Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/5eb14c-f03b-48e8-ae3f-88afbd4a3dd2/1/BpSFf1Ib4h4SZzna13O05qGKxps.mft
File: BpSFf1Ib4h4SZzna13O05qGKxps.mft (raw, json)
Hash identifier: fPpn1v9W23Hf57EAqJEuffXuV+d3cKJ1NDCwIDTLEIw=
Subject key identifier: 67:BB:5D:23:73:83:0B:E5:95:28:62:13:B2:6E:71:8E:27:97:58:EF
Authority key identifier: 06:94:85:7F:52:1B:E2:1E:12:67:39:DA:D7:73:B4:E6:A1:8A:C6:9B
Certificate issuer: /CN=0694857f521be21e126739dad773b4e6a18ac69b
Certificate serial: 019FA82BAFB1D41379B9F830F9CAD0E5A119
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BpSFf1Ib4h4SZzna13O05qGKxps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/5eb14c-f03b-48e8-ae3f-88afbd4a3dd2/1/BpSFf1Ib4h4SZzna13O05qGKxps.mft
Manifest number: 0D12
Signing time: Tue 28 Jul 2026 10:01:02 +0000
Manifest this update: Tue 28 Jul 2026 10:01:02 +0000
Manifest next update: Wed 29 Jul 2026 10:01:02 +0000
Files and hashes: 1: BpSFf1Ib4h4SZzna13O05qGKxps.crl (hash: zuv3EtbXRymq3p5SXl4z14Bo2tsEuAPAhi131K0OP5o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/5eb14c-f03b-48e8-ae3f-88afbd4a3dd2/1/BpSFf1Ib4h4SZzna13O05qGKxps.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/5eb14c-f03b-48e8-ae3f-88afbd4a3dd2/1/BpSFf1Ib4h4SZzna13O05qGKxps.mft
rsync://rpki.ripe.net/repository/DEFAULT/BpSFf1Ib4h4SZzna13O05qGKxps.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 10:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:2b:af:b1:d4:13:79:b9:f8:30:f9:ca:d0:e5:a1:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0694857f521be21e126739dad773b4e6a18ac69b
Validity
Not Before: Jul 28 10:01:02 2026 GMT
Not After : Jul 29 10:01:02 2026 GMT
Subject: CN=67bb5d2373830be595286213b26e718e279758ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:9d:12:ae:d3:73:79:b9:36:13:23:8c:cb:86:
5c:0c:f6:d6:26:c7:41:e1:6e:e4:e2:a8:e6:35:31:
3b:6b:71:93:77:83:f7:57:62:bb:c8:c5:1a:87:db:
cd:8b:c3:3c:6f:24:24:b7:14:81:f4:a0:ec:a0:e0:
dc:d2:16:ca:20:f0:8b:02:ff:52:a1:e5:ed:df:96:
e5:f3:cd:67:b4:4b:d8:e9:25:5e:09:40:51:1b:a8:
1b:b4:54:8f:48:2a:2a:2d:3d:5f:47:f0:67:37:a6:
e4:51:bc:3d:f3:f0:07:91:9e:02:bb:d4:5e:ab:07:
6a:dc:17:45:af:af:71:b9:1f:11:e2:14:74:3f:24:
f5:9c:6b:85:4c:d6:f0:d8:b5:25:ec:94:89:0d:a1:
1d:a5:98:3f:5c:03:ba:db:1c:43:2c:42:fc:20:03:
5b:7e:5c:5c:c8:31:08:a3:97:46:b1:80:60:aa:dc:
5b:4e:bf:3c:df:8c:20:c7:b3:64:11:13:36:3e:db:
ce:49:d1:1d:f3:b3:20:65:7d:7f:54:a8:0c:db:b3:
f1:ee:99:c0:bd:06:77:8e:f7:b2:1b:15:cb:88:0e:
70:1e:13:95:56:74:4d:05:a8:b3:1a:c7:c3:81:81:
e5:e1:f9:10:56:10:21:25:2b:70:4c:d3:01:af:d1:
d8:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:BB:5D:23:73:83:0B:E5:95:28:62:13:B2:6E:71:8E:27:97:58:EF
X509v3 Authority Key Identifier:
keyid:06:94:85:7F:52:1B:E2:1E:12:67:39:DA:D7:73:B4:E6:A1:8A:C6:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BpSFf1Ib4h4SZzna13O05qGKxps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/5eb14c-f03b-48e8-ae3f-88afbd4a3dd2/1/BpSFf1Ib4h4SZzna13O05qGKxps.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/5eb14c-f03b-48e8-ae3f-88afbd4a3dd2/1/BpSFf1Ib4h4SZzna13O05qGKxps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:39:ea:5b:17:5e:17:ef:64:7a:00:67:b0:55:aa:7b:d9:80:
bb:99:e0:22:a1:4c:6a:39:a8:df:af:60:8e:48:81:a9:b6:e5:
f3:56:9c:ec:c5:10:d3:80:f9:59:c2:5c:da:09:44:38:79:70:
ad:99:82:4b:04:17:d9:42:43:b5:16:2e:fc:e7:35:59:bd:aa:
de:f8:9b:74:ff:c0:29:a4:87:54:b3:ac:34:12:5d:c5:fb:1e:
e3:35:d5:69:d5:e7:94:3f:59:a3:7f:22:22:bb:f7:e9:03:ed:
cb:d2:1c:b1:78:6c:b6:d8:9a:fb:8d:2c:9d:6b:96:c5:1a:2c:
b7:a3:c1:2f:32:38:6d:cd:92:e1:6b:5e:95:09:0e:69:ea:1f:
01:6f:1b:89:aa:cf:74:46:19:70:43:23:08:df:35:cd:61:fc:
94:a6:1c:66:86:d0:3b:76:5f:2c:73:ce:ba:16:b1:05:4b:65:
9a:9b:fa:17:a5:2b:25:46:05:b3:31:4f:09:87:6e:52:89:f9:
05:ea:e4:8d:f5:4f:37:5c:34:c0:fa:4e:38:02:04:9e:ed:6d:
42:59:14:5d:92:33:a0:6c:6e:db:93:68:06:25:b3:2b:45:ae:
1b:20:19:8a:d7:29:d6:eb:b2:13:17:e0:87:ce:a4:32:e7:c7:
55:93:cf:a6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+oK6+x1BN5ufgw+crQ5aEZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA2OTQ4NTdmNTIxYmUyMWUxMjY3MzlkYWQ3NzNiNGU2YTE4
YWM2OWIwHhcNMjYwNzI4MTAwMTAyWhcNMjYwNzI5MTAwMTAyWjAzMTEwLwYDVQQD
Eyg2N2JiNWQyMzczODMwYmU1OTUyODYyMTNiMjZlNzE4ZTI3OTc1OGVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArp0SrtNzebk2EyOMy4ZcDPbWJsdB
4W7k4qjmNTE7a3GTd4P3V2K7yMUah9vNi8M8byQktxSB9KDsoODc0hbKIPCLAv9S
oeXt35bl881ntEvY6SVeCUBRG6gbtFSPSCoqLT1fR/BnN6bkUbw98/AHkZ4Cu9Re
qwdq3BdFr69xuR8R4hR0PyT1nGuFTNbw2LUl7JSJDaEdpZg/XAO62xxDLEL8IANb
flxcyDEIo5dGsYBgqtxbTr8834wgx7NkERM2PtvOSdEd87MgZX1/VKgM27Px7pnA
vQZ3jveyGxXLiA5wHhOVVnRNBaizGsfDgYHl4fkQVhAhJStwTNMBr9HYuwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGe7XSNzgwvllShiE7JucY4nl1jvMB8GA1UdIwQY
MBaAFAaUhX9SG+IeEmc52tdztOahisabMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQnBTRmYxSWI0aDRTWnpuYTEzTzA1cUdLeHBzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy81ZWIxNGMtZjAzYi00OGU4LWFlM2Yt
ODhhZmJkNGEzZGQyLzEvQnBTRmYxSWI0aDRTWnpuYTEzTzA1cUdLeHBzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMy81ZWIxNGMtZjAzYi00OGU4LWFlM2YtODhhZmJkNGEzZGQy
LzEvQnBTRmYxSWI0aDRTWnpuYTEzTzA1cUdLeHBzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFjnqWxde
F+9kegBnsFWqe9mAu5ngIqFMajmo369gjkiBqbbl81ac7MUQ04D5WcJc2glEOHlw
rZmCSwQX2UJDtRYu/Oc1Wb2q3vibdP/AKaSHVLOsNBJdxfse4zXVadXnlD9Zo38i
Irv36QPty9IcsXhsttia+40snWuWxRost6PBLzI4bc2S4WtelQkOaeofAW8biarP
dEYZcEMjCN81zWH8lKYcZobQO3ZfLHPOuhaxBUtlmpv6F6UrJUYFszFPCYduUon5
BerkjfVPN1w0wPpOOAIEnu1tQlkUXZIzoGxu25NoBiWzK0WuGyAZitcp1uuyExfg
h86kMufHVZPPpg==
-----END CERTIFICATE-----
Generated at Tue Jul 28 19:52:23 2026 by rpki-client