Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/40a1e5-7d2a-48d6-a50e-f96fb4ea7e70/1/aom7lPpf5QmM7X4hUpoL2G48TY0.mft
File: aom7lPpf5QmM7X4hUpoL2G48TY0.mft (raw, json)
Hash identifier: f+S0yX6gE8WYuxNQYT0HcfullRRJzfdaIFf5TU5P7H0=
Subject key identifier: 58:53:D0:39:73:B9:E8:85:CC:FD:A2:3F:9E:1D:DA:75:9D:1B:DB:5E
Authority key identifier: 6A:89:BB:94:FA:5F:E5:09:8C:ED:7E:21:52:9A:0B:D8:6E:3C:4D:8D
Certificate issuer: /CN=6a89bb94fa5fe5098ced7e21529a0bd86e3c4d8d
Certificate serial: 01A0035D99D7AD2DFF81BC0609A33FE988FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aom7lPpf5QmM7X4hUpoL2G48TY0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/40a1e5-7d2a-48d6-a50e-f96fb4ea7e70/1/aom7lPpf5QmM7X4hUpoL2G48TY0.mft
Manifest number: 7B
Signing time: Sat 15 Aug 2026 03:01:00 +0000
Manifest this update: Sat 15 Aug 2026 03:01:00 +0000
Manifest next update: Sun 16 Aug 2026 03:01:00 +0000
Files and hashes: 1: 3g9vEIvZ3Ad22o1OnOmjkYKrx-Y.roa (hash: dwEr+ygUTjcoJhBqeNSDCT0jVemskxaLd88sjFgcW5c=)
2: WjZ-lIR7MyhCZaOyQOqTaGg93bc.roa (hash: 9r+bJWO2ypdWBvTMrN/txM30uqxsJdCMbt8zxX7CLS8=)
3: aom7lPpf5QmM7X4hUpoL2G48TY0.crl (hash: ItHEkhFIsTBcFNmz1upz76of+ATxf3/tFh3E6rDDk8s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/40a1e5-7d2a-48d6-a50e-f96fb4ea7e70/1/aom7lPpf5QmM7X4hUpoL2G48TY0.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/40a1e5-7d2a-48d6-a50e-f96fb4ea7e70/1/aom7lPpf5QmM7X4hUpoL2G48TY0.mft
rsync://rpki.ripe.net/repository/DEFAULT/aom7lPpf5QmM7X4hUpoL2G48TY0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Aug 2026 02:46:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:03:5d:99:d7:ad:2d:ff:81:bc:06:09:a3:3f:e9:88:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a89bb94fa5fe5098ced7e21529a0bd86e3c4d8d
Validity
Not Before: Aug 15 03:01:00 2026 GMT
Not After : Aug 16 03:01:00 2026 GMT
Subject: CN=5853d03973b9e885ccfda23f9e1dda759d1bdb5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:41:c6:21:40:7d:e4:0f:66:6a:60:5d:2b:09:
55:da:9f:b8:8f:07:aa:3a:13:fa:44:53:80:7d:ea:
ba:82:d5:6f:67:a9:b1:17:73:63:4f:76:b5:4f:ae:
76:43:93:a7:55:03:f9:54:8d:91:56:29:b8:d8:78:
5e:17:87:f2:81:e4:17:73:f1:de:40:30:62:0d:81:
ff:56:41:4e:0b:45:e6:b2:22:df:0c:d1:22:30:51:
9b:ba:2f:09:cb:8a:d5:d5:04:08:a5:57:f8:30:19:
02:0b:0c:12:65:74:d8:30:5c:63:6a:55:06:4a:5e:
40:b8:9e:d6:c3:b5:4f:23:d5:14:c9:ad:74:53:7a:
31:a4:ec:59:a1:26:ef:8a:8d:a1:c6:70:95:3b:b6:
e8:22:e0:3d:e8:c9:f9:6a:c1:4d:ee:c4:59:f7:a7:
0a:e6:d5:22:c7:5d:ab:fd:c3:ce:63:c6:2a:7d:e4:
ac:ed:b2:6f:0b:78:8c:86:35:f6:29:9c:0c:31:2a:
26:1d:b3:eb:da:58:ba:e5:6c:a3:38:b5:4f:ac:86:
a2:07:d5:83:58:f5:c8:9e:11:fe:63:25:83:e5:5c:
ac:2b:ca:a3:ec:aa:a0:e3:1c:3c:ad:50:f5:d4:72:
a8:ba:1c:9c:a3:17:e7:99:22:71:c6:65:83:06:28:
fb:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:53:D0:39:73:B9:E8:85:CC:FD:A2:3F:9E:1D:DA:75:9D:1B:DB:5E
X509v3 Authority Key Identifier:
