Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/bf9e51-cc2b-4ff4-86ac-2f7e52fb8bd3/1/bTAG3NKJxH-fWOEo6yl1cjkUS7Y.mft
File: bTAG3NKJxH-fWOEo6yl1cjkUS7Y.mft (raw, json)
Hash identifier: 5KoePY0j8V1OmoTgifKXTkikwFDxXZ8JCPwucOyF0r4=
Subject key identifier: 4E:86:F4:CB:D2:29:59:DF:65:AA:54:F9:45:36:94:A8:9A:54:F4:62
Authority key identifier: 6D:30:06:DC:D2:89:C4:7F:9F:58:E1:28:EB:29:75:72:39:14:4B:B6
Certificate issuer: /CN=6d3006dcd289c47f9f58e128eb29757239144bb6
Certificate serial: 019F64942CF3CA4B77023C541126512A4427
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bTAG3NKJxH-fWOEo6yl1cjkUS7Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/bf9e51-cc2b-4ff4-86ac-2f7e52fb8bd3/1/bTAG3NKJxH-fWOEo6yl1cjkUS7Y.mft
Manifest number: 0F5D
Signing time: Wed 15 Jul 2026 07:01:00 +0000
Manifest this update: Wed 15 Jul 2026 07:01:00 +0000
Manifest next update: Thu 16 Jul 2026 07:01:00 +0000
Files and hashes: 1: bTAG3NKJxH-fWOEo6yl1cjkUS7Y.crl (hash: k+L1U7Gc2dS6M7XHjjXeBoRNuCwM4QFBh2PCIbFkjJg=)
2: xByyab3Vrz3Ef2rAb6P2eDrMVOE.roa (hash: kIu292fLCuL6Bxl5IG18vmja0jYF3hwZuE7UgYdGv/Y=)
3: zHx4boZUx9mQ4kmi1AyAMn8HdYg.roa (hash: 2evdzACk+oevIsq4yxjXZwXVQi4UVdSShl8e3fPWgbU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/bf9e51-cc2b-4ff4-86ac-2f7e52fb8bd3/1/bTAG3NKJxH-fWOEo6yl1cjkUS7Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/bf9e51-cc2b-4ff4-86ac-2f7e52fb8bd3/1/bTAG3NKJxH-fWOEo6yl1cjkUS7Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/bTAG3NKJxH-fWOEo6yl1cjkUS7Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 16 Jul 2026 07:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:64:94:2c:f3:ca:4b:77:02:3c:54:11:26:51:2a:44:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d3006dcd289c47f9f58e128eb29757239144bb6
Validity
Not Before: Jul 15 07:01:00 2026 GMT
Not After : Jul 16 07:01:00 2026 GMT
Subject: CN=4e86f4cbd22959df65aa54f9453694a89a54f462
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:37:ac:35:d5:1c:49:96:93:2c:fb:f1:24:1f:
97:c3:f3:43:61:8d:71:2f:37:6a:3b:39:31:b1:3d:
26:b2:3f:89:f4:3c:87:39:2c:65:3c:30:7f:c4:82:
80:2f:ad:b7:5f:2e:d2:ee:fa:ef:24:a6:dc:51:a4:
d5:a5:d7:8a:11:de:24:cc:91:a2:5c:e9:ee:87:6b:
68:88:81:d6:c2:ff:3f:b3:c1:90:0c:d4:9b:be:d7:
2a:59:75:1a:0c:05:c8:5d:b9:91:4c:44:dc:06:d7:
f0:5a:f8:d1:b4:50:3d:c8:4a:7f:39:53:85:c3:3c:
af:fd:b1:fe:fc:d9:2e:d5:a8:b2:dc:46:dc:0b:28:
1f:c4:d0:8d:a5:60:2c:ad:2d:97:43:58:c0:ae:4b:
43:db:07:f1:9e:a8:b7:4e:42:8e:e9:f9:15:a0:3e:
22:3e:97:b9:08:ba:f0:07:9e:9a:26:2e:f1:12:30:
94:89:74:3f:58:25:73:c2:5c:32:02:ee:1a:d3:08:
3d:20:98:6b:2b:72:4e:b1:f8:cd:7c:60:d5:9b:41:
1b:74:47:6e:f4:d0:d0:c9:3e:a2:5e:ef:46:bc:46:
fd:3c:8a:57:bc:3f:2d:93:11:94:38:4e:23:e1:ba:
4b:a2:e0:60:e2:81:19:0d:98:bf:19:61:5c:d0:c3:
c6:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:86:F4:CB:D2:29:59:DF:65:AA:54:F9:45:36:94:A8:9A:54:F4:62
X509v3 Authority Key Identifier:
