Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/b0c875-24e1-444d-b01d-5408f8d9dfb1/1/bP89iZ4m_IT7Q3n7Ml8XS1B1zg0.mft
File: bP89iZ4m_IT7Q3n7Ml8XS1B1zg0.mft (raw, json)
Hash identifier: TYKY5nd2GmFCrRxSBw6HV8uAGPaoEgQonnktnFWrRhc=
Subject key identifier: 21:A7:4A:4C:89:C9:E5:F8:1E:49:9E:C9:35:2D:BF:F3:1B:E2:56:30
Authority key identifier: 6C:FF:3D:89:9E:26:FC:84:FB:43:79:FB:32:5F:17:4B:50:75:CE:0D
Certificate issuer: /CN=6cff3d899e26fc84fb4379fb325f174b5075ce0d
Certificate serial: 019FAA1A117C0B7910C01FB9D82EC32CF420
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bP89iZ4m_IT7Q3n7Ml8XS1B1zg0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/b0c875-24e1-444d-b01d-5408f8d9dfb1/1/bP89iZ4m_IT7Q3n7Ml8XS1B1zg0.mft
Manifest number: 19D4
Signing time: Tue 28 Jul 2026 19:01:02 +0000
Manifest this update: Tue 28 Jul 2026 19:01:02 +0000
Manifest next update: Wed 29 Jul 2026 19:01:02 +0000
Files and hashes: 1: 8GCiWcx8mqq89-eKSSRHyEp78Jk.roa (hash: 1VoDgs3kjOrw6G1rdHG1fmbKleZRoSt+eF4wHzGq/bs=)
2: CE438SQN80x5iPZkUW29526BgDA.asa (hash: K9IH+d5x5/jcdlcwMyd5/VZgpKUM+MzffZkVWLGjIE4=)
3: bP89iZ4m_IT7Q3n7Ml8XS1B1zg0.crl (hash: ESWlYo/ojQF/YBvzi0SR01EQsHBssPcJjKMfQ1gFn7Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/b0c875-24e1-444d-b01d-5408f8d9dfb1/1/bP89iZ4m_IT7Q3n7Ml8XS1B1zg0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/b0c875-24e1-444d-b01d-5408f8d9dfb1/1/bP89iZ4m_IT7Q3n7Ml8XS1B1zg0.mft
rsync://rpki.ripe.net/repository/DEFAULT/bP89iZ4m_IT7Q3n7Ml8XS1B1zg0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 19:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:1a:11:7c:0b:79:10:c0:1f:b9:d8:2e:c3:2c:f4:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6cff3d899e26fc84fb4379fb325f174b5075ce0d
Validity
Not Before: Jul 28 19:01:02 2026 GMT
Not After : Jul 29 19:01:02 2026 GMT
Subject: CN=21a74a4c89c9e5f81e499ec9352dbff31be25630
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:01:27:fe:42:83:7a:cc:a0:85:d0:bc:e2:48:
31:2d:1f:ea:01:09:3e:7f:29:ca:c5:d3:51:bd:6c:
0e:5a:33:31:f9:0d:0e:86:39:cb:f8:19:d3:aa:4d:
c1:20:7f:cb:fd:00:2a:69:c0:2b:4a:86:63:c9:ba:
5c:95:78:30:3a:4c:16:4d:3a:d5:4d:23:14:62:61:
c9:e9:a5:12:9f:36:87:36:b9:72:15:09:c7:09:8f:
7d:d6:6f:dc:9d:ca:53:78:5b:d4:4e:bc:9b:a0:da:
8a:7b:27:12:51:da:34:af:59:d8:d9:29:a3:05:90:
b2:67:df:85:da:ac:27:ab:80:f2:ac:f0:b7:65:80:
e6:c3:af:81:17:5a:a6:5f:8a:e7:15:19:68:25:b7:
33:dc:90:14:5d:7e:55:6d:f4:0b:61:75:5f:50:96:
51:4a:70:7c:8b:27:dd:e6:d5:a0:22:07:ce:fd:26:
9f:b9:a1:f5:5d:fd:e4:61:f7:9e:1b:26:94:81:12:
b3:7a:3d:55:1b:9b:45:70:f5:be:3f:54:35:4b:2e:
0a:ab:f4:3a:1a:44:49:3d:99:bc:62:78:b6:c2:c5:
b5:de:e3:aa:02:76:9b:ed:f1:a8:97:ee:a4:d5:ad:
a4:c1:2f:c0:d2:d0:1c:1e:b2:d3:62:5f:f5:29:da:
7b:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:A7:4A:4C:89:C9:E5:F8:1E:49:9E:C9:35:2D:BF:F3:1B:E2:56:30
X509v3 Authority Key Identifier:
keyid:6C:FF:3D:89:9E:26:FC:84:FB:43:79:FB:32:5F:17:4B:50:75:CE:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bP89iZ4m_IT7Q3n7Ml8XS1B1zg0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/b0c875-24e1-444d-b01d-5408f8d9dfb1/1/bP89iZ4m_IT7Q3n7Ml8XS1B1zg0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/b0c875-24e1-444d-b01d-5408f8d9dfb1/1/bP89iZ4m_IT7Q3n7Ml8XS1B1zg0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:9a:b7:3a:e4:17:c6:73:2e:cc:a9:45:2e:67:93:a9:d7:7f:
c2:18:73:bb:24:fc:f5:2a:90:c5:d3:66:dc:ed:37:55:44:01:
27:8a:be:75:f0:e5:7d:df:9f:0b:2a:4f:c1:5a:bc:b8:6d:6f:
26:bc:83:ce:df:7f:cf:18:3f:97:bd:f0:ef:30:d1:89:12:76:
c2:3b:07:b0:18:29:ae:4d:55:a9:9b:69:00:92:eb:ea:fc:93:
b7:a8:42:53:74:42:94:da:dd:41:81:22:d2:eb:dc:f3:e9:a3:
72:ae:47:ed:02:7e:95:17:1a:fa:aa:4b:bb:63:e1:b0:fb:b5:
3b:1b:d8:f6:b0:1f:8a:ab:e9:26:be:6b:52:5a:30:20:bc:4e:
a6:12:dc:c5:d3:79:e1:98:4a:61:34:11:0e:2f:c7:42:04:26:
f7:97:d3:f3:10:62:2a:15:ef:20:4e:56:12:58:68:5d:80:72:
62:ed:2a:d5:c3:80:02:e9:69:e9:bf:09:73:cc:d7:13:36:88:
f6:28:dc:06:5a:db:67:b9:53:f7:5c:6a:ce:4d:6d:a2:c8:f5:
16:87:4e:5f:d4:f4:88:a9:28:0f:cd:91:76:9e:c4:5e:33:34:
85:28:22:03:3a:b5:4c:1d:91:d8:15:5f:6a:77:28:ae:80:43:
95:eb:1a:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:42:00 2026 by rpki-client