Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/1308bb-2d48-42c6-9ad7-e0e798c325d3/1/a3fOhCRDu4qW_CUJDZ66_5Vnol4.mft
File: a3fOhCRDu4qW_CUJDZ66_5Vnol4.mft (raw, json)
Hash identifier: 7Hiqy/ejAjsUS5p2ppqwC6Ak5Vtp6wNLKNTPqGHxV8M=
Subject key identifier: C7:A7:9C:92:84:C9:2D:8B:09:99:6C:BE:D3:E8:01:A2:C6:EA:3F:28
Authority key identifier: 6B:77:CE:84:24:43:BB:8A:96:FC:25:09:0D:9E:BA:FF:95:67:A2:5E
Certificate issuer: /CN=6b77ce842443bb8a96fc25090d9ebaff9567a25e
Certificate serial: 019F1A1F75BACBB36B6DDFF0F47DB6CC2BAF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a3fOhCRDu4qW_CUJDZ66_5Vnol4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/1308bb-2d48-42c6-9ad7-e0e798c325d3/1/a3fOhCRDu4qW_CUJDZ66_5Vnol4.mft
Manifest number: 4C
Signing time: Tue 30 Jun 2026 20:01:37 +0000
Manifest this update: Tue 30 Jun 2026 20:01:37 +0000
Manifest next update: Wed 01 Jul 2026 20:01:37 +0000
Files and hashes: 1: AYWssxj1PLbVr_URF-ZIiz6BS4I.roa (hash: 9obR855p0IhaLrIXPPGSL2nYoYCxku1wM9uG/XbR5LA=)
2: a3fOhCRDu4qW_CUJDZ66_5Vnol4.crl (hash: p1BTG3dWRZs7GJBb9LUdWx1hsshPOsoEDlRWwZbpSJw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/1308bb-2d48-42c6-9ad7-e0e798c325d3/1/a3fOhCRDu4qW_CUJDZ66_5Vnol4.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/1308bb-2d48-42c6-9ad7-e0e798c325d3/1/a3fOhCRDu4qW_CUJDZ66_5Vnol4.mft
rsync://rpki.ripe.net/repository/DEFAULT/a3fOhCRDu4qW_CUJDZ66_5Vnol4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 14:31:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:1a:1f:75:ba:cb:b3:6b:6d:df:f0:f4:7d:b6:cc:2b:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b77ce842443bb8a96fc25090d9ebaff9567a25e
Validity
Not Before: Jun 30 20:01:37 2026 GMT
Not After : Jul 1 20:01:37 2026 GMT
Subject: CN=c7a79c9284c92d8b09996cbed3e801a2c6ea3f28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:21:4a:0b:e1:b9:03:2d:a8:be:e8:fe:b6:95:
af:0c:5d:dc:a0:17:a2:bf:64:41:fb:8e:cb:f3:be:
70:69:a9:39:1f:f0:a8:68:13:0d:cd:86:6b:0d:1d:
d0:6f:da:7c:d5:00:56:b2:ce:24:89:f8:8a:40:63:
e9:ca:5e:32:e3:74:e8:6b:d5:d7:2b:e2:ad:a8:e0:
13:ce:0b:ca:f7:eb:ff:67:e0:2a:93:a6:68:a4:7d:
ed:3c:de:45:cd:d9:0b:78:46:16:f6:3a:f3:01:35:
03:bd:7f:aa:2f:e1:8c:f5:b4:c2:23:7f:55:0e:be:
6e:2b:c1:b3:52:35:26:ab:a9:68:6c:f8:54:07:4b:
c4:f1:f7:f3:f4:a4:f3:05:72:a1:05:33:d5:f4:78:
ee:c0:77:c6:33:71:b0:8f:69:29:80:d4:88:47:7f:
d2:73:54:70:66:cf:b5:dc:03:7a:de:67:04:1a:01:
04:1e:94:7c:c6:3b:ac:a7:f6:0d:6e:90:1d:12:fb:
46:90:cc:ea:cf:36:b3:1b:7e:f4:9e:58:20:a4:cf:
4c:3d:06:5b:0d:41:c8:cc:9c:ac:a2:b1:a7:53:b8:
c3:49:19:bb:33:cf:47:ca:7a:47:91:74:48:c4:88:
69:96:d6:f2:49:9f:93:64:93:99:83:12:30:0c:5e:
1c:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:A7:9C:92:84:C9:2D:8B:09:99:6C:BE:D3:E8:01:A2:C6:EA:3F:28
X509v3 Authority Key Identifier:
keyid:6B:77:CE:84:24:43:BB:8A:96:FC:25:09:0D:9E:BA:FF:95:67:A2:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3fOhCRDu4qW_CUJDZ66_5Vnol4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/1308bb-2d48-42c6-9ad7-e0e798c325d3/1/a3fOhCRDu4qW_CUJDZ66_5Vnol4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/1308bb-2d48-42c6-9ad7-e0e798c325d3/1/a3fOhCRDu4qW_CUJDZ66_5Vnol4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:e6:33:9b:ee:a0:e3:aa:ce:21:65:7c:08:fb:6f:56:c0:e9:
ea:b5:9e:55:4d:ca:72:e3:17:8c:53:50:13:f3:db:46:69:0f:
2a:e6:26:67:68:25:50:c5:36:82:5a:23:fb:f6:0b:0a:9e:3a:
88:86:1a:3b:94:86:38:2f:28:35:56:46:a5:cb:dc:b5:c7:5c:
35:8b:4d:2f:e4:cc:74:6a:15:b8:f5:0f:cc:27:01:ec:b8:75:
f5:68:d7:9d:22:f4:47:b2:41:74:79:98:0a:3d:b9:8f:86:b9:
9b:02:8e:e6:8e:27:6f:a9:77:0f:e3:ef:ed:0e:82:26:61:24:
7e:37:b4:e1:1c:da:67:0c:d3:d6:8b:cb:f1:9a:14:50:d2:fd:
0d:94:f9:f0:c9:d9:67:2a:c4:ce:a1:19:f0:1b:ba:c9:22:89:
0c:d0:e2:76:15:ff:7a:39:4f:8b:28:df:35:c0:92:08:5f:a0:
25:f9:51:b7:e2:ee:d8:c2:b7:79:83:8b:78:73:e0:26:35:98:
b3:6e:a1:61:99:d0:a4:3b:f3:bf:2d:61:1e:71:8f:ab:67:37:
94:cd:85:dd:80:06:ea:ed:c3:2a:23:40:e5:9a:93:fe:f2:bb:
6d:82:dc:d1:ca:ca:2c:21:57:c8:64:d3:92:1e:0e:82:a3:02:
32:5b:76:be
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8aH3W6y7Nrbd/w9H22zCuvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZiNzdjZTg0MjQ0M2JiOGE5NmZjMjUwOTBkOWViYWZmOTU2
N2EyNWUwHhcNMjYwNjMwMjAwMTM3WhcNMjYwNzAxMjAwMTM3WjAzMTEwLwYDVQQD
EyhjN2E3OWM5Mjg0YzkyZDhiMDk5OTZjYmVkM2U4MDFhMmM2ZWEzZjI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyyFKC+G5Ay2ovuj+tpWvDF3coBei
v2RB+47L875waak5H/CoaBMNzYZrDR3Qb9p81QBWss4kifiKQGPpyl4y43Toa9XX
K+KtqOATzgvK9+v/Z+Aqk6ZopH3tPN5FzdkLeEYW9jrzATUDvX+qL+GM9bTCI39V
Dr5uK8GzUjUmq6lobPhUB0vE8ffz9KTzBXKhBTPV9HjuwHfGM3Gwj2kpgNSIR3/S
c1RwZs+13AN63mcEGgEEHpR8xjusp/YNbpAdEvtGkMzqzzazG370nlggpM9MPQZb
DUHIzJysorGnU7jDSRm7M89HynpHkXRIxIhpltbySZ+TZJOZgxIwDF4c4wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMennJKEyS2LCZlsvtPoAaLG6j8oMB8GA1UdIwQY
MBaAFGt3zoQkQ7uKlvwlCQ2euv+VZ6JeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYTNmT2hDUkR1NHFXX0NVSkRaNjZfNVZub2w0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC8xMzA4YmItMmQ0OC00MmM2LTlhZDct
ZTBlNzk4YzMyNWQzLzEvYTNmT2hDUkR1NHFXX0NVSkRaNjZfNVZub2w0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC8xMzA4YmItMmQ0OC00MmM2LTlhZDctZTBlNzk4YzMyNWQz
LzEvYTNmT2hDUkR1NHFXX0NVSkRaNjZfNVZub2w0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS+Yzm+6g
46rOIWV8CPtvVsDp6rWeVU3KcuMXjFNQE/PbRmkPKuYmZ2glUMU2gloj+/YLCp46
iIYaO5SGOC8oNVZGpcvctcdcNYtNL+TMdGoVuPUPzCcB7Lh19WjXnSL0R7JBdHmY
Cj25j4a5mwKO5o4nb6l3D+Pv7Q6CJmEkfje04RzaZwzT1ovL8ZoUUNL9DZT58MnZ
ZyrEzqEZ8Bu6ySKJDNDidhX/ejlPiyjfNcCSCF+gJflRt+Lu2MK3eYOLeHPgJjWY
s26hYZnQpDvzvy1hHnGPq2c3lM2F3YAG6u3DKiNA5ZqT/vK7bYLc0crKLCFXyGTT
kh4OgqMCMlt2vg==
-----END CERTIFICATE-----
Generated at Tue Jun 30 22:37:13 2026 by rpki-client