Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/d3363e-4832-4d57-9da5-dbf76ed3939f/1/AQp9TGSu1LyYxrWwZP8Km4Lq2oI.mft
File: AQp9TGSu1LyYxrWwZP8Km4Lq2oI.mft (raw, json)
Hash identifier: +6Bd86uNlDjtW9TYgD6+EGeOaUNC3gbfFIPusYjIF+g=
Subject key identifier: E3:F7:BE:2E:02:28:E4:68:42:6D:C3:3E:E8:C4:72:88:86:42:2F:D5
Authority key identifier: 01:0A:7D:4C:64:AE:D4:BC:98:C6:B5:B0:64:FF:0A:9B:82:EA:DA:82
Certificate issuer: /CN=010a7d4c64aed4bc98c6b5b064ff0a9b82eada82
Certificate serial: 019FA0E004CBFD026C5F504A56EADFA23C7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AQp9TGSu1LyYxrWwZP8Km4Lq2oI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/d3363e-4832-4d57-9da5-dbf76ed3939f/1/AQp9TGSu1LyYxrWwZP8Km4Lq2oI.mft
Manifest number: 0F44
Signing time: Mon 27 Jul 2026 00:01:03 +0000
Manifest this update: Mon 27 Jul 2026 00:01:03 +0000
Manifest next update: Tue 28 Jul 2026 00:01:03 +0000
Files and hashes: 1: AQp9TGSu1LyYxrWwZP8Km4Lq2oI.crl (hash: xtA52ZoxMLHCkuK89fnw/yDOiE9zvVHD39T0MR036OA=)
2: VXiNyOdsOXCFTgyfrrZA_8BMZR0.roa (hash: pELMx1f1M83UZRqJfnbVYj9OTRiewgnk4FieswJJgw4=)
3: W3zOKFUi2t_SPUT2DlTDsdU_z2w.roa (hash: /WnpIr6aQ2Hx4ti+HlYDPocD/mQ4NxnOIR2iit9Xgag=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/d3363e-4832-4d57-9da5-dbf76ed3939f/1/AQp9TGSu1LyYxrWwZP8Km4Lq2oI.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/d3363e-4832-4d57-9da5-dbf76ed3939f/1/AQp9TGSu1LyYxrWwZP8Km4Lq2oI.mft
rsync://rpki.ripe.net/repository/DEFAULT/AQp9TGSu1LyYxrWwZP8Km4Lq2oI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a0:e0:04:cb:fd:02:6c:5f:50:4a:56:ea:df:a2:3c:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=010a7d4c64aed4bc98c6b5b064ff0a9b82eada82
Validity
Not Before: Jul 27 00:01:03 2026 GMT
Not After : Jul 28 00:01:03 2026 GMT
Subject: CN=e3f7be2e0228e468426dc33ee8c4728886422fd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:55:18:aa:95:b2:6c:d1:98:2f:ad:32:88:9b:
d9:37:58:c4:56:5c:78:ca:06:32:ad:f7:f1:8c:1b:
f4:cc:0f:4e:85:a6:71:6a:63:9c:40:1e:cd:5c:b9:
7b:b2:d6:bf:f5:10:4e:d9:bc:e7:53:15:ed:d1:52:
ce:a7:e6:f7:8d:43:e6:16:7c:2e:bb:5d:b3:81:9b:
60:05:ce:01:79:90:37:a6:03:fe:3e:75:2a:b9:e7:
a8:e3:68:fd:2a:be:c0:45:ad:da:c3:42:54:7d:e6:
38:71:ff:68:01:db:32:04:50:ce:15:fc:d0:39:cf:
c1:f4:26:a7:c7:4b:23:fd:8e:eb:7e:e7:3d:4c:42:
20:00:db:61:df:9c:5d:c2:57:c2:2d:b0:98:b6:9d:
58:b9:c0:59:4b:d3:e6:49:9e:69:55:cd:75:03:98:
f5:c6:f2:34:db:97:03:5e:41:69:49:a9:4a:21:fa:
d2:ec:03:25:7f:15:18:b3:81:6a:5d:ed:11:c3:23:
80:d6:22:5e:f3:55:88:c7:75:2f:05:da:23:0e:d4:
b2:01:06:f1:63:7d:48:02:bd:b1:36:35:0c:7c:35:
e5:26:24:81:72:6d:79:aa:7d:17:e9:64:b0:0e:10:
ef:df:fe:86:19:ec:df:73:a6:14:2b:e2:0e:ed:f3:
00:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:F7:BE:2E:02:28:E4:68:42:6D:C3:3E:E8:C4:72:88:86:42:2F:D5
X509v3 Authority Key Identifier:
keyid:01:0A:7D:4C:64:AE:D4:BC:98:C6:B5:B0:64:FF:0A:9B:82:EA:DA:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AQp9TGSu1LyYxrWwZP8Km4Lq2oI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/d3363e-4832-4d57-9da5-dbf76ed3939f/1/AQp9TGSu1LyYxrWwZP8Km4Lq2oI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/d3363e-4832-4d57-9da5-dbf76ed3939f/1/AQp9TGSu1LyYxrWwZP8Km4Lq2oI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:b8:bb:17:02:5a:27:06:7c:22:2b:9d:e3:c8:ca:16:9a:7f:
09:e3:32:03:db:5b:94:a0:90:26:1f:c8:96:9b:30:81:2e:cd:
d6:ed:f2:a5:a2:2a:f1:ee:62:e8:2a:94:86:b3:3a:ba:26:3b:
31:eb:d5:ee:b3:88:c0:bb:0e:56:4a:e8:e7:98:cb:fd:0f:7a:
7a:63:dd:85:eb:df:86:39:81:82:b7:81:cd:42:e5:3c:b9:d8:
56:b7:00:e8:2e:4f:84:94:4e:9e:e4:f6:41:49:16:3f:46:1c:
6c:68:c2:40:69:f2:5a:73:a9:15:99:ce:64:3d:2d:ba:bd:54:
ef:ce:d4:4d:0c:1c:b5:7b:72:e3:93:20:6e:a0:4b:52:4a:57:
28:8b:dc:56:5e:65:46:58:b8:33:f6:a6:cf:a8:6d:7c:01:f7:
ee:ef:c5:48:60:09:37:fa:ba:e4:bc:e0:e9:76:fb:1f:9e:e9:
6a:74:1e:55:c5:a7:4e:96:3b:24:f3:d7:a5:60:a4:59:2e:c7:
63:47:b6:c2:1c:da:0b:72:1f:5f:c2:f8:7f:a6:e3:cf:c6:c7:
1e:c5:fd:b7:38:20:fe:d8:e1:21:8a:ce:e9:ac:e3:a8:50:91:
35:eb:4d:ed:45:c1:07:4c:c0:a3:9c:5c:62:dc:47:22:e7:58:
9e:41:94:d2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+g4ATL/QJsX1BKVurfojx6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAxMGE3ZDRjNjRhZWQ0YmM5OGM2YjViMDY0ZmYwYTliODJl
YWRhODIwHhcNMjYwNzI3MDAwMTAzWhcNMjYwNzI4MDAwMTAzWjAzMTEwLwYDVQQD
EyhlM2Y3YmUyZTAyMjhlNDY4NDI2ZGMzM2VlOGM0NzI4ODg2NDIyZmQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0FUYqpWybNGYL60yiJvZN1jEVlx4
ygYyrffxjBv0zA9OhaZxamOcQB7NXLl7sta/9RBO2bznUxXt0VLOp+b3jUPmFnwu
u12zgZtgBc4BeZA3pgP+PnUqueeo42j9Kr7ARa3aw0JUfeY4cf9oAdsyBFDOFfzQ
Oc/B9Canx0sj/Y7rfuc9TEIgANth35xdwlfCLbCYtp1YucBZS9PmSZ5pVc11A5j1
xvI025cDXkFpSalKIfrS7AMlfxUYs4FqXe0RwyOA1iJe81WIx3UvBdojDtSyAQbx
Y31IAr2xNjUMfDXlJiSBcm15qn0X6WSwDhDv3/6GGezfc6YUK+IO7fMAswIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOP3vi4CKORoQm3DPujEcoiGQi/VMB8GA1UdIwQY
MBaAFAEKfUxkrtS8mMa1sGT/CpuC6tqCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQVFwOVRHU3UxTHlZeHJXd1pQOEttNExxMm9JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy9kMzM2M2UtNDgzMi00ZDU3LTlkYTUt
ZGJmNzZlZDM5MzlmLzEvQVFwOVRHU3UxTHlZeHJXd1pQOEttNExxMm9JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNy9kMzM2M2UtNDgzMi00ZDU3LTlkYTUtZGJmNzZlZDM5Mzlm
LzEvQVFwOVRHU3UxTHlZeHJXd1pQOEttNExxMm9JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArbi7FwJa
JwZ8Iiud48jKFpp/CeMyA9tblKCQJh/IlpswgS7N1u3ypaIq8e5i6CqUhrM6uiY7
MevV7rOIwLsOVkro55jL/Q96emPdhevfhjmBgreBzULlPLnYVrcA6C5PhJROnuT2
QUkWP0YcbGjCQGnyWnOpFZnOZD0tur1U787UTQwctXty45MgbqBLUkpXKIvcVl5l
Rli4M/amz6htfAH37u/FSGAJN/q65Lzg6Xb7H57panQeVcWnTpY7JPPXpWCkWS7H
Y0e2whzaC3IfX8L4f6bjz8bHHsX9tzgg/tjhIYrO6azjqFCRNetN7UXBB0zAo5xc
YtxHIudYnkGU0g==
-----END CERTIFICATE-----
Generated at Mon Jul 27 05:56:23 2026 by rpki-client