Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/07f907-f796-4d7b-b1cc-72b8d6dd37b3/1/A56X4z1nx-KVACipQeW9DbJmV_0.mft
File: A56X4z1nx-KVACipQeW9DbJmV_0.mft (raw, json)
Hash identifier: ntSktkRdnZvxGgBRxNmowHK0dOMyyiswsmUFdDCsTqc=
Subject key identifier: 10:A4:A4:A8:E3:8F:10:69:CD:AF:E6:57:CA:D8:7D:40:57:1B:68:1D
Authority key identifier: 03:9E:97:E3:3D:67:C7:E2:95:00:28:A9:41:E5:BD:0D:B2:66:57:FD
Certificate issuer: /CN=039e97e33d67c7e2950028a941e5bd0db26657fd
Certificate serial: 019F8F7DFAC029AC1DFF1DB5672AAC9D336A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A56X4z1nx-KVACipQeW9DbJmV_0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/07f907-f796-4d7b-b1cc-72b8d6dd37b3/1/A56X4z1nx-KVACipQeW9DbJmV_0.mft
Manifest number: 3F
Signing time: Thu 23 Jul 2026 15:00:25 +0000
Manifest this update: Thu 23 Jul 2026 15:00:25 +0000
Manifest next update: Fri 24 Jul 2026 15:00:25 +0000
Files and hashes: 1: A56X4z1nx-KVACipQeW9DbJmV_0.crl (hash: uUcwUIB6hZgHK1KNwZtChZ/UU1um1e/25dhynqIgMo4=)
2: gTLQO7IRUIt1he_tfQZ5R50CmzQ.roa (hash: 13NsbCK446j3nwsRrmw3vucE5FkbNbCaICNVdshkbns=)
3: hvfAzCtoE0ORBMYjcGw8oigdKcw.asa (hash: 72h3L4hXBvMvuCPqYCl4ziMbL9JELyu/c1jTdEmyvUA=)
4: xRkuggtUsWPX1CZItcVFqyWAcxw.roa (hash: m7exX/tnvEsWXCcIVUMghbchGT+uUqq23xo4bmK0dao=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/07f907-f796-4d7b-b1cc-72b8d6dd37b3/1/A56X4z1nx-KVACipQeW9DbJmV_0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/07f907-f796-4d7b-b1cc-72b8d6dd37b3/1/A56X4z1nx-KVACipQeW9DbJmV_0.mft
rsync://rpki.ripe.net/repository/DEFAULT/A56X4z1nx-KVACipQeW9DbJmV_0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:7d:fa:c0:29:ac:1d:ff:1d:b5:67:2a:ac:9d:33:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=039e97e33d67c7e2950028a941e5bd0db26657fd
Validity
Not Before: Jul 23 15:00:25 2026 GMT
Not After : Jul 24 15:00:25 2026 GMT
Subject: CN=10a4a4a8e38f1069cdafe657cad87d40571b681d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:78:26:4b:93:63:07:74:ef:2c:c0:73:12:5e:
ad:1b:59:7c:84:2c:60:d9:14:92:d8:6e:fa:6c:2c:
bf:49:c7:d4:af:5b:1d:72:97:4f:75:87:84:7d:f9:
7b:c8:c3:a2:ff:5c:7a:90:d5:cb:aa:02:0f:04:a0:
3d:ca:90:2c:53:ac:62:97:25:21:ab:45:e8:e2:85:
da:9c:af:3c:fb:5e:ff:84:64:b9:89:40:75:71:81:
99:d4:3e:93:37:f7:92:4e:19:c5:3e:1c:b3:2e:de:
da:ea:f6:89:09:0b:c8:c6:ad:7b:0c:35:e3:63:33:
41:d3:40:82:f3:93:f2:7c:b3:92:72:0e:3a:7c:e9:
ed:97:15:5b:42:22:01:b8:be:65:7d:8c:3a:63:d1:
4b:b7:04:d6:fd:39:08:ea:66:0a:9d:4b:c7:61:ad:
e1:80:e9:d7:03:9e:17:75:ad:1b:c3:8f:45:59:9c:
ed:32:23:7d:e0:94:98:b7:c4:57:f6:58:4e:ea:1e:
a0:38:d8:a6:07:1a:72:ce:18:c2:7a:02:e5:36:98:
a5:d1:8a:2c:28:c0:28:52:41:09:e2:99:9a:2c:1f:
64:7c:00:b6:64:a1:3a:63:fe:83:69:76:ef:13:c4:
33:e9:3a:90:c1:93:ca:88:91:b9:d2:21:f6:b4:9b:
dc:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:A4:A4:A8:E3:8F:10:69:CD:AF:E6:57:CA:D8:7D:40:57:1B:68:1D
X509v3 Authority Key Identifier:
