Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/9b19b5-43bb-4744-93cb-6ed10ebb933f/1/bFN3u52kHKoRdvQyJi3KqZxHb5o.mft
File: bFN3u52kHKoRdvQyJi3KqZxHb5o.mft (raw, json)
Hash identifier: sPtAn565UFYLurNr496Tz8+pKSBfo7oxK79eQ5swag8=
Subject key identifier: C8:8D:92:66:41:98:14:94:64:B2:5E:3F:88:CB:FF:03:9D:FE:19:02
Authority key identifier: 6C:53:77:BB:9D:A4:1C:AA:11:76:F4:32:26:2D:CA:A9:9C:47:6F:9A
Certificate issuer: /CN=6c5377bb9da41caa1176f432262dcaa99c476f9a
Certificate serial: 019FAAF584233573496CCD29003482385FFC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bFN3u52kHKoRdvQyJi3KqZxHb5o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/9b19b5-43bb-4744-93cb-6ed10ebb933f/1/bFN3u52kHKoRdvQyJi3KqZxHb5o.mft
Manifest number: 0B42
Signing time: Tue 28 Jul 2026 23:00:44 +0000
Manifest this update: Tue 28 Jul 2026 23:00:44 +0000
Manifest next update: Wed 29 Jul 2026 23:00:44 +0000
Files and hashes: 1: 4CafLS7JDiRJ7i99aQcoyS601qY.roa (hash: mhWYHOFyle+qHEjhYXCosBkYHSITvo6K4qTAMUU7D8I=)
2: bFN3u52kHKoRdvQyJi3KqZxHb5o.crl (hash: h5yRzvV/cbtLJsWeMHnO8QoY3LRzCWyaRoj7bnV9olM=)
3: kBF7zKM32edjJgXjH4AjSwsgXFM.roa (hash: RthnvzKZHaRVcGw388WF7ImSuN7L155l1GY/DTSrS+E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/9b19b5-43bb-4744-93cb-6ed10ebb933f/1/bFN3u52kHKoRdvQyJi3KqZxHb5o.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/9b19b5-43bb-4744-93cb-6ed10ebb933f/1/bFN3u52kHKoRdvQyJi3KqZxHb5o.mft
rsync://rpki.ripe.net/repository/DEFAULT/bFN3u52kHKoRdvQyJi3KqZxHb5o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:f5:84:23:35:73:49:6c:cd:29:00:34:82:38:5f:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c5377bb9da41caa1176f432262dcaa99c476f9a
Validity
Not Before: Jul 28 23:00:44 2026 GMT
Not After : Jul 29 23:00:44 2026 GMT
Subject: CN=c88d92664198149464b25e3f88cbff039dfe1902
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:f3:05:bd:7d:b6:6c:84:88:00:6e:95:6d:d7:
e4:c4:8f:47:c2:a5:cc:56:92:f1:26:39:7c:c6:b9:
24:a4:6d:a1:31:b6:a1:8f:f8:52:4c:7b:c7:aa:b9:
ae:26:4d:6d:3e:ee:d5:b3:fe:d5:ed:f7:0e:9f:04:
ef:7e:d4:1d:dd:c9:8e:47:22:ff:25:f2:71:65:0c:
66:dc:ce:a2:8f:0d:37:37:73:f9:e1:49:57:e9:ae:
3c:54:bd:17:74:c5:24:6b:0a:3e:11:ae:d5:4d:d1:
b9:01:3d:9e:34:46:57:ed:9b:27:94:b8:12:d5:3b:
31:63:18:56:29:45:59:9c:88:98:90:66:5a:74:32:
57:e7:07:5a:9c:a0:83:14:51:94:3b:bc:e7:60:3f:
79:59:2d:01:d6:93:b8:7f:15:a9:f4:c4:7a:c8:23:
9b:b6:3d:77:bf:81:d1:35:00:2e:41:63:cd:41:b5:
4a:90:78:59:ea:69:16:4c:fd:3c:97:52:a0:cc:ce:
49:fd:0e:2a:d6:16:a6:25:60:2e:6f:69:75:2b:1d:
0d:6a:f7:64:26:27:b5:45:d7:f0:19:a5:7d:85:84:
a6:0e:21:07:ef:93:5a:64:66:4b:6e:bc:fe:34:13:
b5:a3:0c:57:da:a0:65:de:39:67:93:71:9a:cb:58:
3f:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:8D:92:66:41:98:14:94:64:B2:5E:3F:88:CB:FF:03:9D:FE:19:02
X509v3 Authority Key Identifier:
