Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/bd7f30-07ca-49ac-80c9-7eaff6b0f8cd/1/F1pykOwpjBtk2YYwbxsk09M2aYY.mft
File: F1pykOwpjBtk2YYwbxsk09M2aYY.mft (raw, json)
Hash identifier: LApjLtSmWHyiwmZ1W67jZXXN8QLepMJIwM1V2dTPVHY=
Subject key identifier: BF:BB:E1:6B:91:28:F4:11:3C:B1:7E:20:90:AF:94:00:1A:5F:96:1E
Authority key identifier: 17:5A:72:90:EC:29:8C:1B:64:D9:86:30:6F:1B:24:D3:D3:36:69:86
Certificate issuer: /CN=175a7290ec298c1b64d986306f1b24d3d3366986
Certificate serial: 019FA9072B8AC78E6FBDA57398A88C62B48A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F1pykOwpjBtk2YYwbxsk09M2aYY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/bd7f30-07ca-49ac-80c9-7eaff6b0f8cd/1/F1pykOwpjBtk2YYwbxsk09M2aYY.mft
Manifest number: 027A
Signing time: Tue 28 Jul 2026 14:00:47 +0000
Manifest this update: Tue 28 Jul 2026 14:00:47 +0000
Manifest next update: Wed 29 Jul 2026 14:00:47 +0000
Files and hashes: 1: F1pykOwpjBtk2YYwbxsk09M2aYY.crl (hash: rP4e9mh7C9GUcbu70S0eZhlZeUe6BYezdXDXJO4vsjs=)
2: gCCPOIqrilObRY-20jJBuOKvlg4.roa (hash: SYvt+ifw0BqFAbOybuBVVwfG7PXUsxmnVp0Phqp9hmI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/bd7f30-07ca-49ac-80c9-7eaff6b0f8cd/1/F1pykOwpjBtk2YYwbxsk09M2aYY.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/bd7f30-07ca-49ac-80c9-7eaff6b0f8cd/1/F1pykOwpjBtk2YYwbxsk09M2aYY.mft
rsync://rpki.ripe.net/repository/DEFAULT/F1pykOwpjBtk2YYwbxsk09M2aYY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:07:2b:8a:c7:8e:6f:bd:a5:73:98:a8:8c:62:b4:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=175a7290ec298c1b64d986306f1b24d3d3366986
Validity
Not Before: Jul 28 14:00:47 2026 GMT
Not After : Jul 29 14:00:47 2026 GMT
Subject: CN=bfbbe16b9128f4113cb17e2090af94001a5f961e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:99:de:54:51:65:5a:af:88:8a:54:f4:57:bf:
6a:61:5d:53:ab:2d:2b:5d:41:f0:2d:42:2b:e4:2d:
20:a7:e8:d8:b9:97:5e:82:df:66:a1:a6:73:d5:40:
a3:6a:66:c3:56:97:5c:36:13:47:c8:4f:bb:e6:d8:
04:4e:9d:b0:60:00:5a:e9:9b:b5:26:ba:c9:27:c0:
e9:8a:ec:c2:8c:3d:ca:7b:16:f3:e7:79:9b:8c:35:
33:b2:4f:56:7a:12:83:9e:54:9d:fb:1e:9b:e1:b3:
37:bf:5f:8b:01:bf:ad:d7:3a:54:d0:dd:0a:e3:64:
44:0b:63:fe:b5:19:bd:90:eb:fb:84:a7:59:33:46:
14:d4:69:86:bd:f5:1f:7c:21:b3:12:8c:42:47:c1:
fe:19:4f:88:0a:4c:23:6e:44:32:ff:04:c9:37:92:
78:c9:ae:08:1d:d5:60:94:8f:95:a0:38:e0:b5:c8:
e3:a2:d8:57:28:51:8b:8d:71:80:05:fb:75:4c:7a:
b5:46:2c:80:20:ff:44:4d:e3:03:ef:37:4f:fd:7f:
87:d3:b3:d7:4c:c1:53:50:4e:e9:62:9b:72:6c:55:
62:a6:ef:26:ae:65:28:3d:45:9b:51:11:77:18:56:
8b:76:04:57:82:39:1c:77:b1:e5:fa:ce:02:19:9c:
04:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:BB:E1:6B:91:28:F4:11:3C:B1:7E:20:90:AF:94:00:1A:5F:96:1E
X509v3 Authority Key Identifier:
keyid:17:5A:72:90:EC:29:8C:1B:64:D9:86:30:6F:1B:24:D3:D3:36:69:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F1pykOwpjBtk2YYwbxsk09M2aYY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/bd7f30-07ca-49ac-80c9-7eaff6b0f8cd/1/F1pykOwpjBtk2YYwbxsk09M2aYY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/bd7f30-07ca-49ac-80c9-7eaff6b0f8cd/1/F1pykOwpjBtk2YYwbxsk09M2aYY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:53:b3:01:8d:94:25:11:7e:c4:75:63:f2:3c:85:d0:e9:61:
d1:63:8a:c6:0b:c2:24:1a:f4:71:de:8c:af:06:ca:94:03:40:
c1:21:32:f1:1f:09:e2:9a:04:b6:6e:bd:5c:f8:79:9b:c9:df:
c0:a2:99:06:cd:0f:08:64:42:9d:7c:26:c5:48:c5:a3:c2:4d:
cd:90:3a:85:92:38:10:8d:db:5b:f3:d3:5c:8c:6b:0d:da:a6:
df:50:f4:08:b5:9c:f2:84:ec:90:e0:16:32:59:b4:c0:c5:fb:
ee:44:de:62:15:cc:40:6d:43:dd:9e:0a:a1:43:1a:76:a3:93:
62:e1:dc:52:3d:dc:e6:3a:b2:90:87:ba:fa:52:14:6c:c6:78:
d7:a5:d0:02:50:a7:74:ea:bd:bc:1c:a5:96:4d:8e:bc:dc:76:
9e:c7:c9:ca:66:b5:4c:4f:92:20:56:2d:b9:3d:51:e6:55:da:
41:7b:af:c6:b1:42:cc:62:4b:c9:6e:86:46:3d:91:bd:d0:1e:
25:f5:7d:46:e4:cd:d1:70:b9:c0:dd:44:40:17:d3:ff:cf:ef:
29:22:d6:ee:04:a7:8f:48:be:99:81:48:92:f1:71:24:fc:41:
87:31:bb:9b:c2:84:3d:17:41:8c:22:9f:49:30:3c:79:af:68:
0b:d1:b5:d7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+pByuKx45vvaVzmKiMYrSKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE3NWE3MjkwZWMyOThjMWI2NGQ5ODYzMDZmMWIyNGQzZDMz
NjY5ODYwHhcNMjYwNzI4MTQwMDQ3WhcNMjYwNzI5MTQwMDQ3WjAzMTEwLwYDVQQD
EyhiZmJiZTE2YjkxMjhmNDExM2NiMTdlMjA5MGFmOTQwMDFhNWY5NjFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq5neVFFlWq+IilT0V79qYV1Tqy0r
XUHwLUIr5C0gp+jYuZdegt9moaZz1UCjambDVpdcNhNHyE+75tgETp2wYABa6Zu1
JrrJJ8DpiuzCjD3Kexbz53mbjDUzsk9WehKDnlSd+x6b4bM3v1+LAb+t1zpU0N0K
42REC2P+tRm9kOv7hKdZM0YU1GmGvfUffCGzEoxCR8H+GU+ICkwjbkQy/wTJN5J4
ya4IHdVglI+VoDjgtcjjothXKFGLjXGABft1THq1RiyAIP9ETeMD7zdP/X+H07PX
TMFTUE7pYptybFVipu8mrmUoPUWbURF3GFaLdgRXgjkcd7Hl+s4CGZwEDQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL+74WuRKPQRPLF+IJCvlAAaX5YeMB8GA1UdIwQY
MBaAFBdacpDsKYwbZNmGMG8bJNPTNmmGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRjFweWtPd3BqQnRrMllZd2J4c2swOU0yYVlZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC9iZDdmMzAtMDdjYS00OWFjLTgwYzkt
N2VhZmY2YjBmOGNkLzEvRjFweWtPd3BqQnRrMllZd2J4c2swOU0yYVlZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC9iZDdmMzAtMDdjYS00OWFjLTgwYzktN2VhZmY2YjBmOGNk
LzEvRjFweWtPd3BqQnRrMllZd2J4c2swOU0yYVlZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF1OzAY2U
JRF+xHVj8jyF0Olh0WOKxgvCJBr0cd6MrwbKlANAwSEy8R8J4poEtm69XPh5m8nf
wKKZBs0PCGRCnXwmxUjFo8JNzZA6hZI4EI3bW/PTXIxrDdqm31D0CLWc8oTskOAW
Mlm0wMX77kTeYhXMQG1D3Z4KoUMadqOTYuHcUj3c5jqykIe6+lIUbMZ416XQAlCn
dOq9vByllk2OvNx2nsfJyma1TE+SIFYtuT1R5lXaQXuvxrFCzGJLyW6GRj2RvdAe
JfV9RuTN0XC5wN1EQBfT/8/vKSLW7gSnj0i+mYFIkvFxJPxBhzG7m8KEPRdBjCKf
STA8ea9oC9G11w==
-----END CERTIFICATE-----
Generated at Tue Jul 28 20:50:08 2026 by rpki-client