
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/cc0dc5-b8cc-43c3-85b7-ac62ebfb0616/1/ahRjzDw0FHZhFRif2a-ORMXblBI.mft
File: ahRjzDw0FHZhFRif2a-ORMXblBI.mft (raw, json)
Hash identifier: Lp39g7ff+BRIKqW76xk0TP76mhm2alqhqL8KNYGh7nY=
Subject key identifier: 25:DB:42:AC:94:4A:3C:F6:CB:47:60:92:B7:BC:8D:A0:30:58:29:46
Authority key identifier: 6A:14:63:CC:3C:34:14:76:61:15:18:9F:D9:AF:8E:44:C5:DB:94:12
Certificate issuer: /CN=6a1463cc3c3414766115189fd9af8e44c5db9412
Certificate serial: 019F9059CD5C0F35B2D222385D1EE7CB7915
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ahRjzDw0FHZhFRif2a-ORMXblBI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/cc0dc5-b8cc-43c3-85b7-ac62ebfb0616/1/ahRjzDw0FHZhFRif2a-ORMXblBI.mft
Manifest number: B3
Signing time: Thu 23 Jul 2026 19:00:32 +0000
Manifest this update: Thu 23 Jul 2026 19:00:32 +0000
Manifest next update: Fri 24 Jul 2026 19:00:32 +0000
Files and hashes: 1: 7A5Mo_HCT5tIYge5BK9JUhMg5Hw.roa (hash: Ep+Z/ryezb/UZFnKTPmt1RNdUI3JuXr1O0msLtfQ0TA=)
2: ahRjzDw0FHZhFRif2a-ORMXblBI.crl (hash: K0hfmgh8CiCbyKVQWVSZFe1qwFRfWmKtI0DQvRoKoJE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/cc0dc5-b8cc-43c3-85b7-ac62ebfb0616/1/ahRjzDw0FHZhFRif2a-ORMXblBI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/cc0dc5-b8cc-43c3-85b7-ac62ebfb0616/1/ahRjzDw0FHZhFRif2a-ORMXblBI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ahRjzDw0FHZhFRif2a-ORMXblBI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:59:cd:5c:0f:35:b2:d2:22:38:5d:1e:e7:cb:79:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a1463cc3c3414766115189fd9af8e44c5db9412
Validity
Not Before: Jul 23 19:00:32 2026 GMT
Not After : Jul 24 19:00:32 2026 GMT
Subject: CN=25db42ac944a3cf6cb476092b7bc8da030582946
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:4c:ea:85:24:0c:2a:d3:aa:da:43:19:99:27:
09:41:c8:be:35:98:c3:a6:f4:cf:fa:58:fa:5b:f0:
88:78:db:9e:f4:78:b6:41:8b:24:04:32:f4:80:96:
9a:e1:be:fb:ed:a2:09:30:d7:bd:67:0f:1b:a1:0a:
10:15:4f:fc:9a:96:f1:08:41:2e:5c:84:0e:2e:23:
8a:e7:53:ee:d9:e1:ef:24:2b:c6:f6:a9:a1:47:37:
cf:3a:4e:17:9d:e7:a8:e9:b6:28:78:5f:8a:d1:48:
a9:f7:c9:5e:ef:4e:0a:e5:ab:5a:0c:f4:fb:3d:c1:
43:8a:1d:20:fc:c6:68:40:bf:4b:7a:1c:ed:06:f1:
f4:8e:ae:7d:be:55:5a:23:98:17:e6:83:5a:39:73:
c7:20:9e:99:33:bb:5b:cb:42:97:5c:77:c4:6d:70:
09:5a:0e:03:fe:d7:a0:b7:70:0c:ba:d0:b8:44:be:
40:d4:c0:09:27:ed:8a:ef:47:5f:20:28:88:b8:6b:
8e:8b:1c:c5:93:1a:d6:ae:29:55:9b:dd:0c:64:8f:
8c:10:4e:89:99:1a:cd:ce:f3:c3:48:9e:eb:f4:73:
eb:6e:55:62:78:48:ee:6f:77:ad:5b:b1:e6:19:42:
44:5e:9c:c8:c8:2d:dc:b2:00:df:fc:65:f8:5e:7d:
35:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:DB:42:AC:94:4A:3C:F6:CB:47:60:92:B7:BC:8D:A0:30:58:29:46
X509v3 Authority Key Identifier:
keyid:6A:14:63:CC:3C:34:14:76:61:15:18:9F:D9:AF:8E:44:C5:DB:94:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ahRjzDw0FHZhFRif2a-ORMXblBI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/cc0dc5-b8cc-43c3-85b7-ac62ebfb0616/1/ahRjzDw0FHZhFRif2a-ORMXblBI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/cc0dc5-b8cc-43c3-85b7-ac62ebfb0616/1/ahRjzDw0FHZhFRif2a-ORMXblBI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:54:61:b7:33:d6:2a:ba:a8:4a:71:15:eb:db:5c:75:3d:ee:
63:ab:76:88:20:7c:75:a1:83:d8:38:56:ec:9c:2c:f7:c7:29:
82:b0:d2:cb:7c:6e:d9:3b:51:34:d3:0b:11:86:c9:22:45:1b:
43:35:f9:7e:9a:52:38:d3:eb:0c:94:1e:e1:8c:57:51:1b:0c:
ce:8b:f8:18:4b:f6:7c:29:63:08:c6:18:1c:59:32:82:0c:d8:
39:b2:e8:41:bb:1d:fd:95:2d:26:d5:f4:3a:51:4e:73:91:17:
92:d4:92:78:b3:05:5c:5b:d6:3b:48:62:b5:d2:45:07:b0:9c:
8a:79:c0:6b:22:3d:cf:01:34:56:78:14:9c:74:96:59:1d:3c:
f9:18:bd:01:15:c8:e3:06:22:28:57:42:7f:85:2f:b7:dc:bf:
4c:0a:22:58:6c:ea:05:7e:7a:fb:10:62:31:0e:84:91:2e:ce:
59:de:0c:96:d5:bb:1b:c8:84:80:ef:4e:0a:5d:64:00:ea:31:
05:9a:3e:70:92:a8:4f:8f:d4:45:f4:67:21:12:50:3a:d1:25:
4f:8c:1f:3c:7b:39:55:77:7e:43:5e:dc:11:da:07:cc:ff:dc:
fd:42:80:24:ba:fb:7c:ce:70:96:99:7f:9d:22:c0:d6:26:7b:
f1:06:15:8c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+QWc1cDzWy0iI4XR7ny3kVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZhMTQ2M2NjM2MzNDE0NzY2MTE1MTg5ZmQ5YWY4ZTQ0YzVk
Yjk0MTIwHhcNMjYwNzIzMTkwMDMyWhcNMjYwNzI0MTkwMDMyWjAzMTEwLwYDVQQD
EygyNWRiNDJhYzk0NGEzY2Y2Y2I0NzYwOTJiN2JjOGRhMDMwNTgyOTQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2EzqhSQMKtOq2kMZmScJQci+NZjD
pvTP+lj6W/CIeNue9Hi2QYskBDL0gJaa4b777aIJMNe9Zw8boQoQFU/8mpbxCEEu
XIQOLiOK51Pu2eHvJCvG9qmhRzfPOk4Xneeo6bYoeF+K0Uip98le704K5ataDPT7
PcFDih0g/MZoQL9LehztBvH0jq59vlVaI5gX5oNaOXPHIJ6ZM7tby0KXXHfEbXAJ
Wg4D/tegt3AMutC4RL5A1MAJJ+2K70dfICiIuGuOixzFkxrWrilVm90MZI+MEE6J
mRrNzvPDSJ7r9HPrblVieEjub3etW7HmGUJEXpzIyC3csgDf/GX4Xn01PQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCXbQqyUSjz2y0dgkre8jaAwWClGMB8GA1UdIwQY
MBaAFGoUY8w8NBR2YRUYn9mvjkTF25QSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYWhSanpEdzBGSFpoRlJpZjJhLU9STVhibEJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy9jYzBkYzUtYjhjYy00M2MzLTg1Yjct
YWM2MmViZmIwNjE2LzEvYWhSanpEdzBGSFpoRlJpZjJhLU9STVhibEJJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNy9jYzBkYzUtYjhjYy00M2MzLTg1YjctYWM2MmViZmIwNjE2
LzEvYWhSanpEdzBGSFpoRlJpZjJhLU9STVhibEJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXlRhtzPW
KrqoSnEV69tcdT3uY6t2iCB8daGD2DhW7Jws98cpgrDSy3xu2TtRNNMLEYbJIkUb
QzX5fppSONPrDJQe4YxXURsMzov4GEv2fCljCMYYHFkyggzYObLoQbsd/ZUtJtX0
OlFOc5EXktSSeLMFXFvWO0hitdJFB7CcinnAayI9zwE0VngUnHSWWR08+Ri9ARXI
4wYiKFdCf4Uvt9y/TAoiWGzqBX56+xBiMQ6EkS7OWd4MltW7G8iEgO9OCl1kAOox
BZo+cJKoT4/URfRnIRJQOtElT4wfPHs5VXd+Q17cEdoHzP/c/UKAJLr7fM5wlpl/
nSLA1iZ78QYVjA==
-----END CERTIFICATE-----
Generated at Thu Jul 23 22:47:34 2026 by rpki-client