keyid:6D:30:06:DC:D2:89:C4:7F:9F:58:E1:28:EB:29:75:72:39:14:4B:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bTAG3NKJxH-fWOEo6yl1cjkUS7Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/bf9e51-cc2b-4ff4-86ac-2f7e52fb8bd3/1/bTAG3NKJxH-fWOEo6yl1cjkUS7Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/bf9e51-cc2b-4ff4-86ac-2f7e52fb8bd3/1/bTAG3NKJxH-fWOEo6yl1cjkUS7Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:37:bd:dd:40:1c:7d:3a:01:d9:07:04:78:dc:64:7c:26:a8:
4e:35:b5:70:d1:ac:b9:ff:42:72:7c:04:c2:66:9e:ed:5f:0f:
e1:1b:7c:3b:45:72:ba:ef:14:7a:d0:92:61:d6:cc:2c:83:d0:
3b:70:f7:b8:76:d2:8b:bc:a6:2d:a6:c5:a8:cd:0a:4b:61:84:
fb:16:98:6d:5e:92:49:db:ee:95:ca:e0:e6:0d:51:c0:7d:6f:
99:50:62:69:1b:4b:9d:4a:4a:5e:16:cb:f1:49:ac:d6:31:8c:
b7:ed:5d:d8:e1:d7:75:cd:9e:c7:63:9b:c4:cd:f4:98:93:9f:
4e:ca:23:7d:31:da:ce:c8:f8:df:00:09:0a:89:a6:44:3d:6c:
31:a3:ab:ab:d2:04:28:aa:08:a8:4b:16:9d:f5:dc:63:01:fb:
4c:89:53:50:79:74:15:34:7c:b4:83:13:24:41:c1:92:5c:9d:
69:a7:c1:4e:78:bb:0f:2a:7c:ca:e5:4a:31:80:45:42:9b:c9:
0e:f3:f7:a7:bf:13:6b:60:e1:21:4a:13:85:62:3d:45:97:37:
17:d5:85:a7:1a:19:91:9d:af:40:69:94:4e:22:6e:fc:49:57:
df:97:3a:f4:b3:ee:8c:7e:30:c9:80:23:62:e5:3d:57:92:11:
6f:e9:35:85
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ9klCzzykt3AjxUESZRKkQnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZkMzAwNmRjZDI4OWM0N2Y5ZjU4ZTEyOGViMjk3NTcyMzkx
NDRiYjYwHhcNMjYwNzE1MDcwMTAwWhcNMjYwNzE2MDcwMTAwWjAzMTEwLwYDVQQD
Eyg0ZTg2ZjRjYmQyMjk1OWRmNjVhYTU0Zjk0NTM2OTRhODlhNTRmNDYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0jesNdUcSZaTLPvxJB+Xw/NDYY1x
LzdqOzkxsT0msj+J9DyHOSxlPDB/xIKAL623Xy7S7vrvJKbcUaTVpdeKEd4kzJGi
XOnuh2toiIHWwv8/s8GQDNSbvtcqWXUaDAXIXbmRTETcBtfwWvjRtFA9yEp/OVOF
wzyv/bH+/Nku1aiy3EbcCygfxNCNpWAsrS2XQ1jArktD2wfxnqi3TkKO6fkVoD4i
Ppe5CLrwB56aJi7xEjCUiXQ/WCVzwlwyAu4a0wg9IJhrK3JOsfjNfGDVm0EbdEdu
9NDQyT6iXu9GvEb9PIpXvD8tkxGUOE4j4bpLouBg4oEZDZi/GWFc0MPGKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE6G9MvSKVnfZapU+UU2lKiaVPRiMB8GA1UdIwQY
MBaAFG0wBtzSicR/n1jhKOspdXI5FEu2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYlRBRzNOS0p4SC1mV09FbzZ5bDFjamtVUzdZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy9iZjllNTEtY2MyYi00ZmY0LTg2YWMt
MmY3ZTUyZmI4YmQzLzEvYlRBRzNOS0p4SC1mV09FbzZ5bDFjamtVUzdZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYy9iZjllNTEtY2MyYi00ZmY0LTg2YWMtMmY3ZTUyZmI4YmQz
LzEvYlRBRzNOS0p4SC1mV09FbzZ5bDFjamtVUzdZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZDe93UAc
fToB2QcEeNxkfCaoTjW1cNGsuf9CcnwEwmae7V8P4Rt8O0Vyuu8UetCSYdbMLIPQ
O3D3uHbSi7ymLabFqM0KS2GE+xaYbV6SSdvulcrg5g1RwH1vmVBiaRtLnUpKXhbL
8Ums1jGMt+1d2OHXdc2ex2ObxM30mJOfTsojfTHazsj43wAJCommRD1sMaOrq9IE
KKoIqEsWnfXcYwH7TIlTUHl0FTR8tIMTJEHBklydaafBTni7Dyp8yuVKMYBFQpvJ
DvP3p78Ta2DhIUoThWI9RZc3F9WFpxoZkZ2vQGmUTiJu/ElX35c69LPujH4wyYAj
YuU9V5IRb+k1hQ==
-----END CERTIFICATE-----
Generated at Wed Jul 15 15:00:27 2026 by rpki-client