Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/496525-2c0d-43e4-8188-5fbc230abdc2/1/bs1crU0zBsT3LEKvwG5c0fuv46M.mft
File: bs1crU0zBsT3LEKvwG5c0fuv46M.mft (raw, json)
Hash identifier: vN7iiMUWiQR39DohsBLXNHn6D5k1Co2Otd+p46U1tsU=
Subject key identifier: 77:8D:4C:14:6C:FC:11:77:37:EC:A1:BE:F4:F9:8F:B9:A6:DE:78:FE
Authority key identifier: 6E:CD:5C:AD:4D:33:06:C4:F7:2C:42:AF:C0:6E:5C:D1:FB:AF:E3:A3
Certificate issuer: /CN=6ecd5cad4d3306c4f72c42afc06e5cd1fbafe3a3
Certificate serial: 019FA9AC415F9B805E6A4EFEF824C192EAAF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bs1crU0zBsT3LEKvwG5c0fuv46M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/496525-2c0d-43e4-8188-5fbc230abdc2/1/bs1crU0zBsT3LEKvwG5c0fuv46M.mft
Manifest number: 19E2
Signing time: Tue 28 Jul 2026 17:01:06 +0000
Manifest this update: Tue 28 Jul 2026 17:01:06 +0000
Manifest next update: Wed 29 Jul 2026 17:01:06 +0000
Files and hashes: 1: 1-XAPtzpEBbR-dL3HDvpMhi_QEZc.roa (hash: Y3Cc5NFdOsrYFpq1aDkqCQTbdqgeCbiviULrvKO6HjA=)
2: 84QPNs99F2FLKJtQBYoOZt3F3p8.roa (hash: EjdzLhSfZiaXxVtxCqo06jqnawXCpF2ar+1qQ5nt39k=)
3: bs1crU0zBsT3LEKvwG5c0fuv46M.crl (hash: 9pCHV7Pkek7mLYw2eOR6KRBvTA1n2XOGj+Vwciq4ldE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/496525-2c0d-43e4-8188-5fbc230abdc2/1/bs1crU0zBsT3LEKvwG5c0fuv46M.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/496525-2c0d-43e4-8188-5fbc230abdc2/1/bs1crU0zBsT3LEKvwG5c0fuv46M.mft
rsync://rpki.ripe.net/repository/DEFAULT/bs1crU0zBsT3LEKvwG5c0fuv46M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 17:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:ac:41:5f:9b:80:5e:6a:4e:fe:f8:24:c1:92:ea:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ecd5cad4d3306c4f72c42afc06e5cd1fbafe3a3
Validity
Not Before: Jul 28 17:01:06 2026 GMT
Not After : Jul 29 17:01:06 2026 GMT
Subject: CN=778d4c146cfc117737eca1bef4f98fb9a6de78fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:54:9e:f5:28:cf:f9:13:c0:90:65:b7:38:08:
db:e3:ea:a5:42:50:54:48:b7:05:20:08:af:1e:d6:
b5:86:39:9e:30:89:e4:33:52:9a:0a:78:64:b0:92:
f2:93:0b:ad:7e:9e:6d:2e:34:ce:d4:3a:fd:1e:6b:
4b:24:da:b1:fe:83:77:c5:13:33:49:8d:63:ff:55:
c3:e2:a8:a0:c3:e4:ea:7a:1e:a0:54:dc:05:64:68:
f5:9b:e1:1f:f1:a0:a0:2a:0e:8f:a9:37:8c:6d:bb:
e7:89:31:71:98:ee:6b:1f:90:0d:69:78:e2:f8:54:
3e:f7:05:70:ff:3b:72:05:27:d8:06:0c:90:c8:1a:
fd:4e:00:4d:0c:3d:43:c3:5a:2a:61:7e:95:c5:f4:
fe:ab:80:bd:a4:a9:c2:8e:40:21:41:bd:d3:ff:89:
61:64:9c:57:47:cf:44:4a:0f:a0:c1:de:74:d3:c0:
78:12:b9:df:57:43:d5:1d:8e:46:59:bc:2e:a8:30:
a4:28:e8:5b:fc:4d:ea:96:21:c6:22:3b:8c:b9:82:
e6:d4:6e:9e:1a:30:b7:79:6d:7b:59:4a:ce:99:98:
00:4c:99:8e:12:7a:87:02:55:9f:3c:8f:0f:41:4a:
97:6d:03:4a:23:23:3c:44:60:89:d6:d0:b0:a0:e2:
7c:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:8D:4C:14:6C:FC:11:77:37:EC:A1:BE:F4:F9:8F:B9:A6:DE:78:FE
X509v3 Authority Key Identifier:
keyid:6E:CD:5C:AD:4D:33:06:C4:F7:2C:42:AF:C0:6E:5C:D1:FB:AF:E3:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bs1crU0zBsT3LEKvwG5c0fuv46M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/496525-2c0d-43e4-8188-5fbc230abdc2/1/bs1crU0zBsT3LEKvwG5c0fuv46M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/496525-2c0d-43e4-8188-5fbc230abdc2/1/bs1crU0zBsT3LEKvwG5c0fuv46M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:d8:32:c8:38:d7:b0:71:0c:e9:da:31:57:9c:b6:69:37:71:
17:04:79:96:2d:0a:ff:d3:0b:eb:d8:60:cf:b5:78:e5:65:39:
10:67:b7:fb:74:ff:cf:0b:df:df:db:13:f2:3f:6b:40:79:2e:
90:18:48:ad:a6:fe:58:26:02:5a:a9:13:44:cf:0e:67:f4:89:
df:00:f2:74:8d:a3:a2:59:1b:71:08:cf:b5:f9:47:cf:96:a4:
6d:52:fb:fc:f1:78:07:74:e3:ae:61:8b:42:a1:15:bf:4c:8f:
02:f1:09:16:be:fb:ab:d0:51:1c:9b:66:94:f7:ad:35:91:bb:
68:54:de:d5:b8:c5:a9:a6:8f:c4:ce:b7:51:89:71:aa:cd:ca:
28:35:5d:54:7a:28:6b:ab:66:9f:5c:2f:02:91:03:db:2f:f4:
3d:63:3c:0e:59:ef:b1:2c:e5:6e:e2:11:e1:43:82:a5:8c:7f:
61:5a:a8:2a:a2:57:d3:a5:6c:38:61:da:26:6f:33:4e:cc:ae:
88:be:58:15:a7:fa:d1:3b:b3:67:ce:a8:44:88:ac:f6:5b:57:
87:44:14:1e:70:73:60:85:59:36:32:b8:79:46:a5:5d:67:aa:
2a:dd:66:d9:ff:08:9d:d6:b3:57:36:7e:8a:b8:61:a0:51:99:
21:31:1c:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 01:45:57 2026 by rpki-client