Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/11a9ba-9d0e-4c44-ada4-4be127fa3118/1/bwyaERer1S7IA2tPN4ZE-nekuKc.mft
File: bwyaERer1S7IA2tPN4ZE-nekuKc.mft (raw, json)
Hash identifier: so0ax5PoW5i9GqwUYq+QWX1JigzYcE1mHEnZ0VFXq80=
Subject key identifier: 12:DB:6F:D5:F1:71:05:DB:C4:1C:64:1E:74:AA:AE:69:9D:20:C3:A0
Authority key identifier: 6F:0C:9A:11:17:AB:D5:2E:C8:03:6B:4F:37:86:44:FA:77:A4:B8:A7
Certificate issuer: /CN=6f0c9a1117abd52ec8036b4f378644fa77a4b8a7
Certificate serial: 019FAD5258D4739EFA5B935AD2D0958290E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bwyaERer1S7IA2tPN4ZE-nekuKc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/11a9ba-9d0e-4c44-ada4-4be127fa3118/1/bwyaERer1S7IA2tPN4ZE-nekuKc.mft
Manifest number: 0ABC
Signing time: Wed 29 Jul 2026 10:01:22 +0000
Manifest this update: Wed 29 Jul 2026 10:01:22 +0000
Manifest next update: Thu 30 Jul 2026 10:01:22 +0000
Files and hashes: 1: IfGCpj85Q4o-UGyQ31NliYn-gNM.roa (hash: x5pzaYdpKRd4mBuwlpRlCZ/BZdgSlAglcVpLNOFR9GU=)
2: bwyaERer1S7IA2tPN4ZE-nekuKc.crl (hash: /rXKmPOe6oHuPWLa9zGI02cpe7yz0EYNZ5i+IFmiyE4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/11a9ba-9d0e-4c44-ada4-4be127fa3118/1/bwyaERer1S7IA2tPN4ZE-nekuKc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/11a9ba-9d0e-4c44-ada4-4be127fa3118/1/bwyaERer1S7IA2tPN4ZE-nekuKc.mft
rsync://rpki.ripe.net/repository/DEFAULT/bwyaERer1S7IA2tPN4ZE-nekuKc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ad:52:58:d4:73:9e:fa:5b:93:5a:d2:d0:95:82:90:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f0c9a1117abd52ec8036b4f378644fa77a4b8a7
Validity
Not Before: Jul 29 10:01:22 2026 GMT
Not After : Jul 30 10:01:22 2026 GMT
Subject: CN=12db6fd5f17105dbc41c641e74aaae699d20c3a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:cb:ca:34:7f:3c:7d:12:59:9e:50:06:50:b9:
0b:04:ec:fd:9b:59:0a:72:f0:59:05:57:8f:11:58:
02:78:ef:b0:0d:91:1a:65:79:3c:29:7b:1f:0c:2d:
e4:31:6d:f3:7f:fc:f4:c9:25:05:6f:61:6e:f9:c6:
28:76:a2:68:14:ba:ec:92:57:7d:0e:a6:59:60:7d:
8a:62:9f:53:62:c3:b7:b5:34:98:15:f1:be:eb:b3:
31:ac:4a:70:93:55:e8:d6:77:57:f1:bd:2a:a9:a1:
f4:95:33:4a:9e:87:59:39:79:5f:ed:ee:f1:3b:7b:
f3:26:a7:3b:44:6a:33:7b:55:58:63:28:22:fb:75:
17:d3:ea:a0:68:79:de:7f:57:d9:e2:ad:e7:32:9b:
89:9b:b6:03:62:8e:4e:cb:d3:19:e3:c5:0f:45:d2:
cf:16:f6:49:c5:43:dd:de:fb:0a:45:55:62:c7:25:
78:d3:8f:a3:02:1a:6a:11:a4:39:d0:80:b8:0f:0c:
ff:50:0f:8f:c1:4c:13:76:50:8d:17:0e:46:87:1c:
33:83:f2:e4:87:f7:a3:50:05:5a:b9:17:14:25:58:
30:a8:72:7b:ef:7e:4d:bb:1c:fd:79:0a:68:c3:47:
2b:37:b4:fa:04:b6:5b:61:d5:0e:f2:fd:a4:08:15:
c4:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:DB:6F:D5:F1:71:05:DB:C4:1C:64:1E:74:AA:AE:69:9D:20:C3:A0
X509v3 Authority Key Identifier:
