Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/ba7dba-474a-42fd-a9c3-35b03136dd03/1/a0P3ovQ2ixel4DXOS9km-KFC1os.mft
File: a0P3ovQ2ixel4DXOS9km-KFC1os.mft (raw, json)
Hash identifier: 7+Df31/lX47E0nhoYcSmM9jPVUI8VoPagfs9DYerOZw=
Subject key identifier: 93:5A:9D:9C:C4:2B:37:F5:7D:C6:B7:A0:7C:1A:A1:49:98:EC:EF:39
Authority key identifier: 6B:43:F7:A2:F4:36:8B:17:A5:E0:35:CE:4B:D9:26:F8:A1:42:D6:8B
Certificate issuer: /CN=6b43f7a2f4368b17a5e035ce4bd926f8a142d68b
Certificate serial: 019F92B68962C040E5159A7EE27F3AD70FF5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a0P3ovQ2ixel4DXOS9km-KFC1os.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/ba7dba-474a-42fd-a9c3-35b03136dd03/1/a0P3ovQ2ixel4DXOS9km-KFC1os.mft
Manifest number: 19C6
Signing time: Fri 24 Jul 2026 06:01:03 +0000
Manifest this update: Fri 24 Jul 2026 06:01:03 +0000
Manifest next update: Sat 25 Jul 2026 06:01:03 +0000
Files and hashes: 1: MuWBM4y_8sU7g6FEyEJdZpch7MA.roa (hash: polciHBhuEIudcpVsohkilsNPMnWK3IMSBDrJXYyToE=)
2: a0P3ovQ2ixel4DXOS9km-KFC1os.crl (hash: 9s59GNXmtNhZcsHnB59d4KdH5PMRjK/x9wFPqG+cSkE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/ba7dba-474a-42fd-a9c3-35b03136dd03/1/a0P3ovQ2ixel4DXOS9km-KFC1os.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/ba7dba-474a-42fd-a9c3-35b03136dd03/1/a0P3ovQ2ixel4DXOS9km-KFC1os.mft
rsync://rpki.ripe.net/repository/DEFAULT/a0P3ovQ2ixel4DXOS9km-KFC1os.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:b6:89:62:c0:40:e5:15:9a:7e:e2:7f:3a:d7:0f:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b43f7a2f4368b17a5e035ce4bd926f8a142d68b
Validity
Not Before: Jul 24 06:01:03 2026 GMT
Not After : Jul 25 06:01:03 2026 GMT
Subject: CN=935a9d9cc42b37f57dc6b7a07c1aa14998ecef39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:7f:15:e4:1b:ef:5b:cd:6c:8d:55:d9:18:05:
2e:2a:40:4e:5b:4e:06:39:2d:e9:35:62:a0:a2:37:
25:81:6d:5e:1b:b0:10:79:a6:3b:e2:f6:8b:09:e7:
c2:4a:e7:43:20:da:2b:2a:fc:f7:f9:fb:4a:12:d9:
66:cd:ae:71:a2:4d:2c:66:d8:7c:f6:ac:b5:0e:7f:
de:86:db:06:e1:3e:00:03:23:98:35:91:00:08:f1:
4a:54:91:37:ba:7a:23:d6:a8:ec:23:c9:f5:92:e8:
c6:c1:73:63:30:44:dc:d1:6f:15:1c:50:c5:f3:25:
03:ae:80:06:27:fb:f7:c8:b2:a5:ec:44:b9:b3:0b:
c5:db:1c:5e:0a:97:22:2c:28:da:68:77:d5:d7:f2:
b8:3a:dc:4c:ec:1e:53:14:8c:4d:33:45:a4:2f:c2:
16:af:17:18:ff:8a:07:24:a7:b9:08:86:80:3a:27:
91:a1:81:91:73:fb:e3:61:6b:86:0f:6f:40:0a:63:
1f:eb:26:bd:22:b9:dc:57:70:d9:a0:b6:1b:8a:13:
16:32:23:7c:e6:6f:da:96:33:10:84:3a:d9:c2:9e:
04:dd:e7:84:b8:c1:be:98:c5:72:7c:a0:27:f0:a2:
60:ff:5b:9e:41:af:b9:cd:9c:f7:4e:f5:b5:f8:44:
79:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:5A:9D:9C:C4:2B:37:F5:7D:C6:B7:A0:7C:1A:A1:49:98:EC:EF:39
X509v3 Authority Key Identifier:
