Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/b623a9-f4e1-4ec2-be4d-9b559529ad16/1/bQA8L-ZX7E5UOARDDEuK0MLwWPo.mft
File: bQA8L-ZX7E5UOARDDEuK0MLwWPo.mft (raw, json)
Hash identifier: 4lPU0hSXg3uhmMIBv38y1xer1nEAinZFPzzhKYMv9+c=
Subject key identifier: 99:52:5A:C1:9D:AF:5D:BD:96:AF:F6:73:3C:F0:AD:7E:FC:30:FA:7C
Authority key identifier: 6D:00:3C:2F:E6:57:EC:4E:54:38:04:43:0C:4B:8A:D0:C2:F0:58:FA
Certificate issuer: /CN=6d003c2fe657ec4e543804430c4b8ad0c2f058fa
Certificate serial: 019FAC75B8E7FD04A50DD6AD1511F23DA485
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bQA8L-ZX7E5UOARDDEuK0MLwWPo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/b623a9-f4e1-4ec2-be4d-9b559529ad16/1/bQA8L-ZX7E5UOARDDEuK0MLwWPo.mft
Manifest number: 4E
Signing time: Wed 29 Jul 2026 06:00:23 +0000
Manifest this update: Wed 29 Jul 2026 06:00:23 +0000
Manifest next update: Thu 30 Jul 2026 06:00:23 +0000
Files and hashes: 1: bQA8L-ZX7E5UOARDDEuK0MLwWPo.crl (hash: IH1RzTqDEhdpAow97m6eRLBYo6vYE5p1FbcZ7za7U2Y=)
2: plAMGVXNXWtFejbG7iio91PMiaw.roa (hash: 58FHfUkq55AqJ4HX7rCOQcZBxJ2v0NdBhojmOIwPxJs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/b623a9-f4e1-4ec2-be4d-9b559529ad16/1/bQA8L-ZX7E5UOARDDEuK0MLwWPo.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/b623a9-f4e1-4ec2-be4d-9b559529ad16/1/bQA8L-ZX7E5UOARDDEuK0MLwWPo.mft
rsync://rpki.ripe.net/repository/DEFAULT/bQA8L-ZX7E5UOARDDEuK0MLwWPo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 06:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:75:b8:e7:fd:04:a5:0d:d6:ad:15:11:f2:3d:a4:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d003c2fe657ec4e543804430c4b8ad0c2f058fa
Validity
Not Before: Jul 29 06:00:23 2026 GMT
Not After : Jul 30 06:00:23 2026 GMT
Subject: CN=99525ac19daf5dbd96aff6733cf0ad7efc30fa7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:9b:53:a8:69:5b:62:c2:d5:54:53:91:fb:80:
57:aa:ed:d7:28:72:2d:d2:e1:b0:bf:04:88:83:02:
94:e6:90:11:5b:d9:fc:f7:9c:e0:76:0f:8f:a2:2c:
37:f2:71:7a:5d:4a:6b:fd:08:64:d2:46:60:8e:10:
20:ee:da:72:72:97:cb:df:e6:9e:2a:4a:12:bf:38:
80:ef:c0:33:14:55:e0:b9:c4:ec:f9:59:9f:83:74:
6e:ed:73:c0:0a:90:e5:0e:ea:af:93:6d:33:b6:bc:
11:7c:7e:fb:75:90:ae:89:04:49:48:c0:97:fa:92:
cd:f2:28:32:93:63:e6:bc:24:d4:89:1d:cf:99:01:
e3:59:d0:3a:38:2f:57:67:9b:85:2a:18:d3:d9:92:
56:a9:b6:eb:c5:f2:6b:e4:49:3e:bb:72:97:b2:76:
89:1e:94:99:64:bb:09:7f:43:29:a8:30:f1:ca:95:
ef:71:74:35:b0:fe:cb:77:29:73:bd:b4:08:f1:e0:
b0:de:65:73:49:3a:8a:da:06:da:7d:f5:c8:1e:03:
6d:02:41:c6:76:f0:bb:25:5e:1d:b6:53:fb:ad:19:
c5:c7:65:34:c2:b6:a4:97:f0:8a:4b:28:59:92:ed:
72:6f:5d:fe:f4:95:62:6b:f2:3f:2a:0f:e2:b5:b9:
8c:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:52:5A:C1:9D:AF:5D:BD:96:AF:F6:73:3C:F0:AD:7E:FC:30:FA:7C
X509v3 Authority Key Identifier:
