Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/2b7cd1-49b6-4921-a5e1-61f91ededf0a/1/bIkO9qiKsz-logZ2B2jdMlHCOK8.mft
File: bIkO9qiKsz-logZ2B2jdMlHCOK8.mft (raw, json)
Hash identifier: HM5cSHXibrvmBQxvQjZ0gBSeikCeKCduwlgAi9WGhB4=
Subject key identifier: 5E:70:39:D3:7C:82:7B:3B:F7:D4:89:D0:2B:84:57:4F:91:18:B0:21
Authority key identifier: 6C:89:0E:F6:A8:8A:B3:3F:A5:A2:06:76:07:68:DD:32:51:C2:38:AF
Certificate issuer: /CN=6c890ef6a88ab33fa5a206760768dd3251c238af
Certificate serial: 019FAB631CD14812FA5800EB5F418336219D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bIkO9qiKsz-logZ2B2jdMlHCOK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/2b7cd1-49b6-4921-a5e1-61f91ededf0a/1/bIkO9qiKsz-logZ2B2jdMlHCOK8.mft
Manifest number: 19D7
Signing time: Wed 29 Jul 2026 01:00:27 +0000
Manifest this update: Wed 29 Jul 2026 01:00:27 +0000
Manifest next update: Thu 30 Jul 2026 01:00:27 +0000
Files and hashes: 1: bIkO9qiKsz-logZ2B2jdMlHCOK8.crl (hash: W0Ne0MZYi3+ZFBSrkIQDR+Ic3MVPm0RPY3ji1TAgnis=)
2: u5hJOCynJQAu4PH5D56C-AeKtEc.roa (hash: 53JyrjI2rSv7IJ0kdQIBEc2NY8BsRGlwPaWvUaVHA/o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/2b7cd1-49b6-4921-a5e1-61f91ededf0a/1/bIkO9qiKsz-logZ2B2jdMlHCOK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/2b7cd1-49b6-4921-a5e1-61f91ededf0a/1/bIkO9qiKsz-logZ2B2jdMlHCOK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/bIkO9qiKsz-logZ2B2jdMlHCOK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:63:1c:d1:48:12:fa:58:00:eb:5f:41:83:36:21:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c890ef6a88ab33fa5a206760768dd3251c238af
Validity
Not Before: Jul 29 01:00:27 2026 GMT
Not After : Jul 30 01:00:27 2026 GMT
Subject: CN=5e7039d37c827b3bf7d489d02b84574f9118b021
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:4a:c7:f0:80:6f:3f:de:83:fc:c1:0f:6d:44:
88:ad:68:b7:47:38:52:83:e5:ca:3a:0c:6b:6a:e5:
a6:2a:9b:80:97:69:df:b6:19:d1:c7:e5:d1:73:dd:
c3:ce:55:20:16:28:f3:44:6b:9e:f1:31:a8:a9:9b:
db:77:7a:93:6e:13:26:52:09:1e:c0:94:49:7d:9e:
fa:d4:58:02:95:dc:e3:36:1c:60:b9:a1:d5:28:1a:
81:0e:b0:bb:68:96:c1:0f:05:2d:80:4c:4c:da:ae:
62:0d:21:8e:6e:49:b7:3c:c6:ef:c7:e1:53:fd:d0:
87:ca:83:3e:b0:3b:0d:b6:49:58:bd:47:48:78:09:
1a:5d:03:19:0d:5f:35:6c:f0:45:53:ee:7e:43:77:
06:09:b4:cf:18:50:1d:69:44:46:aa:55:cc:d8:0d:
6c:10:4b:c5:d1:32:3f:a9:65:fa:ca:d4:fe:ba:24:
5f:6d:98:94:85:84:d1:f2:6c:2f:30:46:0a:37:ba:
9c:80:8a:b7:54:fa:50:06:e3:87:74:f7:cd:e7:ef:
83:f7:8d:fb:a8:15:ea:72:99:cb:e2:03:74:fd:67:
83:b2:59:74:0d:d3:c3:b5:ba:d8:39:e2:6c:81:11:
ed:b8:09:4c:bc:7b:f7:a1:84:e1:c0:94:6b:a6:41:
ee:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:70:39:D3:7C:82:7B:3B:F7:D4:89:D0:2B:84:57:4F:91:18:B0:21
X509v3 Authority Key Identifier:
keyid:6C:89:0E:F6:A8:8A:B3:3F:A5:A2:06:76:07:68:DD:32:51:C2:38:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bIkO9qiKsz-logZ2B2jdMlHCOK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/2b7cd1-49b6-4921-a5e1-61f91ededf0a/1/bIkO9qiKsz-logZ2B2jdMlHCOK8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/2b7cd1-49b6-4921-a5e1-61f91ededf0a/1/bIkO9qiKsz-logZ2B2jdMlHCOK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:bb:8b:a6:17:dc:b7:a2:c2:4e:a6:45:f6:ee:f9:65:aa:dc:
fe:8b:b9:0d:6d:3b:76:cb:99:17:f4:fb:3f:13:37:27:7a:8f:
77:6e:ea:0a:80:97:a5:41:ba:f4:61:96:59:7d:50:89:35:c2:
8f:7c:2b:13:9a:9c:d5:5b:91:32:18:fd:32:ba:15:fe:d6:26:
93:55:eb:ae:63:6e:24:1a:e0:a5:22:4e:24:0d:26:7e:8d:69:
32:69:3e:8e:4b:ec:78:a7:66:56:ab:1a:e2:be:b2:89:2f:a9:
85:a5:11:c0:44:33:5f:dc:f0:de:96:b7:b4:7d:66:35:1c:c3:
7f:1d:87:8d:33:23:82:60:30:ea:b9:5c:b7:8c:d0:59:dc:f6:
88:c1:48:b9:0d:e9:27:ea:50:25:2f:51:30:fa:04:c6:12:c5:
75:b0:08:d8:d1:d5:40:7e:78:61:be:77:05:9e:a1:b3:ff:85:
60:29:75:d5:96:ab:d4:4e:5f:e9:7b:72:13:64:4f:40:9a:3c:
5d:42:f2:c0:8d:41:01:69:1f:ce:e2:98:fb:c8:16:fd:a0:9c:
dc:fe:d8:b2:d1:81:b4:48:3b:62:27:b0:16:cb:d6:7f:3f:e2:
1e:92:fd:75:2f:c9:28:6e:64:e7:d1:da:90:25:d5:b5:f9:26:
af:31:4c:17
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+rYxzRSBL6WADrX0GDNiGdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZjODkwZWY2YTg4YWIzM2ZhNWEyMDY3NjA3NjhkZDMyNTFj
MjM4YWYwHhcNMjYwNzI5MDEwMDI3WhcNMjYwNzMwMDEwMDI3WjAzMTEwLwYDVQQD
Eyg1ZTcwMzlkMzdjODI3YjNiZjdkNDg5ZDAyYjg0NTc0ZjkxMThiMDIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvErH8IBvP96D/MEPbUSIrWi3RzhS
g+XKOgxrauWmKpuAl2nfthnRx+XRc93DzlUgFijzRGue8TGoqZvbd3qTbhMmUgke
wJRJfZ761FgCldzjNhxguaHVKBqBDrC7aJbBDwUtgExM2q5iDSGObkm3PMbvx+FT
/dCHyoM+sDsNtklYvUdIeAkaXQMZDV81bPBFU+5+Q3cGCbTPGFAdaURGqlXM2A1s
EEvF0TI/qWX6ytT+uiRfbZiUhYTR8mwvMEYKN7qcgIq3VPpQBuOHdPfN5++D9437
qBXqcpnL4gN0/WeDsll0DdPDtbrYOeJsgRHtuAlMvHv3oYThwJRrpkHuzwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF5wOdN8gns799SJ0CuEV0+RGLAhMB8GA1UdIwQY
MBaAFGyJDvaoirM/paIGdgdo3TJRwjivMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYklrTzlxaUtzei1sb2daMkIyamRNbEhDT0s4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS8yYjdjZDEtNDliNi00OTIxLWE1ZTEt
NjFmOTFlZGVkZjBhLzEvYklrTzlxaUtzei1sb2daMkIyamRNbEhDT0s4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZS8yYjdjZDEtNDliNi00OTIxLWE1ZTEtNjFmOTFlZGVkZjBh
LzEvYklrTzlxaUtzei1sb2daMkIyamRNbEhDT0s4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl7uLphfc
t6LCTqZF9u75Zarc/ou5DW07dsuZF/T7PxM3J3qPd27qCoCXpUG69GGWWX1QiTXC
j3wrE5qc1VuRMhj9MroV/tYmk1XrrmNuJBrgpSJOJA0mfo1pMmk+jkvseKdmVqsa
4r6yiS+phaURwEQzX9zw3pa3tH1mNRzDfx2HjTMjgmAw6rlct4zQWdz2iMFIuQ3p
J+pQJS9RMPoExhLFdbAI2NHVQH54Yb53BZ6hs/+FYCl11Zar1E5f6XtyE2RPQJo8
XULywI1BAWkfzuKY+8gW/aCc3P7YstGBtEg7YiewFsvWfz/iHpL9dS/JKG5k59Ha
kCXVtfkmrzFMFw==
-----END CERTIFICATE-----
Generated at Wed Jul 29 07:29:03 2026 by rpki-client