Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/595024-8bff-4f18-8ccb-69a44f048db8/1/ayKtTPZHpItjH_hPIn6gJSEwVS0.mft
File: ayKtTPZHpItjH_hPIn6gJSEwVS0.mft (raw, json)
Hash identifier: 0zMWILoirueKLnnwRtDee5hp5xnco725DSN9WUWXd9w=
Subject key identifier: A0:4F:0A:33:2D:F5:85:B2:FD:9E:75:E2:43:FD:B1:AE:54:66:4B:A6
Authority key identifier: 6B:22:AD:4C:F6:47:A4:8B:63:1F:F8:4F:22:7E:A0:25:21:30:55:2D
Certificate issuer: /CN=6b22ad4cf647a48b631ff84f227ea0252130552d
Certificate serial: 019F860CF76FFEA19BAAB774DA7B93F707BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ayKtTPZHpItjH_hPIn6gJSEwVS0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/595024-8bff-4f18-8ccb-69a44f048db8/1/ayKtTPZHpItjH_hPIn6gJSEwVS0.mft
Manifest number: 1634
Signing time: Tue 21 Jul 2026 19:00:24 +0000
Manifest this update: Tue 21 Jul 2026 19:00:24 +0000
Manifest next update: Wed 22 Jul 2026 19:00:24 +0000
Files and hashes: 1: WrRSKzPOj6BgLow6AweYah_e1dA.roa (hash: zp8UwEZpI6bsmG4yaK4JetrekeKEEBLqIzJ3Rz0Eig8=)
2: ayKtTPZHpItjH_hPIn6gJSEwVS0.crl (hash: dDGgyvvVbB5iWuIGtAI40XZv8+YIBaDIHGVpCMW4yW0=)
3: uR1vfe6fR6lmKLx_KpYnu1pkQe8.roa (hash: rrB4HqghjaNhMjUMgJmTsjzw4hoiQcENyKRyhlNILHk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/595024-8bff-4f18-8ccb-69a44f048db8/1/ayKtTPZHpItjH_hPIn6gJSEwVS0.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/595024-8bff-4f18-8ccb-69a44f048db8/1/ayKtTPZHpItjH_hPIn6gJSEwVS0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ayKtTPZHpItjH_hPIn6gJSEwVS0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:86:0c:f7:6f:fe:a1:9b:aa:b7:74:da:7b:93:f7:07:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b22ad4cf647a48b631ff84f227ea0252130552d
Validity
Not Before: Jul 21 19:00:24 2026 GMT
Not After : Jul 22 19:00:24 2026 GMT
Subject: CN=a04f0a332df585b2fd9e75e243fdb1ae54664ba6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:0b:08:86:fc:f4:74:7a:37:11:42:88:c2:86:
54:57:53:dd:4f:2d:9e:50:88:90:c9:ac:d2:ef:bc:
e1:30:ee:79:4c:f7:1a:4f:f8:23:af:90:54:13:cb:
74:a3:77:90:61:d4:bf:9e:b7:69:74:31:2d:b9:46:
2a:b9:68:3b:0c:c5:cd:c9:cf:49:65:14:35:98:6a:
16:c1:8d:cc:1e:07:fa:2f:56:f8:62:b7:ac:b6:3e:
32:65:28:d5:d6:56:a4:89:70:01:6f:f5:f9:f6:25:
01:80:c9:26:00:86:ee:db:ec:fe:84:3f:5a:62:c0:
7a:53:cf:d1:e1:d5:e7:a2:31:a8:35:b6:4c:15:8d:
cf:f6:09:60:85:a5:39:e8:17:aa:16:e9:2a:01:ce:
0c:6f:b8:28:28:e9:c5:68:d0:19:ad:ce:c4:74:5a:
0d:67:7a:0d:d0:4b:6b:f6:8d:ed:2e:cc:eb:8e:4f:
ec:1b:7e:09:df:83:09:5f:36:5b:b6:07:7f:4d:d8:
0a:f9:f1:c4:5f:12:e8:9b:2a:08:dc:35:0d:8f:2d:
04:63:2a:06:56:f6:72:5e:0b:72:d0:f6:45:76:8d:
1e:ed:67:42:0c:71:3c:f6:84:45:bc:e3:b0:7d:c3:
41:2f:b6:5c:15:1a:df:4a:21:0d:ca:2c:ed:11:da:
e4:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:4F:0A:33:2D:F5:85:B2:FD:9E:75:E2:43:FD:B1:AE:54:66:4B:A6
X509v3 Authority Key Identifier:
