Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/779928-881c-433a-b243-c9f57e959ef1/1/BpLF8WMTZTQlvEZxBYdeOil8_5s.mft
File: BpLF8WMTZTQlvEZxBYdeOil8_5s.mft (raw, json)
Hash identifier: kgm0egH9P1YBlJK1V/WtI06I8O1kLhki169h5x31SKU=
Subject key identifier: 90:95:32:5E:C0:D4:3E:BC:96:E7:F8:36:1A:30:D7:9C:DF:F0:B7:43
Authority key identifier: 06:92:C5:F1:63:13:65:34:25:BC:46:71:05:87:5E:3A:29:7C:FF:9B
Certificate issuer: /CN=0692c5f16313653425bc467105875e3a297cff9b
Certificate serial: 019FAABE6D458B58E0786BB8864ACADB638D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BpLF8WMTZTQlvEZxBYdeOil8_5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/779928-881c-433a-b243-c9f57e959ef1/1/BpLF8WMTZTQlvEZxBYdeOil8_5s.mft
Manifest number: 0CAB
Signing time: Tue 28 Jul 2026 22:00:34 +0000
Manifest this update: Tue 28 Jul 2026 22:00:34 +0000
Manifest next update: Wed 29 Jul 2026 22:00:34 +0000
Files and hashes: 1: BpLF8WMTZTQlvEZxBYdeOil8_5s.crl (hash: /NhFXsBU3KhC45OSbXVjtkoV41fW10FVfI0l+lst5NE=)
2: E4C4dYvzCYVEMlAq5xcXmk6xtDA.roa (hash: EWnlZAeMYxnLcHv2llGSw3rkGlFbzENleIyYQktLoeo=)
3: nOa638g_V2wtGEyTH1US4Mko4Q8.roa (hash: hjAi2zRBuemAe5qpNuCZhFQgwOmDpoyFiA63zs6Mg7I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/779928-881c-433a-b243-c9f57e959ef1/1/BpLF8WMTZTQlvEZxBYdeOil8_5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/779928-881c-433a-b243-c9f57e959ef1/1/BpLF8WMTZTQlvEZxBYdeOil8_5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/BpLF8WMTZTQlvEZxBYdeOil8_5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:be:6d:45:8b:58:e0:78:6b:b8:86:4a:ca:db:63:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0692c5f16313653425bc467105875e3a297cff9b
Validity
Not Before: Jul 28 22:00:34 2026 GMT
Not After : Jul 29 22:00:34 2026 GMT
Subject: CN=9095325ec0d43ebc96e7f8361a30d79cdff0b743
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:c8:6a:b6:6c:c7:e2:28:fe:d3:09:16:58:48:
7f:40:00:28:71:ef:5d:d5:6f:e0:44:45:1f:c5:de:
7e:23:19:fa:3d:76:d3:d4:66:a7:72:fc:5f:fc:e7:
05:b2:73:32:8c:80:ec:8c:4d:6d:a9:c5:44:f6:b8:
05:75:5d:71:e0:c9:6f:90:35:c2:b0:34:68:17:7b:
26:1a:fb:0a:70:66:bb:b0:95:4b:f9:93:f4:e1:83:
8c:8f:8b:aa:0f:90:21:94:06:82:c8:61:c6:ba:18:
8c:59:1b:d3:de:5f:85:57:b3:1f:23:90:1e:64:7f:
a5:08:d0:dd:b1:41:5e:2e:b1:41:f9:06:e1:90:1f:
30:20:73:73:7b:ef:44:01:f9:5a:fa:69:b5:0f:56:
4f:f2:08:01:4f:fe:1f:09:a4:c1:cf:d2:ca:00:b2:
fc:45:db:7c:03:a0:88:9f:49:a7:09:92:2e:fe:32:
53:6f:c8:2c:dc:2e:de:3b:0a:e6:ec:21:3e:aa:2b:
63:1b:ea:4e:34:2a:23:d9:7a:0f:1e:5e:e9:21:dc:
6c:59:92:44:c9:c9:1f:53:cf:b3:6d:f1:15:db:65:
8d:9a:80:6f:d6:51:2d:e5:09:3d:38:8f:1c:2f:ee:
49:f5:4f:d6:80:65:48:5d:da:c7:be:24:7a:29:39:
0a:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:95:32:5E:C0:D4:3E:BC:96:E7:F8:36:1A:30:D7:9C:DF:F0:B7:43
X509v3 Authority Key Identifier:
