Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/779928-881c-433a-b243-c9f57e959ef1/1/BpLF8WMTZTQlvEZxBYdeOil8_5s.mft
File: BpLF8WMTZTQlvEZxBYdeOil8_5s.mft (raw, json)
Hash identifier: R7+cWk2ksh0amxA4X2Y9A/wfn9joHmuZ1DYfCfgVB7k=
Subject key identifier: F6:5D:40:D0:41:AB:D0:1F:84:54:31:71:33:4B:BB:D0:07:32:48:82
Authority key identifier: 06:92:C5:F1:63:13:65:34:25:BC:46:71:05:87:5E:3A:29:7C:FF:9B
Certificate issuer: /CN=0692c5f16313653425bc467105875e3a297cff9b
Certificate serial: 019FA8D0A74F06156895B3F2014C369352E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BpLF8WMTZTQlvEZxBYdeOil8_5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/779928-881c-433a-b243-c9f57e959ef1/1/BpLF8WMTZTQlvEZxBYdeOil8_5s.mft
Manifest number: 0CAA
Signing time: Tue 28 Jul 2026 13:01:14 +0000
Manifest this update: Tue 28 Jul 2026 13:01:14 +0000
Manifest next update: Wed 29 Jul 2026 13:01:14 +0000
Files and hashes: 1: BpLF8WMTZTQlvEZxBYdeOil8_5s.crl (hash: GE4OQRBxea/Sz0gwZMJFRmVaZ/syIJHY4ZeN8WHHCkc=)
2: E4C4dYvzCYVEMlAq5xcXmk6xtDA.roa (hash: EWnlZAeMYxnLcHv2llGSw3rkGlFbzENleIyYQktLoeo=)
3: nOa638g_V2wtGEyTH1US4Mko4Q8.roa (hash: hjAi2zRBuemAe5qpNuCZhFQgwOmDpoyFiA63zs6Mg7I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/779928-881c-433a-b243-c9f57e959ef1/1/BpLF8WMTZTQlvEZxBYdeOil8_5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/779928-881c-433a-b243-c9f57e959ef1/1/BpLF8WMTZTQlvEZxBYdeOil8_5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/BpLF8WMTZTQlvEZxBYdeOil8_5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 13:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:d0:a7:4f:06:15:68:95:b3:f2:01:4c:36:93:52:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0692c5f16313653425bc467105875e3a297cff9b
Validity
Not Before: Jul 28 13:01:14 2026 GMT
Not After : Jul 29 13:01:14 2026 GMT
Subject: CN=f65d40d041abd01f84543171334bbbd007324882
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:05:ad:74:79:d7:65:b9:9a:3c:39:5a:29:6c:
0c:3d:08:ee:c8:e4:52:8d:02:fd:9f:10:fd:54:82:
87:0e:eb:9e:97:75:6b:f9:31:d5:b2:b3:7d:1a:ca:
ad:2f:02:db:31:f4:7c:fd:42:6a:cb:a8:31:cc:d6:
c1:3c:16:64:33:dd:df:4f:e4:8d:0a:71:2f:3c:d8:
27:c3:8c:a1:e9:c2:12:1d:b6:e6:a0:fa:8a:47:d7:
51:68:a5:5f:7f:43:b8:65:34:8b:ed:9f:3b:02:4c:
2c:aa:d3:71:e9:62:7e:b1:15:47:b5:ac:88:49:c0:
9d:60:dd:6b:97:fd:3c:3d:f3:e1:a3:ca:29:a8:f7:
1d:e3:99:22:aa:2a:8a:b2:77:2d:2a:5a:1d:89:d4:
6c:4f:7a:e4:9f:2e:3c:fc:6e:96:f8:3e:67:12:c3:
42:c5:1b:59:0c:6e:a0:93:cb:6b:bd:38:4c:30:b8:
61:88:0b:ee:74:c1:bf:9f:2e:0c:d8:9f:9a:e0:78:
ae:ef:cc:73:ce:8a:61:20:ba:2e:df:47:41:d4:be:
0c:37:9c:a6:af:3e:ef:9c:1f:63:ce:92:97:be:c6:
14:15:04:91:26:b9:99:7e:e2:51:38:2b:c3:d3:2d:
13:7c:7a:72:91:a4:f2:09:cc:2d:35:d4:b5:8d:47:
74:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:5D:40:D0:41:AB:D0:1F:84:54:31:71:33:4B:BB:D0:07:32:48:82
X509v3 Authority Key Identifier:
keyid:06:92:C5:F1:63:13:65:34:25:BC:46:71:05:87:5E:3A:29:7C:FF:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BpLF8WMTZTQlvEZxBYdeOil8_5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/779928-881c-433a-b243-c9f57e959ef1/1/BpLF8WMTZTQlvEZxBYdeOil8_5s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/779928-881c-433a-b243-c9f57e959ef1/1/BpLF8WMTZTQlvEZxBYdeOil8_5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:fb:3f:7d:86:d3:11:28:45:76:0b:c1:10:70:00:a6:fb:dc:
ab:0f:e8:3e:e7:00:83:50:19:09:11:52:33:ee:62:bd:56:d7:
c2:a7:53:d5:fb:70:2f:52:c9:d3:55:ec:06:ff:e9:a8:b7:79:
3e:52:30:3a:44:82:ce:d6:89:f5:95:e7:30:0b:ba:74:2d:2e:
78:05:b5:c5:94:1d:89:2f:0b:d2:1f:ae:86:bf:1a:9f:13:13:
ac:5a:c7:b7:3f:f7:14:8d:86:10:ee:72:d6:eb:66:b4:8f:a9:
4b:03:a5:d9:22:0a:a9:9b:4f:0e:62:89:99:be:51:e7:22:a3:
ea:bf:7a:2e:02:0e:2d:1d:94:ff:99:a6:fc:0f:35:80:5e:0f:
e3:ff:bf:57:e9:ea:57:df:48:78:47:4b:a5:7b:1a:ea:75:5c:
a0:96:01:ef:97:a7:ad:f5:70:2a:ae:76:69:18:82:d9:15:25:
96:4f:35:b1:9c:1e:c8:3d:1b:fe:60:fb:54:c8:a1:ed:10:6c:
a8:11:04:00:fb:c6:e4:5d:23:fd:61:c8:1e:0b:4b:3e:98:c6:
7e:6a:1b:f9:7f:4a:1a:89:a7:23:51:7e:d9:93:09:07:cf:b9:
60:bb:e3:b8:8c:ec:b8:4b:04:be:e6:65:aa:a1:53:26:b1:e8:
a1:ed:13:63
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+o0KdPBhVolbPyAUw2k1LhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA2OTJjNWYxNjMxMzY1MzQyNWJjNDY3MTA1ODc1ZTNhMjk3
Y2ZmOWIwHhcNMjYwNzI4MTMwMTE0WhcNMjYwNzI5MTMwMTE0WjAzMTEwLwYDVQQD
EyhmNjVkNDBkMDQxYWJkMDFmODQ1NDMxNzEzMzRiYmJkMDA3MzI0ODgyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlgWtdHnXZbmaPDlaKWwMPQjuyORS
jQL9nxD9VIKHDuuel3Vr+THVsrN9GsqtLwLbMfR8/UJqy6gxzNbBPBZkM93fT+SN
CnEvPNgnw4yh6cISHbbmoPqKR9dRaKVff0O4ZTSL7Z87AkwsqtNx6WJ+sRVHtayI
ScCdYN1rl/08PfPho8opqPcd45kiqiqKsnctKlodidRsT3rkny48/G6W+D5nEsNC
xRtZDG6gk8trvThMMLhhiAvudMG/ny4M2J+a4Hiu78xzzophILou30dB1L4MN5ym
rz7vnB9jzpKXvsYUFQSRJrmZfuJROCvD0y0TfHpykaTyCcwtNdS1jUd0jQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPZdQNBBq9AfhFQxcTNLu9AHMkiCMB8GA1UdIwQY
MBaAFAaSxfFjE2U0JbxGcQWHXjopfP+bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQnBMRjhXTVRaVFFsdkVaeEJZZGVPaWw4XzVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS83Nzk5MjgtODgxYy00MzNhLWIyNDMt
YzlmNTdlOTU5ZWYxLzEvQnBMRjhXTVRaVFFsdkVaeEJZZGVPaWw4XzVzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYS83Nzk5MjgtODgxYy00MzNhLWIyNDMtYzlmNTdlOTU5ZWYx
LzEvQnBMRjhXTVRaVFFsdkVaeEJZZGVPaWw4XzVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiPs/fYbT
EShFdgvBEHAApvvcqw/oPucAg1AZCRFSM+5ivVbXwqdT1ftwL1LJ01XsBv/pqLd5
PlIwOkSCztaJ9ZXnMAu6dC0ueAW1xZQdiS8L0h+uhr8anxMTrFrHtz/3FI2GEO5y
1utmtI+pSwOl2SIKqZtPDmKJmb5R5yKj6r96LgIOLR2U/5mm/A81gF4P4/+/V+nq
V99IeEdLpXsa6nVcoJYB75enrfVwKq52aRiC2RUllk81sZweyD0b/mD7VMih7RBs
qBEEAPvG5F0j/WHIHgtLPpjGfmob+X9KGomnI1F+2ZMJB8+5YLvjuIzsuEsEvuZl
qqFTJrHooe0TYw==
-----END CERTIFICATE-----
Generated at Tue Jul 28 21:01:56 2026 by rpki-client