Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/8c0473-e7d0-4e43-a7f9-797f4cc4b500/1/bBvsP5NYZoqH0aFsRyL0HjwjgeI.mft
File: bBvsP5NYZoqH0aFsRyL0HjwjgeI.mft (raw, json)
Hash identifier: MsiTfKnbLxaiIkS6oQMdYH/LRh2fNl7CF5krNga3g5U=
Subject key identifier: 11:D6:55:9F:AF:FC:60:E3:F2:4F:F2:2F:FA:26:23:B7:43:0F:3E:10
Authority key identifier: 6C:1B:EC:3F:93:58:66:8A:87:D1:A1:6C:47:22:F4:1E:3C:23:81:E2
Certificate issuer: /CN=6c1bec3f9358668a87d1a16c4722f41e3c2381e2
Certificate serial: 019F83E8E5787F5A53FEE77B868265A2967A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bBvsP5NYZoqH0aFsRyL0HjwjgeI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/8c0473-e7d0-4e43-a7f9-797f4cc4b500/1/bBvsP5NYZoqH0aFsRyL0HjwjgeI.mft
Manifest number: 0D43
Signing time: Tue 21 Jul 2026 09:01:46 +0000
Manifest this update: Tue 21 Jul 2026 09:01:46 +0000
Manifest next update: Wed 22 Jul 2026 09:01:46 +0000
Files and hashes: 1: AjNaf0XOBf9riDrcOuPKw561NDY.roa (hash: 9pTroZDCDfvNGpo8ht2rx0lIgrrP6ysux19y/1KOqeE=)
2: bBvsP5NYZoqH0aFsRyL0HjwjgeI.crl (hash: 6+61JuutLqdpmjDbriXLdDW4IE1R5dc0t8APoyCnsyA=)
3: ozNQN_NZFecNhoYlp5UO91vuHOs.roa (hash: nM7bo7W7c3uRHayjYiquSs/XgOtGpwXa6S0K0J9q4Zw=)
4: yfDJRZg2skhYgI5YRIWudM4uRkA.roa (hash: kEPU+5FdgdE3UdwWy8pB51bGvVfcgF37Ajrzi1JqLzc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/8c0473-e7d0-4e43-a7f9-797f4cc4b500/1/bBvsP5NYZoqH0aFsRyL0HjwjgeI.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/8c0473-e7d0-4e43-a7f9-797f4cc4b500/1/bBvsP5NYZoqH0aFsRyL0HjwjgeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/bBvsP5NYZoqH0aFsRyL0HjwjgeI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:83:e8:e5:78:7f:5a:53:fe:e7:7b:86:82:65:a2:96:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c1bec3f9358668a87d1a16c4722f41e3c2381e2
Validity
Not Before: Jul 21 09:01:46 2026 GMT
Not After : Jul 22 09:01:46 2026 GMT
Subject: CN=11d6559faffc60e3f24ff22ffa2623b7430f3e10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:5b:76:42:00:af:d4:93:53:5a:b4:48:aa:b5:
82:16:de:3e:39:c8:24:92:10:ce:24:bb:ab:d9:0c:
33:35:f1:9b:b0:99:3a:1c:c9:3f:14:d8:55:ed:9e:
84:61:22:c2:8f:74:b7:64:db:75:4b:1e:6f:30:b0:
01:2f:fa:84:74:03:da:51:a7:1a:6b:e1:77:35:9b:
6f:39:0d:32:e8:c4:4b:53:90:e9:3f:6b:fb:fe:78:
81:a4:79:ac:fd:9b:53:90:29:bf:4f:af:10:2c:88:
f9:8d:9b:38:50:c3:de:6c:3b:b4:da:88:30:11:ab:
38:62:2e:0f:5b:74:da:8e:41:3f:61:80:3a:97:09:
d6:0f:b2:1b:f3:1d:33:6c:8d:32:ac:ca:df:8b:31:
ac:b8:ad:37:21:28:69:29:1e:5d:ba:5c:e3:d0:ed:
b7:77:80:29:75:fb:1f:0b:99:30:b3:8e:a1:60:73:
59:25:3e:1c:48:f0:b6:f8:95:7c:5c:b0:0e:14:39:
1c:c0:83:7b:78:cb:06:11:95:eb:dd:ea:94:05:86:
ee:4b:50:7c:a1:26:30:f3:7f:cb:70:f8:46:ed:76:
f6:d8:93:61:d1:95:2c:34:6d:d7:a1:cc:1f:35:b9:
78:57:b4:8e:b4:76:30:93:68:88:a2:1d:31:94:05:
97:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:D6:55:9F:AF:FC:60:E3:F2:4F:F2:2F:FA:26:23:B7:43:0F:3E:10
X509v3 Authority Key Identifier:
