Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/848c8b-0e9c-4d6e-873e-8cf7d4493358/1/y748bZmBGBnO3dzSfkviW8DPUG8.mft
File: y748bZmBGBnO3dzSfkviW8DPUG8.mft (raw, json)
Hash identifier: 0k6wivlJAz8EYtyMMQV1x6beglkUcqO0JDdKV3dgBWg=
Subject key identifier: 50:EA:92:13:9B:8B:C0:B6:08:4C:C6:73:BD:1D:0D:B7:20:E0:92:6B
Authority key identifier: CB:BE:3C:6D:99:81:18:19:CE:DD:DC:D2:7E:4B:E2:5B:C0:CF:50:6F
Certificate issuer: /CN=cbbe3c6d99811819cedddcd27e4be25bc0cf506f
Certificate serial: 019FAC085D8C1F1ED0C50419A23F441D9EAF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y748bZmBGBnO3dzSfkviW8DPUG8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/848c8b-0e9c-4d6e-873e-8cf7d4493358/1/y748bZmBGBnO3dzSfkviW8DPUG8.mft
Manifest number: 1500
Signing time: Wed 29 Jul 2026 04:00:56 +0000
Manifest this update: Wed 29 Jul 2026 04:00:56 +0000
Manifest next update: Thu 30 Jul 2026 04:00:56 +0000
Files and hashes: 1: SRftmv9sQMTlSJPXfowLnAaGrnE.roa (hash: HYcUVT7S2MMJhQf2Ty7rezIr8XBfCmUq2EwYkkh9kE0=)
2: UdthD-mHKRSAmhucefcr8Jq7Psc.roa (hash: lVsaOqAelHfvqHNn/6/Wb6tKGvQfaZI6JG0LsDpyxOY=)
3: gqOpS-28u42YNGKEB_JVnGai9oM.roa (hash: IToAx5jrtAZ+cIDNcVkiQZZOuWe9Knt1GiJD5XkMVss=)
4: y748bZmBGBnO3dzSfkviW8DPUG8.crl (hash: hnLKSbII8INpAew/TdLYiddQq7ob2Vvrxtm7twnKw/Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/848c8b-0e9c-4d6e-873e-8cf7d4493358/1/y748bZmBGBnO3dzSfkviW8DPUG8.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/848c8b-0e9c-4d6e-873e-8cf7d4493358/1/y748bZmBGBnO3dzSfkviW8DPUG8.mft
rsync://rpki.ripe.net/repository/DEFAULT/y748bZmBGBnO3dzSfkviW8DPUG8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 04:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:08:5d:8c:1f:1e:d0:c5:04:19:a2:3f:44:1d:9e:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbbe3c6d99811819cedddcd27e4be25bc0cf506f
Validity
Not Before: Jul 29 04:00:56 2026 GMT
Not After : Jul 30 04:00:56 2026 GMT
Subject: CN=50ea92139b8bc0b6084cc673bd1d0db720e0926b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:4a:3f:79:cc:f1:36:f8:c9:11:bd:cd:60:83:
a8:f0:fe:06:e3:aa:7e:a2:05:0e:2b:33:7a:cb:dc:
f7:02:96:67:5c:6c:a1:c8:f9:ac:9d:04:37:66:fe:
fe:1d:af:74:f2:d7:a1:6e:7f:19:8d:9a:bc:dc:13:
63:ab:46:54:6e:df:8a:fe:2e:e5:ec:6c:cf:d7:93:
23:d0:49:52:2c:a0:3f:70:05:b1:8f:9c:79:6a:5c:
35:17:8f:8e:a6:b7:4d:92:52:61:af:fe:d8:1f:4c:
4a:3e:90:a5:18:84:65:31:fb:23:64:5b:ce:bd:7a:
0a:22:56:f9:25:e8:34:af:56:92:b0:df:7e:a6:5f:
bf:5a:3b:a3:cc:1c:83:16:ef:e9:91:72:57:51:aa:
0f:cc:78:41:4b:77:57:57:74:d5:71:b6:35:f4:58:
43:35:7b:51:6c:bc:20:e1:f7:41:45:b6:2c:d9:2c:
fc:ce:a3:36:04:87:ee:a6:81:ec:8d:4a:f9:61:05:
c2:19:66:86:f9:f1:c9:53:dd:29:c8:18:ae:36:00:
47:68:b4:b3:61:6b:13:7e:26:97:15:04:d4:88:1a:
9c:b5:8a:96:ad:95:dd:d5:58:a6:c2:ca:54:37:f4:
bd:b8:29:71:11:64:91:19:22:cd:bf:56:06:a1:d7:
ff:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:EA:92:13:9B:8B:C0:B6:08:4C:C6:73:BD:1D:0D:B7:20:E0:92:6B
