Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/49aba4-e63d-4e06-8a12-96f216893dec/1/73imvMheyK3m7M6IDuBz1jdweWU.mft
File: 73imvMheyK3m7M6IDuBz1jdweWU.mft (raw, json)
Hash identifier: EE7aCzBZa+bl/hul0hs2GHl6oB44wjN1m6VWsxheayM=
Subject key identifier: 93:8C:B2:3E:A7:F1:BF:4C:17:E3:F8:6C:29:88:32:E7:05:AE:AA:8A
Authority key identifier: EF:78:A6:BC:C8:5E:C8:AD:E6:EC:CE:88:0E:E0:73:D6:37:70:79:65
Certificate issuer: /CN=ef78a6bcc85ec8ade6ecce880ee073d637707965
Certificate serial: 01A001A5AE544AC0713154DAB2976BF4E3A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/73imvMheyK3m7M6IDuBz1jdweWU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/49aba4-e63d-4e06-8a12-96f216893dec/1/73imvMheyK3m7M6IDuBz1jdweWU.mft
Manifest number: 1A02
Signing time: Fri 14 Aug 2026 19:00:30 +0000
Manifest this update: Fri 14 Aug 2026 19:00:30 +0000
Manifest next update: Sat 15 Aug 2026 19:00:30 +0000
Files and hashes: 1: 73imvMheyK3m7M6IDuBz1jdweWU.crl (hash: 19bK7gaW/dEiXxseBFSN6lqrpMBOZtgRAc6xXqcfa9M=)
2: s3XOS3QA_OLCEJgqKQs1DGSZPSE.roa (hash: zm1kL82qrnuSElGfAwXwitkc6LPDrRud9bFF8MtyuyQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/49aba4-e63d-4e06-8a12-96f216893dec/1/73imvMheyK3m7M6IDuBz1jdweWU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/49aba4-e63d-4e06-8a12-96f216893dec/1/73imvMheyK3m7M6IDuBz1jdweWU.mft
rsync://rpki.ripe.net/repository/DEFAULT/73imvMheyK3m7M6IDuBz1jdweWU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:a5:ae:54:4a:c0:71:31:54:da:b2:97:6b:f4:e3:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef78a6bcc85ec8ade6ecce880ee073d637707965
Validity
Not Before: Aug 14 19:00:30 2026 GMT
Not After : Aug 15 19:00:30 2026 GMT
Subject: CN=938cb23ea7f1bf4c17e3f86c298832e705aeaa8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:ed:33:f0:87:8e:f1:17:36:85:82:e8:f1:0a:
8f:bd:3f:07:4a:35:db:8d:a0:6c:51:75:e7:0e:65:
76:ea:3d:b5:c1:5d:a0:f7:05:d2:a3:cd:84:93:8c:
4c:53:34:f0:3c:5f:4d:1b:75:67:c8:12:e0:24:7e:
0c:2a:fa:68:c2:1c:c5:da:e4:38:e2:ac:88:7e:14:
2d:bb:9d:fe:91:23:b3:4d:58:71:46:44:b4:80:87:
aa:9d:86:28:64:d8:ca:b3:86:23:c0:5e:9c:05:52:
d6:99:04:05:54:69:76:72:92:d4:70:f4:2f:ef:68:
be:55:65:da:ea:81:aa:ea:39:5b:43:f3:47:cf:97:
ab:9c:d1:1b:c3:6c:11:46:8b:60:9c:5d:80:4a:55:
c8:66:4f:e8:24:55:22:cd:ae:df:f3:02:b4:73:1d:
6b:e6:10:0a:1a:b3:51:02:dc:55:ac:9e:2b:2f:9b:
e1:02:ae:14:ef:42:55:64:db:33:84:7b:9e:35:66:
9e:ff:3a:24:d9:60:07:51:32:45:dd:e2:05:0d:e9:
b9:9c:fb:3e:d6:a2:74:80:fc:55:2b:2f:90:b0:83:
f2:50:29:3e:6d:9d:37:d4:2d:52:ef:fd:2e:6a:e4:
c9:2a:5f:cb:f8:83:b4:7e:bf:b7:9c:74:06:bd:a9:
97:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:8C:B2:3E:A7:F1:BF:4C:17:E3:F8:6C:29:88:32:E7:05:AE:AA:8A
X509v3 Authority Key Identifier:
