b4:04:d2:bf:50:c1:2b:e2:2b:d2:5e:
5d:3f:4d:5e:4d:f9:29:22:bd:be:e0:c2:07:af:14:
54:93:9b:ec:be:bf:47:4d:77:09:10:82:9e:d7:a0:
21:5f:a3:91:b3:7b:0e:05:8f:8a:78:e7:04:55:73:
e7:eb:5e:7d:b4:7e:cc:aa:3b:08:95:2e:a6:ba:9c:
ba:6d:f8:ec:5a:f4:e9:ba:86:c0:90:f2:a3:c5:24:
74:cb:d4:12:ec:20:70:d3:a0:71:fb:5e:72:84:82:
89:9f:cf:2b:04:a2:8d:e1:89:7e:fd:dd:8e:54:09:
8a:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:4F:3B:45:2F:5D:E7:B8:4D:E2:0F:1D:8C:51:39:1F:F8:15:96:DA
X509v3 Authority Key Identifier:
keyid:6A:82:85:1A:13:7E:60:59:A5:C1:9E:25:27:F3:9E:A6:CA:D7:C4:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aoKFGhN-YFmlwZ4lJ_OepsrXxKo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/d6de0b-9e38-4244-b9f3-93ba820a75b7/1/aoKFGhN-YFmlwZ4lJ_OepsrXxKo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/d6de0b-9e38-4244-b9f3-93ba820a75b7/1/aoKFGhN-YFmlwZ4lJ_OepsrXxKo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:c7:01:ce:60:fb:4a:b6:d5:01:32:27:7e:7c:a4:09:8f:b2:
9f:f4:cd:26:44:67:04:9a:1e:87:81:93:bf:e3:f2:ff:f3:00:
e6:23:ed:73:eb:73:3f:f4:8b:49:af:0e:81:e4:86:34:37:94:
5d:e7:ec:a4:95:6b:eb:31:a1:ac:f7:97:fe:5c:99:80:85:ec:
bb:1c:20:56:56:01:25:4e:8d:a7:8f:2c:a1:5d:21:27:09:10:
29:76:e8:db:b5:05:4c:53:33:e0:59:74:d7:76:72:aa:28:69:
ca:e7:30:ab:ed:08:22:06:a3:56:f7:86:cd:79:c0:28:33:97:
0b:c9:08:46:97:e3:26:9e:41:0c:1f:88:97:b4:c6:40:82:b6:
05:da:77:72:cf:ea:80:1b:95:4c:a7:21:fd:88:9a:ba:1d:66:
29:f1:7e:ab:23:72:fa:e7:13:a6:49:13:73:7b:70:2d:fc:93:
9f:a0:72:42:6e:fc:17:60:56:f7:dc:a7:84:f5:f1:4b:94:e2:
4e:58:01:bf:4e:b3:f6:f3:d9:22:58:e5:96:22:6e:79:1b:02:
2e:0f:9d:b3:a5:91:31:50:9f:d3:d1:3d:d3:8e:2d:64:a1:08:
ca:d7:d5:3b:3f:7a:71:bb:fd:bd:9d:9a:81:f9:29:2c:c0:b5:
dd:26:2a:bb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+Pftkff8JIGiR4MMpEmSIwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZhODI4NTFhMTM3ZTYwNTlhNWMxOWUyNTI3ZjM5ZWE2Y2Fk
N2M0YWEwHhcNMjYwNzIzMTUwMTIyWhcNMjYwNzI0MTUwMTIyWjAzMTEwLwYDVQQD
Eyg5NjRmM2I0NTJmNWRlN2I4NGRlMjBmMWQ4YzUxMzkxZmY4MTU5NmRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvMX3Q46O61Ny99aCuY9v7/mS2sRV
IPpG/ogD1tkjkLjRHr0unGRsnX7ShQ+znygekTB6IpkCuMMY/OhjpLs8nL8Ejgez
JywDdBMBhXG1kGGSzi+hOOy4MZ6jO8J9qXaMvRCBNhzcIVcRwvgHQtJMKrzSm0J4
HoRLhkBu7YdygtEYzDp9lXW2rHa7tATSv1DBK+Ir0l5dP01eTfkpIr2+4MIHrxRU
k5vsvr9HTXcJEIKe16AhX6ORs3sOBY+KeOcEVXPn6159tH7MqjsIlS6mupy6bfjs
WvTpuobAkPKjxSR0y9QS7CBw06Bx+15yhIKJn88rBKKN4Yl+/d2OVAmKtQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJZPO0UvXee4TeIPHYxROR/4FZbaMB8GA1UdIwQY
MBaAFGqChRoTfmBZpcGeJSfznqbK18SqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYW9LRkdoTi1ZRm1sd1o0bEpfT2Vwc3JYeEtvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi9kNmRlMGItOWUzOC00MjQ0LWI5ZjMt
OTNiYTgyMGE3NWI3LzEvYW9LRkdoTi1ZRm1sd1o0bEpfT2Vwc3JYeEtvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yi9kNmRlMGItOWUzOC00MjQ0LWI5ZjMtOTNiYTgyMGE3NWI3
LzEvYW9LRkdoTi1ZRm1sd1o0bEpfT2Vwc3JYeEtvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAscBzmD7
SrbVATInfnykCY+yn/TNJkRnBJoeh4GTv+Py//MA5iPtc+tzP/SLSa8OgeSGNDeU
XefspJVr6zGhrPeX/lyZgIXsuxwgVlYBJU6Np48soV0hJwkQKXbo27UFTFMz4Fl0
13Zyqihpyucwq+0IIgajVveGzXnAKDOXC8kIRpfjJp5BDB+Il7TGQIK2Bdp3cs/q
gBuVTKch/Yiauh1mKfF+qyNy+ucTpkkTc3twLfyTn6ByQm78F2BW99ynhPXxS5Ti
TlgBv06z9vPZIljlliJueRsCLg+ds6WRMVCf09E9044tZKEIytfVOz96cbv9vZ2a
gfkpLMC13SYquw==
-----END CERTIFICATE-----
Generated at Thu Jul 23 19:00:11 2026 by rpki-client