keyid:6D:00:3C:2F:E6:57:EC:4E:54:38:04:43:0C:4B:8A:D0:C2:F0:58:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bQA8L-ZX7E5UOARDDEuK0MLwWPo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/b623a9-f4e1-4ec2-be4d-9b559529ad16/1/bQA8L-ZX7E5UOARDDEuK0MLwWPo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/b623a9-f4e1-4ec2-be4d-9b559529ad16/1/bQA8L-ZX7E5UOARDDEuK0MLwWPo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:6f:09:fe:6c:22:c4:e6:07:a5:98:e7:4b:7e:fa:9c:c6:fd:
c1:a9:1b:7f:b9:fe:9d:b1:f5:5d:64:31:5d:19:7d:82:79:e2:
22:2c:1b:a8:d4:56:91:c1:ad:57:5e:62:d6:df:67:b6:43:6e:
64:38:27:89:3c:e3:ae:ba:df:f4:ba:41:26:cc:31:53:e0:55:
4b:6c:39:bc:b6:95:88:8c:68:91:8c:de:a9:64:b6:f6:06:89:
89:05:6a:a9:bd:df:c2:20:bf:43:84:ef:6c:4d:2e:0b:03:26:
81:07:7c:97:05:f5:8e:e7:3f:42:08:81:73:6b:02:2d:cc:a7:
ff:ae:7e:ed:ae:c8:b4:a3:e0:dc:36:90:ac:61:87:c7:f8:23:
ac:39:a8:82:36:1f:c1:13:eb:e2:48:50:d8:92:dc:7c:7e:f1:
ed:57:d4:04:41:9d:a7:66:08:40:b6:b3:0f:32:19:28:ad:f0:
a0:2e:ee:dd:f9:b3:72:db:24:a5:05:89:95:69:b7:f2:91:2e:
ad:7f:54:df:ab:29:24:d1:b2:83:4f:87:32:52:b7:4e:c3:67:
71:37:ee:ec:86:4a:68:ad:e9:b9:80:44:01:b3:f5:03:b3:46:
ab:a4:7d:59:8c:e0:80:7c:2f:7a:5f:09:70:c8:b8:2f:d8:94:
22:1a:a2:a4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+sdbjn/QSlDdatFRHyPaSFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZkMDAzYzJmZTY1N2VjNGU1NDM4MDQ0MzBjNGI4YWQwYzJm
MDU4ZmEwHhcNMjYwNzI5MDYwMDIzWhcNMjYwNzMwMDYwMDIzWjAzMTEwLwYDVQQD
Eyg5OTUyNWFjMTlkYWY1ZGJkOTZhZmY2NzMzY2YwYWQ3ZWZjMzBmYTdjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoZtTqGlbYsLVVFOR+4BXqu3XKHIt
0uGwvwSIgwKU5pARW9n895zgdg+Poiw38nF6XUpr/Qhk0kZgjhAg7tpycpfL3+ae
KkoSvziA78AzFFXgucTs+Vmfg3Ru7XPACpDlDuqvk20ztrwRfH77dZCuiQRJSMCX
+pLN8igyk2PmvCTUiR3PmQHjWdA6OC9XZ5uFKhjT2ZJWqbbrxfJr5Ek+u3KXsnaJ
HpSZZLsJf0MpqDDxypXvcXQ1sP7LdylzvbQI8eCw3mVzSTqK2gbaffXIHgNtAkHG
dvC7JV4dtlP7rRnFx2U0wrakl/CKSyhZku1yb13+9JVia/I/Kg/itbmMrwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJlSWsGdr129lq/2czzwrX78MPp8MB8GA1UdIwQY
MBaAFG0APC/mV+xOVDgEQwxLitDC8Fj6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYlFBOEwtWlg3RTVVT0FSRERFdUswTUx3V1BvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC9iNjIzYTktZjRlMS00ZWMyLWJlNGQt
OWI1NTk1MjlhZDE2LzEvYlFBOEwtWlg3RTVVT0FSRERFdUswTUx3V1BvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMC9iNjIzYTktZjRlMS00ZWMyLWJlNGQtOWI1NTk1MjlhZDE2
LzEvYlFBOEwtWlg3RTVVT0FSRERFdUswTUx3V1BvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANW8J/mwi
xOYHpZjnS376nMb9wakbf7n+nbH1XWQxXRl9gnniIiwbqNRWkcGtV15i1t9ntkNu
ZDgniTzjrrrf9LpBJswxU+BVS2w5vLaViIxokYzeqWS29gaJiQVqqb3fwiC/Q4Tv
bE0uCwMmgQd8lwX1juc/QgiBc2sCLcyn/65+7a7ItKPg3DaQrGGHx/gjrDmogjYf
wRPr4khQ2JLcfH7x7VfUBEGdp2YIQLazDzIZKK3woC7u3fmzctskpQWJlWm38pEu
rX9U36spJNGyg0+HMlK3TsNncTfu7IZKaK3puYBEAbP1A7NGq6R9WYzggHwvel8J
cMi4L9iUIhqipA==
-----END CERTIFICATE-----
Generated at Wed Jul 29 10:23:53 2026 by rpki-client