Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/21b500-34a6-420a-aa44-749905c327b1/1/anSAs4Rvc1yYz5sA6YBGKhiwbPY.mft
File: anSAs4Rvc1yYz5sA6YBGKhiwbPY.mft (raw, json)
Hash identifier: okKSGEveVs2WVfaM4YEgRByH2UW6B59ox2tOLRKym5g=
Subject key identifier: 4F:5C:70:B8:00:C8:CB:AD:51:16:53:AC:C9:A3:ED:C0:1A:F0:12:13
Authority key identifier: 6A:74:80:B3:84:6F:73:5C:98:CF:9B:00:E9:80:46:2A:18:B0:6C:F6
Certificate issuer: /CN=6a7480b3846f735c98cf9b00e980462a18b06cf6
Certificate serial: 019FA0E06B154371616D9EC776FC06C0E551
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/anSAs4Rvc1yYz5sA6YBGKhiwbPY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/21b500-34a6-420a-aa44-749905c327b1/1/anSAs4Rvc1yYz5sA6YBGKhiwbPY.mft
Manifest number: 48
Signing time: Mon 27 Jul 2026 00:01:29 +0000
Manifest this update: Mon 27 Jul 2026 00:01:29 +0000
Manifest next update: Tue 28 Jul 2026 00:01:29 +0000
Files and hashes: 1: anSAs4Rvc1yYz5sA6YBGKhiwbPY.crl (hash: +Bjm4WDjbrZ9zeeYUVhuXo9O6bvNVrCt5fRDvUX5Z2c=)
2: sTJv0BczOqKeqlhWC3yVmXfKqAQ.roa (hash: szTWeTLVa/lbCgRM+88z6fU1aZrlAcINrboqeCQYoqw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/21b500-34a6-420a-aa44-749905c327b1/1/anSAs4Rvc1yYz5sA6YBGKhiwbPY.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/21b500-34a6-420a-aa44-749905c327b1/1/anSAs4Rvc1yYz5sA6YBGKhiwbPY.mft
rsync://rpki.ripe.net/repository/DEFAULT/anSAs4Rvc1yYz5sA6YBGKhiwbPY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 00:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a0:e0:6b:15:43:71:61:6d:9e:c7:76:fc:06:c0:e5:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a7480b3846f735c98cf9b00e980462a18b06cf6
Validity
Not Before: Jul 27 00:01:29 2026 GMT
Not After : Jul 28 00:01:29 2026 GMT
Subject: CN=4f5c70b800c8cbad511653acc9a3edc01af01213
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:de:ff:b2:ba:9d:b7:ea:6a:c9:1c:6f:a6:4b:
59:08:f2:ac:da:61:7a:93:78:9e:92:c9:f9:fc:d1:
22:69:4d:be:fb:c0:9e:70:e1:fe:d4:5e:68:60:72:
ff:ee:26:03:6c:29:51:ed:d8:af:c9:ec:12:af:ee:
24:d9:b3:86:34:d7:a5:c6:14:19:7a:f3:fc:d7:08:
9d:2c:94:c9:a5:c8:d7:e1:ac:dd:78:12:0d:31:40:
3e:ea:93:af:99:95:d1:cd:7e:a9:85:c3:11:89:fb:
94:e2:f1:f0:59:c2:41:e2:5f:29:65:97:17:24:fa:
9e:2d:b2:c7:95:f7:36:e2:b8:62:6a:47:fd:8e:ad:
de:a9:cf:a4:18:fa:df:ec:8a:6f:44:66:9e:76:5a:
48:33:29:01:48:22:12:09:87:42:dd:5f:38:61:67:
be:8e:10:1c:ae:5e:c6:17:88:26:75:ed:fe:f8:60:
92:2e:75:c4:44:28:e9:14:38:32:4c:f6:f9:05:44:
9b:28:0e:6f:d8:af:38:6a:19:d7:78:26:c0:c7:17:
36:f1:a0:0a:7e:3a:a7:15:40:da:d0:b8:95:53:4c:
77:0a:f3:1b:61:65:61:73:ca:7b:71:c6:4a:af:01:
38:1f:e4:dc:91:3d:16:bd:ac:30:7b:1f:f0:ef:12:
7f:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:5C:70:B8:00:C8:CB:AD:51:16:53:AC:C9:A3:ED:C0:1A:F0:12:13
X509v3 Authority Key Identifier:
