Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/f54c57-deca-4685-8106-9fa78075330b/1/aDCZAOZItlowenhgECv3ixb1XXU.mft
File: aDCZAOZItlowenhgECv3ixb1XXU.mft (raw, json)
Hash identifier: xsF1bQcLAoxoA9I2k1RzNPjkETSpTIFgW3d1aM2vfXM=
Subject key identifier: 5F:3F:6E:D6:FD:28:D3:FF:D6:59:B3:4B:0F:FC:96:24:EA:92:EC:AB
Authority key identifier: 68:30:99:00:E6:48:B6:5A:30:7A:78:60:10:2B:F7:8B:16:F5:5D:75
Certificate issuer: /CN=68309900e648b65a307a7860102bf78b16f55d75
Certificate serial: 019F95B764C2A514CDCE3DD10D5FC10AA339
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aDCZAOZItlowenhgECv3ixb1XXU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/f54c57-deca-4685-8106-9fa78075330b/1/aDCZAOZItlowenhgECv3ixb1XXU.mft
Manifest number: 0627
Signing time: Fri 24 Jul 2026 20:00:51 +0000
Manifest this update: Fri 24 Jul 2026 20:00:51 +0000
Manifest next update: Sat 25 Jul 2026 20:00:51 +0000
Files and hashes: 1: HbShzM3qrknCQZp2Tx1NZiWf1jk.roa (hash: YTGorDk65orDuOJJBzhtTtRRAT8YSucZuGLA7eX2VpI=)
2: aDCZAOZItlowenhgECv3ixb1XXU.crl (hash: BelAt08BF83d6gmBO9Rfm2TbMkWn0ypIcCueqCIAXOA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/f54c57-deca-4685-8106-9fa78075330b/1/aDCZAOZItlowenhgECv3ixb1XXU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/f54c57-deca-4685-8106-9fa78075330b/1/aDCZAOZItlowenhgECv3ixb1XXU.mft
rsync://rpki.ripe.net/repository/DEFAULT/aDCZAOZItlowenhgECv3ixb1XXU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:95:b7:64:c2:a5:14:cd:ce:3d:d1:0d:5f:c1:0a:a3:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68309900e648b65a307a7860102bf78b16f55d75
Validity
Not Before: Jul 24 20:00:51 2026 GMT
Not After : Jul 25 20:00:51 2026 GMT
Subject: CN=5f3f6ed6fd28d3ffd659b34b0ffc9624ea92ecab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:91:95:f9:c2:8e:c9:19:17:23:63:ec:9f:69:
97:a9:71:cb:64:0e:51:86:67:e7:99:9b:78:25:89:
5d:e8:8a:5a:bd:82:60:e1:cc:aa:8a:7d:05:f6:70:
32:a8:96:8e:3a:99:69:05:7d:be:b5:8c:ec:89:04:
f3:31:e5:4a:56:64:e2:23:24:ab:13:e0:b3:54:01:
6c:e4:28:88:9e:f5:24:7b:42:ba:16:33:c9:08:0f:
eb:0f:89:b2:ac:db:b6:68:e3:03:f1:d4:bb:f4:9f:
fc:e2:d2:be:20:0d:ad:32:e0:fc:85:31:42:ff:a4:
31:d3:a5:f2:01:64:1c:f9:23:e2:bc:00:23:0e:07:
cb:03:d6:3e:7c:13:95:5e:10:42:4e:83:73:fe:10:
f4:9b:01:02:c3:1b:93:e8:af:ef:83:07:f8:3d:9c:
d1:92:2f:5a:6a:6a:f6:ea:65:cd:26:3b:b7:7e:0a:
13:56:fb:38:cd:bc:eb:b1:91:e9:1f:6a:5d:92:cb:
ed:1f:b0:ce:54:82:bd:84:ff:55:6e:1d:ed:85:78:
3a:99:04:5b:95:8e:dd:3b:c9:f3:f2:2a:97:c5:e9:
aa:fe:4c:1c:4a:0f:92:01:10:ac:5f:01:26:c4:df:
ee:24:94:6c:bd:03:37:b7:92:10:db:a7:f7:3f:af:
b0:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:3F:6E:D6:FD:28:D3:FF:D6:59:B3:4B:0F:FC:96:24:EA:92:EC:AB
X509v3 Authority Key Identifier:
