Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/b68421-99b1-485e-b217-d3adc7449391/1/dW-6RmNNIrk9sb9G7FqNZl5i2sc.mft
File: dW-6RmNNIrk9sb9G7FqNZl5i2sc.mft (raw, json)
Hash identifier: +frUphchwQjdkxVdRZd/H0qHi9Z4f0AeZOmW33QPPOk=
Subject key identifier: 38:51:AD:3B:D8:C1:C7:58:0F:DE:26:11:F1:71:19:1F:A4:1F:56:4B
Authority key identifier: 75:6F:BA:46:63:4D:22:B9:3D:B1:BF:46:EC:5A:8D:66:5E:62:DA:C7
Certificate issuer: /CN=756fba46634d22b93db1bf46ec5a8d665e62dac7
Certificate serial: 019FA228F2018252E75146EE7024F2D39427
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dW-6RmNNIrk9sb9G7FqNZl5i2sc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/b68421-99b1-485e-b217-d3adc7449391/1/dW-6RmNNIrk9sb9G7FqNZl5i2sc.mft
Manifest number: 0E3A
Signing time: Mon 27 Jul 2026 06:00:20 +0000
Manifest this update: Mon 27 Jul 2026 06:00:20 +0000
Manifest next update: Tue 28 Jul 2026 06:00:20 +0000
Files and hashes: 1: W67sJZlYFgIAjOqo8xpblWxBJvA.roa (hash: IVuhnw8j7o4RQ+rJmEoiYh1oIQYgyJIY5uLBiWowino=)
2: dW-6RmNNIrk9sb9G7FqNZl5i2sc.crl (hash: 2uAmtP2+1zU6gxgXQEGDHY/gI0mXDqbJCszJdwYCXAA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/b68421-99b1-485e-b217-d3adc7449391/1/dW-6RmNNIrk9sb9G7FqNZl5i2sc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/b68421-99b1-485e-b217-d3adc7449391/1/dW-6RmNNIrk9sb9G7FqNZl5i2sc.mft
rsync://rpki.ripe.net/repository/DEFAULT/dW-6RmNNIrk9sb9G7FqNZl5i2sc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 06:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a2:28:f2:01:82:52:e7:51:46:ee:70:24:f2:d3:94:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=756fba46634d22b93db1bf46ec5a8d665e62dac7
Validity
Not Before: Jul 27 06:00:20 2026 GMT
Not After : Jul 28 06:00:20 2026 GMT
Subject: CN=3851ad3bd8c1c7580fde2611f171191fa41f564b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:af:33:34:94:6e:7d:1d:17:c0:cd:ae:c2:ae:
9a:d5:9a:e2:b8:7c:0d:82:6c:e8:3c:85:a9:59:b4:
df:24:2b:9b:e3:d9:44:a4:d9:e8:20:2a:98:82:82:
46:42:ee:82:45:56:df:06:c2:e8:c3:4d:0c:d0:f2:
63:9a:90:f2:e7:93:60:7f:6a:f0:a6:0a:45:72:ac:
27:b7:71:b7:e6:f9:ef:26:5f:e7:15:1a:e3:9e:85:
41:f3:42:f2:6f:a8:ef:db:59:9c:7c:72:d2:07:ef:
e7:a6:3d:b8:c0:6c:d9:ba:ef:c2:5a:18:65:57:bd:
4b:0c:77:1c:7b:58:04:ee:de:b1:54:1d:37:82:7a:
8f:0b:de:5e:f6:cf:a5:b6:02:a5:26:66:c0:3d:d9:
7d:89:91:98:f5:56:23:ef:31:9b:13:2b:05:35:46:
3e:59:41:b9:19:c5:4e:97:71:35:d8:06:b7:73:6f:
b1:a1:35:cd:ba:18:b2:ef:52:41:6f:c1:71:43:56:
68:ac:e1:ff:fe:ff:dd:86:33:84:de:0b:bf:e7:06:
47:ee:b1:ac:5e:0f:7c:11:01:cf:52:51:29:09:7a:
44:58:0b:ac:a1:67:35:16:e9:79:01:68:63:d7:77:
49:aa:83:10:f4:52:50:71:74:8b:5f:f8:8c:c5:ce:
2e:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:51:AD:3B:D8:C1:C7:58:0F:DE:26:11:F1:71:19:1F:A4:1F:56:4B
X509v3 Authority Key Identifier:
