Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/f800f1-74ae-4c19-a7cf-31b36f579f06/1/B-pOiEZt5MiWCUAo8c8NtmU2DTI.mft
File: B-pOiEZt5MiWCUAo8c8NtmU2DTI.mft (raw, json)
Hash identifier: ZtJf25Lt/IgCFWythOPrvRlD7xdROtqv2LZRk+lPOKo=
Subject key identifier: 30:57:12:3B:9B:8C:58:3C:05:FF:FE:81:A6:3A:D6:34:8B:B2:B0:C9
Authority key identifier: 07:EA:4E:88:46:6D:E4:C8:96:09:40:28:F1:CF:0D:B6:65:36:0D:32
Certificate issuer: /CN=07ea4e88466de4c896094028f1cf0db665360d32
Certificate serial: 019F9EBA6BE57E3FE3DF3F03510DE376F550
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B-pOiEZt5MiWCUAo8c8NtmU2DTI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/f800f1-74ae-4c19-a7cf-31b36f579f06/1/B-pOiEZt5MiWCUAo8c8NtmU2DTI.mft
Manifest number: 19CE
Signing time: Sun 26 Jul 2026 14:00:45 +0000
Manifest this update: Sun 26 Jul 2026 14:00:45 +0000
Manifest next update: Mon 27 Jul 2026 14:00:45 +0000
Files and hashes: 1: B-pOiEZt5MiWCUAo8c8NtmU2DTI.crl (hash: C84jWg8bJm8fRBGkSfM5dBRk0XbXud0MZxZ6fQrHy18=)
2: Kykq1xGxMlT5a0eYnS1HXmTKDxA.roa (hash: +Eb/M7C3hM4Sh969DjZVwwfd7ldL2GxYpQACuuK/nSo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/f800f1-74ae-4c19-a7cf-31b36f579f06/1/B-pOiEZt5MiWCUAo8c8NtmU2DTI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/f800f1-74ae-4c19-a7cf-31b36f579f06/1/B-pOiEZt5MiWCUAo8c8NtmU2DTI.mft
rsync://rpki.ripe.net/repository/DEFAULT/B-pOiEZt5MiWCUAo8c8NtmU2DTI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 14:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:9e:ba:6b:e5:7e:3f:e3:df:3f:03:51:0d:e3:76:f5:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07ea4e88466de4c896094028f1cf0db665360d32
Validity
Not Before: Jul 26 14:00:45 2026 GMT
Not After : Jul 27 14:00:45 2026 GMT
Subject: CN=3057123b9b8c583c05fffe81a63ad6348bb2b0c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:9b:3e:94:93:05:5b:b2:fd:b2:9f:fd:ae:c2:
e1:a8:b8:8d:bf:7f:9b:46:3c:73:a3:9d:0a:53:f0:
ca:97:02:52:f0:ea:aa:86:63:f4:29:6d:c1:eb:6b:
24:f4:5e:95:8a:51:bb:d5:8d:19:a2:5e:7c:0f:77:
76:ee:f7:25:4f:aa:cb:c2:12:97:4f:86:bb:a5:de:
b2:a8:ef:b3:4b:64:f2:c5:ca:9b:0d:e8:60:f4:7e:
3b:b5:0b:68:cb:92:0b:ee:6c:1e:91:9d:0c:30:5b:
30:bd:34:67:8d:b6:f1:38:85:e7:1e:c7:08:37:17:
02:09:c0:ea:bf:4d:ac:7c:97:21:26:69:36:df:b5:
0f:47:72:41:d4:a9:43:f5:63:ec:dc:a4:76:04:d1:
d8:fd:87:6d:ac:4a:9f:c3:d0:82:92:a1:e6:7b:94:
31:27:e9:23:70:fb:21:bc:93:6e:e3:d2:14:c1:34:
1b:f6:9b:b7:36:3c:4c:fe:be:1d:0f:95:fe:47:d4:
ba:2f:b6:a7:bf:28:75:11:d3:92:35:64:2c:a3:ac:
2b:42:bd:e5:a5:ad:6f:c7:2e:81:8b:92:6c:7f:43:
f0:b0:dc:f4:14:4c:e6:1d:b4:aa:4d:cf:1b:70:77:
e7:aa:c8:35:80:23:41:3b:e7:9f:a8:49:c4:3b:e0:
6f:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:57:12:3B:9B:8C:58:3C:05:FF:FE:81:A6:3A:D6:34:8B:B2:B0:C9
X509v3 Authority Key Identifier:
