Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/d2aab0-8363-4b14-9cc2-c8bb8ea39804/1/d7AgMIhlwzYNqxnzpXAzQYZOn1A.mft
File: d7AgMIhlwzYNqxnzpXAzQYZOn1A.mft (raw, json)
Hash identifier: 412avUaGhqEyXs0wFtH3QEeLNUgLk+WWLyzKShwworI=
Subject key identifier: 5F:A9:36:15:61:0C:D5:A2:74:DA:A2:06:4B:B3:CE:77:9F:4A:9D:F4
Authority key identifier: 77:B0:20:30:88:65:C3:36:0D:AB:19:F3:A5:70:33:41:86:4E:9F:50
Certificate issuer: /CN=77b020308865c3360dab19f3a5703341864e9f50
Certificate serial: 019F130ADCCFDF9E54ADD11FC07FC0A502C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d7AgMIhlwzYNqxnzpXAzQYZOn1A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/d2aab0-8363-4b14-9cc2-c8bb8ea39804/1/d7AgMIhlwzYNqxnzpXAzQYZOn1A.mft
Manifest number: 198F
Signing time: Mon 29 Jun 2026 11:01:46 +0000
Manifest this update: Mon 29 Jun 2026 11:01:46 +0000
Manifest next update: Tue 30 Jun 2026 11:01:46 +0000
Files and hashes: 1: O0zdzMf69p1geR9BzbHj8H6216Q.roa (hash: gB3ykbY7Zy2yOIDfRVoU3HqEBAgziuKZvTGr//ZJWIo=)
2: d7AgMIhlwzYNqxnzpXAzQYZOn1A.crl (hash: cmBEj/hh4UDAAYtPNpY1ThOC4adpUmZE9AiOXeGopiQ=)
3: sYgcwFmXC21qQr4HaIkoLUDZGq4.roa (hash: o16QA0TxR5R2SVkQH4tgiDW7/Tyeif3rP5L2akN0sow=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/d2aab0-8363-4b14-9cc2-c8bb8ea39804/1/d7AgMIhlwzYNqxnzpXAzQYZOn1A.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/d2aab0-8363-4b14-9cc2-c8bb8ea39804/1/d7AgMIhlwzYNqxnzpXAzQYZOn1A.mft
rsync://rpki.ripe.net/repository/DEFAULT/d7AgMIhlwzYNqxnzpXAzQYZOn1A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 11:01:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:13:0a:dc:cf:df:9e:54:ad:d1:1f:c0:7f:c0:a5:02:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77b020308865c3360dab19f3a5703341864e9f50
Validity
Not Before: Jun 29 11:01:46 2026 GMT
Not After : Jun 30 11:01:46 2026 GMT
Subject: CN=5fa93615610cd5a274daa2064bb3ce779f4a9df4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:be:06:a0:b3:39:46:7a:34:f9:b5:be:8a:28:
ef:f5:d8:f0:4f:26:73:ad:87:00:55:5c:35:b0:1d:
ef:12:d4:53:10:27:3a:dc:0d:1f:8a:7c:d4:ce:6f:
05:e4:54:89:77:40:70:40:d7:7e:0f:e4:c0:a3:ec:
89:2e:72:f6:5b:e0:49:4a:c5:d1:ba:67:30:87:62:
7e:b5:19:37:c4:7f:13:eb:89:40:52:49:67:6c:8c:
de:de:24:94:97:55:26:33:c7:5b:ee:ba:e2:4a:1b:
4f:0c:00:cd:5e:81:87:7d:83:c9:2c:49:19:b2:2c:
88:7c:22:30:7e:73:be:54:71:f6:a1:ec:b2:f8:65:
c4:c8:22:8f:87:83:cf:ea:e5:c1:c2:ef:19:a2:56:
2c:89:ee:04:61:5f:6b:da:f5:fc:d2:1e:34:82:43:
f7:af:0a:46:fb:c4:f6:d2:78:d5:1b:a1:3a:02:c3:
29:e5:33:3f:d4:4b:5b:2b:48:13:4e:b8:6d:1f:6d:
4b:5a:9b:79:50:a8:34:14:7e:56:39:2f:1f:a0:fb:
99:ec:77:dd:fb:5a:e5:f7:48:e4:d0:ca:74:dc:1b:
85:d0:ad:66:8a:6f:7d:e7:b2:46:43:e2:17:75:aa:
45:bf:1c:73:45:e8:ff:af:f3:df:61:ab:35:7e:29:
55:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:A9:36:15:61:0C:D5:A2:74:DA:A2:06:4B:B3:CE:77:9F:4A:9D:F4
X509v3 Authority Key Identifier:
