
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/6e5ff1-39f9-466b-827f-7bc268a0b517/1/a2bFOxNWbQHEqJOt8TC7tPoWU6o.mft
File: a2bFOxNWbQHEqJOt8TC7tPoWU6o.mft (raw, json)
Hash identifier: /kJ+8R1YzXfJKFIiRdx80MA0InxwYPV+IaIC3IpDO8Q=
Subject key identifier: EC:3D:11:89:41:BC:83:46:38:80:97:2E:18:53:41:C8:51:62:A8:94
Authority key identifier: 6B:66:C5:3B:13:56:6D:01:C4:A8:93:AD:F1:30:BB:B4:FA:16:53:AA
Certificate issuer: /CN=6b66c53b13566d01c4a893adf130bbb4fa1653aa
Certificate serial: 019F1A8CD2AF51361C5A1E03FDDE1A42D03B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a2bFOxNWbQHEqJOt8TC7tPoWU6o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/6e5ff1-39f9-466b-827f-7bc268a0b517/1/a2bFOxNWbQHEqJOt8TC7tPoWU6o.mft
Manifest number: 1989
Signing time: Tue 30 Jun 2026 22:01:04 +0000
Manifest this update: Tue 30 Jun 2026 22:01:04 +0000
Manifest next update: Wed 01 Jul 2026 22:01:04 +0000
Files and hashes: 1: 23Zi6Py4gat9DXMFNsAI-_q8-4M.roa (hash: JvpZNhbX4GuKh0NLAnQpWeYECOq74QqIFmrg5zgTOUo=)
2: a2bFOxNWbQHEqJOt8TC7tPoWU6o.crl (hash: Op8Fc11s0f9z4IpSAtB1q8nePTn9qoSZkgSEZMHAv2Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/6e5ff1-39f9-466b-827f-7bc268a0b517/1/a2bFOxNWbQHEqJOt8TC7tPoWU6o.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/6e5ff1-39f9-466b-827f-7bc268a0b517/1/a2bFOxNWbQHEqJOt8TC7tPoWU6o.mft
rsync://rpki.ripe.net/repository/DEFAULT/a2bFOxNWbQHEqJOt8TC7tPoWU6o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 22:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:1a:8c:d2:af:51:36:1c:5a:1e:03:fd:de:1a:42:d0:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b66c53b13566d01c4a893adf130bbb4fa1653aa
Validity
Not Before: Jun 30 22:01:04 2026 GMT
Not After : Jul 1 22:01:04 2026 GMT
Subject: CN=ec3d118941bc83463880972e185341c85162a894
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:ef:e6:a2:af:ce:a2:87:ce:3e:18:20:49:50:
fc:7a:80:af:c9:b1:e7:83:9e:ec:9f:63:28:7a:b4:
41:f2:83:c0:fa:ae:02:46:0c:e9:cb:b1:61:e1:47:
da:b9:73:65:96:1b:20:d4:1d:36:cc:d2:82:c0:0b:
aa:9c:17:b8:15:d5:91:62:97:f1:3e:53:2a:a3:a3:
1e:69:47:6a:86:0a:2e:8f:81:5c:fe:c0:a8:2d:6a:
cb:23:f1:32:28:16:88:a8:88:65:d0:04:34:a1:5a:
a4:4f:a8:d2:ef:23:6f:7f:21:ad:34:af:76:dc:f5:
f1:f0:7e:7c:08:a9:18:c8:4f:95:f7:ce:45:5d:b3:
e6:96:31:04:b9:cf:0b:c2:71:ea:0d:d0:78:d0:76:
45:8b:a2:2a:c8:d0:77:7f:73:ed:54:60:90:a5:42:
39:a6:25:41:17:0e:84:8a:1f:9a:31:43:83:aa:79:
71:30:22:53:67:9c:c7:5a:01:67:d1:54:91:10:e4:
5b:67:a4:fb:79:5c:5d:05:97:93:29:ec:b6:c5:b4:
75:ee:7c:77:da:b2:48:46:3d:40:76:c5:bb:5e:79:
97:36:ea:6c:26:ee:3a:5f:b6:af:55:bf:bd:ff:36:
82:fc:8c:b3:67:92:02:a2:05:eb:71:72:b6:df:d0:
56:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:3D:11:89:41:BC:83:46:38:80:97:2E:18:53:41:C8:51:62:A8:94
X509v3 Authority Key Identifier:
keyid:6B:66:C5:3B:13:56:6D:01:C4:A8:93:AD:F1:30:BB:B4:FA:16:53:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2bFOxNWbQHEqJOt8TC7tPoWU6o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/6e5ff1-39f9-466b-827f-7bc268a0b517/1/a2bFOxNWbQHEqJOt8TC7tPoWU6o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/6e5ff1-39f9-466b-827f-7bc268a0b517/1/a2bFOxNWbQHEqJOt8TC7tPoWU6o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c2:f6:ef:42:07:c5:ad:55:68:42:76:ac:54:d5:d5:7e:57:af:
8b:f7:35:fa:58:d7:0e:3c:3c:33:2f:90:43:cd:90:71:d4:51:
c1:c6:d1:57:50:fc:70:9c:ef:53:e5:9b:c8:74:a2:d4:0f:1c:
17:4e:32:10:be:8b:a0:f6:83:c1:93:a8:84:34:38:63:93:fa:
f0:d1:3d:c9:7f:1d:39:08:a0:10:9a:5c:fd:66:f8:7b:7f:64:
9f:32:74:e7:8d:4d:b5:54:7a:6d:9c:b3:1d:c4:1b:c6:b4:52:
dc:e4:c3:83:8a:35:b4:0c:fe:99:e6:bb:84:ea:1a:8d:b2:eb:
5a:27:c9:74:aa:71:ee:17:47:fb:da:11:f2:7b:b6:95:fc:cb:
90:20:31:6c:3a:fc:13:26:ae:90:ab:f5:b8:e3:9e:e8:f9:84:
54:dc:9d:a6:01:a5:a3:86:d8:eb:81:b6:2f:cf:c9:62:8a:1f:
8e:e8:4c:56:f3:4f:8a:da:10:ea:58:1a:a3:82:75:ea:c2:fd:
d4:c1:23:69:88:db:3e:7f:8e:0b:9b:1c:ec:c3:4e:42:20:b2:
85:1c:3f:6c:30:a1:4a:b5:51:89:dd:f9:37:02:d2:ae:1a:4d:
41:d8:98:55:83:4b:71:f2:60:c4:29:f2:8a:28:fb:e7:b0:6b:
15:25:98:24
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8ajNKvUTYcWh4D/d4aQtA7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZiNjZjNTNiMTM1NjZkMDFjNGE4OTNhZGYxMzBiYmI0ZmEx
NjUzYWEwHhcNMjYwNjMwMjIwMTA0WhcNMjYwNzAxMjIwMTA0WjAzMTEwLwYDVQQD
EyhlYzNkMTE4OTQxYmM4MzQ2Mzg4MDk3MmUxODUzNDFjODUxNjJhODk0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvu/moq/OoofOPhggSVD8eoCvybHn
g57sn2MoerRB8oPA+q4CRgzpy7Fh4UfauXNllhsg1B02zNKCwAuqnBe4FdWRYpfx
PlMqo6MeaUdqhgouj4Fc/sCoLWrLI/EyKBaIqIhl0AQ0oVqkT6jS7yNvfyGtNK92
3PXx8H58CKkYyE+V985FXbPmljEEuc8LwnHqDdB40HZFi6IqyNB3f3PtVGCQpUI5
piVBFw6Eih+aMUODqnlxMCJTZ5zHWgFn0VSREORbZ6T7eVxdBZeTKey2xbR17nx3
2rJIRj1AdsW7XnmXNupsJu46X7avVb+9/zaC/IyzZ5ICogXrcXK239BW3QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOw9EYlBvINGOICXLhhTQchRYqiUMB8GA1UdIwQY
MBaAFGtmxTsTVm0BxKiTrfEwu7T6FlOqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYTJiRk94TldiUUhFcUpPdDhUQzd0UG9XVTZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC82ZTVmZjEtMzlmOS00NjZiLTgyN2Yt
N2JjMjY4YTBiNTE3LzEvYTJiRk94TldiUUhFcUpPdDhUQzd0UG9XVTZvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOC82ZTVmZjEtMzlmOS00NjZiLTgyN2YtN2JjMjY4YTBiNTE3
LzEvYTJiRk94TldiUUhFcUpPdDhUQzd0UG9XVTZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwvbvQgfF
rVVoQnasVNXVflevi/c1+ljXDjw8My+QQ82QcdRRwcbRV1D8cJzvU+WbyHSi1A8c
F04yEL6LoPaDwZOohDQ4Y5P68NE9yX8dOQigEJpc/Wb4e39knzJ0541NtVR6bZyz
HcQbxrRS3OTDg4o1tAz+mea7hOoajbLrWifJdKpx7hdH+9oR8nu2lfzLkCAxbDr8
EyaukKv1uOOe6PmEVNydpgGlo4bY64G2L8/JYoofjuhMVvNPitoQ6lgao4J16sL9
1MEjaYjbPn+OC5sc7MNOQiCyhRw/bDChSrVRid35NwLSrhpNQdiYVYNLcfJgxCny
iij757BrFSWYJA==
-----END CERTIFICATE-----
Generated at Wed Jul 1 07:26:26 2026 by rpki-client