Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/99dd6e-0856-4a27-aecd-d8928f5e1b40/1/ap1tJuVsEy3bvABaxCT7U2rLoCA.mft
File: ap1tJuVsEy3bvABaxCT7U2rLoCA.mft (raw, json)
Hash identifier: W19m+UTylXHQDDYHrgYivfoWiR8NYdlq+rH35HlYIDY=
Subject key identifier: A2:CF:A5:6A:B5:97:0C:EF:49:2F:2A:A9:1A:C4:A7:76:02:86:87:85
Authority key identifier: 6A:9D:6D:26:E5:6C:13:2D:DB:BC:00:5A:C4:24:FB:53:6A:CB:A0:20
Certificate issuer: /CN=6a9d6d26e56c132ddbbc005ac424fb536acba020
Certificate serial: 019FA2CE28CD4E5CE6210DE8804A249436DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ap1tJuVsEy3bvABaxCT7U2rLoCA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/99dd6e-0856-4a27-aecd-d8928f5e1b40/1/ap1tJuVsEy3bvABaxCT7U2rLoCA.mft
Manifest number: 1961
Signing time: Mon 27 Jul 2026 09:00:47 +0000
Manifest this update: Mon 27 Jul 2026 09:00:47 +0000
Manifest next update: Tue 28 Jul 2026 09:00:47 +0000
Files and hashes: 1: L0pkYoARJXEFc-gB4c5J8VXY3Mg.roa (hash: 1faOAUcr0h7qDHU3+7FacAnxC8gdfFMLQm2JVMNKznA=)
2: ap1tJuVsEy3bvABaxCT7U2rLoCA.crl (hash: E1cdTfAbG5OnWLhOs38+zvn934LDPCCYgpCkPgQa6l0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/99dd6e-0856-4a27-aecd-d8928f5e1b40/1/ap1tJuVsEy3bvABaxCT7U2rLoCA.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/99dd6e-0856-4a27-aecd-d8928f5e1b40/1/ap1tJuVsEy3bvABaxCT7U2rLoCA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ap1tJuVsEy3bvABaxCT7U2rLoCA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a2:ce:28:cd:4e:5c:e6:21:0d:e8:80:4a:24:94:36:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a9d6d26e56c132ddbbc005ac424fb536acba020
Validity
Not Before: Jul 27 09:00:47 2026 GMT
Not After : Jul 28 09:00:47 2026 GMT
Subject: CN=a2cfa56ab5970cef492f2aa91ac4a77602868785
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:8a:ab:47:73:4b:14:e3:15:98:f4:d7:0f:c2:
31:08:e3:0b:6b:6f:55:0f:7b:69:45:10:d7:5a:53:
c5:49:b2:6f:5f:f5:51:ff:bb:88:e1:26:29:04:09:
16:a4:cb:82:0f:5a:42:37:37:e9:8f:9d:e1:00:8f:
38:e0:dc:34:96:f1:85:05:6c:33:b6:5d:ba:df:e7:
40:b1:9f:8a:2b:89:76:f5:c2:3e:99:05:36:7a:5d:
bf:13:bc:82:77:ca:71:05:50:76:ae:61:49:c0:34:
83:0a:fe:f3:f4:da:90:14:6e:3b:76:9e:b3:e6:70:
aa:07:04:84:2c:14:f8:03:13:35:92:1c:e1:dc:d1:
32:74:79:02:09:fe:24:0a:53:24:93:92:05:fc:3b:
76:83:39:bb:ee:8f:25:a0:76:8d:f3:c2:57:a5:27:
00:fa:75:aa:1b:d6:ea:e3:70:0d:70:e5:55:16:2b:
d1:70:19:12:1d:cd:cd:a5:ed:96:86:a8:c5:f6:f1:
fd:35:33:12:f0:6b:4a:95:54:b7:ef:61:ef:ec:29:
b5:3f:9c:85:44:5c:e6:44:42:96:9d:04:13:b5:ad:
44:8f:da:0d:2a:66:56:a5:ec:d0:4d:95:1d:34:95:
48:5c:8a:6d:a5:63:9e:ee:36:87:34:ce:66:db:bb:
31:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:CF:A5:6A:B5:97:0C:EF:49:2F:2A:A9:1A:C4:A7:76:02:86:87:85
X509v3 Authority Key Identifier:
keyid:6A:9D:6D:26:E5:6C:13:2D:DB:BC:00:5A:C4:24:FB:53:6A:CB:A0:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ap1tJuVsEy3bvABaxCT7U2rLoCA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/99dd6e-0856-4a27-aecd-d8928f5e1b40/1/ap1tJuVsEy3bvABaxCT7U2rLoCA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/99dd6e-0856-4a27-aecd-d8928f5e1b40/1/ap1tJuVsEy3bvABaxCT7U2rLoCA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:21:83:52:91:18:d7:51:dc:7d:27:51:cf:b8:ed:7e:33:8c:
54:0c:cf:8d:8f:2b:59:82:1c:7d:fb:79:3e:c6:58:95:0a:58:
0b:3e:4f:e1:c1:f9:b1:14:55:98:8e:c7:0e:79:e6:9e:5d:1f:
5e:af:df:7d:36:3f:a7:e8:fe:18:94:d4:15:1d:25:d9:20:a0:
1b:95:f9:a7:b8:1f:eb:1d:b6:95:52:9c:c2:0c:57:42:e1:1d:
0f:82:05:5d:b7:b6:80:7f:9c:5c:51:6b:60:f2:8e:24:49:19:
09:74:e8:b9:bc:8b:e7:0e:98:e1:e7:86:88:d1:0a:4a:ca:c8:
bd:fd:21:48:f1:72:d7:74:4a:af:c6:f8:af:ee:09:4f:78:54:
8f:70:db:e3:02:25:54:ac:d1:96:32:49:b2:55:15:2e:ec:9c:
94:f9:20:96:10:33:b7:6a:78:4e:30:63:44:0e:1c:2e:7f:29:
b5:f1:ac:39:ed:09:54:d7:d9:21:be:06:17:9f:aa:9a:f9:d0:
9b:34:d2:52:b8:7b:07:f3:4c:88:4b:5a:02:aa:3d:16:07:ba:
dc:42:dc:1e:a3:b1:c8:7c:0a:e1:08:0b:34:df:d6:1a:3c:22:
7b:db:3a:23:0c:da:b1:9f:f2:0a:e2:a8:ab:a9:d8:f8:13:93:
67:54:cf:34
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+izijNTlzmIQ3ogEoklDbfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZhOWQ2ZDI2ZTU2YzEzMmRkYmJjMDA1YWM0MjRmYjUzNmFj
YmEwMjAwHhcNMjYwNzI3MDkwMDQ3WhcNMjYwNzI4MDkwMDQ3WjAzMTEwLwYDVQQD
EyhhMmNmYTU2YWI1OTcwY2VmNDkyZjJhYTkxYWM0YTc3NjAyODY4Nzg1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAroqrR3NLFOMVmPTXD8IxCOMLa29V
D3tpRRDXWlPFSbJvX/VR/7uI4SYpBAkWpMuCD1pCNzfpj53hAI844Nw0lvGFBWwz
tl263+dAsZ+KK4l29cI+mQU2el2/E7yCd8pxBVB2rmFJwDSDCv7z9NqQFG47dp6z
5nCqBwSELBT4AxM1khzh3NEydHkCCf4kClMkk5IF/Dt2gzm77o8loHaN88JXpScA
+nWqG9bq43ANcOVVFivRcBkSHc3Npe2WhqjF9vH9NTMS8GtKlVS372Hv7Cm1P5yF
RFzmREKWnQQTta1Ej9oNKmZWpezQTZUdNJVIXIptpWOe7jaHNM5m27sxxQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKLPpWq1lwzvSS8qqRrEp3YChoeFMB8GA1UdIwQY
MBaAFGqdbSblbBMt27wAWsQk+1Nqy6AgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYXAxdEp1VnNFeTNidkFCYXhDVDdVMnJMb0NBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC85OWRkNmUtMDg1Ni00YTI3LWFlY2Qt
ZDg5MjhmNWUxYjQwLzEvYXAxdEp1VnNFeTNidkFCYXhDVDdVMnJMb0NBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC85OWRkNmUtMDg1Ni00YTI3LWFlY2QtZDg5MjhmNWUxYjQw
LzEvYXAxdEp1VnNFeTNidkFCYXhDVDdVMnJMb0NBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYiGDUpEY
11HcfSdRz7jtfjOMVAzPjY8rWYIcfft5PsZYlQpYCz5P4cH5sRRVmI7HDnnmnl0f
Xq/ffTY/p+j+GJTUFR0l2SCgG5X5p7gf6x22lVKcwgxXQuEdD4IFXbe2gH+cXFFr
YPKOJEkZCXToubyL5w6Y4eeGiNEKSsrIvf0hSPFy13RKr8b4r+4JT3hUj3Db4wIl
VKzRljJJslUVLuyclPkglhAzt2p4TjBjRA4cLn8ptfGsOe0JVNfZIb4GF5+qmvnQ
mzTSUrh7B/NMiEtaAqo9Fge63ELcHqOxyHwK4QgLNN/WGjwie9s6IwzasZ/yCuKo
q6nY+BOTZ1TPNA==
-----END CERTIFICATE-----
Generated at Mon Jul 27 13:57:41 2026 by rpki-client