keyid:6A:89:BB:94:FA:5F:E5:09:8C:ED:7E:21:52:9A:0B:D8:6E:3C:4D:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aom7lPpf5QmM7X4hUpoL2G48TY0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/40a1e5-7d2a-48d6-a50e-f96fb4ea7e70/1/aom7lPpf5QmM7X4hUpoL2G48TY0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/40a1e5-7d2a-48d6-a50e-f96fb4ea7e70/1/aom7lPpf5QmM7X4hUpoL2G48TY0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:c8:e4:60:43:7a:b5:20:f6:d0:6b:37:f5:4a:ce:2c:1c:32:
06:92:5b:05:b2:bd:34:e2:81:c0:3b:bd:df:50:1f:3f:cf:df:
1c:4e:09:ad:e3:d7:e4:b3:b7:1a:83:26:15:4b:41:c5:a0:28:
b3:d5:69:09:a6:9c:d4:be:7d:b0:9a:e0:e1:03:6f:c6:97:1a:
2d:71:be:2a:de:bb:ea:15:ce:ef:5c:05:10:75:a8:0e:04:57:
91:b6:7e:c7:19:b7:22:0e:c7:c7:0f:d6:72:0e:3e:9d:d4:f6:
8e:4a:f0:f1:7c:7e:a9:5e:f4:5b:8d:6f:42:b4:55:62:6a:0a:
cf:97:35:a1:39:6d:3d:a0:0c:76:9c:33:22:8d:18:bb:bb:9d:
37:77:5c:1c:6d:2e:73:36:8b:41:61:03:ea:7a:32:63:03:a9:
2e:f6:5c:47:4c:28:a8:8e:5c:43:c2:58:a8:4f:e7:4c:d6:50:
b5:82:32:d2:ee:35:5b:2d:be:35:c1:21:89:04:a7:6b:8e:62:
41:ed:b7:ba:d2:22:5f:31:f3:d4:39:78:9c:ce:45:91:d3:47:
cd:71:65:a6:38:fc:f8:b0:ce:90:3d:d2:5b:46:67:f1:a0:1e:
1e:a2:7c:2e:c9:6c:3e:80:05:63:31:61:a6:7e:83:1c:28:ae:
35:92:ae:e7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaADXZnXrS3/gbwGCaM/6Yj7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZhODliYjk0ZmE1ZmU1MDk4Y2VkN2UyMTUyOWEwYmQ4NmUz
YzRkOGQwHhcNMjYwODE1MDMwMTAwWhcNMjYwODE2MDMwMTAwWjAzMTEwLwYDVQQD
Eyg1ODUzZDAzOTczYjllODg1Y2NmZGEyM2Y5ZTFkZGE3NTlkMWJkYjVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl0HGIUB95A9mamBdKwlV2p+4jweq
OhP6RFOAfeq6gtVvZ6mxF3NjT3a1T652Q5OnVQP5VI2RVim42HheF4fygeQXc/He
QDBiDYH/VkFOC0XmsiLfDNEiMFGbui8Jy4rV1QQIpVf4MBkCCwwSZXTYMFxjalUG
Sl5AuJ7Ww7VPI9UUya10U3oxpOxZoSbvio2hxnCVO7boIuA96Mn5asFN7sRZ96cK
5tUix12r/cPOY8YqfeSs7bJvC3iMhjX2KZwMMSomHbPr2li65WyjOLVPrIaiB9WD
WPXInhH+YyWD5VysK8qj7Kqg4xw8rVD11HKouhycoxfnmSJxxmWDBij7oQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFhT0DlzueiFzP2iP54d2nWdG9teMB8GA1UdIwQY
MBaAFGqJu5T6X+UJjO1+IVKaC9huPE2NMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYW9tN2xQcGY1UW1NN1g0aFVwb0wyRzQ4VFkwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC80MGExZTUtN2QyYS00OGQ2LWE1MGUt
Zjk2ZmI0ZWE3ZTcwLzEvYW9tN2xQcGY1UW1NN1g0aFVwb0wyRzQ4VFkwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOC80MGExZTUtN2QyYS00OGQ2LWE1MGUtZjk2ZmI0ZWE3ZTcw
LzEvYW9tN2xQcGY1UW1NN1g0aFVwb0wyRzQ4VFkwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANsjkYEN6
tSD20Gs39UrOLBwyBpJbBbK9NOKBwDu931AfP8/fHE4JrePX5LO3GoMmFUtBxaAo
s9VpCaac1L59sJrg4QNvxpcaLXG+Kt676hXO71wFEHWoDgRXkbZ+xxm3Ig7Hxw/W
cg4+ndT2jkrw8Xx+qV70W41vQrRVYmoKz5c1oTltPaAMdpwzIo0Yu7udN3dcHG0u
czaLQWED6noyYwOpLvZcR0woqI5cQ8JYqE/nTNZQtYIy0u41Wy2+NcEhiQSna45i
Qe23utIiXzHz1Dl4nM5FkdNHzXFlpjj8+LDOkD3SW0Zn8aAeHqJ8LslsPoAFYzFh
pn6DHCiuNZKu5w==
-----END CERTIFICATE-----
Generated at Sat Aug 15 07:37:55 2026 by rpki-client