Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/efa18d-0907-4593-abb8-94802636bad9/1/aMXwmzqQOVDz_NGyVQhu3kh26xE.mft
File: aMXwmzqQOVDz_NGyVQhu3kh26xE.mft (raw, json)
Hash identifier: JOymnw7D+t0AVJgWO51ydJ7ZRsyasX6iTQ2Gdob4Q1g=
Subject key identifier: F6:09:16:43:EA:B7:2B:8F:1C:47:3D:41:CA:54:DA:F5:2F:00:DC:73
Authority key identifier: 68:C5:F0:9B:3A:90:39:50:F3:FC:D1:B2:55:08:6E:DE:48:76:EB:11
Certificate issuer: /CN=68c5f09b3a903950f3fcd1b255086ede4876eb11
Certificate serial: 019F946D442EE15F9077C52F7D6CC6D06135
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aMXwmzqQOVDz_NGyVQhu3kh26xE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/efa18d-0907-4593-abb8-94802636bad9/1/aMXwmzqQOVDz_NGyVQhu3kh26xE.mft
Manifest number: 191C
Signing time: Fri 24 Jul 2026 14:00:16 +0000
Manifest this update: Fri 24 Jul 2026 14:00:16 +0000
Manifest next update: Sat 25 Jul 2026 14:00:16 +0000
Files and hashes: 1: HqknbCtl1Axe3TPw1P6jDONpLVc.roa (hash: ZnfnJYZ+e5B0J97RREAVHfbNjcFtOONy33iXAx75Pag=)
2: XUSo3Kod1tZHWF61VODjOx3wrpM.roa (hash: QhGQD15vAX85W4GYn0mpZU7ZappGzzCqkYs2qWxrAto=)
3: aMXwmzqQOVDz_NGyVQhu3kh26xE.crl (hash: BTr7WhPuETullH2gGqeeI7yZczywjabDdlgnoCfMatI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/efa18d-0907-4593-abb8-94802636bad9/1/aMXwmzqQOVDz_NGyVQhu3kh26xE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/efa18d-0907-4593-abb8-94802636bad9/1/aMXwmzqQOVDz_NGyVQhu3kh26xE.mft
rsync://rpki.ripe.net/repository/DEFAULT/aMXwmzqQOVDz_NGyVQhu3kh26xE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:6d:44:2e:e1:5f:90:77:c5:2f:7d:6c:c6:d0:61:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68c5f09b3a903950f3fcd1b255086ede4876eb11
Validity
Not Before: Jul 24 14:00:16 2026 GMT
Not After : Jul 25 14:00:16 2026 GMT
Subject: CN=f6091643eab72b8f1c473d41ca54daf52f00dc73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:dd:33:23:24:ec:5d:25:46:ba:ec:cf:b2:32:
17:9e:5c:30:12:a5:a6:b6:cf:7a:8a:3a:86:fd:3a:
d5:3b:e3:c7:9d:65:19:c6:bf:bc:eb:fa:7a:ac:34:
36:f7:26:74:f7:d0:a6:e3:0a:06:05:43:0d:da:b0:
8a:b3:f9:09:ad:6c:44:19:b8:fc:81:82:8a:9d:c2:
5f:f2:93:df:c3:bd:57:88:e4:94:46:f2:92:c0:fb:
ce:95:2c:c1:33:3a:f3:b8:0e:2a:e8:08:34:6d:81:
5f:9a:cf:47:fa:7a:a8:8c:75:1f:a4:cb:70:ac:8d:
75:2c:6f:91:e1:0c:de:a8:5d:81:49:8c:d9:67:a6:
14:d7:02:17:f7:11:32:d4:d2:e4:f8:6a:d1:05:d5:
52:53:f7:1d:1f:b6:7e:aa:b0:00:20:cd:23:8b:ce:
d0:3f:8f:93:36:88:17:8e:7a:8d:48:1f:0b:8d:9f:
8e:ff:60:c0:0f:5c:98:3b:9d:dc:25:32:82:10:13:
72:66:50:de:68:00:be:5b:3e:6a:a4:be:cf:e3:33:
00:e2:f5:15:c0:67:81:57:b6:f2:b7:9d:eb:b9:f9:
91:c8:9c:6b:19:17:4c:73:76:52:10:b9:61:ca:8e:
fa:aa:d9:13:3a:55:9d:04:f3:5f:33:fb:25:9a:a8:
2d:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:09:16:43:EA:B7:2B:8F:1C:47:3D:41:CA:54:DA:F5:2F:00:DC:73
X509v3 Authority Key Identifier:
keyid:68:C5:F0:9B:3A:90:39:50:F3:FC:D1:B2:55:08:6E:DE:48:76:EB:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aMXwmzqQOVDz_NGyVQhu3kh26xE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/efa18d-0907-4593-abb8-94802636bad9/1/aMXwmzqQOVDz_NGyVQhu3kh26xE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/efa18d-0907-4593-abb8-94802636bad9/1/aMXwmzqQOVDz_NGyVQhu3kh26xE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:07:20:9e:39:e7:74:be:fb:07:73:89:23:b9:3f:57:ed:8b:
c3:3c:b6:66:3d:05:a4:df:64:75:27:dd:7d:ed:03:9e:a7:c3:
5d:d2:22:c1:56:09:2e:10:b0:81:91:4c:9a:7b:1a:4b:62:30:
3b:0b:c5:fa:6f:a1:d2:e7:79:19:57:b4:23:55:95:ac:69:f1:
e4:55:e7:8a:01:ee:11:a7:9b:80:90:eb:9c:3e:31:97:f4:22:
41:ee:26:2f:4b:59:33:cd:76:60:e2:81:9a:96:d2:7a:0e:82:
56:8a:0a:e9:28:83:bf:e8:0f:0c:0d:38:ec:65:67:f1:b8:7b:
e4:f9:b8:64:82:eb:5d:3a:da:dc:43:92:b9:fa:08:12:f4:24:
5b:e5:ad:a4:42:ae:23:55:d8:38:be:e5:d0:64:51:d0:0d:b3:
5b:0a:99:e1:25:39:d7:27:2a:8a:8a:42:0c:45:f1:6c:04:58:
19:1f:05:6d:ef:57:d1:00:fd:eb:c0:34:d3:ba:ad:90:3e:30:
2b:65:5d:1e:32:28:b9:e1:cb:5c:b4:b9:b0:93:a4:2e:00:56:
f9:40:21:cf:88:af:5a:67:d3:fc:aa:6a:62:c8:55:8e:fb:c8:
d1:00:37:5e:27:7b:aa:b0:8f:15:ab:9f:ea:9a:43:32:22:3d:
f0:24:4c:45
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+UbUQu4V+Qd8UvfWzG0GE1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY4YzVmMDliM2E5MDM5NTBmM2ZjZDFiMjU1MDg2ZWRlNDg3
NmViMTEwHhcNMjYwNzI0MTQwMDE2WhcNMjYwNzI1MTQwMDE2WjAzMTEwLwYDVQQD
EyhmNjA5MTY0M2VhYjcyYjhmMWM0NzNkNDFjYTU0ZGFmNTJmMDBkYzczMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA790zIyTsXSVGuuzPsjIXnlwwEqWm
ts96ijqG/TrVO+PHnWUZxr+86/p6rDQ29yZ099Cm4woGBUMN2rCKs/kJrWxEGbj8
gYKKncJf8pPfw71XiOSURvKSwPvOlSzBMzrzuA4q6Ag0bYFfms9H+nqojHUfpMtw
rI11LG+R4QzeqF2BSYzZZ6YU1wIX9xEy1NLk+GrRBdVSU/cdH7Z+qrAAIM0ji87Q
P4+TNogXjnqNSB8LjZ+O/2DAD1yYO53cJTKCEBNyZlDeaAC+Wz5qpL7P4zMA4vUV
wGeBV7byt53rufmRyJxrGRdMc3ZSELlhyo76qtkTOlWdBPNfM/slmqgtXQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPYJFkPqtyuPHEc9QcpU2vUvANxzMB8GA1UdIwQY
MBaAFGjF8Js6kDlQ8/zRslUIbt5IdusRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYU1Yd216cVFPVkR6X05HeVZRaHUza2gyNnhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy9lZmExOGQtMDkwNy00NTkzLWFiYjgt
OTQ4MDI2MzZiYWQ5LzEvYU1Yd216cVFPVkR6X05HeVZRaHUza2gyNnhFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNy9lZmExOGQtMDkwNy00NTkzLWFiYjgtOTQ4MDI2MzZiYWQ5
LzEvYU1Yd216cVFPVkR6X05HeVZRaHUza2gyNnhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGgcgnjnn
dL77B3OJI7k/V+2Lwzy2Zj0FpN9kdSfdfe0DnqfDXdIiwVYJLhCwgZFMmnsaS2Iw
OwvF+m+h0ud5GVe0I1WVrGnx5FXnigHuEaebgJDrnD4xl/QiQe4mL0tZM812YOKB
mpbSeg6CVooK6SiDv+gPDA047GVn8bh75Pm4ZILrXTra3EOSufoIEvQkW+WtpEKu
I1XYOL7l0GRR0A2zWwqZ4SU51ycqiopCDEXxbARYGR8Fbe9X0QD968A007qtkD4w
K2VdHjIoueHLXLS5sJOkLgBW+UAhz4ivWmfT/KpqYshVjvvI0QA3Xid7qrCPFauf
6ppDMiI98CRMRQ==
-----END CERTIFICATE-----
Generated at Fri Jul 24 17:41:06 2026 by rpki-client