Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/8d7e85-00c0-40e0-aa80-c7dcc2391cc9/1/rrdjIcjUae47oCOSCzcszaXeng8.mft
File: rrdjIcjUae47oCOSCzcszaXeng8.mft (raw, json)
Hash identifier: DOiejjE+e+zw/Wp37ZLdSzu38TE4tcVfVWCzzX0vI48=
Subject key identifier: 98:B2:90:E8:BD:39:1E:7A:FA:AE:9E:12:E2:43:2C:04:AB:ED:A2:A8
Authority key identifier: AE:B7:63:21:C8:D4:69:EE:3B:A0:23:92:0B:37:2C:CD:A5:DE:9E:0F
Certificate issuer: /CN=aeb76321c8d469ee3ba023920b372ccda5de9e0f
Certificate serial: 019F916C5D287CDC8A330A3116A5AF451615
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rrdjIcjUae47oCOSCzcszaXeng8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/8d7e85-00c0-40e0-aa80-c7dcc2391cc9/1/rrdjIcjUae47oCOSCzcszaXeng8.mft
Manifest number: 0B6A
Signing time: Fri 24 Jul 2026 00:00:25 +0000
Manifest this update: Fri 24 Jul 2026 00:00:25 +0000
Manifest next update: Sat 25 Jul 2026 00:00:25 +0000
Files and hashes: 1: eodQO_QecDa9A4kfpjbm-rS0pPo.roa (hash: iUWofSRT9UHvNK/hkBEFkKulPRt3pBGPPSMNCjcW5Yw=)
2: rrdjIcjUae47oCOSCzcszaXeng8.crl (hash: 6bQ5lWrBTJHeUZN1oBEL3evT+e34dZjicHKupcT9ZIA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/8d7e85-00c0-40e0-aa80-c7dcc2391cc9/1/rrdjIcjUae47oCOSCzcszaXeng8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/8d7e85-00c0-40e0-aa80-c7dcc2391cc9/1/rrdjIcjUae47oCOSCzcszaXeng8.mft
rsync://rpki.ripe.net/repository/DEFAULT/rrdjIcjUae47oCOSCzcszaXeng8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:6c:5d:28:7c:dc:8a:33:0a:31:16:a5:af:45:16:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aeb76321c8d469ee3ba023920b372ccda5de9e0f
Validity
Not Before: Jul 24 00:00:25 2026 GMT
Not After : Jul 25 00:00:25 2026 GMT
Subject: CN=98b290e8bd391e7afaae9e12e2432c04abeda2a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:df:c7:c0:74:f8:56:bb:d1:3a:9a:3c:5b:13:
41:dd:c0:4c:8a:7b:cd:41:d9:63:5d:f8:50:6c:1e:
52:7e:8f:99:ee:10:46:36:03:76:09:1f:a5:55:3d:
7a:37:f8:f0:77:3c:9d:86:eb:35:eb:42:8d:e7:58:
de:60:39:5a:cd:aa:32:9a:df:f3:bd:e6:ba:c4:5e:
4f:95:bf:0c:76:37:f7:4b:71:49:b6:68:49:d0:41:
03:55:f6:e2:ea:fb:eb:26:18:ad:44:bd:ec:c4:20:
ab:ec:b1:89:be:c2:e3:c2:91:95:97:d4:1e:a0:78:
fd:00:ca:10:0d:0f:f9:54:ef:43:32:e6:dd:b1:4e:
2b:b0:0f:b0:6b:f5:0a:25:d0:f4:05:14:a0:97:2a:
b9:5a:73:04:f3:df:33:49:65:63:99:8c:4f:7c:31:
4b:79:98:36:5c:d2:84:40:89:69:75:cc:40:a1:0b:
e0:66:5a:32:f6:1b:fc:71:c3:6c:d0:aa:2d:79:8e:
25:7d:85:52:4b:1c:f1:1a:f9:46:05:25:a4:6b:c9:
a3:78:04:b7:fe:a6:d8:36:aa:5e:c6:04:20:b5:f2:
00:49:1d:50:c3:e9:fb:6a:8a:31:62:78:6d:d0:b8:
04:dc:81:16:0d:74:06:2d:cd:7f:c3:8d:d9:5d:fb:
4e:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:B2:90:E8:BD:39:1E:7A:FA:AE:9E:12:E2:43:2C:04:AB:ED:A2:A8
X509v3 Authority Key Identifier:
keyid:AE:B7:63:21:C8:D4:69:EE:3B:A0:23:92:0B:37:2C:CD:A5:DE:9E:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rrdjIcjUae47oCOSCzcszaXeng8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/8d7e85-00c0-40e0-aa80-c7dcc2391cc9/1/rrdjIcjUae47oCOSCzcszaXeng8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/8d7e85-00c0-40e0-aa80-c7dcc2391cc9/1/rrdjIcjUae47oCOSCzcszaXeng8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:19:01:c1:88:ef:9b:7f:9c:3c:38:e4:21:34:ef:15:49:71:
ca:39:1c:ed:f7:9d:dc:15:45:07:30:bf:be:d3:4c:89:14:3c:
03:31:27:94:95:71:bc:12:cb:b5:8b:33:7e:8c:f2:b9:e1:52:
0f:a4:31:b4:40:1c:ef:9a:e7:fb:8d:01:4c:f3:c4:78:e4:8f:
7a:94:7c:49:e2:92:e1:53:be:15:e0:7f:5f:66:55:2f:5e:ba:
10:6c:a5:5d:dc:fc:c3:85:3c:ee:c4:92:d5:0d:4d:64:c9:c9:
b3:94:03:5b:7b:ed:8d:f9:0f:72:79:6b:43:55:3c:e1:ea:2c:
70:23:1d:7b:04:c4:56:eb:8b:13:bc:4e:a2:82:c0:45:a6:cd:
76:30:a0:a3:0c:04:e0:89:06:38:ea:9e:f3:8c:93:61:1f:e2:
dc:a8:b2:f2:4c:bb:ee:16:11:68:93:c9:12:00:62:69:22:10:
23:d8:06:71:57:a9:25:8d:8c:3f:6e:18:4e:1c:0a:d1:dc:c2:
7a:9f:e1:be:18:10:f1:eb:2d:1d:c2:90:c4:d7:e1:12:09:0d:
ec:1f:ee:94:8b:b8:0b:92:eb:9d:d4:09:3f:b5:f4:c0:b8:e9:
36:75:64:ec:8a:5b:ae:72:fe:79:f0:4b:39:77:60:88:6a:28:
cc:b3:01:9a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+RbF0ofNyKMwoxFqWvRRYVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFlYjc2MzIxYzhkNDY5ZWUzYmEwMjM5MjBiMzcyY2NkYTVk
ZTllMGYwHhcNMjYwNzI0MDAwMDI1WhcNMjYwNzI1MDAwMDI1WjAzMTEwLwYDVQQD
Eyg5OGIyOTBlOGJkMzkxZTdhZmFhZTllMTJlMjQzMmMwNGFiZWRhMmE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtt/HwHT4VrvROpo8WxNB3cBMinvN
QdljXfhQbB5Sfo+Z7hBGNgN2CR+lVT16N/jwdzydhus160KN51jeYDlazaoymt/z
vea6xF5Plb8Mdjf3S3FJtmhJ0EEDVfbi6vvrJhitRL3sxCCr7LGJvsLjwpGVl9Qe
oHj9AMoQDQ/5VO9DMubdsU4rsA+wa/UKJdD0BRSglyq5WnME898zSWVjmYxPfDFL
eZg2XNKEQIlpdcxAoQvgZloy9hv8ccNs0KoteY4lfYVSSxzxGvlGBSWka8mjeAS3
/qbYNqpexgQgtfIASR1Qw+n7aooxYnht0LgE3IEWDXQGLc1/w43ZXftOxQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJiykOi9OR56+q6eEuJDLASr7aKoMB8GA1UdIwQY
MBaAFK63YyHI1GnuO6Ajkgs3LM2l3p4PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcnJkakljalVhZTQ3b0NPU0N6Y3N6YVhlbmc4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC84ZDdlODUtMDBjMC00MGUwLWFhODAt
YzdkY2MyMzkxY2M5LzEvcnJkakljalVhZTQ3b0NPU0N6Y3N6YVhlbmc4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNC84ZDdlODUtMDBjMC00MGUwLWFhODAtYzdkY2MyMzkxY2M5
LzEvcnJkakljalVhZTQ3b0NPU0N6Y3N6YVhlbmc4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeBkBwYjv
m3+cPDjkITTvFUlxyjkc7fed3BVFBzC/vtNMiRQ8AzEnlJVxvBLLtYszfozyueFS
D6QxtEAc75rn+40BTPPEeOSPepR8SeKS4VO+FeB/X2ZVL166EGylXdz8w4U87sSS
1Q1NZMnJs5QDW3vtjfkPcnlrQ1U84eoscCMdewTEVuuLE7xOooLARabNdjCgowwE
4IkGOOqe84yTYR/i3Kiy8ky77hYRaJPJEgBiaSIQI9gGcVepJY2MP24YThwK0dzC
ep/hvhgQ8estHcKQxNfhEgkN7B/ulIu4C5LrndQJP7X0wLjpNnVk7IpbrnL+efBL
OXdgiGoozLMBmg==
-----END CERTIFICATE-----
Generated at Fri Jul 24 08:45:19 2026 by rpki-client