Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/3a6d28-1c43-4b8b-b713-568c407b30f7/1/582m42RtyToNLUKV0esJR2xmvKY.mft
File: 582m42RtyToNLUKV0esJR2xmvKY.mft (raw, json)
Hash identifier: vHCVghoKuxFA0X1IGMy5gbemNFB7boPrKWH4qvQjfx8=
Subject key identifier: B1:2B:00:F4:E9:BD:AA:D3:D2:BC:EC:EC:5B:C9:F8:97:02:7E:43:37
Authority key identifier: E7:CD:A6:E3:64:6D:C9:3A:0D:2D:42:95:D1:EB:09:47:6C:66:BC:A6
Certificate issuer: /CN=e7cda6e3646dc93a0d2d4295d1eb09476c66bca6
Certificate serial: 01A00281A990C7DA01200B5D080149163DB4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/582m42RtyToNLUKV0esJR2xmvKY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/3a6d28-1c43-4b8b-b713-568c407b30f7/1/582m42RtyToNLUKV0esJR2xmvKY.mft
Manifest number: 0728
Signing time: Fri 14 Aug 2026 23:00:46 +0000
Manifest this update: Fri 14 Aug 2026 23:00:46 +0000
Manifest next update: Sat 15 Aug 2026 23:00:46 +0000
Files and hashes: 1: 582m42RtyToNLUKV0esJR2xmvKY.crl (hash: 3l2k2GiL/Ib4sAKXntb9bKxMkjLph0t6j2cgRq5s1ek=)
2: zM4gg4epclePPLRTJtVaIJWeepc.asa (hash: MRTLDlocXHNiWSSlm+nZxDJcnI87lYWJ5A0tSmJ5h6Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/3a6d28-1c43-4b8b-b713-568c407b30f7/1/582m42RtyToNLUKV0esJR2xmvKY.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/3a6d28-1c43-4b8b-b713-568c407b30f7/1/582m42RtyToNLUKV0esJR2xmvKY.mft
rsync://rpki.ripe.net/repository/DEFAULT/582m42RtyToNLUKV0esJR2xmvKY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:02:81:a9:90:c7:da:01:20:0b:5d:08:01:49:16:3d:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7cda6e3646dc93a0d2d4295d1eb09476c66bca6
Validity
Not Before: Aug 14 23:00:46 2026 GMT
Not After : Aug 15 23:00:46 2026 GMT
Subject: CN=b12b00f4e9bdaad3d2bcecec5bc9f897027e4337
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:5d:56:5d:70:54:5f:fa:fe:14:0f:8f:9f:1b:
12:a0:99:23:f9:91:0e:77:2f:72:68:c3:c9:42:74:
8b:e5:fb:02:81:45:26:bb:b7:78:98:7e:d8:45:24:
b2:e4:bb:8e:2b:fa:ad:09:cc:f2:cc:fd:00:be:4d:
20:4d:0a:a2:5d:df:42:cb:df:73:e5:95:df:4e:64:
74:fe:67:3b:b7:07:10:b5:50:9a:64:a1:1b:a1:56:
85:ab:73:d1:eb:28:2d:0c:78:bd:38:cc:3e:08:12:
72:37:d2:52:93:7b:27:72:63:5c:4b:00:c9:38:47:
47:75:7f:8f:b9:ef:be:f9:d4:de:f5:cd:d0:8b:f0:
7e:ff:4a:26:d2:b2:c8:a4:5d:65:f4:23:d0:6a:b4:
e7:8d:e4:97:c1:ee:d9:b7:10:31:34:6f:d5:b8:4d:
ed:34:41:a3:98:5e:83:6a:03:52:ca:3a:44:e3:ae:
22:ed:f7:0f:b1:25:9f:53:a7:da:ef:96:7e:d0:bb:
fa:22:e9:47:a1:7e:d5:cd:ff:28:57:0b:c2:b4:da:
99:41:25:a7:15:a1:89:2b:25:c8:2b:eb:64:22:bf:
0b:8c:2d:54:1d:65:03:76:7a:89:98:7c:03:a5:d8:
c6:42:2a:14:b5:09:58:e8:fa:ea:a0:3a:fc:94:5e:
64:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:2B:00:F4:E9:BD:AA:D3:D2:BC:EC:EC:5B:C9:F8:97:02:7E:43:37
X509v3 Authority Key Identifier:
keyid:E7:CD:A6:E3:64:6D:C9:3A:0D:2D:42:95:D1:EB:09:47:6C:66:BC:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/582m42RtyToNLUKV0esJR2xmvKY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/3a6d28-1c43-4b8b-b713-568c407b30f7/1/582m42RtyToNLUKV0esJR2xmvKY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/3a6d28-1c43-4b8b-b713-568c407b30f7/1/582m42RtyToNLUKV0esJR2xmvKY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:26:49:94:4f:f9:21:7c:09:50:9b:4d:81:03:32:45:f9:72:
86:26:3e:f0:b5:05:0d:43:ba:6e:02:b2:3c:5e:f4:3a:d5:fa:
00:bd:0a:3d:78:70:0e:b3:71:f8:d7:63:26:bd:f2:3c:be:0f:
c7:47:63:87:1c:83:c4:72:4a:09:bd:b0:af:9d:23:b2:e9:a2:
47:fb:75:a9:bd:e0:46:86:14:6a:59:1d:12:29:af:21:64:5d:
4c:26:ea:9c:2a:85:ce:fc:37:17:08:16:83:74:63:d0:7c:c5:
27:21:e8:51:77:e2:11:50:09:16:ba:79:25:79:d9:61:f4:2e:
4f:5b:da:d1:10:21:ad:d8:b3:47:c4:f4:21:ae:47:4c:d7:21:
79:2c:93:06:ec:c3:d7:b4:cd:5c:2e:4a:de:66:0e:5e:0c:53:
a1:7f:3d:06:13:90:25:77:ce:6c:59:1e:59:d2:f4:38:40:44:
e5:1f:e6:87:0b:29:d4:e1:49:f5:65:1b:22:22:63:c7:20:87:
2e:9d:cb:ed:d7:49:5b:34:db:43:b8:6b:19:f7:78:14:9e:58:
75:53:91:16:0c:60:3b:00:e2:b0:5b:31:17:ae:36:a4:30:ab:
80:26:ed:00:f0:eb:65:29:54:c8:47:da:e0:c8:41:3d:0f:2b:
d2:13:c4:35
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaACgamQx9oBIAtdCAFJFj20MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU3Y2RhNmUzNjQ2ZGM5M2EwZDJkNDI5NWQxZWIwOTQ3NmM2
NmJjYTYwHhcNMjYwODE0MjMwMDQ2WhcNMjYwODE1MjMwMDQ2WjAzMTEwLwYDVQQD
EyhiMTJiMDBmNGU5YmRhYWQzZDJiY2VjZWM1YmM5Zjg5NzAyN2U0MzM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs11WXXBUX/r+FA+PnxsSoJkj+ZEO
dy9yaMPJQnSL5fsCgUUmu7d4mH7YRSSy5LuOK/qtCczyzP0Avk0gTQqiXd9Cy99z
5ZXfTmR0/mc7twcQtVCaZKEboVaFq3PR6ygtDHi9OMw+CBJyN9JSk3sncmNcSwDJ
OEdHdX+Pue+++dTe9c3Qi/B+/0om0rLIpF1l9CPQarTnjeSXwe7ZtxAxNG/VuE3t
NEGjmF6DagNSyjpE464i7fcPsSWfU6fa75Z+0Lv6IulHoX7Vzf8oVwvCtNqZQSWn
FaGJKyXIK+tkIr8LjC1UHWUDdnqJmHwDpdjGQioUtQlY6PrqoDr8lF5kMwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLErAPTpvarT0rzs7FvJ+JcCfkM3MB8GA1UdIwQY
MBaAFOfNpuNkbck6DS1CldHrCUdsZrymMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNTgybTQyUnR5VG9OTFVLVjBlc0pSMnhtdktZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS8zYTZkMjgtMWM0My00YjhiLWI3MTMt
NTY4YzQwN2IzMGY3LzEvNTgybTQyUnR5VG9OTFVLVjBlc0pSMnhtdktZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYS8zYTZkMjgtMWM0My00YjhiLWI3MTMtNTY4YzQwN2IzMGY3
LzEvNTgybTQyUnR5VG9OTFVLVjBlc0pSMnhtdktZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAryZJlE/5
IXwJUJtNgQMyRflyhiY+8LUFDUO6bgKyPF70OtX6AL0KPXhwDrNx+NdjJr3yPL4P
x0djhxyDxHJKCb2wr50jsumiR/t1qb3gRoYUalkdEimvIWRdTCbqnCqFzvw3FwgW
g3Rj0HzFJyHoUXfiEVAJFrp5JXnZYfQuT1va0RAhrdizR8T0Ia5HTNcheSyTBuzD
17TNXC5K3mYOXgxToX89BhOQJXfObFkeWdL0OEBE5R/mhwsp1OFJ9WUbIiJjxyCH
Lp3L7ddJWzTbQ7hrGfd4FJ5YdVORFgxgOwDisFsxF642pDCrgCbtAPDrZSlUyEfa
4MhBPQ8r0hPENQ==
-----END CERTIFICATE-----
Generated at Sat Aug 15 00:46:12 2026 by rpki-client