keyid:6B:22:AD:4C:F6:47:A4:8B:63:1F:F8:4F:22:7E:A0:25:21:30:55:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ayKtTPZHpItjH_hPIn6gJSEwVS0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/595024-8bff-4f18-8ccb-69a44f048db8/1/ayKtTPZHpItjH_hPIn6gJSEwVS0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/595024-8bff-4f18-8ccb-69a44f048db8/1/ayKtTPZHpItjH_hPIn6gJSEwVS0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:2e:df:4e:a3:19:fe:4e:e5:57:eb:99:16:5c:a3:64:20:8a:
09:70:3e:17:0c:d5:c7:b0:24:d6:bf:67:eb:57:d5:22:5c:d7:
4d:34:f5:71:9e:dc:11:bf:1c:b7:7e:93:94:e4:3e:b6:55:a4:
51:5c:c0:44:b5:1c:5c:28:67:4e:e0:57:fd:d1:0c:46:9f:d4:
61:c6:5e:58:7d:24:ae:fd:ce:4c:df:b1:32:3d:68:58:01:54:
48:5d:04:1b:e8:94:12:fd:cb:e9:f1:50:50:47:b2:90:3a:d7:
eb:98:02:de:4e:5c:b7:71:41:f5:ae:f9:e1:b7:0d:38:0d:00:
94:0c:10:14:57:13:b4:a2:c4:c9:5a:13:d6:0d:be:7b:47:56:
12:c4:91:5d:e7:83:d1:8e:3a:3a:93:cc:dc:59:d5:40:48:9f:
82:7e:9a:5b:51:7d:a8:55:63:34:01:e8:c6:fe:1c:c6:95:b1:
eb:28:e0:85:f7:39:33:55:39:ab:23:43:79:00:9f:1a:79:61:
5c:45:95:e2:db:dc:df:98:2e:a5:91:93:f1:a1:f8:9f:ed:9a:
51:71:8d:a6:dc:74:59:88:19:e5:32:ae:aa:09:eb:5a:30:94:
dc:14:e0:ba:04:e9:cc:2d:a0:f2:d6:3e:18:ae:3e:10:4e:f3:
96:60:97:13
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+GDPdv/qGbqrd02nuT9we9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZiMjJhZDRjZjY0N2E0OGI2MzFmZjg0ZjIyN2VhMDI1MjEz
MDU1MmQwHhcNMjYwNzIxMTkwMDI0WhcNMjYwNzIyMTkwMDI0WjAzMTEwLwYDVQQD
EyhhMDRmMGEzMzJkZjU4NWIyZmQ5ZTc1ZTI0M2ZkYjFhZTU0NjY0YmE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArQsIhvz0dHo3EUKIwoZUV1PdTy2e
UIiQyazS77zhMO55TPcaT/gjr5BUE8t0o3eQYdS/nrdpdDEtuUYquWg7DMXNyc9J
ZRQ1mGoWwY3MHgf6L1b4Yrestj4yZSjV1lakiXABb/X59iUBgMkmAIbu2+z+hD9a
YsB6U8/R4dXnojGoNbZMFY3P9glghaU56BeqFukqAc4Mb7goKOnFaNAZrc7EdFoN
Z3oN0Etr9o3tLszrjk/sG34J34MJXzZbtgd/TdgK+fHEXxLomyoI3DUNjy0EYyoG
VvZyXgty0PZFdo0e7WdCDHE89oRFvOOwfcNBL7ZcFRrfSiENyiztEdrkxQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKBPCjMt9YWy/Z514kP9sa5UZkumMB8GA1UdIwQY
MBaAFGsirUz2R6SLYx/4TyJ+oCUhMFUtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYXlLdFRQWkhwSXRqSF9oUEluNmdKU0V3VlMwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC81OTUwMjQtOGJmZi00ZjE4LThjY2It
NjlhNDRmMDQ4ZGI4LzEvYXlLdFRQWkhwSXRqSF9oUEluNmdKU0V3VlMwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC81OTUwMjQtOGJmZi00ZjE4LThjY2ItNjlhNDRmMDQ4ZGI4
LzEvYXlLdFRQWkhwSXRqSF9oUEluNmdKU0V3VlMwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQS7fTqMZ
/k7lV+uZFlyjZCCKCXA+FwzVx7Ak1r9n61fVIlzXTTT1cZ7cEb8ct36TlOQ+tlWk
UVzARLUcXChnTuBX/dEMRp/UYcZeWH0krv3OTN+xMj1oWAFUSF0EG+iUEv3L6fFQ
UEeykDrX65gC3k5ct3FB9a754bcNOA0AlAwQFFcTtKLEyVoT1g2+e0dWEsSRXeeD
0Y46OpPM3FnVQEifgn6aW1F9qFVjNAHoxv4cxpWx6yjghfc5M1U5qyNDeQCfGnlh
XEWV4tvc35gupZGT8aH4n+2aUXGNptx0WYgZ5TKuqgnrWjCU3BTgugTpzC2g8tY+
GK4+EE7zlmCXEw==
-----END CERTIFICATE-----
Generated at Tue Jul 21 22:16:30 2026 by rpki-client