Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/7e2131-db8a-4c89-b50f-d82297e945ac/1/b_pZATo68D98lsJOaNleGBoDBag.mft
File: b_pZATo68D98lsJOaNleGBoDBag.mft (raw, json)
Hash identifier: aWF7XrjcWDj9EE3zbObrolbQ3TIj10+mBkCgOMqBoCg=
Subject key identifier: CA:56:CB:A7:BD:33:2F:66:F2:DF:07:8F:73:67:DA:DE:05:ED:E9:18
Authority key identifier: 6F:FA:59:01:3A:3A:F0:3F:7C:96:C2:4E:68:D9:5E:18:1A:03:05:A8
Certificate issuer: /CN=6ffa59013a3af03f7c96c24e68d95e181a0305a8
Certificate serial: 019DA30ADE567B5A7C5FDF34629B21ECB652
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b_pZATo68D98lsJOaNleGBoDBag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/7e2131-db8a-4c89-b50f-d82297e945ac/1/b_pZATo68D98lsJOaNleGBoDBag.mft
Manifest number: 18C6
Signing time: Sun 19 Apr 2026 00:01:31 +0000
Manifest this update: Sun 19 Apr 2026 00:01:31 +0000
Manifest next update: Mon 20 Apr 2026 00:01:31 +0000
Files and hashes: 1: SVOvzgkEfvGYjK4LPp7LCekPWQg.roa (hash: lwuDAbFV1ncdXu1vKoYuToeJM9cyJDqz+l6o1B6s+ac=)
2: b_pZATo68D98lsJOaNleGBoDBag.crl (hash: 4A/TtSfQwrNwvRODAuQENYE6LZF2WBDu8DgCp57ZgTI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/7e2131-db8a-4c89-b50f-d82297e945ac/1/b_pZATo68D98lsJOaNleGBoDBag.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/7e2131-db8a-4c89-b50f-d82297e945ac/1/b_pZATo68D98lsJOaNleGBoDBag.mft
rsync://rpki.ripe.net/repository/DEFAULT/b_pZATo68D98lsJOaNleGBoDBag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 00:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:0a:de:56:7b:5a:7c:5f:df:34:62:9b:21:ec:b6:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ffa59013a3af03f7c96c24e68d95e181a0305a8
Validity
Not Before: Apr 19 00:01:31 2026 GMT
Not After : Apr 20 00:01:31 2026 GMT
Subject: CN=ca56cba7bd332f66f2df078f7367dade05ede918
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:fa:2b:ca:d2:0f:27:9f:d7:3c:15:70:08:11:
e5:e0:ef:7f:4a:0b:44:2a:43:b1:14:98:a3:fe:71:
69:35:8f:47:2b:c5:7d:31:b5:9d:f9:2a:52:93:e2:
e8:7d:85:41:ff:ab:1b:70:2a:29:55:2b:40:39:b3:
0b:65:29:4d:64:45:c1:28:23:95:1c:a8:d4:45:1e:
b9:73:78:03:4d:83:4e:71:da:c5:95:a3:aa:f9:52:
fd:60:60:16:02:0c:b2:1d:8e:07:3c:ef:2b:19:e9:
8e:1f:c1:a4:4b:b6:43:5c:50:36:ed:1e:94:57:dc:
3f:60:4a:78:72:9f:24:c8:f4:aa:59:93:9a:0c:9d:
30:00:5c:74:76:fa:13:9e:87:87:08:d6:67:a3:f4:
f9:78:69:af:f1:16:6e:ef:61:f9:fc:bf:b4:12:de:
c5:8e:7c:46:2b:2d:2d:25:bb:23:5d:e1:3d:f8:a3:
1f:95:6d:5f:78:c3:38:bb:e5:b2:4e:03:a2:15:5f:
9b:a9:55:e6:21:66:ac:b4:3c:b4:49:4d:b2:79:c7:
ca:cc:fc:15:82:d4:9a:21:b1:d6:68:d5:07:fb:54:
8f:57:a7:1a:6b:ba:8a:85:98:15:44:ce:a3:30:9a:
42:c3:7a:76:e6:8e:99:74:09:82:00:f6:18:80:4c:
65:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:56:CB:A7:BD:33:2F:66:F2:DF:07:8F:73:67:DA:DE:05:ED:E9:18
X509v3 Authority Key Identifier:
