Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/975f3c-af4a-437b-89b1-284e5123e29f/1/bQBRmLdFcqFWq2PyMIWJe9PM1Bs.mft
File: bQBRmLdFcqFWq2PyMIWJe9PM1Bs.mft (raw, json)
Hash identifier: oF7k1nUVBaQZfpsrWrml7zJZAo/rZF28jQxncg0p69k=
Subject key identifier: CC:08:D3:CA:CD:FC:2E:62:6B:56:4B:EB:0F:C4:9B:59:92:70:BC:0D
Authority key identifier: 6D:00:51:98:B7:45:72:A1:56:AB:63:F2:30:85:89:7B:D3:CC:D4:1B
Certificate issuer: /CN=6d005198b74572a156ab63f23085897bd3ccd41b
Certificate serial: 019FA9E28E4AB26D8540FF91E87BA9495AAC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bQBRmLdFcqFWq2PyMIWJe9PM1Bs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/975f3c-af4a-437b-89b1-284e5123e29f/1/bQBRmLdFcqFWq2PyMIWJe9PM1Bs.mft
Manifest number: 05F8
Signing time: Tue 28 Jul 2026 18:00:24 +0000
Manifest this update: Tue 28 Jul 2026 18:00:24 +0000
Manifest next update: Wed 29 Jul 2026 18:00:24 +0000
Files and hashes: 1: 5v9iEqqw9h8Wg3xh2Nok2-eNQQM.roa (hash: 3N4L/xDAzZWmVmC1vE/Ib8W3ZzU4rXZkkHgA9mF0qSI=)
2: bQBRmLdFcqFWq2PyMIWJe9PM1Bs.crl (hash: T2UVCuifRpc8alLjKRO6GNZHqte0QhjqOl0Hb6HpIbY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/975f3c-af4a-437b-89b1-284e5123e29f/1/bQBRmLdFcqFWq2PyMIWJe9PM1Bs.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/975f3c-af4a-437b-89b1-284e5123e29f/1/bQBRmLdFcqFWq2PyMIWJe9PM1Bs.mft
rsync://rpki.ripe.net/repository/DEFAULT/bQBRmLdFcqFWq2PyMIWJe9PM1Bs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 18:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:e2:8e:4a:b2:6d:85:40:ff:91:e8:7b:a9:49:5a:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d005198b74572a156ab63f23085897bd3ccd41b
Validity
Not Before: Jul 28 18:00:24 2026 GMT
Not After : Jul 29 18:00:24 2026 GMT
Subject: CN=cc08d3cacdfc2e626b564beb0fc49b599270bc0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:52:38:4f:64:0a:b9:82:f1:56:4b:1a:21:4e:
95:4f:b1:b3:64:9b:ab:aa:2e:19:42:f9:60:52:19:
72:6c:d8:62:52:ec:e6:40:d0:58:10:d8:9f:d7:9d:
64:cf:5e:c7:df:45:f6:1a:e6:9c:cd:03:fa:07:17:
9a:b0:66:91:04:14:bc:e3:7b:af:f6:86:74:95:7c:
57:ac:fa:61:7e:f3:a3:84:ba:c5:92:db:6b:36:7d:
24:6a:1c:7e:ea:90:00:c5:27:38:e5:e6:f6:59:4a:
d7:80:e7:1b:e4:9b:52:78:d8:f6:2b:df:d5:8b:b6:
9e:5a:f9:94:1e:d9:74:5d:79:27:09:6c:31:16:ad:
6c:bb:83:d9:62:31:4c:b7:4d:b5:e7:bb:d9:47:e9:
69:71:2f:a6:c5:45:8e:06:48:ea:4c:2d:99:8a:76:
9e:c3:76:69:e2:31:f1:89:fd:ba:d0:65:3e:41:d8:
9e:21:f4:0f:f5:a4:f3:f8:12:ae:b3:9f:34:f8:1a:
8f:aa:f4:e0:f5:b5:24:88:0d:49:54:99:20:7f:d5:
69:a1:cc:0d:bd:82:f9:be:04:83:a8:29:7c:fd:5f:
50:06:78:56:82:cd:89:8e:26:93:83:a1:0d:72:12:
bb:df:b1:61:77:14:e7:37:dc:03:25:73:ce:e5:f3:
56:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:08:D3:CA:CD:FC:2E:62:6B:56:4B:EB:0F:C4:9B:59:92:70:BC:0D
X509v3 Authority Key Identifier:
keyid:6D:00:51:98:B7:45:72:A1:56:AB:63:F2:30:85:89:7B:D3:CC:D4:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bQBRmLdFcqFWq2PyMIWJe9PM1Bs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/975f3c-af4a-437b-89b1-284e5123e29f/1/bQBRmLdFcqFWq2PyMIWJe9PM1Bs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/975f3c-af4a-437b-89b1-284e5123e29f/1/bQBRmLdFcqFWq2PyMIWJe9PM1Bs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:56:10:ee:c7:5b:80:f2:ce:d5:16:5c:37:69:4f:3c:81:e7:
82:c6:94:32:3d:71:ba:92:b0:ea:28:ef:04:fe:c4:40:d1:50:
9c:b1:e6:a5:ac:c5:f5:b8:db:52:ab:98:ec:ff:95:42:36:65:
ea:ad:73:29:7f:2a:5c:64:c6:fa:67:d4:6f:06:6b:0f:9e:47:
b6:37:19:57:32:ff:90:20:23:50:1f:ad:01:c9:e3:46:85:95:
37:b2:c9:df:20:f5:75:f2:7d:e2:c8:14:08:74:21:00:ee:50:
cb:64:c6:dc:eb:ba:dd:8e:03:16:87:39:d7:fc:ba:dd:c9:c4:
5d:85:84:62:bc:b3:e3:9a:09:d1:ec:29:fd:70:74:54:46:81:
d9:09:61:57:a3:9e:f7:29:3d:a3:e9:e4:a7:2f:78:d9:7c:aa:
29:b5:8d:b2:90:6d:27:08:fa:a8:92:52:7d:66:58:17:38:05:
c6:f0:b7:5d:b7:a7:4f:e2:2b:5f:65:b3:cb:95:ed:3a:5c:d2:
17:f3:f9:95:e5:c9:c0:3c:98:60:66:c3:fb:fa:01:65:ea:d2:
1a:27:57:c1:26:dc:a8:ad:b9:01:f6:a7:dd:39:3e:e5:dd:48:
c7:35:d7:9e:23:85:19:7c:50:51:3a:71:95:e4:ea:d6:e7:01:
d4:23:dd:c4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+p4o5Ksm2FQP+R6HupSVqsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZkMDA1MTk4Yjc0NTcyYTE1NmFiNjNmMjMwODU4OTdiZDNj
Y2Q0MWIwHhcNMjYwNzI4MTgwMDI0WhcNMjYwNzI5MTgwMDI0WjAzMTEwLwYDVQQD
EyhjYzA4ZDNjYWNkZmMyZTYyNmI1NjRiZWIwZmM0OWI1OTkyNzBiYzBkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAulI4T2QKuYLxVksaIU6VT7GzZJur
qi4ZQvlgUhlybNhiUuzmQNBYENif151kz17H30X2GuaczQP6BxeasGaRBBS843uv
9oZ0lXxXrPphfvOjhLrFkttrNn0kahx+6pAAxSc45eb2WUrXgOcb5JtSeNj2K9/V
i7aeWvmUHtl0XXknCWwxFq1su4PZYjFMt02157vZR+lpcS+mxUWOBkjqTC2Zinae
w3Zp4jHxif260GU+QdieIfQP9aTz+BKus580+BqPqvTg9bUkiA1JVJkgf9VpocwN
vYL5vgSDqCl8/V9QBnhWgs2JjiaTg6ENchK737FhdxTnN9wDJXPO5fNWvwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMwI08rN/C5ia1ZL6w/Em1mScLwNMB8GA1UdIwQY
MBaAFG0AUZi3RXKhVqtj8jCFiXvTzNQbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYlFCUm1MZEZjcUZXcTJQeU1JV0plOVBNMUJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC85NzVmM2MtYWY0YS00MzdiLTg5YjEt
Mjg0ZTUxMjNlMjlmLzEvYlFCUm1MZEZjcUZXcTJQeU1JV0plOVBNMUJzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZC85NzVmM2MtYWY0YS00MzdiLTg5YjEtMjg0ZTUxMjNlMjlm
LzEvYlFCUm1MZEZjcUZXcTJQeU1JV0plOVBNMUJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANVYQ7sdb
gPLO1RZcN2lPPIHngsaUMj1xupKw6ijvBP7EQNFQnLHmpazF9bjbUquY7P+VQjZl
6q1zKX8qXGTG+mfUbwZrD55HtjcZVzL/kCAjUB+tAcnjRoWVN7LJ3yD1dfJ94sgU
CHQhAO5Qy2TG3Ou63Y4DFoc51/y63cnEXYWEYryz45oJ0ewp/XB0VEaB2QlhV6Oe
9yk9o+nkpy942XyqKbWNspBtJwj6qJJSfWZYFzgFxvC3XbenT+IrX2Wzy5XtOlzS
F/P5leXJwDyYYGbD+/oBZerSGidXwSbcqK25Afan3Tk+5d1IxzXXniOFGXxQUTpx
leTq1ucB1CPdxA==
-----END CERTIFICATE-----
Generated at Wed Jul 29 04:07:06 2026 by rpki-client