Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/1befb9-c103-40af-8970-93c4568b103b/1/asNOSfupZAuD6rqvupxKuWyMNUQ.mft
File: asNOSfupZAuD6rqvupxKuWyMNUQ.mft (raw, json)
Hash identifier: 3JynO6vdas8woWr460Sugqs49eZ6g9gAQuy+TtWpbvk=
Subject key identifier: 70:BE:46:89:29:62:D1:CF:59:C8:73:EB:47:C4:43:21:AE:85:D8:C2
Authority key identifier: 6A:C3:4E:49:FB:A9:64:0B:83:EA:BA:AF:BA:9C:4A:B9:6C:8C:35:44
Certificate issuer: /CN=6ac34e49fba9640b83eabaafba9c4ab96c8c3544
Certificate serial: 019F85D733E8CF9060C77B874AFD69531416
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/asNOSfupZAuD6rqvupxKuWyMNUQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/1befb9-c103-40af-8970-93c4568b103b/1/asNOSfupZAuD6rqvupxKuWyMNUQ.mft
Manifest number: 1340
Signing time: Tue 21 Jul 2026 18:01:40 +0000
Manifest this update: Tue 21 Jul 2026 18:01:40 +0000
Manifest next update: Wed 22 Jul 2026 18:01:40 +0000
Files and hashes: 1: 3ko4FNTHS3dYJgP5A7wcLtBHA6o.roa (hash: tK64bc5P7HI3Kfo106hTjUUsaeAWlW26+32w7wIp23o=)
2: M9TO4mLPx12QNOxhU6_MrD2r794.roa (hash: 9JzmkneLii+LpnbpPrpyhCSpEye5RnU2UT4N+IzPQY0=)
3: asNOSfupZAuD6rqvupxKuWyMNUQ.crl (hash: sg16cfCxGzKtljGW5RB8Gd3XhbMRYNwHwHBd+oqTH9k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/1befb9-c103-40af-8970-93c4568b103b/1/asNOSfupZAuD6rqvupxKuWyMNUQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/1befb9-c103-40af-8970-93c4568b103b/1/asNOSfupZAuD6rqvupxKuWyMNUQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/asNOSfupZAuD6rqvupxKuWyMNUQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 15:27:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:85:d7:33:e8:cf:90:60:c7:7b:87:4a:fd:69:53:14:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ac34e49fba9640b83eabaafba9c4ab96c8c3544
Validity
Not Before: Jul 21 18:01:40 2026 GMT
Not After : Jul 22 18:01:40 2026 GMT
Subject: CN=70be46892962d1cf59c873eb47c44321ae85d8c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:b9:4c:35:4c:8e:7a:b5:28:50:29:36:ae:9e:
94:19:6e:08:e0:51:25:5e:46:30:13:3c:16:c8:89:
17:79:28:7a:16:eb:53:c3:03:84:1d:ce:42:86:c7:
90:d1:ff:57:25:d8:94:c0:6d:9a:e1:7f:00:e0:cd:
24:0c:08:27:68:86:12:ec:9e:93:24:cf:1c:a9:e0:
c6:5f:e0:78:a1:6e:64:5d:97:0e:9d:46:c9:35:aa:
5f:b7:59:a8:d0:1b:e6:07:92:07:78:6d:8a:00:cc:
ef:2d:38:76:bc:9f:ba:47:b4:25:f9:2c:8f:a2:38:
1a:e4:d7:e6:34:1d:5d:d0:22:88:58:24:f9:ae:79:
95:06:71:59:54:6d:2e:9f:88:23:f4:9d:92:40:e4:
ef:53:46:03:2b:93:00:a7:c6:7b:44:68:8c:05:64:
1c:b6:1b:fd:1c:a0:1b:a9:6e:d6:a1:5a:68:45:82:
31:31:00:b8:0f:93:0f:7f:4f:d4:42:db:e7:2e:d8:
bd:31:9b:6c:f9:89:25:6c:f0:e3:c5:dd:d2:ed:5f:
22:ac:5e:79:ab:e1:e8:b9:29:7e:ca:f3:55:3a:f5:
da:1e:b9:c4:f2:3b:6a:09:f8:77:7c:e7:23:6f:37:
98:60:78:a0:61:b0:ae:ee:03:a5:c0:d2:41:5f:65:
1c:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:BE:46:89:29:62:D1:CF:59:C8:73:EB:47:C4:43:21:AE:85:D8:C2
X509v3 Authority Key Identifier:
keyid:6A:C3:4E:49:FB:A9:64:0B:83:EA:BA:AF:BA:9C:4A:B9:6C:8C:35:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/asNOSfupZAuD6rqvupxKuWyMNUQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/1befb9-c103-40af-8970-93c4568b103b/1/asNOSfupZAuD6rqvupxKuWyMNUQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/1befb9-c103-40af-8970-93c4568b103b/1/asNOSfupZAuD6rqvupxKuWyMNUQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:8b:64:11:8b:32:a9:72:85:93:c4:f1:e8:cf:f8:91:83:e5:
1c:3e:9f:7d:8d:17:64:20:fa:7c:6f:b7:19:db:ba:54:46:73:
0e:d0:f1:82:e1:35:38:7a:0f:d2:e9:71:07:c1:63:03:2f:c2:
d9:ee:1e:0b:eb:5b:2f:26:ff:82:45:b8:97:84:30:06:f6:af:
be:27:a8:1e:bc:ef:6e:1d:7e:98:bf:d5:d2:cf:56:e1:2c:1b:
9c:e6:8f:38:93:56:2c:02:f4:d9:8a:05:10:8f:ec:ac:9a:37:
df:60:94:38:a2:12:d5:d8:2b:f5:24:ab:ef:0d:3b:be:8a:91:
e9:97:b0:9c:08:fe:51:21:92:d5:68:00:5c:e9:e9:b2:af:a8:
82:e6:42:26:38:f6:04:2d:7b:35:f9:bc:3c:cb:7f:af:82:6c:
7d:00:a0:52:84:81:0f:e2:53:fc:e5:c9:ed:a6:99:99:ff:84:
52:79:b2:a1:2e:49:ed:8b:a9:f5:74:d2:f6:24:4d:dc:86:30:
3d:47:dd:f2:c5:cf:31:08:e6:f0:24:21:60:c3:e1:1f:12:e3:
4c:8c:b7:9d:64:69:76:12:81:f8:b5:61:f7:da:8d:8d:6d:e9:
1e:20:bb:72:00:59:de:db:74:35:fb:0d:3a:5c:fe:a2:ac:6b:
79:1b:41:76
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+F1zPoz5Bgx3uHSv1pUxQWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZhYzM0ZTQ5ZmJhOTY0MGI4M2VhYmFhZmJhOWM0YWI5NmM4
YzM1NDQwHhcNMjYwNzIxMTgwMTQwWhcNMjYwNzIyMTgwMTQwWjAzMTEwLwYDVQQD
Eyg3MGJlNDY4OTI5NjJkMWNmNTljODczZWI0N2M0NDMyMWFlODVkOGMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs7lMNUyOerUoUCk2rp6UGW4I4FEl
XkYwEzwWyIkXeSh6FutTwwOEHc5ChseQ0f9XJdiUwG2a4X8A4M0kDAgnaIYS7J6T
JM8cqeDGX+B4oW5kXZcOnUbJNapft1mo0BvmB5IHeG2KAMzvLTh2vJ+6R7Ql+SyP
ojga5NfmNB1d0CKIWCT5rnmVBnFZVG0un4gj9J2SQOTvU0YDK5MAp8Z7RGiMBWQc
thv9HKAbqW7WoVpoRYIxMQC4D5MPf0/UQtvnLti9MZts+YklbPDjxd3S7V8irF55
q+HouSl+yvNVOvXaHrnE8jtqCfh3fOcjbzeYYHigYbCu7gOlwNJBX2UcaQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHC+RokpYtHPWchz60fEQyGuhdjCMB8GA1UdIwQY
MBaAFGrDTkn7qWQLg+q6r7qcSrlsjDVEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYXNOT1NmdXBaQXVENnJxdnVweEt1V3lNTlVRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi8xYmVmYjktYzEwMy00MGFmLTg5NzAt
OTNjNDU2OGIxMDNiLzEvYXNOT1NmdXBaQXVENnJxdnVweEt1V3lNTlVRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMi8xYmVmYjktYzEwMy00MGFmLTg5NzAtOTNjNDU2OGIxMDNi
LzEvYXNOT1NmdXBaQXVENnJxdnVweEt1V3lNTlVRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg4tkEYsy
qXKFk8Tx6M/4kYPlHD6ffY0XZCD6fG+3Gdu6VEZzDtDxguE1OHoP0ulxB8FjAy/C
2e4eC+tbLyb/gkW4l4QwBvavvieoHrzvbh1+mL/V0s9W4SwbnOaPOJNWLAL02YoF
EI/srJo332CUOKIS1dgr9SSr7w07voqR6ZewnAj+USGS1WgAXOnpsq+oguZCJjj2
BC17Nfm8PMt/r4JsfQCgUoSBD+JT/OXJ7aaZmf+EUnmyoS5J7Yup9XTS9iRN3IYw
PUfd8sXPMQjm8CQhYMPhHxLjTIy3nWRpdhKB+LVh99qNjW3pHiC7cgBZ3tt0NfsN
Olz+oqxreRtBdg==
-----END CERTIFICATE-----
Generated at Wed Jul 22 01:09:22 2026 by rpki-client