X509v3 Authority Key Identifier:
keyid:CB:BE:3C:6D:99:81:18:19:CE:DD:DC:D2:7E:4B:E2:5B:C0:CF:50:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y748bZmBGBnO3dzSfkviW8DPUG8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/848c8b-0e9c-4d6e-873e-8cf7d4493358/1/y748bZmBGBnO3dzSfkviW8DPUG8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/848c8b-0e9c-4d6e-873e-8cf7d4493358/1/y748bZmBGBnO3dzSfkviW8DPUG8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:05:9f:b3:96:ca:38:aa:9e:f3:59:6b:76:24:d0:ab:ac:56:
8f:43:39:41:8f:3a:35:69:5d:73:3a:dc:25:ac:d1:9a:02:2e:
74:a2:f0:bf:b5:e7:ed:43:8d:3e:73:c4:35:b5:2e:4c:24:4e:
27:8a:cc:74:ca:ff:d7:20:38:1c:ec:91:9c:97:35:0c:22:85:
a7:f3:47:db:d9:6e:99:15:80:8d:a4:1b:b8:75:ca:62:87:26:
d4:8f:5b:62:ff:92:f4:43:f2:c1:e7:6b:ad:10:0b:0a:4a:4e:
15:64:1f:39:70:8f:c2:fe:82:2a:8f:49:f6:d0:b3:8a:51:ff:
00:86:87:22:c7:b4:45:92:b5:ec:83:0e:fc:6f:a9:40:9c:bb:
bc:4b:8c:ec:38:77:82:8c:0c:36:52:bb:07:28:ed:b5:19:51:
0f:ab:52:65:17:72:31:ea:9e:d2:27:2a:85:d1:ae:08:e9:a4:
a7:0f:9b:e2:88:f8:6e:b7:e3:d3:7a:a3:79:54:71:7e:2a:85:
0e:78:27:7e:b1:bd:dd:33:c1:a1:2f:de:7e:40:fd:a4:89:8f:
c6:88:b6:c4:51:15:6e:09:be:4c:01:e8:b4:57:60:c4:05:4e:
27:48:35:d6:2d:1e:42:0a:f8:97:58:3b:8b:05:29:39:15:cc:
69:54:5a:8a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+sCF2MHx7QxQQZoj9EHZ6vMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNiYmUzYzZkOTk4MTE4MTljZWRkZGNkMjdlNGJlMjViYzBj
ZjUwNmYwHhcNMjYwNzI5MDQwMDU2WhcNMjYwNzMwMDQwMDU2WjAzMTEwLwYDVQQD
Eyg1MGVhOTIxMzliOGJjMGI2MDg0Y2M2NzNiZDFkMGRiNzIwZTA5MjZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA40o/eczxNvjJEb3NYIOo8P4G46p+
ogUOKzN6y9z3ApZnXGyhyPmsnQQ3Zv7+Ha908tehbn8ZjZq83BNjq0ZUbt+K/i7l
7GzP15Mj0ElSLKA/cAWxj5x5alw1F4+OprdNklJhr/7YH0xKPpClGIRlMfsjZFvO
vXoKIlb5Jeg0r1aSsN9+pl+/WjujzByDFu/pkXJXUaoPzHhBS3dXV3TVcbY19FhD
NXtRbLwg4fdBRbYs2Sz8zqM2BIfupoHsjUr5YQXCGWaG+fHJU90pyBiuNgBHaLSz
YWsTfiaXFQTUiBqctYqWrZXd1VimwspUN/S9uClxEWSRGSLNv1YGodf/vQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFDqkhObi8C2CEzGc70dDbcg4JJrMB8GA1UdIwQY
MBaAFMu+PG2ZgRgZzt3c0n5L4lvAz1BvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveTc0OGJabUJHQm5PM2R6U2ZrdmlXOERQVUc4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS84NDhjOGItMGU5Yy00ZDZlLTg3M2Ut
OGNmN2Q0NDkzMzU4LzEveTc0OGJabUJHQm5PM2R6U2ZrdmlXOERQVUc4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYS84NDhjOGItMGU5Yy00ZDZlLTg3M2UtOGNmN2Q0NDkzMzU4
LzEveTc0OGJabUJHQm5PM2R6U2ZrdmlXOERQVUc4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADAWfs5bK
OKqe81lrdiTQq6xWj0M5QY86NWldczrcJazRmgIudKLwv7Xn7UONPnPENbUuTCRO
J4rMdMr/1yA4HOyRnJc1DCKFp/NH29lumRWAjaQbuHXKYocm1I9bYv+S9EPywedr
rRALCkpOFWQfOXCPwv6CKo9J9tCzilH/AIaHIse0RZK17IMO/G+pQJy7vEuM7Dh3
gowMNlK7ByjttRlRD6tSZRdyMeqe0icqhdGuCOmkpw+b4oj4brfj03qjeVRxfiqF
DngnfrG93TPBoS/efkD9pImPxoi2xFEVbgm+TAHotFdgxAVOJ0g11i0eQgr4l1g7
iwUpORXMaVRaig==
-----END CERTIFICATE-----
Generated at Wed Jul 29 12:22:52 2026 by rpki-client