Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/547a7f-4baf-4b7e-afb8-466013435079/1/a7lc_C0Yf0BTDvCDu9EMiMSVbB0.mft
File: a7lc_C0Yf0BTDvCDu9EMiMSVbB0.mft (raw, json)
Hash identifier: IYioTn2y8dLMe0y4ezxmFumI9qGDFG//l8gayk5/4AA=
Subject key identifier: 35:00:0D:12:6C:41:DA:5C:8C:8B:3B:E8:3E:82:DB:9F:55:89:C8:B0
Authority key identifier: 6B:B9:5C:FC:2D:18:7F:40:53:0E:F0:83:BB:D1:0C:88:C4:95:6C:1D
Certificate issuer: /CN=6bb95cfc2d187f40530ef083bbd10c88c4956c1d
Certificate serial: 01A01F42CC2D44085519490B5FCB4D0BD8A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a7lc_C0Yf0BTDvCDu9EMiMSVbB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/547a7f-4baf-4b7e-afb8-466013435079/1/a7lc_C0Yf0BTDvCDu9EMiMSVbB0.mft
Manifest number: 1A13
Signing time: Thu 20 Aug 2026 13:01:06 +0000
Manifest this update: Thu 20 Aug 2026 13:01:06 +0000
Manifest next update: Fri 21 Aug 2026 13:01:06 +0000
Files and hashes: 1: 0xwfSsFkb05U4ozVSEb8hCqR4ZM.roa (hash: wDnxCrMW737wBP0bFwNqAOo1oxv3iXJSRvzrJ/qp1Dc=)
2: a7lc_C0Yf0BTDvCDu9EMiMSVbB0.crl (hash: oDW+ThAE9kgpG72iOirJoPCN62/W72vmZJHzaoCL00E=)
3: zq7GSsBTb4iCu4BsJeZ1X5mLg0g.roa (hash: wAonBOQHcI2HVnsLhr53pN++Gv5Cyj0r6V/3M0lZCdA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/547a7f-4baf-4b7e-afb8-466013435079/1/a7lc_C0Yf0BTDvCDu9EMiMSVbB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/547a7f-4baf-4b7e-afb8-466013435079/1/a7lc_C0Yf0BTDvCDu9EMiMSVbB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/a7lc_C0Yf0BTDvCDu9EMiMSVbB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Aug 2026 13:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:1f:42:cc:2d:44:08:55:19:49:0b:5f:cb:4d:0b:d8:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6bb95cfc2d187f40530ef083bbd10c88c4956c1d
Validity
Not Before: Aug 20 13:01:06 2026 GMT
Not After : Aug 21 13:01:06 2026 GMT
Subject: CN=35000d126c41da5c8c8b3be83e82db9f5589c8b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:24:c9:fc:c0:b2:51:1d:4d:19:87:c7:66:e9:
5c:cd:52:e0:fd:98:c3:87:34:3f:26:93:30:97:c9:
5b:58:a9:af:f7:98:ec:57:77:9a:72:1a:a1:fe:5f:
db:4f:79:e8:d8:d2:16:c5:f3:a5:9a:10:6a:fa:47:
be:50:69:0f:95:ea:51:23:c3:b0:d6:c8:21:7d:a0:
d1:65:81:9e:f2:c4:bd:64:d8:3b:cc:25:2d:9d:22:
62:80:80:20:71:44:97:b0:3c:f8:03:47:bf:5f:96:
08:b5:4a:13:db:cb:7f:16:bf:99:7c:1b:f6:3b:c3:
37:f2:7e:8f:c9:0d:f9:e1:07:ec:e1:b4:98:bb:f9:
86:21:72:0a:cf:1d:01:1e:d9:ba:7d:dd:01:8e:3d:
7b:87:66:02:8c:21:04:78:ea:ef:8f:e3:87:58:3e:
83:90:62:69:5a:96:38:49:7a:b1:35:ff:0f:9e:f6:
60:98:71:1f:f4:f4:46:47:dc:31:e6:93:76:42:5f:
de:88:47:5d:ac:77:78:ea:63:42:af:20:26:6d:4c:
ec:bc:54:84:7c:ff:04:4d:4e:5f:06:1d:cd:a5:2e:
b2:3f:b3:13:ca:92:4e:d2:91:1d:5e:d7:98:21:7e:
0d:36:7b:01:69:8a:32:a2:c4:06:c0:5a:43:0e:61:
e5:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:00:0D:12:6C:41:DA:5C:8C:8B:3B:E8:3E:82:DB:9F:55:89:C8:B0
X509v3 Authority Key Identifier:
keyid:6B:B9:5C:FC:2D:18:7F:40:53:0E:F0:83:BB:D1:0C:88:C4:95:6C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7lc_C0Yf0BTDvCDu9EMiMSVbB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/547a7f-4baf-4b7e-afb8-466013435079/1/a7lc_C0Yf0BTDvCDu9EMiMSVbB0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/547a7f-4baf-4b7e-afb8-466013435079/1/a7lc_C0Yf0BTDvCDu9EMiMSVbB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:86:22:91:55:23:65:f8:68:b7:fa:e4:9b:fd:8b:ab:c4:61:
70:b3:0c:df:65:f0:65:5d:91:84:f7:77:ab:75:bd:03:da:a2:
4c:3f:b3:00:7e:38:47:41:4f:8f:ac:03:54:af:d0:39:91:71:
13:45:1c:64:b1:a9:17:0a:d3:f6:90:0b:dd:ba:81:d1:5c:2e:
9e:c1:97:be:32:d4:73:52:f1:e0:b2:db:dc:e6:5d:d8:8a:4f:
05:88:9c:1d:4a:4a:9e:ad:80:ea:0b:ab:27:98:3b:ec:0d:5f:
44:dd:f6:dd:47:22:a2:75:69:ea:d5:ae:b3:83:e7:62:0d:f4:
cc:e0:61:d1:e2:fe:78:eb:69:34:aa:a3:87:f5:7f:45:06:90:
1f:71:93:fe:f0:7d:c8:1b:14:09:6b:44:1b:39:ca:4a:e6:95:
d1:fe:4a:f9:88:14:8e:1d:48:54:ce:13:00:dc:24:ec:1f:31:
6d:27:d2:17:62:1f:93:e1:f6:1d:8b:c9:f9:d8:4f:b1:38:c6:
5b:09:2e:99:b1:c2:c9:6d:76:03:b6:c2:37:cc:ca:70:57:5a:
d1:d8:93:75:ee:6b:88:76:4c:0c:4e:9a:a7:4d:1d:d5:73:14:
fe:9a:bf:7e:fd:45:db:ed:b3:03:dc:1a:f3:9e:16:67:ef:fb:
99:48:11:67
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaAfQswtRAhVGUkLX8tNC9inMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZiYjk1Y2ZjMmQxODdmNDA1MzBlZjA4M2JiZDEwYzg4YzQ5
NTZjMWQwHhcNMjYwODIwMTMwMTA2WhcNMjYwODIxMTMwMTA2WjAzMTEwLwYDVQQD
EygzNTAwMGQxMjZjNDFkYTVjOGM4YjNiZTgzZTgyZGI5ZjU1ODljOGIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwyTJ/MCyUR1NGYfHZulczVLg/ZjD
hzQ/JpMwl8lbWKmv95jsV3eachqh/l/bT3no2NIWxfOlmhBq+ke+UGkPlepRI8Ow
1sghfaDRZYGe8sS9ZNg7zCUtnSJigIAgcUSXsDz4A0e/X5YItUoT28t/Fr+ZfBv2
O8M38n6PyQ354Qfs4bSYu/mGIXIKzx0BHtm6fd0Bjj17h2YCjCEEeOrvj+OHWD6D
kGJpWpY4SXqxNf8PnvZgmHEf9PRGR9wx5pN2Ql/eiEddrHd46mNCryAmbUzsvFSE
fP8ETU5fBh3NpS6yP7MTypJO0pEdXteYIX4NNnsBaYoyosQGwFpDDmHlVQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDUADRJsQdpcjIs76D6C259ViciwMB8GA1UdIwQY
MBaAFGu5XPwtGH9AUw7wg7vRDIjElWwdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYTdsY19DMFlmMEJURHZDRHU5RU1pTVNWYkIwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS81NDdhN2YtNGJhZi00YjdlLWFmYjgt
NDY2MDEzNDM1MDc5LzEvYTdsY19DMFlmMEJURHZDRHU5RU1pTVNWYkIwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OS81NDdhN2YtNGJhZi00YjdlLWFmYjgtNDY2MDEzNDM1MDc5
LzEvYTdsY19DMFlmMEJURHZDRHU5RU1pTVNWYkIwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALoYikVUj
Zfhot/rkm/2Lq8RhcLMM32XwZV2RhPd3q3W9A9qiTD+zAH44R0FPj6wDVK/QOZFx
E0UcZLGpFwrT9pAL3bqB0VwunsGXvjLUc1Lx4LLb3OZd2IpPBYicHUpKnq2A6gur
J5g77A1fRN323UcionVp6tWus4PnYg30zOBh0eL+eOtpNKqjh/V/RQaQH3GT/vB9
yBsUCWtEGznKSuaV0f5K+YgUjh1IVM4TANwk7B8xbSfSF2Ifk+H2HYvJ+dhPsTjG
WwkumbHCyW12A7bCN8zKcFda0diTde5riHZMDE6ap00d1XMU/pq/fv1F2+2zA9wa
854WZ+/7mUgRZw==
-----END CERTIFICATE-----
Generated at Thu Aug 20 22:54:11 2026 by rpki-client