keyid:6C:1B:EC:3F:93:58:66:8A:87:D1:A1:6C:47:22:F4:1E:3C:23:81:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bBvsP5NYZoqH0aFsRyL0HjwjgeI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/8c0473-e7d0-4e43-a7f9-797f4cc4b500/1/bBvsP5NYZoqH0aFsRyL0HjwjgeI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/8c0473-e7d0-4e43-a7f9-797f4cc4b500/1/bBvsP5NYZoqH0aFsRyL0HjwjgeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:5c:9d:af:88:d0:2c:08:80:a5:95:78:9f:6d:29:e2:fd:a4:
c7:37:43:6c:62:25:fb:42:1e:94:38:28:75:10:81:f6:b3:a7:
02:d8:d9:07:2e:a6:a9:d6:d5:cf:71:46:f8:9c:6f:96:f9:2c:
96:5a:d4:e1:49:db:61:ca:ea:ed:39:eb:37:6e:1e:f3:39:0b:
db:dc:81:9b:a3:af:83:31:1f:be:23:34:33:0e:48:2d:aa:87:
60:f7:a3:cb:bd:3e:db:ad:bc:a5:fb:b1:8b:39:c6:9d:f6:e5:
0b:b8:77:d6:58:20:2f:e3:6a:9d:37:31:81:e7:83:51:58:17:
24:f6:93:fe:43:99:ae:23:46:25:ff:8d:9e:34:e2:fe:56:d7:
5f:8c:85:89:98:70:e8:f8:0c:cb:07:15:5e:54:0d:b7:f4:1d:
25:f6:67:2e:73:4b:c2:bc:f8:c5:d7:f1:9e:c3:42:c0:0c:c3:
ed:3d:55:a9:d7:97:8b:67:dd:7a:a6:1e:72:da:9f:67:b8:4d:
a4:c6:0c:c3:f0:7c:86:06:52:21:31:ab:b9:a1:c9:27:9f:6e:
4a:f1:8b:37:80:18:45:24:0d:76:48:15:79:fb:7d:73:1b:8b:
8f:6b:6c:10:bb:15:e4:85:46:b3:f1:d2:85:65:a7:52:fe:96:
e9:83:4f:7f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+D6OV4f1pT/ud7hoJlopZ6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZjMWJlYzNmOTM1ODY2OGE4N2QxYTE2YzQ3MjJmNDFlM2My
MzgxZTIwHhcNMjYwNzIxMDkwMTQ2WhcNMjYwNzIyMDkwMTQ2WjAzMTEwLwYDVQQD
EygxMWQ2NTU5ZmFmZmM2MGUzZjI0ZmYyMmZmYTI2MjNiNzQzMGYzZTEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr1t2QgCv1JNTWrRIqrWCFt4+Ocgk
khDOJLur2QwzNfGbsJk6HMk/FNhV7Z6EYSLCj3S3ZNt1Sx5vMLABL/qEdAPaUaca
a+F3NZtvOQ0y6MRLU5DpP2v7/niBpHms/ZtTkCm/T68QLIj5jZs4UMPebDu02ogw
Eas4Yi4PW3TajkE/YYA6lwnWD7Ib8x0zbI0yrMrfizGsuK03IShpKR5dulzj0O23
d4ApdfsfC5kws46hYHNZJT4cSPC2+JV8XLAOFDkcwIN7eMsGEZXr3eqUBYbuS1B8
oSYw83/LcPhG7Xb22JNh0ZUsNG3XocwfNbl4V7SOtHYwk2iIoh0xlAWXxwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBHWVZ+v/GDj8k/yL/omI7dDDz4QMB8GA1UdIwQY
MBaAFGwb7D+TWGaKh9GhbEci9B48I4HiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYkJ2c1A1Tllab3FIMGFGc1J5TDBIandqZ2VJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS84YzA0NzMtZTdkMC00ZTQzLWE3Zjkt
Nzk3ZjRjYzRiNTAwLzEvYkJ2c1A1Tllab3FIMGFGc1J5TDBIandqZ2VJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZS84YzA0NzMtZTdkMC00ZTQzLWE3ZjktNzk3ZjRjYzRiNTAw
LzEvYkJ2c1A1Tllab3FIMGFGc1J5TDBIandqZ2VJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASFydr4jQ
LAiApZV4n20p4v2kxzdDbGIl+0IelDgodRCB9rOnAtjZBy6mqdbVz3FG+Jxvlvks
llrU4UnbYcrq7TnrN24e8zkL29yBm6OvgzEfviM0Mw5ILaqHYPejy70+2628pfux
iznGnfblC7h31lggL+NqnTcxgeeDUVgXJPaT/kOZriNGJf+NnjTi/lbXX4yFiZhw
6PgMywcVXlQNt/QdJfZnLnNLwrz4xdfxnsNCwAzD7T1VqdeXi2fdeqYectqfZ7hN
pMYMw/B8hgZSITGruaHJJ59uSvGLN4AYRSQNdkgVeft9cxuLj2tsELsV5IVGs/HS
hWWnUv6W6YNPfw==
-----END CERTIFICATE-----
Generated at Tue Jul 21 12:59:52 2026 by rpki-client