Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/66af07-3318-4f4a-89ff-40c5ebc6f736/1/bSPOewwQBo-8RMAhlD4zkBPyruA.mft
File: bSPOewwQBo-8RMAhlD4zkBPyruA.mft (raw, json)
Hash identifier: 0U1tcFlCF3OTVSW7SPYJ8/4fBoEDdvSsJCGRAQlEZCk=
Subject key identifier: 43:3C:53:1B:03:FD:59:4A:D8:9E:88:AA:45:95:1D:27:41:84:B0:1E
Authority key identifier: 6D:23:CE:7B:0C:10:06:8F:BC:44:C0:21:94:3E:33:90:13:F2:AE:E0
Certificate issuer: /CN=6d23ce7b0c10068fbc44c021943e339013f2aee0
Certificate serial: 019FAE6586F0A6EA5304834BC96A5BCB0CA9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bSPOewwQBo-8RMAhlD4zkBPyruA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/66af07-3318-4f4a-89ff-40c5ebc6f736/1/bSPOewwQBo-8RMAhlD4zkBPyruA.mft
Manifest number: 19D5
Signing time: Wed 29 Jul 2026 15:01:56 +0000
Manifest this update: Wed 29 Jul 2026 15:01:56 +0000
Manifest next update: Thu 30 Jul 2026 15:01:56 +0000
Files and hashes: 1: WK4FeKC76gPpIjRhyORnL_0frZU.roa (hash: vdHNIiugtJJb19ih4gpWPEIdemNrQgRmwJqyp8Z7ys0=)
2: bSPOewwQBo-8RMAhlD4zkBPyruA.crl (hash: TO+BGkPQy9nYheuQcSY38pKMOckeoZNR8k7ZaOgxip4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/66af07-3318-4f4a-89ff-40c5ebc6f736/1/bSPOewwQBo-8RMAhlD4zkBPyruA.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/66af07-3318-4f4a-89ff-40c5ebc6f736/1/bSPOewwQBo-8RMAhlD4zkBPyruA.mft
rsync://rpki.ripe.net/repository/DEFAULT/bSPOewwQBo-8RMAhlD4zkBPyruA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 14:03:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ae:65:86:f0:a6:ea:53:04:83:4b:c9:6a:5b:cb:0c:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d23ce7b0c10068fbc44c021943e339013f2aee0
Validity
Not Before: Jul 29 15:01:56 2026 GMT
Not After : Jul 30 15:01:56 2026 GMT
Subject: CN=433c531b03fd594ad89e88aa45951d274184b01e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:3e:93:0b:b4:2e:2c:5d:1f:2f:f3:85:ee:71:
c4:a6:4f:f5:d9:f1:2e:e7:1f:84:ca:b8:e0:b0:17:
88:dc:98:e0:9e:35:3a:fe:32:c3:eb:82:2c:2e:a9:
e4:bd:23:50:eb:d8:25:18:fa:82:2b:2e:88:fa:ba:
da:2f:73:1f:76:85:7e:23:0c:f6:eb:3c:9b:ec:ff:
28:06:8a:5e:ee:83:00:79:77:89:d7:11:bc:31:1a:
a8:69:48:e0:42:89:0d:d7:95:a2:5e:da:f0:2b:8f:
29:32:76:90:3a:0d:18:81:c5:f9:2a:c4:92:e4:f5:
d4:6b:70:4a:97:4e:00:01:9e:ab:e3:e0:7b:6d:d4:
f2:3f:ec:4a:ff:89:9d:7f:45:22:97:b5:14:29:84:
5f:43:43:be:17:6d:ee:0d:f9:98:33:94:44:f8:f3:
c4:48:07:c4:5f:c1:24:ca:19:08:96:76:d5:db:42:
b4:48:9b:2a:62:36:2b:fd:f1:fe:b6:95:d7:06:f2:
5a:37:9e:28:2f:b0:9d:08:f4:44:07:ad:ab:b0:fa:
fd:0c:a3:6a:3f:08:33:fc:02:c9:57:9b:7a:f9:b4:
b8:96:fe:2d:ab:a6:97:db:86:f7:df:9c:b4:88:3b:
d3:0a:14:a6:34:94:af:90:fd:8e:4a:ff:70:0c:06:
41:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:3C:53:1B:03:FD:59:4A:D8:9E:88:AA:45:95:1D:27:41:84:B0:1E
X509v3 Authority Key Identifier:
keyid:6D:23:CE:7B:0C:10:06:8F:BC:44:C0:21:94:3E:33:90:13:F2:AE:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bSPOewwQBo-8RMAhlD4zkBPyruA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/66af07-3318-4f4a-89ff-40c5ebc6f736/1/bSPOewwQBo-8RMAhlD4zkBPyruA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/66af07-3318-4f4a-89ff-40c5ebc6f736/1/bSPOewwQBo-8RMAhlD4zkBPyruA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:c4:21:04:1b:8a:22:9f:34:7c:58:fd:7b:5e:42:3f:78:33:
24:db:5c:7c:0e:eb:b0:7d:44:ef:5f:29:69:21:2b:d1:35:2f:
25:fa:15:3e:06:b3:6d:45:08:7f:87:22:fe:e1:a4:88:3e:38:
ff:e1:d6:6a:e4:1b:11:45:0b:ad:9d:fb:ea:14:1b:9b:3f:92:
d7:68:95:4a:b5:30:3d:d3:83:49:8c:2a:36:58:46:db:ac:cd:
7b:c5:c4:d8:30:82:26:7e:61:b1:e6:44:be:01:bb:0f:51:30:
42:90:6f:38:ee:a8:91:3e:5c:c1:dd:fb:00:81:35:5c:a1:c9:
c4:f7:63:4e:85:a4:9d:50:a2:ba:74:7f:ce:25:ab:49:3a:38:
a5:9b:d0:65:a9:ad:24:9a:1c:b9:e5:a6:0b:b4:80:08:82:54:
99:da:8a:02:42:70:66:12:07:68:e7:5e:fc:69:79:52:6b:0c:
0a:79:ad:3c:8a:a2:f6:ab:65:d3:fe:16:89:8a:35:ef:ee:af:
a9:79:6e:4a:69:64:72:72:f3:7c:f6:6f:3d:67:02:8e:4a:4c:
bf:b9:8c:47:49:02:4f:fe:e7:fb:dc:d3:4f:e6:99:fc:ff:49:
4a:80:0b:85:69:e9:05:35:4e:23:1a:9e:70:28:5e:c0:a2:b4:
3a:d3:b5:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 18:27:28 2026 by rpki-client