keyid:6F:0C:9A:11:17:AB:D5:2E:C8:03:6B:4F:37:86:44:FA:77:A4:B8:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bwyaERer1S7IA2tPN4ZE-nekuKc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/11a9ba-9d0e-4c44-ada4-4be127fa3118/1/bwyaERer1S7IA2tPN4ZE-nekuKc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/11a9ba-9d0e-4c44-ada4-4be127fa3118/1/bwyaERer1S7IA2tPN4ZE-nekuKc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:bc:6a:be:89:73:f4:0c:7e:a5:dd:07:4b:ad:c5:d6:cf:bc:
d3:00:f5:03:54:62:68:41:b8:4d:26:49:94:f0:17:60:f0:8b:
bc:76:6b:25:9e:05:bc:88:45:73:a9:e8:32:a3:36:a2:75:4f:
d1:5b:b0:bf:28:d1:18:09:04:b8:72:1a:53:5e:9f:57:5b:d1:
64:12:6a:90:0d:1a:6f:f9:df:d2:af:df:e7:bb:af:63:e7:cc:
53:8c:fa:e5:e8:f4:4a:d1:1e:d6:01:19:e9:c7:ad:86:8f:0a:
e9:ba:03:4c:73:26:98:33:3c:21:18:ab:c4:90:da:b2:9e:ff:
21:7f:a9:f0:55:4d:d8:0d:71:87:04:d1:64:96:f1:4e:b5:50:
1b:da:dc:29:59:3e:52:14:24:b5:99:db:15:0a:98:8e:b8:c9:
c2:80:48:09:a9:71:a5:86:ab:67:b9:0b:ee:bc:24:b7:07:08:
40:a5:67:b4:83:ac:8d:7b:e6:08:11:41:43:36:1e:c9:92:87:
73:e7:23:c1:a0:6c:32:b3:d6:cb:8e:86:18:04:7d:17:48:59:
04:cf:12:2e:28:4e:e9:ef:7b:6e:70:ac:0b:bc:f6:ec:e1:57:
c0:2e:75:a4:92:bb:8e:ae:c1:b3:bc:39:8f:79:83:74:54:26:
5f:e2:cf:79
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+tUljUc576W5Na0tCVgpDgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmMGM5YTExMTdhYmQ1MmVjODAzNmI0ZjM3ODY0NGZhNzdh
NGI4YTcwHhcNMjYwNzI5MTAwMTIyWhcNMjYwNzMwMTAwMTIyWjAzMTEwLwYDVQQD
EygxMmRiNmZkNWYxNzEwNWRiYzQxYzY0MWU3NGFhYWU2OTlkMjBjM2EwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvsvKNH88fRJZnlAGULkLBOz9m1kK
cvBZBVePEVgCeO+wDZEaZXk8KXsfDC3kMW3zf/z0ySUFb2Fu+cYodqJoFLrskld9
DqZZYH2KYp9TYsO3tTSYFfG+67MxrEpwk1Xo1ndX8b0qqaH0lTNKnodZOXlf7e7x
O3vzJqc7RGoze1VYYygi+3UX0+qgaHnef1fZ4q3nMpuJm7YDYo5Oy9MZ48UPRdLP
FvZJxUPd3vsKRVVixyV404+jAhpqEaQ50IC4Dwz/UA+PwUwTdlCNFw5Ghxwzg/Lk
h/ejUAVauRcUJVgwqHJ7735Nuxz9eQpow0crN7T6BLZbYdUO8v2kCBXElwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBLbb9XxcQXbxBxkHnSqrmmdIMOgMB8GA1UdIwQY
MBaAFG8MmhEXq9UuyANrTzeGRPp3pLinMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYnd5YUVSZXIxUzdJQTJ0UE40WkUtbmVrdUtjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS8xMWE5YmEtOWQwZS00YzQ0LWFkYTQt
NGJlMTI3ZmEzMTE4LzEvYnd5YUVSZXIxUzdJQTJ0UE40WkUtbmVrdUtjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZS8xMWE5YmEtOWQwZS00YzQ0LWFkYTQtNGJlMTI3ZmEzMTE4
LzEvYnd5YUVSZXIxUzdJQTJ0UE40WkUtbmVrdUtjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa7xqvolz
9Ax+pd0HS63F1s+80wD1A1RiaEG4TSZJlPAXYPCLvHZrJZ4FvIhFc6noMqM2onVP
0VuwvyjRGAkEuHIaU16fV1vRZBJqkA0ab/nf0q/f57uvY+fMU4z65ej0StEe1gEZ
6cetho8K6boDTHMmmDM8IRirxJDasp7/IX+p8FVN2A1xhwTRZJbxTrVQG9rcKVk+
UhQktZnbFQqYjrjJwoBICalxpYarZ7kL7rwktwcIQKVntIOsjXvmCBFBQzYeyZKH
c+cjwaBsMrPWy46GGAR9F0hZBM8SLihO6e97bnCsC7z27OFXwC51pJK7jq7Bs7w5
j3mDdFQmX+LPeQ==
-----END CERTIFICATE-----
Generated at Wed Jul 29 14:54:34 2026 by rpki-client