keyid:77:B0:20:30:88:65:C3:36:0D:AB:19:F3:A5:70:33:41:86:4E:9F:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7AgMIhlwzYNqxnzpXAzQYZOn1A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/d2aab0-8363-4b14-9cc2-c8bb8ea39804/1/d7AgMIhlwzYNqxnzpXAzQYZOn1A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/d2aab0-8363-4b14-9cc2-c8bb8ea39804/1/d7AgMIhlwzYNqxnzpXAzQYZOn1A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:3c:51:02:be:3f:d0:03:94:83:5a:b6:0c:7c:cb:1a:4e:0f:
5e:47:c1:25:7f:17:ea:39:9b:31:6e:0b:21:56:c7:42:dc:a2:
09:a4:a4:f7:6e:0f:f5:68:57:ce:f2:f6:f3:53:8c:06:63:ef:
52:c9:44:c6:be:fb:c0:3e:49:69:c3:22:d9:51:a0:85:f0:36:
bd:54:c1:e1:48:e6:91:f9:f1:ae:fb:61:fd:f3:0d:7e:e7:7f:
d1:36:d8:1c:5a:a7:c6:35:83:68:2c:dc:bf:30:7a:05:ca:90:
c2:17:5a:eb:9b:7e:1a:7b:c0:4a:54:e3:af:6c:22:a3:5a:d7:
34:38:45:b6:2d:86:9d:9b:8c:75:be:99:e6:19:1f:d5:ec:e6:
25:68:e4:e3:32:8e:9e:96:f9:3e:b1:e5:e3:5e:12:01:76:58:
a0:f7:d3:82:d8:d2:17:d1:67:b8:e5:de:95:14:a1:35:6e:02:
6f:f7:33:4e:00:62:5d:8c:24:06:9e:ce:08:7c:b6:c0:24:23:
c0:46:df:36:89:4b:bc:d0:14:0e:ba:ce:f6:19:85:59:97:cf:
e3:a4:6f:6c:6a:bd:29:b6:fd:e8:4f:a0:41:f5:51:df:c8:96:
63:f3:a5:6e:05:49:1c:50:fc:17:1c:46:86:3d:78:dd:31:8d:
9c:1b:f9:ba
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8TCtzP355UrdEfwH/ApQLJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc3YjAyMDMwODg2NWMzMzYwZGFiMTlmM2E1NzAzMzQxODY0
ZTlmNTAwHhcNMjYwNjI5MTEwMTQ2WhcNMjYwNjMwMTEwMTQ2WjAzMTEwLwYDVQQD
Eyg1ZmE5MzYxNTYxMGNkNWEyNzRkYWEyMDY0YmIzY2U3NzlmNGE5ZGY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlL4GoLM5Rno0+bW+iijv9djwTyZz
rYcAVVw1sB3vEtRTECc63A0finzUzm8F5FSJd0BwQNd+D+TAo+yJLnL2W+BJSsXR
umcwh2J+tRk3xH8T64lAUklnbIze3iSUl1UmM8db7rriShtPDADNXoGHfYPJLEkZ
siyIfCIwfnO+VHH2oeyy+GXEyCKPh4PP6uXBwu8ZolYsie4EYV9r2vX80h40gkP3
rwpG+8T20njVG6E6AsMp5TM/1EtbK0gTTrhtH21LWpt5UKg0FH5WOS8foPuZ7Hfd
+1rl90jk0Mp03BuF0K1mim9957JGQ+IXdapFvxxzRej/r/PfYas1filVzwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF+pNhVhDNWidNqiBkuzznefSp30MB8GA1UdIwQY
MBaAFHewIDCIZcM2DasZ86VwM0GGTp9QMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZDdBZ01JaGx3ellOcXhuenBYQXpRWVpPbjFBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC9kMmFhYjAtODM2My00YjE0LTljYzIt
YzhiYjhlYTM5ODA0LzEvZDdBZ01JaGx3ellOcXhuenBYQXpRWVpPbjFBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOC9kMmFhYjAtODM2My00YjE0LTljYzItYzhiYjhlYTM5ODA0
LzEvZDdBZ01JaGx3ellOcXhuenBYQXpRWVpPbjFBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIjxRAr4/
0AOUg1q2DHzLGk4PXkfBJX8X6jmbMW4LIVbHQtyiCaSk924P9WhXzvL281OMBmPv
UslExr77wD5JacMi2VGghfA2vVTB4Ujmkfnxrvth/fMNfud/0TbYHFqnxjWDaCzc
vzB6BcqQwhda65t+GnvASlTjr2wio1rXNDhFti2GnZuMdb6Z5hkf1ezmJWjk4zKO
npb5PrHl414SAXZYoPfTgtjSF9FnuOXelRShNW4Cb/czTgBiXYwkBp7OCHy2wCQj
wEbfNolLvNAUDrrO9hmFWZfP46RvbGq9Kbb96E+gQfVR38iWY/OlbgVJHFD8FxxG
hj143TGNnBv5ug==
-----END CERTIFICATE-----
Generated at Mon Jun 29 17:31:28 2026 by rpki-client