
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/2ed5da-85cf-449f-bd85-628b0fbcd0b6/1/A4IOlk39PSgUIK_aIM6UnmDUzEQ.mft
File: A4IOlk39PSgUIK_aIM6UnmDUzEQ.mft (raw, json)
Hash identifier: DDgS/lJHIshp+Jhl34KIVBtSM+tuQq6k+MLKIvOAZJI=
Subject key identifier: 1C:2C:6A:90:94:61:99:EB:A2:9F:F7:1F:D9:9D:82:F5:E1:FC:8C:3F
Authority key identifier: 03:82:0E:96:4D:FD:3D:28:14:20:AF:DA:20:CE:94:9E:60:D4:CC:44
Certificate issuer: /CN=03820e964dfd3d281420afda20ce949e60d4cc44
Certificate serial: 019F189EAC99434921F7239778AE35DAEACD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A4IOlk39PSgUIK_aIM6UnmDUzEQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/2ed5da-85cf-449f-bd85-628b0fbcd0b6/1/A4IOlk39PSgUIK_aIM6UnmDUzEQ.mft
Manifest number: 198A
Signing time: Tue 30 Jun 2026 13:01:19 +0000
Manifest this update: Tue 30 Jun 2026 13:01:19 +0000
Manifest next update: Wed 01 Jul 2026 13:01:19 +0000
Files and hashes: 1: 1-7mCdJzh3AJCBzQkr7Lm8UYkVoI.roa (hash: 8hePNi3TWg9ikxMqqbDcHn46RE1As5QHT7LFgD1DtFs=)
2: A4IOlk39PSgUIK_aIM6UnmDUzEQ.crl (hash: pdxmnfSL71c7WK7IUT7GjRRj0MQeYsT0Nft/r2iQHc4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/2ed5da-85cf-449f-bd85-628b0fbcd0b6/1/A4IOlk39PSgUIK_aIM6UnmDUzEQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/2ed5da-85cf-449f-bd85-628b0fbcd0b6/1/A4IOlk39PSgUIK_aIM6UnmDUzEQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/A4IOlk39PSgUIK_aIM6UnmDUzEQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 13:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:9e:ac:99:43:49:21:f7:23:97:78:ae:35:da:ea:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03820e964dfd3d281420afda20ce949e60d4cc44
Validity
Not Before: Jun 30 13:01:19 2026 GMT
Not After : Jul 1 13:01:19 2026 GMT
Subject: CN=1c2c6a90946199eba29ff71fd99d82f5e1fc8c3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:05:a6:74:0a:a0:93:83:4e:c3:8d:99:dc:12:
35:f0:a8:4c:83:73:93:23:d9:bd:63:24:a0:41:85:
48:a1:ae:d9:41:d8:74:49:a7:2c:5e:63:31:f6:ec:
57:a2:50:dc:b1:a6:bf:c8:30:0c:82:ef:bc:ef:59:
86:40:88:2a:10:c3:86:1d:62:37:90:f1:f0:fb:85:
54:c6:97:97:77:32:15:1c:c1:de:a8:7b:4c:b9:ce:
7d:90:ef:ba:4b:76:c2:34:c9:de:9f:81:ee:3a:bf:
6c:d9:4c:08:f1:b4:4a:a3:b2:60:d3:ec:86:10:4e:
f7:ee:52:22:a9:65:b8:fc:9e:54:cf:b9:63:88:8c:
cf:32:4c:4a:73:15:fc:2e:18:c0:cb:6e:ab:e9:f2:
d2:0b:f2:6e:8a:71:82:d8:c6:b7:24:d0:f6:f1:18:
7c:af:16:a5:9f:5b:89:ea:e5:c1:c4:b1:26:45:88:
a2:0b:a8:b8:74:60:ad:be:c4:e8:44:a1:79:20:24:
e2:3a:ee:77:a4:0c:2d:ea:99:ff:8a:4f:60:0e:2a:
e7:fe:50:48:cb:a5:de:ef:d0:c1:4b:24:f3:90:1d:
8c:48:2e:60:38:be:c1:82:27:22:3a:47:57:26:1f:
3a:01:73:0a:0d:17:49:30:22:b7:ba:be:57:0a:dd:
b4:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:2C:6A:90:94:61:99:EB:A2:9F:F7:1F:D9:9D:82:F5:E1:FC:8C:3F
X509v3 Authority Key Identifier:
keyid:03:82:0E:96:4D:FD:3D:28:14:20:AF:DA:20:CE:94:9E:60:D4:CC:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A4IOlk39PSgUIK_aIM6UnmDUzEQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/2ed5da-85cf-449f-bd85-628b0fbcd0b6/1/A4IOlk39PSgUIK_aIM6UnmDUzEQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/2ed5da-85cf-449f-bd85-628b0fbcd0b6/1/A4IOlk39PSgUIK_aIM6UnmDUzEQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:9f:14:c1:b8:10:23:2b:46:04:28:22:99:6d:e4:04:53:e8:
e2:ee:61:45:22:48:ca:97:ae:c5:7d:a4:ec:41:05:8a:87:fc:
15:5c:db:4f:c8:8b:2e:8f:a9:83:c1:71:7d:71:6b:7a:cb:57:
98:37:30:70:2a:0d:1c:82:8a:40:5b:69:67:72:de:22:83:15:
33:b8:a9:c2:11:86:2d:3e:a9:1a:da:72:0f:6c:07:c8:9a:b1:
c1:39:d9:fa:36:76:99:28:59:8c:36:ff:f0:61:48:67:b9:d3:
94:4a:da:3a:23:83:25:14:c9:b5:47:05:c1:40:33:78:23:11:
a8:ff:f2:77:91:b2:0f:ae:f1:92:dc:ad:b3:7b:10:31:c9:03:
66:09:84:36:7f:4c:c3:d8:1b:53:bc:7a:93:4e:b5:c8:2d:3b:
ce:dc:b2:6a:ad:e8:0b:3c:b9:aa:17:d8:a0:d8:f0:4f:46:58:
c4:ad:0f:e7:ea:78:57:ab:eb:53:ab:ce:cf:67:cf:28:cf:6e:
9b:9f:7e:3d:a5:ba:47:6c:7d:9d:79:0f:46:c4:d9:7a:d5:40:
be:0e:f6:0d:a1:94:04:52:44:45:21:f1:5e:09:1c:12:a3:14:
5b:21:50:0c:b2:59:57:9c:39:51:a3:e7:32:e6:f4:f5:22:0a:
3c:c0:9e:9c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8YnqyZQ0kh9yOXeK412urNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAzODIwZTk2NGRmZDNkMjgxNDIwYWZkYTIwY2U5NDllNjBk
NGNjNDQwHhcNMjYwNjMwMTMwMTE5WhcNMjYwNzAxMTMwMTE5WjAzMTEwLwYDVQQD
EygxYzJjNmE5MDk0NjE5OWViYTI5ZmY3MWZkOTlkODJmNWUxZmM4YzNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnwWmdAqgk4NOw42Z3BI18KhMg3OT
I9m9YySgQYVIoa7ZQdh0SacsXmMx9uxXolDcsaa/yDAMgu+871mGQIgqEMOGHWI3
kPHw+4VUxpeXdzIVHMHeqHtMuc59kO+6S3bCNMnen4HuOr9s2UwI8bRKo7Jg0+yG
EE737lIiqWW4/J5Uz7ljiIzPMkxKcxX8LhjAy26r6fLSC/JuinGC2Ma3JND28Rh8
rxaln1uJ6uXBxLEmRYiiC6i4dGCtvsToRKF5ICTiOu53pAwt6pn/ik9gDirn/lBI
y6Xe79DBSyTzkB2MSC5gOL7BgiciOkdXJh86AXMKDRdJMCK3ur5XCt20pQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBwsapCUYZnrop/3H9mdgvXh/Iw/MB8GA1UdIwQY
MBaAFAOCDpZN/T0oFCCv2iDOlJ5g1MxEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQTRJT2xrMzlQU2dVSUtfYUlNNlVubURVekVRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NS8yZWQ1ZGEtODVjZi00NDlmLWJkODUt
NjI4YjBmYmNkMGI2LzEvQTRJT2xrMzlQU2dVSUtfYUlNNlVubURVekVRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NS8yZWQ1ZGEtODVjZi00NDlmLWJkODUtNjI4YjBmYmNkMGI2
LzEvQTRJT2xrMzlQU2dVSUtfYUlNNlVubURVekVRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPJ8UwbgQ
IytGBCgimW3kBFPo4u5hRSJIypeuxX2k7EEFiof8FVzbT8iLLo+pg8FxfXFrestX
mDcwcCoNHIKKQFtpZ3LeIoMVM7ipwhGGLT6pGtpyD2wHyJqxwTnZ+jZ2mShZjDb/
8GFIZ7nTlEraOiODJRTJtUcFwUAzeCMRqP/yd5GyD67xktyts3sQMckDZgmENn9M
w9gbU7x6k061yC07ztyyaq3oCzy5qhfYoNjwT0ZYxK0P5+p4V6vrU6vOz2fPKM9u
m59+PaW6R2x9nXkPRsTZetVAvg72DaGUBFJERSHxXgkcEqMUWyFQDLJZV5w5UaPn
Mub09SIKPMCenA==
-----END CERTIFICATE-----
Generated at Tue Jun 30 18:20:17 2026 by rpki-client