keyid:6F:FA:59:01:3A:3A:F0:3F:7C:96:C2:4E:68:D9:5E:18:1A:03:05:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b_pZATo68D98lsJOaNleGBoDBag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/7e2131-db8a-4c89-b50f-d82297e945ac/1/b_pZATo68D98lsJOaNleGBoDBag.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/7e2131-db8a-4c89-b50f-d82297e945ac/1/b_pZATo68D98lsJOaNleGBoDBag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:91:d3:c7:2e:d1:54:ff:29:44:1d:1e:37:8a:be:43:af:f7:
d7:bc:b4:ad:49:80:5e:42:b5:08:6a:08:ae:a5:d4:34:57:12:
2b:f3:ba:b7:38:6f:5d:07:b7:55:3e:0e:00:e5:53:df:ff:c0:
a3:16:eb:ec:99:eb:4d:ff:b5:ab:ab:53:a8:d8:26:a8:7b:37:
cc:6f:9f:12:1c:21:7a:e3:dd:bb:b9:5e:90:68:fb:ff:86:49:
7f:7e:33:a7:b6:05:81:e4:b1:65:62:5b:be:36:f8:0a:99:78:
22:b5:9d:81:7d:cb:f8:e0:0d:1d:e8:cc:8e:2a:dd:6b:53:5b:
33:50:21:8e:64:c2:cf:4d:16:ec:14:c3:03:b1:9e:6a:0b:76:
83:dd:ec:37:30:c8:61:08:9c:58:25:d2:bc:ef:ce:30:9c:73:
10:76:64:9f:29:49:7c:31:e4:1a:f9:b7:fb:21:69:3b:92:36:
eb:20:2c:22:8b:70:7e:e0:88:11:e6:e8:7b:8d:af:64:d0:c5:
82:c0:e8:fa:7d:92:69:00:e2:dd:15:21:ed:d2:23:76:8d:b0:
e4:83:9c:8f:b3:8d:28:53:97:40:0b:40:26:29:4b:3a:68:c4:
41:e2:22:45:01:f5:fe:36:85:fc:4d:d0:54:97:0f:fc:16:cc:
62:14:21:fa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2jCt5We1p8X980Ypsh7LZSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmZmE1OTAxM2EzYWYwM2Y3Yzk2YzI0ZTY4ZDk1ZTE4MWEw
MzA1YTgwHhcNMjYwNDE5MDAwMTMxWhcNMjYwNDIwMDAwMTMxWjAzMTEwLwYDVQQD
EyhjYTU2Y2JhN2JkMzMyZjY2ZjJkZjA3OGY3MzY3ZGFkZTA1ZWRlOTE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuvorytIPJ5/XPBVwCBHl4O9/SgtE
KkOxFJij/nFpNY9HK8V9MbWd+SpSk+LofYVB/6sbcCopVStAObMLZSlNZEXBKCOV
HKjURR65c3gDTYNOcdrFlaOq+VL9YGAWAgyyHY4HPO8rGemOH8GkS7ZDXFA27R6U
V9w/YEp4cp8kyPSqWZOaDJ0wAFx0dvoTnoeHCNZno/T5eGmv8RZu72H5/L+0Et7F
jnxGKy0tJbsjXeE9+KMflW1feMM4u+WyTgOiFV+bqVXmIWastDy0SU2yecfKzPwV
gtSaIbHWaNUH+1SPV6caa7qKhZgVRM6jMJpCw3p25o6ZdAmCAPYYgExlDQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMpWy6e9My9m8t8Hj3Nn2t4F7ekYMB8GA1UdIwQY
MBaAFG/6WQE6OvA/fJbCTmjZXhgaAwWoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYl9wWkFUbzY4RDk4bHNKT2FObGVHQm9EQmFnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC83ZTIxMzEtZGI4YS00Yzg5LWI1MGYt
ZDgyMjk3ZTk0NWFjLzEvYl9wWkFUbzY4RDk4bHNKT2FObGVHQm9EQmFnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOC83ZTIxMzEtZGI4YS00Yzg5LWI1MGYtZDgyMjk3ZTk0NWFj
LzEvYl9wWkFUbzY4RDk4bHNKT2FObGVHQm9EQmFnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeZHTxy7R
VP8pRB0eN4q+Q6/317y0rUmAXkK1CGoIrqXUNFcSK/O6tzhvXQe3VT4OAOVT3//A
oxbr7JnrTf+1q6tTqNgmqHs3zG+fEhwheuPdu7lekGj7/4ZJf34zp7YFgeSxZWJb
vjb4Cpl4IrWdgX3L+OANHejMjirda1NbM1AhjmTCz00W7BTDA7Geagt2g93sNzDI
YQicWCXSvO/OMJxzEHZknylJfDHkGvm3+yFpO5I26yAsIotwfuCIEeboe42vZNDF
gsDo+n2SaQDi3RUh7dIjdo2w5IOcj7ONKFOXQAtAJilLOmjEQeIiRQH1/jaF/E3Q
VJcP/BbMYhQh+g==
-----END CERTIFICATE-----
Generated at Sun Apr 19 10:06:36 2026 by rpki-client