Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/4307d1-b608-4581-992c-753741a80e94/1/B_pUCiVDLiqk3KBXhFw1nSFIhvc.mft
File: B_pUCiVDLiqk3KBXhFw1nSFIhvc.mft (raw, json)
Hash identifier: GRImARSxMFMkiFeYlY7OEZ9BU5YsJ2v800ibhjh2m3M=
Subject key identifier: 3B:55:0D:88:A8:F9:57:43:BB:F1:9E:11:34:FC:A9:0F:93:DE:F0:7C
Authority key identifier: 07:FA:54:0A:25:43:2E:2A:A4:DC:A0:57:84:5C:35:9D:21:48:86:F7
Certificate issuer: /CN=07fa540a25432e2aa4dca057845c359d214886f7
Certificate serial: 019FAA19A0C25269D994A59B8489B8EE7CEC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B_pUCiVDLiqk3KBXhFw1nSFIhvc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/4307d1-b608-4581-992c-753741a80e94/1/B_pUCiVDLiqk3KBXhFw1nSFIhvc.mft
Manifest number: 19DC
Signing time: Tue 28 Jul 2026 19:00:34 +0000
Manifest this update: Tue 28 Jul 2026 19:00:34 +0000
Manifest next update: Wed 29 Jul 2026 19:00:34 +0000
Files and hashes: 1: B_pUCiVDLiqk3KBXhFw1nSFIhvc.crl (hash: 7AoumuwHuSYqWvJKg3dE/RFr0KwxYzDDrY7dVi3S1KY=)
2: n3ieUI2cLDKlu7-1mHlC00BGgvw.roa (hash: j3IdpiHDFCzlAJqG9D51WL/CfEe+aj4QEFw7yJEuwkE=)
3: x_aZfes3cLbw9Iat1attYpGOZAA.roa (hash: 13g6IVGM+RPq/stRgyLewUE9rj4ZFrFESny74sHay48=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/4307d1-b608-4581-992c-753741a80e94/1/B_pUCiVDLiqk3KBXhFw1nSFIhvc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/4307d1-b608-4581-992c-753741a80e94/1/B_pUCiVDLiqk3KBXhFw1nSFIhvc.mft
rsync://rpki.ripe.net/repository/DEFAULT/B_pUCiVDLiqk3KBXhFw1nSFIhvc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 19:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:19:a0:c2:52:69:d9:94:a5:9b:84:89:b8:ee:7c:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07fa540a25432e2aa4dca057845c359d214886f7
Validity
Not Before: Jul 28 19:00:34 2026 GMT
Not After : Jul 29 19:00:34 2026 GMT
Subject: CN=3b550d88a8f95743bbf19e1134fca90f93def07c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:1a:34:ec:f6:5c:eb:62:12:1c:07:94:8b:52:
bc:f2:f2:70:cd:d5:38:14:1c:a7:6a:a7:47:6c:ad:
56:35:d4:29:9e:25:76:24:e5:2a:bc:ca:4d:40:34:
b7:57:54:e4:ca:64:59:44:5d:b7:d3:8c:55:58:a5:
ca:4b:c4:1a:6a:73:a1:70:81:44:e2:de:62:b4:63:
99:3a:e7:8b:61:ea:bb:5a:bd:52:4b:73:e0:79:bd:
a0:38:90:23:6e:23:05:20:a1:f6:2a:9f:52:a4:b8:
29:2f:9b:83:00:37:29:b0:bd:c4:6f:42:86:00:53:
d3:88:16:d6:4f:3b:3f:89:14:a6:4a:da:d6:78:74:
1b:b9:9a:53:2e:85:fb:2b:84:69:bd:17:bc:0d:4a:
bc:58:35:bd:53:40:86:a1:65:7f:2d:01:c4:be:03:
a9:f0:61:22:33:13:68:1b:99:fa:57:2c:93:a4:69:
46:57:23:0d:5b:ef:44:64:ec:ef:61:a5:9b:41:00:
a0:be:10:8a:06:93:be:22:9e:ad:cd:1a:17:90:16:
23:4d:e5:24:89:78:08:9d:f0:f9:25:2d:19:29:d7:
e7:5c:af:9b:14:da:c9:b9:79:d3:23:72:9b:bd:08:
9b:91:35:7d:30:0d:cc:3a:81:53:a5:1f:30:56:3a:
7a:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:55:0D:88:A8:F9:57:43:BB:F1:9E:11:34:FC:A9:0F:93:DE:F0:7C
X509v3 Authority Key Identifier:
