Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/03e196-fc28-43ad-bd51-71c296d4969f/1/bYvF0sabkWFcyibbtupwV3A24m0.mft
File: bYvF0sabkWFcyibbtupwV3A24m0.mft (raw, json)
Hash identifier: 8zNfy2kuqoHvDJ8sb8xVT9g6Jv9PJ8J2E/J50OGzCe0=
Subject key identifier: BB:CE:01:16:BB:71:BB:EA:C4:F7:A1:E5:D2:9E:E7:F7:45:6D:15:EE
Authority key identifier: 6D:8B:C5:D2:C6:9B:91:61:5C:CA:26:DB:B6:EA:70:57:70:36:E2:6D
Certificate issuer: /CN=6d8bc5d2c69b91615cca26dbb6ea70577036e26d
Certificate serial: 019DCED0993D890F71A0DC4F9FCDB5EEDB22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bYvF0sabkWFcyibbtupwV3A24m0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/03e196-fc28-43ad-bd51-71c296d4969f/1/bYvF0sabkWFcyibbtupwV3A24m0.mft
Manifest number: 10A8
Signing time: Mon 27 Apr 2026 12:01:10 +0000
Manifest this update: Mon 27 Apr 2026 12:01:10 +0000
Manifest next update: Tue 28 Apr 2026 12:01:10 +0000
Files and hashes: 1: bYvF0sabkWFcyibbtupwV3A24m0.crl (hash: stnaLbmzOhGw8rE5djQuLckk8bkidDlBFyLaKfKRuj8=)
2: iNHmZBm96p22r1v1NNf0vUA5CNU.roa (hash: W3eGIa/whnFHaDnHwnO2+GYR1xjT6RdNQB1XA+AY4TQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/03e196-fc28-43ad-bd51-71c296d4969f/1/bYvF0sabkWFcyibbtupwV3A24m0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/03e196-fc28-43ad-bd51-71c296d4969f/1/bYvF0sabkWFcyibbtupwV3A24m0.mft
rsync://rpki.ripe.net/repository/DEFAULT/bYvF0sabkWFcyibbtupwV3A24m0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 12:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ce:d0:99:3d:89:0f:71:a0:dc:4f:9f:cd:b5:ee:db:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d8bc5d2c69b91615cca26dbb6ea70577036e26d
Validity
Not Before: Apr 27 12:01:10 2026 GMT
Not After : Apr 28 12:01:10 2026 GMT
Subject: CN=bbce0116bb71bbeac4f7a1e5d29ee7f7456d15ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:91:d1:94:07:71:a1:7e:49:05:3b:29:2a:14:
b9:58:89:62:95:48:fd:e8:1f:75:d0:0d:69:c8:06:
f8:e9:79:4c:4b:3b:5c:87:bb:5d:5a:5e:ea:95:d1:
9a:1c:8d:76:74:7b:e8:3f:1f:44:83:6a:84:6b:96:
8c:3f:79:84:54:3b:a7:40:1f:83:02:37:b0:3d:30:
10:86:b8:7c:c5:d8:0a:de:e4:87:2e:07:13:53:05:
1a:38:09:c2:0a:50:de:f1:8b:15:b0:3d:48:b9:5c:
bd:72:c2:8c:bb:50:bc:bc:65:49:00:7c:e5:bc:aa:
4a:6f:83:33:9d:7b:31:1f:c5:4b:96:6e:7a:bd:c7:
b5:b7:bc:79:06:da:0e:99:bf:e5:44:ce:3b:1f:4c:
4c:07:dd:41:7e:49:79:2c:21:13:e5:80:52:26:ae:
bc:4d:af:40:9b:b5:a5:51:82:b2:76:3c:87:7c:ca:
ef:7f:5b:c8:2c:c6:a1:67:18:e3:7e:41:af:63:e4:
6a:84:4d:68:8d:56:3e:b7:71:5f:28:47:39:72:2d:
f3:10:ab:2b:57:cb:b1:e1:66:2c:3b:9c:a6:3f:69:
c7:7d:5d:f8:6d:f3:14:fc:f5:9b:e1:63:61:27:22:
11:de:b3:b3:36:41:55:d0:a0:8a:e3:2d:e7:84:02:
4b:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:CE:01:16:BB:71:BB:EA:C4:F7:A1:E5:D2:9E:E7:F7:45:6D:15:EE
X509v3 Authority Key Identifier:
