Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/8bf7ea-883a-4c43-946c-82dafe104bc5/1/A_P-YHUIK-jliDKbQ9dhv257AdA.mft
File: A_P-YHUIK-jliDKbQ9dhv257AdA.mft (raw, json)
Hash identifier: hVFymkqCsIs8VgoVpCJtzFKxcpqOdfL7572FnL7W70g=
Subject key identifier: 0E:BA:30:D5:D9:D5:AB:82:E2:D0:D9:6B:74:95:B9:0B:35:BC:C6:E3
Authority key identifier: 03:F3:FE:60:75:08:2B:E8:E5:88:32:9B:43:D7:61:BF:6E:7B:01:D0
Certificate issuer: /CN=03f3fe6075082be8e588329b43d761bf6e7b01d0
Certificate serial: 019F91A4234D4633378501C7E0961D14790D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A_P-YHUIK-jliDKbQ9dhv257AdA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/8bf7ea-883a-4c43-946c-82dafe104bc5/1/A_P-YHUIK-jliDKbQ9dhv257AdA.mft
Manifest number: 0BFA
Signing time: Fri 24 Jul 2026 01:01:21 +0000
Manifest this update: Fri 24 Jul 2026 01:01:21 +0000
Manifest next update: Sat 25 Jul 2026 01:01:21 +0000
Files and hashes: 1: A_P-YHUIK-jliDKbQ9dhv257AdA.crl (hash: /PTHvLk5JqAVl2/oU1Sj8/rELwJQrWcLa4o2rdZLeY0=)
2: y8-TomRf2SfXgjAfIqDbASYx4Kw.roa (hash: uG779XP+SowZScRgyybF2Yr7PqJO6NR4pXnq6h4jggk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/8bf7ea-883a-4c43-946c-82dafe104bc5/1/A_P-YHUIK-jliDKbQ9dhv257AdA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/8bf7ea-883a-4c43-946c-82dafe104bc5/1/A_P-YHUIK-jliDKbQ9dhv257AdA.mft
rsync://rpki.ripe.net/repository/DEFAULT/A_P-YHUIK-jliDKbQ9dhv257AdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:a4:23:4d:46:33:37:85:01:c7:e0:96:1d:14:79:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03f3fe6075082be8e588329b43d761bf6e7b01d0
Validity
Not Before: Jul 24 01:01:21 2026 GMT
Not After : Jul 25 01:01:21 2026 GMT
Subject: CN=0eba30d5d9d5ab82e2d0d96b7495b90b35bcc6e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:c8:b8:5d:fe:0c:2b:aa:5c:d4:23:bc:1f:4e:
70:0f:1e:f2:64:b2:27:7b:7a:f8:ba:50:01:10:f0:
65:03:0d:b2:a5:d1:6a:1f:3e:48:28:5b:d9:92:b9:
b6:c2:9f:81:cf:8c:72:f6:25:46:ed:b7:34:a7:96:
a5:6c:90:b6:cd:aa:10:79:20:70:73:b3:4e:a2:44:
49:f1:50:bc:98:57:3f:51:36:d6:7b:32:2f:5a:79:
77:94:f6:d6:41:d7:88:14:9b:76:52:ab:62:d2:95:
60:fa:3c:b3:28:25:e6:0a:63:05:01:5f:42:3f:d8:
57:b7:81:b0:14:de:ae:81:07:a6:70:af:02:39:7f:
99:3e:2a:3d:00:d4:34:b9:74:fd:87:0a:e8:53:cf:
b3:bf:7d:c0:70:20:9a:c7:43:18:1f:83:0f:c8:9c:
1a:11:81:7b:2d:d7:96:91:1c:ec:35:cc:41:c1:c3:
83:ee:4d:ca:9a:2c:d7:86:c6:18:c6:f9:22:a5:ac:
1d:a3:a5:aa:d3:5e:ff:64:b1:9e:46:83:82:65:21:
1c:25:22:a2:21:92:94:ab:0c:c8:ad:fb:4e:5d:8c:
53:a6:8c:9c:f5:23:a2:7f:e8:1c:e5:77:c9:9f:c9:
80:41:ae:ad:cf:bf:bc:b8:92:ca:cc:ea:f3:7f:b2:
36:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:BA:30:D5:D9:D5:AB:82:E2:D0:D9:6B:74:95:B9:0B:35:BC:C6:E3
X509v3 Authority Key Identifier:
keyid:03:F3:FE:60:75:08:2B:E8:E5:88:32:9B:43:D7:61:BF:6E:7B:01:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A_P-YHUIK-jliDKbQ9dhv257AdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/8bf7ea-883a-4c43-946c-82dafe104bc5/1/A_P-YHUIK-jliDKbQ9dhv257AdA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/8bf7ea-883a-4c43-946c-82dafe104bc5/1/A_P-YHUIK-jliDKbQ9dhv257AdA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:07:f6:76:1c:76:4c:d8:41:c1:83:aa:cc:de:1a:94:db:02:
e4:61:01:5a:cc:24:a2:7b:39:01:be:9b:51:cb:b2:e5:ab:fc:
d7:3a:82:a7:69:fd:bc:cd:da:ba:63:0d:79:00:fa:17:4a:e8:
96:f5:c1:7c:e1:c4:2c:f3:04:97:07:ac:9f:f3:7f:a6:95:ee:
b5:3b:c1:c1:4e:c2:5f:3c:cf:29:7c:56:e6:d8:c4:23:e8:ec:
04:62:2e:d3:57:cd:43:ed:33:c2:c8:b5:b2:13:6a:dd:74:c1:
27:a7:0a:4e:28:84:42:b8:3a:11:df:37:35:5a:af:cb:84:15:
5f:f4:64:f5:b5:72:80:88:e4:52:85:fa:cc:47:ad:16:21:54:
9c:f7:50:5a:18:3d:58:48:7c:b0:11:b0:e8:74:22:45:f1:ef:
96:67:37:2e:fa:0b:6a:bf:63:26:08:85:d9:83:ef:03:1c:c3:
0a:83:26:a6:a8:e2:b3:f5:5b:dd:00:b0:70:93:4b:be:d3:c5:
42:50:50:c1:0e:e3:8c:16:7d:07:65:6c:d9:82:c9:02:02:70:
5b:8a:8f:f8:18:f3:e5:af:4a:d3:12:a3:92:4f:bc:d4:36:1a:
e2:13:12:ec:b0:ca:f3:d5:8b:07:f5:6f:9b:06:1c:59:16:41:
bf:ef:ff:f4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+RpCNNRjM3hQHH4JYdFHkNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAzZjNmZTYwNzUwODJiZThlNTg4MzI5YjQzZDc2MWJmNmU3
YjAxZDAwHhcNMjYwNzI0MDEwMTIxWhcNMjYwNzI1MDEwMTIxWjAzMTEwLwYDVQQD
EygwZWJhMzBkNWQ5ZDVhYjgyZTJkMGQ5NmI3NDk1YjkwYjM1YmNjNmUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArci4Xf4MK6pc1CO8H05wDx7yZLIn
e3r4ulABEPBlAw2ypdFqHz5IKFvZkrm2wp+Bz4xy9iVG7bc0p5albJC2zaoQeSBw
c7NOokRJ8VC8mFc/UTbWezIvWnl3lPbWQdeIFJt2Uqti0pVg+jyzKCXmCmMFAV9C
P9hXt4GwFN6ugQemcK8COX+ZPio9ANQ0uXT9hwroU8+zv33AcCCax0MYH4MPyJwa
EYF7LdeWkRzsNcxBwcOD7k3KmizXhsYYxvkipawdo6Wq017/ZLGeRoOCZSEcJSKi
IZKUqwzIrftOXYxTpoyc9SOif+gc5XfJn8mAQa6tz7+8uJLKzOrzf7I2HwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA66MNXZ1auC4tDZa3SVuQs1vMbjMB8GA1UdIwQY
MBaAFAPz/mB1CCvo5Ygym0PXYb9uewHQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQV9QLVlIVUlLLWpsaURLYlE5ZGh2MjU3QWRBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy84YmY3ZWEtODgzYS00YzQzLTk0NmMt
ODJkYWZlMTA0YmM1LzEvQV9QLVlIVUlLLWpsaURLYlE5ZGh2MjU3QWRBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMy84YmY3ZWEtODgzYS00YzQzLTk0NmMtODJkYWZlMTA0YmM1
LzEvQV9QLVlIVUlLLWpsaURLYlE5ZGh2MjU3QWRBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPwf2dhx2
TNhBwYOqzN4alNsC5GEBWswkons5Ab6bUcuy5av81zqCp2n9vM3aumMNeQD6F0ro
lvXBfOHELPMElwesn/N/ppXutTvBwU7CXzzPKXxW5tjEI+jsBGIu01fNQ+0zwsi1
shNq3XTBJ6cKTiiEQrg6Ed83NVqvy4QVX/Rk9bVygIjkUoX6zEetFiFUnPdQWhg9
WEh8sBGw6HQiRfHvlmc3LvoLar9jJgiF2YPvAxzDCoMmpqjis/Vb3QCwcJNLvtPF
QlBQwQ7jjBZ9B2Vs2YLJAgJwW4qP+Bjz5a9K0xKjkk+81DYa4hMS7LDK89WLB/Vv
mwYcWRZBv+//9A==
-----END CERTIFICATE-----
Generated at Fri Jul 24 03:46:57 2026 by rpki-client