keyid:07:FA:54:0A:25:43:2E:2A:A4:DC:A0:57:84:5C:35:9D:21:48:86:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B_pUCiVDLiqk3KBXhFw1nSFIhvc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/4307d1-b608-4581-992c-753741a80e94/1/B_pUCiVDLiqk3KBXhFw1nSFIhvc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/4307d1-b608-4581-992c-753741a80e94/1/B_pUCiVDLiqk3KBXhFw1nSFIhvc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:0a:82:76:79:57:a1:ad:8c:2b:84:40:47:18:0a:6c:30:c2:
b7:9c:2a:24:7f:b6:65:b1:48:d4:ce:56:7a:3d:35:63:0b:5b:
01:75:af:2c:d4:ca:c1:d5:fc:1b:de:0a:bc:ea:21:e2:b1:9e:
62:bd:0e:26:b5:5a:88:a6:17:5a:ae:c6:0a:92:e0:bb:ac:ea:
8e:6e:13:ee:43:ee:58:03:ce:35:8c:01:db:0c:99:7e:29:ac:
31:0b:22:03:74:bd:83:ca:4d:74:58:87:42:8b:a5:3a:cc:41:
5b:e1:39:d5:ca:da:b1:fe:20:a0:86:d9:75:98:ac:fa:5d:5d:
f5:1a:4f:6f:5c:2a:2c:87:a8:1b:cc:1b:e7:0a:be:03:2b:4b:
76:b3:58:8e:d4:13:35:84:12:38:a8:d8:5f:0d:31:06:0f:1b:
56:19:fd:33:5b:87:bc:d5:37:ae:c4:fe:db:eb:79:51:c7:72:
82:c7:9e:52:4a:66:d7:70:31:8d:fc:49:c9:32:80:82:13:53:
49:40:c1:5b:e0:16:5f:e5:06:04:eb:d9:73:8d:2e:a3:9b:f9:
0a:89:7d:67:f6:18:ea:14:d4:6f:b6:62:f1:4c:2b:49:e6:c3:
6f:13:5e:9e:a1:cf:f1:d0:29:ca:77:02:fd:67:96:26:9f:68:
97:5d:88:0a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+qGaDCUmnZlKWbhIm47nzsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA3ZmE1NDBhMjU0MzJlMmFhNGRjYTA1Nzg0NWMzNTlkMjE0
ODg2ZjcwHhcNMjYwNzI4MTkwMDM0WhcNMjYwNzI5MTkwMDM0WjAzMTEwLwYDVQQD
EygzYjU1MGQ4OGE4Zjk1NzQzYmJmMTllMTEzNGZjYTkwZjkzZGVmMDdjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3ho07PZc62ISHAeUi1K88vJwzdU4
FBynaqdHbK1WNdQpniV2JOUqvMpNQDS3V1TkymRZRF2304xVWKXKS8QaanOhcIFE
4t5itGOZOueLYeq7Wr1SS3Pgeb2gOJAjbiMFIKH2Kp9SpLgpL5uDADcpsL3Eb0KG
AFPTiBbWTzs/iRSmStrWeHQbuZpTLoX7K4RpvRe8DUq8WDW9U0CGoWV/LQHEvgOp
8GEiMxNoG5n6VyyTpGlGVyMNW+9EZOzvYaWbQQCgvhCKBpO+Ip6tzRoXkBYjTeUk
iXgInfD5JS0ZKdfnXK+bFNrJuXnTI3KbvQibkTV9MA3MOoFTpR8wVjp6JQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDtVDYio+VdDu/GeETT8qQ+T3vB8MB8GA1UdIwQY
MBaAFAf6VAolQy4qpNygV4RcNZ0hSIb3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQl9wVUNpVkRMaXFrM0tCWGhGdzFuU0ZJaHZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC80MzA3ZDEtYjYwOC00NTgxLTk5MmMt
NzUzNzQxYTgwZTk0LzEvQl9wVUNpVkRMaXFrM0tCWGhGdzFuU0ZJaHZjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZC80MzA3ZDEtYjYwOC00NTgxLTk5MmMtNzUzNzQxYTgwZTk0
LzEvQl9wVUNpVkRMaXFrM0tCWGhGdzFuU0ZJaHZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAQqCdnlX
oa2MK4RARxgKbDDCt5wqJH+2ZbFI1M5Wej01YwtbAXWvLNTKwdX8G94KvOoh4rGe
Yr0OJrVaiKYXWq7GCpLgu6zqjm4T7kPuWAPONYwB2wyZfimsMQsiA3S9g8pNdFiH
QoulOsxBW+E51crasf4goIbZdZis+l1d9RpPb1wqLIeoG8wb5wq+AytLdrNYjtQT
NYQSOKjYXw0xBg8bVhn9M1uHvNU3rsT+2+t5UcdygseeUkpm13AxjfxJyTKAghNT
SUDBW+AWX+UGBOvZc40uo5v5Col9Z/YY6hTUb7Zi8UwrSebDbxNenqHP8dApyncC
/WeWJp9ol12ICg==
-----END CERTIFICATE-----
Generated at Wed Jul 29 04:55:38 2026 by rpki-client