Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/bd3a46-727b-476c-a789-c8c991cd89d5/1/B0rSOkz6MbbVXryhbF0UxAS6bK0.mft
File: B0rSOkz6MbbVXryhbF0UxAS6bK0.mft (raw, json)
Hash identifier: aMPqqnPky1MLHGEUw8V5H2pp9GuWl5NWe2L3d+QBuR4=
Subject key identifier: 8A:3C:01:2B:0D:F1:08:50:BF:B3:BB:C4:42:85:4A:8D:D7:A3:F3:C2
Authority key identifier: 07:4A:D2:3A:4C:FA:31:B6:D5:5E:BC:A1:6C:5D:14:C4:04:BA:6C:AD
Certificate issuer: /CN=074ad23a4cfa31b6d55ebca16c5d14c404ba6cad
Certificate serial: 019F1943BF23CD2C0433B7138E58A0820652
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B0rSOkz6MbbVXryhbF0UxAS6bK0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/bd3a46-727b-476c-a789-c8c991cd89d5/1/B0rSOkz6MbbVXryhbF0UxAS6bK0.mft
Manifest number: 141D
Signing time: Tue 30 Jun 2026 16:01:37 +0000
Manifest this update: Tue 30 Jun 2026 16:01:37 +0000
Manifest next update: Wed 01 Jul 2026 16:01:37 +0000
Files and hashes: 1: B0rSOkz6MbbVXryhbF0UxAS6bK0.crl (hash: b4IfwumNalLyz0rNEemuRlB45iawjzFinj27x442Yik=)
2: JC01ZV2vYflj0QLnCE8Cprw58U8.roa (hash: /Z9zCtMnml7TieFSNIy4zWWzRmCDjX6zEeVO6wMk9LQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/bd3a46-727b-476c-a789-c8c991cd89d5/1/B0rSOkz6MbbVXryhbF0UxAS6bK0.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/bd3a46-727b-476c-a789-c8c991cd89d5/1/B0rSOkz6MbbVXryhbF0UxAS6bK0.mft
rsync://rpki.ripe.net/repository/DEFAULT/B0rSOkz6MbbVXryhbF0UxAS6bK0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 14:31:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:19:43:bf:23:cd:2c:04:33:b7:13:8e:58:a0:82:06:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=074ad23a4cfa31b6d55ebca16c5d14c404ba6cad
Validity
Not Before: Jun 30 16:01:37 2026 GMT
Not After : Jul 1 16:01:37 2026 GMT
Subject: CN=8a3c012b0df10850bfb3bbc442854a8dd7a3f3c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:8d:a7:ac:a4:75:50:f2:16:7c:20:e2:13:26:
cf:a2:df:64:ec:b3:ef:dc:80:dd:9e:02:d1:bb:94:
79:40:15:82:9b:c5:c8:30:d7:c9:5f:be:7e:5f:89:
29:bf:a4:5a:58:ae:d6:77:d7:1e:d0:16:6b:76:40:
fa:e5:86:47:aa:78:cb:02:0f:1a:30:7b:4f:4e:92:
12:11:c9:ec:ca:58:af:01:62:0e:64:b2:96:a9:2d:
92:70:91:02:94:52:83:0b:33:d3:fb:86:fc:d1:24:
6f:7a:a1:bc:43:b0:88:dc:dd:5a:c5:a8:57:2d:b7:
10:62:23:c1:ed:90:8c:62:2b:9c:ab:a4:d5:e5:7b:
4c:bf:dc:5b:79:a7:1f:47:94:24:a4:6c:71:1c:51:
73:aa:15:c3:0c:22:43:74:a4:40:7c:2a:67:18:8f:
1d:82:2e:b8:58:40:47:da:69:b0:74:6b:33:4b:f3:
12:89:74:4f:7d:22:68:88:3d:b0:90:30:1a:0d:ad:
c8:02:37:57:bb:37:ee:6a:27:f3:1d:b0:e6:1d:54:
77:5e:ae:db:bb:ea:6c:41:79:5e:c1:75:d5:16:17:
86:49:c1:af:ab:29:69:bd:dd:5c:d8:13:87:d1:c7:
45:fc:d3:34:b6:c3:20:47:9f:30:16:ad:bc:c4:01:
a1:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:3C:01:2B:0D:F1:08:50:BF:B3:BB:C4:42:85:4A:8D:D7:A3:F3:C2
X509v3 Authority Key Identifier:
keyid:07:4A:D2:3A:4C:FA:31:B6:D5:5E:BC:A1:6C:5D:14:C4:04:BA:6C:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B0rSOkz6MbbVXryhbF0UxAS6bK0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/bd3a46-727b-476c-a789-c8c991cd89d5/1/B0rSOkz6MbbVXryhbF0UxAS6bK0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/bd3a46-727b-476c-a789-c8c991cd89d5/1/B0rSOkz6MbbVXryhbF0UxAS6bK0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:f8:21:e3:78:50:e6:43:a1:d9:14:07:09:f7:e9:b8:06:2b:
59:fd:2e:7d:8c:55:23:c1:5a:cf:73:6f:a4:67:9a:84:0c:41:
55:65:c2:16:be:6d:3a:a0:9a:2f:0e:b5:cb:5d:a8:44:a3:2c:
63:a6:74:54:07:4b:c5:b0:64:a0:f0:d6:7e:2a:c0:8c:f9:c2:
bb:93:16:5f:c8:07:a4:5d:d8:32:a9:44:0b:60:80:b0:3d:27:
cb:5d:1e:72:e2:5d:4f:89:f5:b5:f2:a8:d1:b5:c1:36:19:d7:
8c:78:99:d8:34:19:ce:19:9e:04:96:17:db:37:89:f9:68:e7:
f5:8e:40:94:5f:00:10:b8:29:35:99:be:d6:cf:97:cd:56:6a:
e7:4c:06:e1:4c:fd:88:af:74:b5:5a:bd:a2:30:bb:87:3a:5c:
4f:4e:86:f2:90:1d:20:35:d1:7c:f0:f9:e8:3a:e6:ed:6a:05:
9e:58:0b:a2:88:ad:8f:32:20:5c:33:90:f0:73:e5:cb:23:8b:
8b:d6:c0:89:ff:14:61:88:fc:55:67:f0:00:fb:48:78:3b:d6:
e2:d2:0c:7e:87:4d:30:48:9b:d4:f3:5d:af:f0:62:9e:06:54:
3e:85:86:e1:d0:13:75:2e:71:71:27:45:b0:0c:e0:7c:0f:93:
90:b8:c7:77
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8ZQ78jzSwEM7cTjligggZSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA3NGFkMjNhNGNmYTMxYjZkNTVlYmNhMTZjNWQxNGM0MDRi
YTZjYWQwHhcNMjYwNjMwMTYwMTM3WhcNMjYwNzAxMTYwMTM3WjAzMTEwLwYDVQQD
Eyg4YTNjMDEyYjBkZjEwODUwYmZiM2JiYzQ0Mjg1NGE4ZGQ3YTNmM2MyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtY2nrKR1UPIWfCDiEybPot9k7LPv
3IDdngLRu5R5QBWCm8XIMNfJX75+X4kpv6RaWK7Wd9ce0BZrdkD65YZHqnjLAg8a
MHtPTpISEcnsylivAWIOZLKWqS2ScJEClFKDCzPT+4b80SRveqG8Q7CI3N1axahX
LbcQYiPB7ZCMYiucq6TV5XtMv9xbeacfR5QkpGxxHFFzqhXDDCJDdKRAfCpnGI8d
gi64WEBH2mmwdGszS/MSiXRPfSJoiD2wkDAaDa3IAjdXuzfuaifzHbDmHVR3Xq7b
u+psQXlewXXVFheGScGvqylpvd1c2BOH0cdF/NM0tsMgR58wFq28xAGhAwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIo8ASsN8QhQv7O7xEKFSo3Xo/PCMB8GA1UdIwQY
MBaAFAdK0jpM+jG21V68oWxdFMQEumytMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQjByU09rejZNYmJWWHJ5aGJGMFV4QVM2YkswLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS9iZDNhNDYtNzI3Yi00NzZjLWE3ODkt
YzhjOTkxY2Q4OWQ1LzEvQjByU09rejZNYmJWWHJ5aGJGMFV4QVM2YkswLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMS9iZDNhNDYtNzI3Yi00NzZjLWE3ODktYzhjOTkxY2Q4OWQ1
LzEvQjByU09rejZNYmJWWHJ5aGJGMFV4QVM2YkswLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABfgh43hQ
5kOh2RQHCffpuAYrWf0ufYxVI8Faz3NvpGeahAxBVWXCFr5tOqCaLw61y12oRKMs
Y6Z0VAdLxbBkoPDWfirAjPnCu5MWX8gHpF3YMqlEC2CAsD0ny10ecuJdT4n1tfKo
0bXBNhnXjHiZ2DQZzhmeBJYX2zeJ+Wjn9Y5AlF8AELgpNZm+1s+XzVZq50wG4Uz9
iK90tVq9ojC7hzpcT06G8pAdIDXRfPD56Drm7WoFnlgLooitjzIgXDOQ8HPlyyOL
i9bAif8UYYj8VWfwAPtIeDvW4tIMfodNMEib1PNdr/BingZUPoWG4dATdS5xcSdF
sAzgfA+TkLjHdw==
-----END CERTIFICATE-----
Generated at Tue Jun 30 18:18:13 2026 by rpki-client