keyid:6B:43:F7:A2:F4:36:8B:17:A5:E0:35:CE:4B:D9:26:F8:A1:42:D6:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0P3ovQ2ixel4DXOS9km-KFC1os.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/ba7dba-474a-42fd-a9c3-35b03136dd03/1/a0P3ovQ2ixel4DXOS9km-KFC1os.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/ba7dba-474a-42fd-a9c3-35b03136dd03/1/a0P3ovQ2ixel4DXOS9km-KFC1os.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:20:f7:9e:4a:db:22:28:87:46:d9:3c:30:aa:a7:1d:13:c7:
0d:2f:3c:50:07:6c:37:13:ba:8b:11:b2:08:be:01:b0:b7:de:
e0:2c:e1:eb:fd:4a:da:d9:f1:5b:c9:7f:48:0a:7d:3b:e7:60:
a4:8d:87:77:c0:0e:5e:ae:39:b4:94:17:4d:0c:a4:7c:53:14:
9f:5e:66:2e:8a:a8:ae:f4:77:bb:b2:73:5b:1a:c7:53:e2:aa:
5f:c9:9b:f1:da:6f:e9:94:61:da:29:45:24:75:ee:d4:15:f1:
85:44:e5:da:20:a9:5d:d4:7d:92:b9:b7:89:24:5d:9e:60:9b:
5a:ab:47:d3:e9:ae:90:4a:aa:cc:31:56:e1:0c:44:4a:08:88:
7d:3b:20:3d:69:19:47:cf:ec:db:77:e6:93:f3:da:91:8f:a2:
bb:e5:94:af:d7:60:13:93:3a:56:d1:bd:8b:0d:40:b9:1f:a8:
f3:3f:47:2e:79:17:03:4d:f2:14:a2:bb:f3:47:cc:d5:bd:5b:
92:12:72:c4:b5:7f:76:ef:cf:8e:d5:e9:67:89:4e:fc:90:bc:
67:9d:f6:1a:4d:95:e0:bd:ec:b3:b0:b8:e2:6b:b4:6f:75:d1:
57:cc:cd:bd:88:8a:29:b6:cc:1e:63:e3:77:17:81:d7:3b:95:
ac:dd:2d:39
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+StoliwEDlFZp+4n861w/1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZiNDNmN2EyZjQzNjhiMTdhNWUwMzVjZTRiZDkyNmY4YTE0
MmQ2OGIwHhcNMjYwNzI0MDYwMTAzWhcNMjYwNzI1MDYwMTAzWjAzMTEwLwYDVQQD
Eyg5MzVhOWQ5Y2M0MmIzN2Y1N2RjNmI3YTA3YzFhYTE0OTk4ZWNlZjM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwH8V5BvvW81sjVXZGAUuKkBOW04G
OS3pNWKgojclgW1eG7AQeaY74vaLCefCSudDINorKvz3+ftKEtlmza5xok0sZth8
9qy1Dn/ehtsG4T4AAyOYNZEACPFKVJE3unoj1qjsI8n1kujGwXNjMETc0W8VHFDF
8yUDroAGJ/v3yLKl7ES5swvF2xxeCpciLCjaaHfV1/K4OtxM7B5TFIxNM0WkL8IW
rxcY/4oHJKe5CIaAOieRoYGRc/vjYWuGD29ACmMf6ya9IrncV3DZoLYbihMWMiN8
5m/aljMQhDrZwp4E3eeEuMG+mMVyfKAn8KJg/1ueQa+5zZz3TvW1+ER59QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJNanZzEKzf1fca3oHwaoUmY7O85MB8GA1UdIwQY
MBaAFGtD96L0NosXpeA1zkvZJvihQtaLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYTBQM292UTJpeGVsNERYT1M5a20tS0ZDMW9zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS9iYTdkYmEtNDc0YS00MmZkLWE5YzMt
MzViMDMxMzZkZDAzLzEvYTBQM292UTJpeGVsNERYT1M5a20tS0ZDMW9zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZS9iYTdkYmEtNDc0YS00MmZkLWE5YzMtMzViMDMxMzZkZDAz
LzEvYTBQM292UTJpeGVsNERYT1M5a20tS0ZDMW9zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZyD3nkrb
IiiHRtk8MKqnHRPHDS88UAdsNxO6ixGyCL4BsLfe4Czh6/1K2tnxW8l/SAp9O+dg
pI2Hd8AOXq45tJQXTQykfFMUn15mLoqorvR3u7JzWxrHU+KqX8mb8dpv6ZRh2ilF
JHXu1BXxhUTl2iCpXdR9krm3iSRdnmCbWqtH0+mukEqqzDFW4QxESgiIfTsgPWkZ
R8/s23fmk/PakY+iu+WUr9dgE5M6VtG9iw1AuR+o8z9HLnkXA03yFKK780fM1b1b
khJyxLV/du/PjtXpZ4lO/JC8Z532Gk2V4L3ss7C44mu0b3XRV8zNvYiKKbbMHmPj
dxeB1zuVrN0tOQ==
-----END CERTIFICATE-----
Generated at Fri Jul 24 08:42:28 2026 by rpki-client