Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/506801-b94d-4b5d-94ab-6163b997b642/1/A4uZY8lywdegPflvrSX2jr1PoUk.mft
File: A4uZY8lywdegPflvrSX2jr1PoUk.mft (raw, json)
Hash identifier: Tb5sr8/0XyM0Kj0NiX08PiURosL2DGwwjYUrx/Bp7Nc=
Subject key identifier: 1C:A3:16:F1:CD:87:20:B7:40:8A:8A:51:15:43:62:FE:25:F1:E3:79
Authority key identifier: 03:8B:99:63:C9:72:C1:D7:A0:3D:F9:6F:AD:25:F6:8E:BD:4F:A1:49
Certificate issuer: /CN=038b9963c972c1d7a03df96fad25f68ebd4fa149
Certificate serial: 019F190CA723FB2885471F72F69B39C24527
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A4uZY8lywdegPflvrSX2jr1PoUk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/506801-b94d-4b5d-94ab-6163b997b642/1/A4uZY8lywdegPflvrSX2jr1PoUk.mft
Manifest number: 1989
Signing time: Tue 30 Jun 2026 15:01:27 +0000
Manifest this update: Tue 30 Jun 2026 15:01:27 +0000
Manifest next update: Wed 01 Jul 2026 15:01:27 +0000
Files and hashes: 1: A4uZY8lywdegPflvrSX2jr1PoUk.crl (hash: NKImdRzOMcUznYIdMR4tSowCDT7Quew2vSAKrX8I6ZQ=)
2: swB-_KyWrdCTLsFeJA5Bb0yEuQw.roa (hash: Xe4yfVJ7GclnsKO5T3vlkkQQQKjDz34ASisy6nJh1ys=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/506801-b94d-4b5d-94ab-6163b997b642/1/A4uZY8lywdegPflvrSX2jr1PoUk.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/506801-b94d-4b5d-94ab-6163b997b642/1/A4uZY8lywdegPflvrSX2jr1PoUk.mft
rsync://rpki.ripe.net/repository/DEFAULT/A4uZY8lywdegPflvrSX2jr1PoUk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 14:31:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:19:0c:a7:23:fb:28:85:47:1f:72:f6:9b:39:c2:45:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=038b9963c972c1d7a03df96fad25f68ebd4fa149
Validity
Not Before: Jun 30 15:01:27 2026 GMT
Not After : Jul 1 15:01:27 2026 GMT
Subject: CN=1ca316f1cd8720b7408a8a51154362fe25f1e379
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:84:97:35:b7:cc:10:ab:83:cb:61:a9:2e:36:
e1:7b:f5:4e:8f:dc:03:14:64:bc:a3:aa:21:4f:db:
1f:0e:68:e1:7a:cb:0d:66:60:34:52:94:6b:3d:43:
42:51:04:b0:57:30:2e:da:c2:c5:3d:a7:25:7b:6d:
1a:ba:32:0c:ac:dd:20:39:40:48:a1:fd:9b:2d:43:
4d:c2:da:08:54:89:c8:55:c1:7a:66:fa:16:a4:fb:
a9:90:44:f7:34:fe:ca:37:7f:59:27:39:3d:7b:70:
34:61:5d:3b:3c:4e:82:0c:ae:0b:fa:78:b8:b0:4c:
e3:50:73:3f:8e:3d:42:d4:b0:e4:25:5e:d3:98:39:
f2:6e:00:2b:80:82:67:f1:e1:be:7d:d2:b7:07:9c:
23:28:c3:c6:60:78:91:5d:3b:53:92:b9:34:1e:16:
8a:68:19:74:4b:29:a9:c8:cd:34:c1:2c:13:d1:c3:
6c:e0:e8:48:46:95:75:d2:d5:2d:3a:b4:af:39:6e:
de:bd:39:1c:54:22:9d:87:a1:b0:57:54:02:ce:4b:
ef:3e:eb:f9:0d:7d:33:b9:16:0a:72:24:50:02:c3:
a7:bc:09:85:7e:15:17:2e:10:91:43:f5:e0:ba:fc:
60:a6:10:ca:64:40:2a:62:2f:87:29:5f:2e:e7:88:
ab:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:A3:16:F1:CD:87:20:B7:40:8A:8A:51:15:43:62:FE:25:F1:E3:79
X509v3 Authority Key Identifier:
keyid:03:8B:99:63:C9:72:C1:D7:A0:3D:F9:6F:AD:25:F6:8E:BD:4F:A1:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A4uZY8lywdegPflvrSX2jr1PoUk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/506801-b94d-4b5d-94ab-6163b997b642/1/A4uZY8lywdegPflvrSX2jr1PoUk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/506801-b94d-4b5d-94ab-6163b997b642/1/A4uZY8lywdegPflvrSX2jr1PoUk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:ed:13:f7:ce:b2:f8:a0:26:08:b1:e7:34:e0:42:82:af:8f:
e6:a9:d2:90:d6:d6:a3:17:14:0e:31:ad:46:0c:4c:dd:3a:09:
39:47:fd:35:66:21:cd:af:71:ef:a2:e2:e1:ec:80:a2:c0:80:
42:e7:60:6f:8d:d1:5f:9d:5b:69:c7:bc:f1:3e:d9:7e:61:07:
50:50:39:a8:1c:71:74:b8:d4:01:f6:fa:78:8d:1c:af:c7:63:
2f:a3:d1:ec:2c:53:be:f1:0f:5f:2c:4c:14:54:85:66:2e:1c:
24:f1:98:97:f5:e3:2c:93:39:8e:ef:2f:5b:eb:b8:98:11:1b:
9d:8d:27:5f:c9:c5:71:cd:1a:5f:af:80:53:ac:9c:fb:d2:59:
13:b2:26:af:18:06:f5:18:21:4d:57:9a:e8:0d:17:6e:98:0f:
27:78:98:90:eb:18:ae:1c:4c:5b:f8:24:bc:f0:21:f6:fc:78:
c0:ff:40:79:ca:c4:8d:29:28:61:b8:30:30:d4:7d:5d:42:5a:
41:2d:ba:90:01:9e:cd:b6:6e:6c:ba:aa:38:8e:66:3a:f0:f0:
6a:18:f5:ca:b5:c5:8c:c0:67:c2:b8:1b:6d:09:74:4e:3a:d0:
35:f3:95:32:93:83:d5:e8:d0:02:63:e5:70:ce:7b:32:a0:4d:
0a:60:72:a4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8ZDKcj+yiFRx9y9ps5wkUnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAzOGI5OTYzYzk3MmMxZDdhMDNkZjk2ZmFkMjVmNjhlYmQ0
ZmExNDkwHhcNMjYwNjMwMTUwMTI3WhcNMjYwNzAxMTUwMTI3WjAzMTEwLwYDVQQD
EygxY2EzMTZmMWNkODcyMGI3NDA4YThhNTExNTQzNjJmZTI1ZjFlMzc5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2YSXNbfMEKuDy2GpLjbhe/VOj9wD
FGS8o6ohT9sfDmjhessNZmA0UpRrPUNCUQSwVzAu2sLFPacle20aujIMrN0gOUBI
of2bLUNNwtoIVInIVcF6ZvoWpPupkET3NP7KN39ZJzk9e3A0YV07PE6CDK4L+ni4
sEzjUHM/jj1C1LDkJV7TmDnybgArgIJn8eG+fdK3B5wjKMPGYHiRXTtTkrk0HhaK
aBl0SympyM00wSwT0cNs4OhIRpV10tUtOrSvOW7evTkcVCKdh6GwV1QCzkvvPuv5
DX0zuRYKciRQAsOnvAmFfhUXLhCRQ/XguvxgphDKZEAqYi+HKV8u54irxQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFByjFvHNhyC3QIqKURVDYv4l8eN5MB8GA1UdIwQY
MBaAFAOLmWPJcsHXoD35b60l9o69T6FJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQTR1Wlk4bHl3ZGVnUGZsdnJTWDJqcjFQb1VrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS81MDY4MDEtYjk0ZC00YjVkLTk0YWIt
NjE2M2I5OTdiNjQyLzEvQTR1Wlk4bHl3ZGVnUGZsdnJTWDJqcjFQb1VrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NS81MDY4MDEtYjk0ZC00YjVkLTk0YWItNjE2M2I5OTdiNjQy
LzEvQTR1Wlk4bHl3ZGVnUGZsdnJTWDJqcjFQb1VrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdu0T986y
+KAmCLHnNOBCgq+P5qnSkNbWoxcUDjGtRgxM3ToJOUf9NWYhza9x76Li4eyAosCA
Qudgb43RX51bace88T7ZfmEHUFA5qBxxdLjUAfb6eI0cr8djL6PR7CxTvvEPXyxM
FFSFZi4cJPGYl/XjLJM5ju8vW+u4mBEbnY0nX8nFcc0aX6+AU6yc+9JZE7ImrxgG
9RghTVea6A0XbpgPJ3iYkOsYrhxMW/gkvPAh9vx4wP9AecrEjSkoYbgwMNR9XUJa
QS26kAGezbZubLqqOI5mOvDwahj1yrXFjMBnwrgbbQl0TjrQNfOVMpOD1ejQAmPl
cM57MqBNCmBypA==
-----END CERTIFICATE-----
Generated at Tue Jun 30 19:19:18 2026 by rpki-client