keyid:EF:78:A6:BC:C8:5E:C8:AD:E6:EC:CE:88:0E:E0:73:D6:37:70:79:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/73imvMheyK3m7M6IDuBz1jdweWU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/49aba4-e63d-4e06-8a12-96f216893dec/1/73imvMheyK3m7M6IDuBz1jdweWU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/49aba4-e63d-4e06-8a12-96f216893dec/1/73imvMheyK3m7M6IDuBz1jdweWU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:dc:08:18:7b:76:5b:b9:43:14:73:57:40:a0:64:52:9c:8e:
96:53:0f:4e:c6:9a:0a:42:96:dc:9e:27:df:02:5b:da:68:49:
01:2a:0a:a5:27:79:a7:4d:ac:fc:9e:6c:be:52:af:cc:26:e1:
27:fe:28:4c:11:43:ec:4f:e8:82:a3:17:52:95:8d:34:16:35:
e4:a2:a0:25:3c:c2:1e:de:4b:23:b2:b1:b9:b5:ce:16:6a:7e:
a2:5e:8e:c7:18:1a:26:41:11:13:af:43:40:b3:27:bf:fb:b1:
f2:8c:23:b3:db:86:7f:d9:9c:64:8e:7e:0d:48:b4:08:45:83:
53:37:55:e6:da:06:a7:a0:8c:24:58:d6:a9:f9:28:b6:78:5a:
67:53:95:94:f0:bd:e1:7f:f2:38:58:f6:04:21:16:b7:04:05:
c2:9c:56:c9:e6:58:4f:c9:3b:0f:e3:f4:da:6c:94:d9:8c:f8:
72:58:7d:f1:bb:9d:50:f1:72:8a:33:a4:7d:4e:48:6f:f0:fd:
e8:20:04:cc:29:6a:24:fd:d6:f3:9c:e9:da:64:4c:26:71:2c:
d4:b2:f2:6a:e7:37:53:9c:2e:78:b4:9d:3b:42:8f:64:fe:c1:
40:ed:43:59:ff:ef:f8:9b:6f:81:84:28:5c:0b:f8:2c:aa:b9:
51:3c:0c:a7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaABpa5USsBxMVTaspdr9OOgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVmNzhhNmJjYzg1ZWM4YWRlNmVjY2U4ODBlZTA3M2Q2Mzc3
MDc5NjUwHhcNMjYwODE0MTkwMDMwWhcNMjYwODE1MTkwMDMwWjAzMTEwLwYDVQQD
Eyg5MzhjYjIzZWE3ZjFiZjRjMTdlM2Y4NmMyOTg4MzJlNzA1YWVhYThhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3u0z8IeO8Rc2hYLo8QqPvT8HSjXb
jaBsUXXnDmV26j21wV2g9wXSo82Ek4xMUzTwPF9NG3VnyBLgJH4MKvpowhzF2uQ4
4qyIfhQtu53+kSOzTVhxRkS0gIeqnYYoZNjKs4YjwF6cBVLWmQQFVGl2cpLUcPQv
72i+VWXa6oGq6jlbQ/NHz5ernNEbw2wRRotgnF2ASlXIZk/oJFUiza7f8wK0cx1r
5hAKGrNRAtxVrJ4rL5vhAq4U70JVZNszhHueNWae/zok2WAHUTJF3eIFDem5nPs+
1qJ0gPxVKy+QsIPyUCk+bZ031C1S7/0uauTJKl/L+IO0fr+3nHQGvamX6QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJOMsj6n8b9MF+P4bCmIMucFrqqKMB8GA1UdIwQY
MBaAFO94przIXsit5uzOiA7gc9Y3cHllMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNzNpbXZNaGV5SzNtN002SUR1QnoxamR3ZVdVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi80OWFiYTQtZTYzZC00ZTA2LThhMTIt
OTZmMjE2ODkzZGVjLzEvNzNpbXZNaGV5SzNtN002SUR1QnoxamR3ZVdVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yi80OWFiYTQtZTYzZC00ZTA2LThhMTItOTZmMjE2ODkzZGVj
LzEvNzNpbXZNaGV5SzNtN002SUR1QnoxamR3ZVdVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF9wIGHt2
W7lDFHNXQKBkUpyOllMPTsaaCkKW3J4n3wJb2mhJASoKpSd5p02s/J5svlKvzCbh
J/4oTBFD7E/ogqMXUpWNNBY15KKgJTzCHt5LI7KxubXOFmp+ol6OxxgaJkERE69D
QLMnv/ux8owjs9uGf9mcZI5+DUi0CEWDUzdV5toGp6CMJFjWqfkotnhaZ1OVlPC9
4X/yOFj2BCEWtwQFwpxWyeZYT8k7D+P02myU2Yz4clh98budUPFyijOkfU5Ib/D9
6CAEzClqJP3W85zp2mRMJnEs1LLyauc3U5wueLSdO0KPZP7BQO1DWf/v+JtvgYQo
XAv4LKq5UTwMpw==
-----END CERTIFICATE-----
Generated at Fri Aug 14 22:23:58 2026 by rpki-client