keyid:6D:8B:C5:D2:C6:9B:91:61:5C:CA:26:DB:B6:EA:70:57:70:36:E2:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bYvF0sabkWFcyibbtupwV3A24m0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/03e196-fc28-43ad-bd51-71c296d4969f/1/bYvF0sabkWFcyibbtupwV3A24m0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/03e196-fc28-43ad-bd51-71c296d4969f/1/bYvF0sabkWFcyibbtupwV3A24m0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:9e:df:fe:01:35:a6:7d:a7:35:25:0f:3c:51:c8:1c:15:79:
72:e1:30:72:f7:47:58:af:f5:a2:25:55:9f:45:71:8b:b3:81:
dc:43:16:b6:27:7c:d4:50:4b:75:6e:18:8d:de:9e:04:fc:f4:
b2:10:e9:7d:7a:54:3f:e6:ca:3d:1b:ce:3e:12:df:b6:1c:ad:
a7:6b:04:ea:45:9d:79:c6:9e:fd:d7:83:6a:38:2a:50:84:19:
52:a4:aa:a8:12:be:ae:86:68:33:28:85:03:b4:c1:ab:e8:1c:
3d:2c:1d:de:f9:04:66:73:ca:8c:f8:e5:28:25:58:14:a0:3c:
02:1a:b7:22:f0:6f:69:f4:f2:7e:e6:0c:9c:0e:1d:a4:14:70:
35:0e:04:50:92:49:c7:cb:a0:a1:93:1f:f8:dc:98:2e:71:cd:
da:d0:6a:fc:43:a1:02:83:91:83:19:45:ed:21:46:a8:14:9a:
19:2f:b9:c6:e8:13:9c:fb:16:3d:dc:ff:11:d4:2d:f4:21:26:
86:f9:0d:b2:04:0c:ff:f1:2a:ab:9e:da:9a:07:0e:aa:32:df:
c7:bb:42:c5:58:41:67:b8:3e:30:58:de:dc:20:4a:2b:0f:eb:
41:a3:2c:7e:9c:1b:2d:40:1e:6c:6d:a6:e3:0e:2b:97:13:e3:
c5:7d:45:e9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ3O0Jk9iQ9xoNxPn8217tsiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZkOGJjNWQyYzY5YjkxNjE1Y2NhMjZkYmI2ZWE3MDU3NzAz
NmUyNmQwHhcNMjYwNDI3MTIwMTEwWhcNMjYwNDI4MTIwMTEwWjAzMTEwLwYDVQQD
EyhiYmNlMDExNmJiNzFiYmVhYzRmN2ExZTVkMjllZTdmNzQ1NmQxNWVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2pHRlAdxoX5JBTspKhS5WIlilUj9
6B910A1pyAb46XlMSztch7tdWl7qldGaHI12dHvoPx9Eg2qEa5aMP3mEVDunQB+D
AjewPTAQhrh8xdgK3uSHLgcTUwUaOAnCClDe8YsVsD1IuVy9csKMu1C8vGVJAHzl
vKpKb4MznXsxH8VLlm56vce1t7x5BtoOmb/lRM47H0xMB91Bfkl5LCET5YBSJq68
Ta9Am7WlUYKydjyHfMrvf1vILMahZxjjfkGvY+RqhE1ojVY+t3FfKEc5ci3zEKsr
V8ux4WYsO5ymP2nHfV34bfMU/PWb4WNhJyIR3rOzNkFV0KCK4y3nhAJLuwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLvOARa7cbvqxPeh5dKe5/dFbRXuMB8GA1UdIwQY
MBaAFG2LxdLGm5FhXMom27bqcFdwNuJtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYll2RjBzYWJrV0ZjeWliYnR1cHdWM0EyNG0wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy8wM2UxOTYtZmMyOC00M2FkLWJkNTEt
NzFjMjk2ZDQ5NjlmLzEvYll2RjBzYWJrV0ZjeWliYnR1cHdWM0EyNG0wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy8wM2UxOTYtZmMyOC00M2FkLWJkNTEtNzFjMjk2ZDQ5Njlm
LzEvYll2RjBzYWJrV0ZjeWliYnR1cHdWM0EyNG0wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj57f/gE1
pn2nNSUPPFHIHBV5cuEwcvdHWK/1oiVVn0Vxi7OB3EMWtid81FBLdW4Yjd6eBPz0
shDpfXpUP+bKPRvOPhLfthytp2sE6kWdecae/deDajgqUIQZUqSqqBK+roZoMyiF
A7TBq+gcPSwd3vkEZnPKjPjlKCVYFKA8Ahq3IvBvafTyfuYMnA4dpBRwNQ4EUJJJ
x8ugoZMf+NyYLnHN2tBq/EOhAoORgxlF7SFGqBSaGS+5xugTnPsWPdz/EdQt9CEm
hvkNsgQM//Eqq57amgcOqjLfx7tCxVhBZ7g+MFje3CBKKw/rQaMsfpwbLUAebG2m
4w4rlxPjxX1F6Q==
-----END CERTIFICATE-----
Generated at Mon Apr 27 22:31:45 2026 by rpki-client