keyid:75:6F:BA:46:63:4D:22:B9:3D:B1:BF:46:EC:5A:8D:66:5E:62:DA:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dW-6RmNNIrk9sb9G7FqNZl5i2sc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/b68421-99b1-485e-b217-d3adc7449391/1/dW-6RmNNIrk9sb9G7FqNZl5i2sc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/b68421-99b1-485e-b217-d3adc7449391/1/dW-6RmNNIrk9sb9G7FqNZl5i2sc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:dc:33:c1:9b:d2:f7:c2:a0:20:e1:ce:60:52:82:c9:0c:82:
4d:92:cb:c9:76:e2:3d:b8:87:b4:e4:12:64:3f:cf:a9:ee:4e:
02:a2:e2:52:16:7a:d8:6f:e5:af:b2:c2:32:54:c0:4c:62:a1:
31:d3:b3:52:14:e9:be:00:62:96:1c:75:d1:c4:a3:97:45:f3:
00:c9:79:bf:92:ee:9f:0b:b7:d1:39:d6:da:a7:f4:03:e7:8b:
79:81:d1:ef:81:7a:d8:10:49:d4:bf:7c:30:3f:17:af:a2:ae:
a2:ef:de:e3:83:c3:bc:94:02:d0:f2:1a:05:f2:8b:ce:28:4c:
a6:9a:11:31:53:bb:30:26:97:a0:95:d1:ae:77:11:59:54:70:
eb:d0:3f:f5:41:fd:87:3e:39:e8:e9:d5:c1:37:cc:df:2a:f3:
17:25:f4:ba:45:77:95:39:58:b4:cc:70:9a:4b:0c:f5:cd:3b:
55:9e:c1:70:02:ed:5c:53:cb:7e:5b:a9:38:35:15:8e:a4:ca:
70:19:d1:d9:d8:59:90:a0:f2:0e:c0:b3:82:29:3f:5e:e0:d4:
d9:69:84:64:e5:2a:6a:41:29:c1:72:21:45:9c:77:ae:3f:e0:
a8:76:ba:bb:9c:94:68:13:be:8a:05:08:43:e8:3a:ea:d0:31:
47:b9:30:91
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+iKPIBglLnUUbucCTy05QnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc1NmZiYTQ2NjM0ZDIyYjkzZGIxYmY0NmVjNWE4ZDY2NWU2
MmRhYzcwHhcNMjYwNzI3MDYwMDIwWhcNMjYwNzI4MDYwMDIwWjAzMTEwLwYDVQQD
EygzODUxYWQzYmQ4YzFjNzU4MGZkZTI2MTFmMTcxMTkxZmE0MWY1NjRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtq8zNJRufR0XwM2uwq6a1ZriuHwN
gmzoPIWpWbTfJCub49lEpNnoICqYgoJGQu6CRVbfBsLow00M0PJjmpDy55Ngf2rw
pgpFcqwnt3G35vnvJl/nFRrjnoVB80Lyb6jv21mcfHLSB+/npj24wGzZuu/CWhhl
V71LDHcce1gE7t6xVB03gnqPC95e9s+ltgKlJmbAPdl9iZGY9VYj7zGbEysFNUY+
WUG5GcVOl3E12Aa3c2+xoTXNuhiy71JBb8FxQ1ZorOH//v/dhjOE3gu/5wZH7rGs
Xg98EQHPUlEpCXpEWAusoWc1Ful5AWhj13dJqoMQ9FJQcXSLX/iMxc4uHQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDhRrTvYwcdYD94mEfFxGR+kH1ZLMB8GA1UdIwQY
MBaAFHVvukZjTSK5PbG/RuxajWZeYtrHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZFctNlJtTk5Jcms5c2I5RzdGcU5abDVpMnNjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi9iNjg0MjEtOTliMS00ODVlLWIyMTct
ZDNhZGM3NDQ5MzkxLzEvZFctNlJtTk5Jcms5c2I5RzdGcU5abDVpMnNjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMi9iNjg0MjEtOTliMS00ODVlLWIyMTctZDNhZGM3NDQ5Mzkx
LzEvZFctNlJtTk5Jcms5c2I5RzdGcU5abDVpMnNjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbdwzwZvS
98KgIOHOYFKCyQyCTZLLyXbiPbiHtOQSZD/Pqe5OAqLiUhZ62G/lr7LCMlTATGKh
MdOzUhTpvgBilhx10cSjl0XzAMl5v5Lunwu30TnW2qf0A+eLeYHR74F62BBJ1L98
MD8Xr6Kuou/e44PDvJQC0PIaBfKLzihMppoRMVO7MCaXoJXRrncRWVRw69A/9UH9
hz456OnVwTfM3yrzFyX0ukV3lTlYtMxwmksM9c07VZ7BcALtXFPLflupODUVjqTK
cBnR2dhZkKDyDsCzgik/XuDU2WmEZOUqakEpwXIhRZx3rj/gqHa6u5yUaBO+igUI
Q+g66tAxR7kwkQ==
-----END CERTIFICATE-----
Generated at Mon Jul 27 15:11:21 2026 by rpki-client