keyid:06:92:C5:F1:63:13:65:34:25:BC:46:71:05:87:5E:3A:29:7C:FF:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BpLF8WMTZTQlvEZxBYdeOil8_5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/779928-881c-433a-b243-c9f57e959ef1/1/BpLF8WMTZTQlvEZxBYdeOil8_5s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/779928-881c-433a-b243-c9f57e959ef1/1/BpLF8WMTZTQlvEZxBYdeOil8_5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:e9:d0:ed:17:02:70:7d:7b:21:9a:10:ab:cb:7c:d2:3d:e3:
c1:bb:4a:84:5c:43:2e:95:d4:3b:cf:73:67:c1:ca:c8:57:9f:
2a:a6:06:4d:78:20:29:2c:e8:1e:ca:07:69:24:b4:b9:94:34:
5b:1d:88:98:c2:c5:6d:cf:fe:c2:a6:4f:60:c7:a1:39:8e:b8:
84:5b:60:f9:d8:eb:e2:25:47:58:a8:13:62:35:15:a0:d0:55:
f1:e7:06:a3:45:ed:8b:60:2d:3a:0b:00:4f:0b:96:c0:bc:1f:
ab:ae:02:a5:1e:bf:1a:0d:fb:52:b9:83:6f:f2:c8:d4:75:de:
07:71:bb:dc:75:98:99:e3:fb:3b:0d:06:55:52:c3:ee:a2:5f:
7e:1e:10:72:bb:79:76:8c:ea:7c:d4:2a:ef:90:4c:32:fb:38:
c5:a9:a1:19:3c:44:d5:8b:5a:26:f7:42:c5:88:3a:c9:66:4c:
17:57:c1:b4:30:6e:58:9d:b8:60:1c:39:ac:a1:ef:ad:75:78:
82:17:20:96:e2:7e:ca:1d:29:7c:cb:3c:36:c6:c1:bb:0c:ea:
f1:1f:f9:e8:cf:9a:61:98:a3:8b:f3:bf:b8:65:63:0a:42:8c:
d3:6c:6d:43:3f:2a:83:db:ed:19:33:35:dd:74:86:7d:2c:5f:
e5:80:82:25
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+qvm1Fi1jgeGu4hkrK22ONMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA2OTJjNWYxNjMxMzY1MzQyNWJjNDY3MTA1ODc1ZTNhMjk3
Y2ZmOWIwHhcNMjYwNzI4MjIwMDM0WhcNMjYwNzI5MjIwMDM0WjAzMTEwLwYDVQQD
Eyg5MDk1MzI1ZWMwZDQzZWJjOTZlN2Y4MzYxYTMwZDc5Y2RmZjBiNzQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6shqtmzH4ij+0wkWWEh/QAAoce9d
1W/gREUfxd5+Ixn6PXbT1Gancvxf/OcFsnMyjIDsjE1tqcVE9rgFdV1x4MlvkDXC
sDRoF3smGvsKcGa7sJVL+ZP04YOMj4uqD5AhlAaCyGHGuhiMWRvT3l+FV7MfI5Ae
ZH+lCNDdsUFeLrFB+QbhkB8wIHNze+9EAfla+mm1D1ZP8ggBT/4fCaTBz9LKALL8
Rdt8A6CIn0mnCZIu/jJTb8gs3C7eOwrm7CE+qitjG+pONCoj2XoPHl7pIdxsWZJE
yckfU8+zbfEV22WNmoBv1lEt5Qk9OI8cL+5J9U/WgGVIXdrHviR6KTkKzQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJCVMl7A1D68luf4Nhow15zf8LdDMB8GA1UdIwQY
MBaAFAaSxfFjE2U0JbxGcQWHXjopfP+bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQnBMRjhXTVRaVFFsdkVaeEJZZGVPaWw4XzVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS83Nzk5MjgtODgxYy00MzNhLWIyNDMt
YzlmNTdlOTU5ZWYxLzEvQnBMRjhXTVRaVFFsdkVaeEJZZGVPaWw4XzVzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYS83Nzk5MjgtODgxYy00MzNhLWIyNDMtYzlmNTdlOTU5ZWYx
LzEvQnBMRjhXTVRaVFFsdkVaeEJZZGVPaWw4XzVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFenQ7RcC
cH17IZoQq8t80j3jwbtKhFxDLpXUO89zZ8HKyFefKqYGTXggKSzoHsoHaSS0uZQ0
Wx2ImMLFbc/+wqZPYMehOY64hFtg+djr4iVHWKgTYjUVoNBV8ecGo0Xti2AtOgsA
TwuWwLwfq64CpR6/Gg37UrmDb/LI1HXeB3G73HWYmeP7Ow0GVVLD7qJffh4Qcrt5
dozqfNQq75BMMvs4xamhGTxE1YtaJvdCxYg6yWZMF1fBtDBuWJ24YBw5rKHvrXV4
ghcgluJ+yh0pfMs8NsbBuwzq8R/56M+aYZiji/O/uGVjCkKM02xtQz8qg9vtGTM1
3XSGfSxf5YCCJQ==
-----END CERTIFICATE-----
Generated at Tue Jul 28 23:39:46 2026 by rpki-client