keyid:03:9E:97:E3:3D:67:C7:E2:95:00:28:A9:41:E5:BD:0D:B2:66:57:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A56X4z1nx-KVACipQeW9DbJmV_0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/07f907-f796-4d7b-b1cc-72b8d6dd37b3/1/A56X4z1nx-KVACipQeW9DbJmV_0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/07f907-f796-4d7b-b1cc-72b8d6dd37b3/1/A56X4z1nx-KVACipQeW9DbJmV_0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:13:48:d7:37:14:ed:34:99:98:f1:d2:eb:c6:96:cc:db:1d:
10:62:6f:2e:4c:cb:3b:5a:b0:b6:57:04:ec:07:26:2b:68:aa:
1b:e2:fa:49:f3:50:fc:70:f5:ff:99:c5:b8:eb:a4:ab:b7:00:
e3:ac:50:9b:fe:57:78:db:a8:80:ba:ab:72:e4:e9:8b:ec:14:
e4:0a:a2:c5:9e:2f:a7:f0:f7:85:88:8b:e7:8d:1e:e1:bb:3c:
50:b6:cd:da:75:42:5c:18:6e:cf:b4:21:27:d6:fa:10:0a:bf:
b2:96:93:50:a7:95:9f:83:11:86:32:7c:af:f8:7c:af:0f:e1:
36:8c:db:90:ab:c8:a1:85:30:96:68:7d:5e:a2:65:fb:29:e5:
c1:2c:4e:9a:9f:c2:36:65:b0:cf:75:ca:aa:86:bd:6f:77:82:
f2:01:a9:dd:09:23:e1:98:21:b3:97:c9:a1:5b:85:ff:e5:73:
6c:79:98:ad:21:23:17:48:5c:0b:ee:52:57:87:d4:52:94:56:
3e:d5:f5:7d:d8:ad:e7:14:2a:6f:14:2a:e7:55:21:2a:c5:82:
eb:5b:d9:d7:f9:86:1a:46:5b:cc:93:3a:31:6f:d0:98:fb:8a:
e0:70:d5:f4:f5:9e:a3:5d:3b:c5:0a:29:01:b7:a8:19:76:e6:
16:d9:1e:2e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+PffrAKawd/x21ZyqsnTNqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAzOWU5N2UzM2Q2N2M3ZTI5NTAwMjhhOTQxZTViZDBkYjI2
NjU3ZmQwHhcNMjYwNzIzMTUwMDI1WhcNMjYwNzI0MTUwMDI1WjAzMTEwLwYDVQQD
EygxMGE0YTRhOGUzOGYxMDY5Y2RhZmU2NTdjYWQ4N2Q0MDU3MWI2ODFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA33gmS5NjB3TvLMBzEl6tG1l8hCxg
2RSS2G76bCy/ScfUr1sdcpdPdYeEffl7yMOi/1x6kNXLqgIPBKA9ypAsU6xilyUh
q0Xo4oXanK88+17/hGS5iUB1cYGZ1D6TN/eSThnFPhyzLt7a6vaJCQvIxq17DDXj
YzNB00CC85PyfLOScg46fOntlxVbQiIBuL5lfYw6Y9FLtwTW/TkI6mYKnUvHYa3h
gOnXA54Xda0bw49FWZztMiN94JSYt8RX9lhO6h6gONimBxpyzhjCegLlNpil0Yos
KMAoUkEJ4pmaLB9kfAC2ZKE6Y/6DaXbvE8Qz6TqQwZPKiJG50iH2tJvcJQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBCkpKjjjxBpza/mV8rYfUBXG2gdMB8GA1UdIwQY
MBaAFAOel+M9Z8filQAoqUHlvQ2yZlf9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQTU2WDR6MW54LUtWQUNpcFFlVzlEYkptVl8wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi8wN2Y5MDctZjc5Ni00ZDdiLWIxY2Mt
NzJiOGQ2ZGQzN2IzLzEvQTU2WDR6MW54LUtWQUNpcFFlVzlEYkptVl8wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNi8wN2Y5MDctZjc5Ni00ZDdiLWIxY2MtNzJiOGQ2ZGQzN2Iz
LzEvQTU2WDR6MW54LUtWQUNpcFFlVzlEYkptVl8wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAURNI1zcU
7TSZmPHS68aWzNsdEGJvLkzLO1qwtlcE7AcmK2iqG+L6SfNQ/HD1/5nFuOukq7cA
46xQm/5XeNuogLqrcuTpi+wU5AqixZ4vp/D3hYiL540e4bs8ULbN2nVCXBhuz7Qh
J9b6EAq/spaTUKeVn4MRhjJ8r/h8rw/hNozbkKvIoYUwlmh9XqJl+ynlwSxOmp/C
NmWwz3XKqoa9b3eC8gGp3Qkj4Zghs5fJoVuF/+VzbHmYrSEjF0hcC+5SV4fUUpRW
PtX1fdit5xQqbxQq51UhKsWC61vZ1/mGGkZbzJM6MW/QmPuK4HDV9PWeo107xQop
AbeoGXbmFtkeLg==
-----END CERTIFICATE-----
Generated at Thu Jul 23 21:34:08 2026 by rpki-client