Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/3c2c18-6c7b-4a33-8659-f56816deaf30/1/g026NqGaEf0f34ohJn8s01da1Rg.mft
File: g026NqGaEf0f34ohJn8s01da1Rg.mft (raw, json)
Hash identifier: M2HnGK/5L9/jLyUKI7fF3nEDxckiDnvn1/RgQjw54so=
Subject key identifier: A5:7D:77:27:42:DF:10:A9:C4:E0:C8:65:B0:B2:EB:9A:D1:A2:49:F9
Authority key identifier: 83:4D:BA:36:A1:9A:11:FD:1F:DF:8A:21:26:7F:2C:D3:57:5A:D5:18
Certificate issuer: /CN=834dba36a19a11fd1fdf8a21267f2cd3575ad518
Certificate serial: 019F8ED981532CF1E1C5FC8B161317D89023
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g026NqGaEf0f34ohJn8s01da1Rg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/3c2c18-6c7b-4a33-8659-f56816deaf30/1/g026NqGaEf0f34ohJn8s01da1Rg.mft
Manifest number: 3F
Signing time: Thu 23 Jul 2026 12:00:46 +0000
Manifest this update: Thu 23 Jul 2026 12:00:46 +0000
Manifest next update: Fri 24 Jul 2026 12:00:46 +0000
Files and hashes: 1: g026NqGaEf0f34ohJn8s01da1Rg.crl (hash: 8y3JpvOo3XYh5Lz/QXbNX7GwOmo2M91jxbT039U3q20=)
2: ywr2yHe5YezVa2DkSIoiUW3iClE.asa (hash: jWQ90LGYbnX6nj6NxZX7augHUME0QxkMdKQ2+9Sa29s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/3c2c18-6c7b-4a33-8659-f56816deaf30/1/g026NqGaEf0f34ohJn8s01da1Rg.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/3c2c18-6c7b-4a33-8659-f56816deaf30/1/g026NqGaEf0f34ohJn8s01da1Rg.mft
rsync://rpki.ripe.net/repository/DEFAULT/g026NqGaEf0f34ohJn8s01da1Rg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 12:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8e:d9:81:53:2c:f1:e1:c5:fc:8b:16:13:17:d8:90:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=834dba36a19a11fd1fdf8a21267f2cd3575ad518
Validity
Not Before: Jul 23 12:00:46 2026 GMT
Not After : Jul 24 12:00:46 2026 GMT
Subject: CN=a57d772742df10a9c4e0c865b0b2eb9ad1a249f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:92:91:9d:fb:d0:0a:9b:e6:9c:48:d8:c6:42:
21:43:d8:47:6f:a9:6b:d3:f4:4f:94:dc:28:b1:3e:
0e:1e:02:32:49:bd:bf:2d:a2:c7:8d:c9:de:97:d4:
78:22:5a:11:d2:0c:9f:56:db:39:44:31:a5:8a:35:
c6:a7:b3:20:98:05:4e:71:21:98:f0:7f:36:11:47:
67:66:ed:8d:1e:f2:10:df:35:7c:f5:76:45:56:be:
81:6b:d7:34:57:ab:9b:e4:4c:67:d2:a3:f1:22:fd:
7c:85:73:1a:1d:fd:4c:19:62:6c:36:7e:e0:71:df:
d4:d2:b6:90:cd:da:38:46:7c:9e:c2:ce:ca:b2:de:
19:d1:f5:ff:f1:38:62:19:84:c3:cb:5e:c9:06:e6:
01:42:1a:a1:8b:c8:45:95:f5:bf:6a:7a:57:40:9c:
86:3e:06:70:44:e7:fd:ab:56:62:9d:f7:d8:d0:09:
55:d1:0a:46:af:b9:c7:85:1f:40:a0:79:ce:21:c4:
42:04:50:98:86:9a:0a:b0:14:30:ac:02:b6:b4:9b:
c4:a0:87:63:0e:9e:7e:8f:1d:68:61:17:98:4b:0f:
f7:3e:23:cc:f5:60:55:3e:f9:b4:8c:0f:cd:81:d4:
7f:fc:05:f7:48:ca:aa:d3:88:ad:6d:14:4b:c7:8b:
35:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:7D:77:27:42:DF:10:A9:C4:E0:C8:65:B0:B2:EB:9A:D1:A2:49:F9
X509v3 Authority Key Identifier:
keyid:83:4D:BA:36:A1:9A:11:FD:1F:DF:8A:21:26:7F:2C:D3:57:5A:D5:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g026NqGaEf0f34ohJn8s01da1Rg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/3c2c18-6c7b-4a33-8659-f56816deaf30/1/g026NqGaEf0f34ohJn8s01da1Rg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/3c2c18-6c7b-4a33-8659-f56816deaf30/1/g026NqGaEf0f34ohJn8s01da1Rg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:8d:fb:cb:b3:10:b5:e2:b1:76:ab:a7:4e:a1:30:fe:f5:fa:
84:9e:6b:cd:d3:d7:81:66:98:e2:6f:12:1b:3b:28:a5:f5:7e:
e3:10:d3:31:57:43:1b:a7:42:8c:a2:73:7e:79:e8:84:6d:84:
ba:a4:17:7b:a4:78:00:a3:59:03:57:1c:17:07:0f:44:62:b0:
79:36:12:a3:ce:9f:2c:6c:ee:c7:cf:4a:0d:b8:57:20:d0:93:
29:06:f0:13:7f:1f:f9:15:77:a6:a8:ed:53:4d:28:e2:f3:6e:
a7:7f:3d:fb:05:c4:b6:a9:8f:d7:4b:d1:da:08:0f:0d:4c:ee:
bd:ed:4b:36:01:11:7d:43:10:ea:d8:29:57:d3:d9:31:a7:27:
cc:92:b0:7e:21:f3:12:a4:fd:d2:a5:9a:8b:29:bb:9e:43:17:
e0:39:de:d2:da:d9:6e:13:28:23:79:5a:45:ca:72:59:28:27:
24:46:1b:60:93:fa:a7:7e:e5:c2:43:00:d0:7c:fa:58:1e:3b:
dd:e1:31:34:7b:2d:d0:e4:66:35:a2:15:1a:c5:3c:01:c1:11:
43:db:1f:0c:31:d9:0a:86:bd:f1:5b:86:7b:6c:7f:34:db:20:
01:b9:8f:d4:f0:6a:e8:0f:46:95:d3:2e:a2:1d:ce:af:c1:8a:
5e:71:eb:c5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+O2YFTLPHhxfyLFhMX2JAjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgzNGRiYTM2YTE5YTExZmQxZmRmOGEyMTI2N2YyY2QzNTc1
YWQ1MTgwHhcNMjYwNzIzMTIwMDQ2WhcNMjYwNzI0MTIwMDQ2WjAzMTEwLwYDVQQD
EyhhNTdkNzcyNzQyZGYxMGE5YzRlMGM4NjViMGIyZWI5YWQxYTI0OWY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAspKRnfvQCpvmnEjYxkIhQ9hHb6lr
0/RPlNwosT4OHgIySb2/LaLHjcnel9R4IloR0gyfVts5RDGlijXGp7MgmAVOcSGY
8H82EUdnZu2NHvIQ3zV89XZFVr6Ba9c0V6ub5Exn0qPxIv18hXMaHf1MGWJsNn7g
cd/U0raQzdo4Rnyews7Kst4Z0fX/8ThiGYTDy17JBuYBQhqhi8hFlfW/anpXQJyG
PgZwROf9q1ZinffY0AlV0QpGr7nHhR9AoHnOIcRCBFCYhpoKsBQwrAK2tJvEoIdj
Dp5+jx1oYReYSw/3PiPM9WBVPvm0jA/NgdR//AX3SMqq04itbRRLx4s1DQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKV9dydC3xCpxODIZbCy65rRokn5MB8GA1UdIwQY
MBaAFINNujahmhH9H9+KISZ/LNNXWtUYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZzAyNk5xR2FFZjBmMzRvaEpuOHMwMWRhMVJnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC8zYzJjMTgtNmM3Yi00YTMzLTg2NTkt
ZjU2ODE2ZGVhZjMwLzEvZzAyNk5xR2FFZjBmMzRvaEpuOHMwMWRhMVJnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC8zYzJjMTgtNmM3Yi00YTMzLTg2NTktZjU2ODE2ZGVhZjMw
LzEvZzAyNk5xR2FFZjBmMzRvaEpuOHMwMWRhMVJnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB437y7MQ
teKxdqunTqEw/vX6hJ5rzdPXgWaY4m8SGzsopfV+4xDTMVdDG6dCjKJzfnnohG2E
uqQXe6R4AKNZA1ccFwcPRGKweTYSo86fLGzux89KDbhXINCTKQbwE38f+RV3pqjt
U00o4vNup389+wXEtqmP10vR2ggPDUzuve1LNgERfUMQ6tgpV9PZMacnzJKwfiHz
EqT90qWaiym7nkMX4Dne0trZbhMoI3laRcpyWSgnJEYbYJP6p37lwkMA0Hz6WB47
3eExNHst0ORmNaIVGsU8AcERQ9sfDDHZCoa98VuGe2x/NNsgAbmP1PBq6A9GldMu
oh3Or8GKXnHrxQ==
-----END CERTIFICATE-----
Generated at Thu Jul 23 19:01:07 2026 by rpki-client