keyid:6A:74:80:B3:84:6F:73:5C:98:CF:9B:00:E9:80:46:2A:18:B0:6C:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/anSAs4Rvc1yYz5sA6YBGKhiwbPY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/21b500-34a6-420a-aa44-749905c327b1/1/anSAs4Rvc1yYz5sA6YBGKhiwbPY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/21b500-34a6-420a-aa44-749905c327b1/1/anSAs4Rvc1yYz5sA6YBGKhiwbPY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:19:fa:52:bb:48:ce:9f:c8:57:15:9f:df:a4:36:b2:c3:31:
ce:69:30:78:df:cf:20:5c:8c:b0:78:5a:ad:54:b5:37:4f:b3:
0b:b7:fe:05:e6:de:f8:2e:46:2a:74:f2:d4:d1:90:c4:99:75:
f9:bf:7a:32:53:df:fd:26:07:a9:ca:3c:25:6a:fd:ad:28:e0:
61:39:1e:04:ab:1d:4c:c1:4e:fd:2d:e5:8c:9d:ce:9b:ad:12:
c7:03:06:d9:5e:e7:16:cc:4d:ca:05:9d:1b:d2:b6:33:bc:eb:
63:d0:e8:29:95:a8:43:83:47:4c:29:80:35:5b:82:41:33:4e:
20:99:cb:85:54:06:f6:10:f3:d0:9e:a3:fd:10:4a:7e:b0:d2:
58:0f:10:52:94:a1:91:f6:62:1e:80:c2:89:a5:f9:77:d9:85:
af:d2:ed:18:0c:a8:e1:71:e4:bd:d6:cf:3a:24:a4:67:96:e0:
15:b9:5a:41:9f:60:86:40:73:9f:de:9a:63:e3:d5:6b:a2:6c:
09:75:89:0c:d2:f5:69:2a:e1:48:60:43:57:65:c2:b4:90:72:
71:a7:10:47:7b:02:00:07:7f:5a:f3:fb:c1:ea:34:ef:0d:4c:
7c:62:c7:bd:1d:10:ab:eb:51:27:25:d8:d5:9a:ff:a5:d1:97:
ef:fe:19:a3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+g4GsVQ3FhbZ7HdvwGwOVRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZhNzQ4MGIzODQ2ZjczNWM5OGNmOWIwMGU5ODA0NjJhMThi
MDZjZjYwHhcNMjYwNzI3MDAwMTI5WhcNMjYwNzI4MDAwMTI5WjAzMTEwLwYDVQQD
Eyg0ZjVjNzBiODAwYzhjYmFkNTExNjUzYWNjOWEzZWRjMDFhZjAxMjEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmN7/srqdt+pqyRxvpktZCPKs2mF6
k3ieksn5/NEiaU2++8CecOH+1F5oYHL/7iYDbClR7divyewSr+4k2bOGNNelxhQZ
evP81widLJTJpcjX4azdeBINMUA+6pOvmZXRzX6phcMRifuU4vHwWcJB4l8pZZcX
JPqeLbLHlfc24rhiakf9jq3eqc+kGPrf7IpvRGaedlpIMykBSCISCYdC3V84YWe+
jhAcrl7GF4gmde3++GCSLnXERCjpFDgyTPb5BUSbKA5v2K84ahnXeCbAxxc28aAK
fjqnFUDa0LiVU0x3CvMbYWVhc8p7ccZKrwE4H+TckT0Wvawwex/w7xJ/mwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE9ccLgAyMutURZTrMmj7cAa8BITMB8GA1UdIwQY
MBaAFGp0gLOEb3NcmM+bAOmARioYsGz2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYW5TQXM0UnZjMXlZejVzQTZZQkdLaGl3YlBZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC8yMWI1MDAtMzRhNi00MjBhLWFhNDQt
NzQ5OTA1YzMyN2IxLzEvYW5TQXM0UnZjMXlZejVzQTZZQkdLaGl3YlBZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OC8yMWI1MDAtMzRhNi00MjBhLWFhNDQtNzQ5OTA1YzMyN2Ix
LzEvYW5TQXM0UnZjMXlZejVzQTZZQkdLaGl3YlBZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVBn6UrtI
zp/IVxWf36Q2ssMxzmkweN/PIFyMsHharVS1N0+zC7f+Bebe+C5GKnTy1NGQxJl1
+b96MlPf/SYHqco8JWr9rSjgYTkeBKsdTMFO/S3ljJ3Om60SxwMG2V7nFsxNygWd
G9K2M7zrY9DoKZWoQ4NHTCmANVuCQTNOIJnLhVQG9hDz0J6j/RBKfrDSWA8QUpSh
kfZiHoDCiaX5d9mFr9LtGAyo4XHkvdbPOiSkZ5bgFblaQZ9ghkBzn96aY+PVa6Js
CXWJDNL1aSrhSGBDV2XCtJBycacQR3sCAAd/WvP7weo07w1MfGLHvR0Qq+tRJyXY
1Zr/pdGX7/4Zow==
-----END CERTIFICATE-----
Generated at Mon Jul 27 09:25:43 2026 by rpki-client