keyid:6C:53:77:BB:9D:A4:1C:AA:11:76:F4:32:26:2D:CA:A9:9C:47:6F:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bFN3u52kHKoRdvQyJi3KqZxHb5o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/9b19b5-43bb-4744-93cb-6ed10ebb933f/1/bFN3u52kHKoRdvQyJi3KqZxHb5o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/9b19b5-43bb-4744-93cb-6ed10ebb933f/1/bFN3u52kHKoRdvQyJi3KqZxHb5o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
dd:57:c0:37:e6:9b:12:97:5c:b4:34:ae:8a:be:e1:11:35:e1:
78:1b:98:04:6d:b7:66:94:d4:06:fb:87:fc:f0:9f:59:e1:47:
4a:e7:b1:ab:f3:fb:d4:50:58:ee:d5:8e:83:63:94:d9:34:fc:
eb:76:cc:e1:85:fb:d5:eb:93:93:58:54:bf:cf:ba:a2:e5:d0:
46:f3:30:c7:b0:26:a0:a5:e0:a4:89:28:30:cc:e8:52:7a:a4:
94:bc:f5:fc:80:d1:54:8b:ae:a1:5c:d6:b6:5d:fe:b6:48:dc:
60:ca:ba:f3:6a:cb:23:78:a0:00:ca:28:9d:12:00:32:35:04:
53:ec:9a:f3:ff:fd:cf:48:61:12:c3:90:2d:e8:86:0e:3e:66:
f4:36:11:4b:21:1e:cd:90:fd:54:fe:77:6c:4f:09:1d:8d:3e:
a3:73:8a:5a:16:b9:c4:b4:4c:a0:df:ad:87:71:91:09:4d:4b:
8b:db:12:9b:c7:98:2d:43:e8:0f:80:04:c2:e8:e0:31:59:52:
6d:68:b3:c7:47:54:42:e3:19:eb:e7:91:36:6b:4f:0e:0f:5c:
51:3d:0c:74:41:48:6c:77:dc:2e:7e:9a:26:c6:0c:f1:54:7b:
36:a0:e3:91:fd:6a:45:e1:ce:6c:2c:1a:af:f9:c4:ea:16:fa:
dd:be:08:59
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+q9YQjNXNJbM0pADSCOF/8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZjNTM3N2JiOWRhNDFjYWExMTc2ZjQzMjI2MmRjYWE5OWM0
NzZmOWEwHhcNMjYwNzI4MjMwMDQ0WhcNMjYwNzI5MjMwMDQ0WjAzMTEwLwYDVQQD
EyhjODhkOTI2NjQxOTgxNDk0NjRiMjVlM2Y4OGNiZmYwMzlkZmUxOTAyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtPMFvX22bISIAG6VbdfkxI9HwqXM
VpLxJjl8xrkkpG2hMbahj/hSTHvHqrmuJk1tPu7Vs/7V7fcOnwTvftQd3cmORyL/
JfJxZQxm3M6ijw03N3P54UlX6a48VL0XdMUkawo+Ea7VTdG5AT2eNEZX7ZsnlLgS
1TsxYxhWKUVZnIiYkGZadDJX5wdanKCDFFGUO7znYD95WS0B1pO4fxWp9MR6yCOb
tj13v4HRNQAuQWPNQbVKkHhZ6mkWTP08l1KgzM5J/Q4q1hamJWAub2l1Kx0Navdk
Jie1RdfwGaV9hYSmDiEH75NaZGZLbrz+NBO1owxX2qBl3jlnk3Gay1g/KQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMiNkmZBmBSUZLJeP4jL/wOd/hkCMB8GA1UdIwQY
MBaAFGxTd7udpByqEXb0MiYtyqmcR2+aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYkZOM3U1MmtIS29SZHZReUppM0txWnhIYjVvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS85YjE5YjUtNDNiYi00NzQ0LTkzY2It
NmVkMTBlYmI5MzNmLzEvYkZOM3U1MmtIS29SZHZReUppM0txWnhIYjVvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS85YjE5YjUtNDNiYi00NzQ0LTkzY2ItNmVkMTBlYmI5MzNm
LzEvYkZOM3U1MmtIS29SZHZReUppM0txWnhIYjVvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA3VfAN+ab
EpdctDSuir7hETXheBuYBG23ZpTUBvuH/PCfWeFHSuexq/P71FBY7tWOg2OU2TT8
63bM4YX71euTk1hUv8+6ouXQRvMwx7AmoKXgpIkoMMzoUnqklLz1/IDRVIuuoVzW
tl3+tkjcYMq682rLI3igAMoonRIAMjUEU+ya8//9z0hhEsOQLeiGDj5m9DYRSyEe
zZD9VP53bE8JHY0+o3OKWha5xLRMoN+th3GRCU1Li9sSm8eYLUPoD4AEwujgMVlS
bWizx0dUQuMZ6+eRNmtPDg9cUT0MdEFIbHfcLn6aJsYM8VR7NqDjkf1qReHObCwa
r/nE6hb63b4IWQ==
-----END CERTIFICATE-----
Generated at Wed Jul 29 06:46:46 2026 by rpki-client