keyid:68:30:99:00:E6:48:B6:5A:30:7A:78:60:10:2B:F7:8B:16:F5:5D:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aDCZAOZItlowenhgECv3ixb1XXU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/f54c57-deca-4685-8106-9fa78075330b/1/aDCZAOZItlowenhgECv3ixb1XXU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/f54c57-deca-4685-8106-9fa78075330b/1/aDCZAOZItlowenhgECv3ixb1XXU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:41:e8:fe:63:2c:29:d0:89:c1:5c:1d:ff:16:d7:fc:d1:b8:
c7:33:55:37:76:ff:77:6d:ef:8f:14:e4:d3:fc:bb:16:32:8a:
e4:50:4b:05:5e:9a:e7:d9:bb:4f:93:39:c3:5c:46:fa:e9:bd:
15:53:b4:52:79:c1:3f:83:eb:06:d9:64:13:eb:5a:06:ed:b4:
66:1e:65:1b:74:60:58:66:a8:47:67:bf:b0:a8:d8:8e:c1:07:
00:82:ba:69:eb:67:31:9a:98:68:0a:e2:39:c6:87:ab:1a:01:
ec:6e:d9:54:87:5c:c9:ee:30:c2:17:de:a2:b4:61:11:80:cb:
58:65:8d:d9:c9:fd:4a:2f:1f:71:d0:6b:ab:d1:11:af:a9:b6:
a8:b7:40:d8:3f:0e:fc:27:d7:cc:ec:d8:8b:ce:95:75:a6:1c:
c7:5c:cf:c1:e4:e1:a0:be:ae:19:61:27:89:90:d7:40:cb:0a:
b9:2e:af:ee:96:ed:aa:d1:e1:f0:fe:ed:cd:ae:c2:18:92:6f:
d8:00:96:a1:f6:4a:ec:6a:99:6e:68:2f:99:af:34:bf:45:76:
de:49:22:f8:e0:21:59:d5:ec:16:fe:49:c2:81:bd:eb:7b:98:
33:e8:55:bb:1c:31:cd:5f:fa:95:9c:c7:6d:64:ad:50:06:29:
fc:2c:ca:d3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+Vt2TCpRTNzj3RDV/BCqM5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY4MzA5OTAwZTY0OGI2NWEzMDdhNzg2MDEwMmJmNzhiMTZm
NTVkNzUwHhcNMjYwNzI0MjAwMDUxWhcNMjYwNzI1MjAwMDUxWjAzMTEwLwYDVQQD
Eyg1ZjNmNmVkNmZkMjhkM2ZmZDY1OWIzNGIwZmZjOTYyNGVhOTJlY2FiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArpGV+cKOyRkXI2Psn2mXqXHLZA5R
hmfnmZt4JYld6IpavYJg4cyqin0F9nAyqJaOOplpBX2+tYzsiQTzMeVKVmTiIySr
E+CzVAFs5CiInvUke0K6FjPJCA/rD4myrNu2aOMD8dS79J/84tK+IA2tMuD8hTFC
/6Qx06XyAWQc+SPivAAjDgfLA9Y+fBOVXhBCToNz/hD0mwECwxuT6K/vgwf4PZzR
ki9aamr26mXNJju3fgoTVvs4zbzrsZHpH2pdksvtH7DOVIK9hP9Vbh3thXg6mQRb
lY7dO8nz8iqXxemq/kwcSg+SARCsXwEmxN/uJJRsvQM3t5IQ26f3P6+wzwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF8/btb9KNP/1lmzSw/8liTqkuyrMB8GA1UdIwQY
MBaAFGgwmQDmSLZaMHp4YBAr94sW9V11MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYURDWkFPWkl0bG93ZW5oZ0VDdjNpeGIxWFhVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC9mNTRjNTctZGVjYS00Njg1LTgxMDYt
OWZhNzgwNzUzMzBiLzEvYURDWkFPWkl0bG93ZW5oZ0VDdjNpeGIxWFhVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZC9mNTRjNTctZGVjYS00Njg1LTgxMDYtOWZhNzgwNzUzMzBi
LzEvYURDWkFPWkl0bG93ZW5oZ0VDdjNpeGIxWFhVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGUHo/mMs
KdCJwVwd/xbX/NG4xzNVN3b/d23vjxTk0/y7FjKK5FBLBV6a59m7T5M5w1xG+um9
FVO0UnnBP4PrBtlkE+taBu20Zh5lG3RgWGaoR2e/sKjYjsEHAIK6aetnMZqYaAri
OcaHqxoB7G7ZVIdcye4wwhfeorRhEYDLWGWN2cn9Si8fcdBrq9ERr6m2qLdA2D8O
/CfXzOzYi86VdaYcx1zPweThoL6uGWEniZDXQMsKuS6v7pbtqtHh8P7tza7CGJJv
2ACWofZK7GqZbmgvma80v0V23kki+OAhWdXsFv5JwoG963uYM+hVuxwxzV/6lZzH
bWStUAYp/CzK0w==
-----END CERTIFICATE-----
Generated at Fri Jul 24 22:25:15 2026 by rpki-client