keyid:07:EA:4E:88:46:6D:E4:C8:96:09:40:28:F1:CF:0D:B6:65:36:0D:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B-pOiEZt5MiWCUAo8c8NtmU2DTI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/f800f1-74ae-4c19-a7cf-31b36f579f06/1/B-pOiEZt5MiWCUAo8c8NtmU2DTI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/f800f1-74ae-4c19-a7cf-31b36f579f06/1/B-pOiEZt5MiWCUAo8c8NtmU2DTI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:98:62:d2:d4:a6:69:6c:d0:2c:df:5e:0a:89:08:e6:c5:a4:
0e:2d:39:8c:02:fe:0b:ee:60:5c:1d:55:6b:8c:28:cc:b0:77:
ca:28:4b:b9:58:23:83:5e:79:25:4c:02:09:18:90:6e:25:71:
ba:86:e0:9c:55:81:ac:30:2b:22:85:e4:85:bc:fa:c1:5c:8f:
bf:ab:44:24:f1:6b:20:d4:38:f5:33:e2:28:49:03:f6:6f:03:
b8:16:ed:31:fd:9f:f6:78:1a:86:0d:da:95:53:f6:94:66:59:
c1:2f:82:20:e7:42:a5:48:93:75:f2:d1:33:66:20:40:06:f7:
55:25:49:c7:a1:9e:ad:1e:63:55:c5:4c:91:84:aa:4c:87:ba:
b8:35:0f:01:db:bc:d5:51:67:55:ce:62:33:53:29:f4:b5:6d:
aa:b0:38:e9:f9:6b:04:3f:84:e2:bf:20:98:81:34:02:2a:8d:
fb:8e:c6:70:d2:4f:cd:fd:45:d6:83:ca:32:c5:03:ce:12:8d:
0a:5f:c2:42:4e:e5:d0:95:7a:72:d8:df:ab:24:47:0d:9a:1d:
de:b5:3b:66:ea:9c:58:33:d7:1b:cf:36:b4:6d:7d:a9:e9:81:
3e:60:e6:8e:4a:46:47:05:54:fb:08:24:51:c0:5b:bc:b1:4f:
9d:fa:f0:ed
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+eumvlfj/j3z8DUQ3jdvVQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA3ZWE0ZTg4NDY2ZGU0Yzg5NjA5NDAyOGYxY2YwZGI2NjUz
NjBkMzIwHhcNMjYwNzI2MTQwMDQ1WhcNMjYwNzI3MTQwMDQ1WjAzMTEwLwYDVQQD
EygzMDU3MTIzYjliOGM1ODNjMDVmZmZlODFhNjNhZDYzNDhiYjJiMGM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxps+lJMFW7L9sp/9rsLhqLiNv3+b
Rjxzo50KU/DKlwJS8OqqhmP0KW3B62sk9F6VilG71Y0Zol58D3d27vclT6rLwhKX
T4a7pd6yqO+zS2TyxcqbDehg9H47tQtoy5IL7mwekZ0MMFswvTRnjbbxOIXnHscI
NxcCCcDqv02sfJchJmk237UPR3JB1KlD9WPs3KR2BNHY/YdtrEqfw9CCkqHme5Qx
J+kjcPshvJNu49IUwTQb9pu3NjxM/r4dD5X+R9S6L7anvyh1EdOSNWQso6wrQr3l
pa1vxy6Bi5Jsf0PwsNz0FEzmHbSqTc8bcHfnqsg1gCNBO+efqEnEO+Bv6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDBXEjubjFg8Bf/+gaY61jSLsrDJMB8GA1UdIwQY
MBaAFAfqTohGbeTIlglAKPHPDbZlNg0yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQi1wT2lFWnQ1TWlXQ1VBbzhjOE50bVUyRFRJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS9mODAwZjEtNzRhZS00YzE5LWE3Y2Yt
MzFiMzZmNTc5ZjA2LzEvQi1wT2lFWnQ1TWlXQ1VBbzhjOE50bVUyRFRJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS9mODAwZjEtNzRhZS00YzE5LWE3Y2YtMzFiMzZmNTc5ZjA2
LzEvQi1wT2lFWnQ1TWlXQ1VBbzhjOE50bVUyRFRJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtJhi0tSm
aWzQLN9eCokI5sWkDi05jAL+C+5gXB1Va4wozLB3yihLuVgjg155JUwCCRiQbiVx
uobgnFWBrDArIoXkhbz6wVyPv6tEJPFrINQ49TPiKEkD9m8DuBbtMf2f9ngahg3a
lVP2lGZZwS+CIOdCpUiTdfLRM2YgQAb3VSVJx6GerR5jVcVMkYSqTIe6uDUPAdu8
1VFnVc5iM1Mp9LVtqrA46flrBD+E4r8gmIE0AiqN+47GcNJPzf1F1oPKMsUDzhKN
Cl/CQk7l0JV6ctjfqyRHDZod3rU7ZuqcWDPXG882tG19qemBPmDmjkpGRwVU+wgk
UcBbvLFPnfrw7Q==
-----END CERTIFICATE-----
Generated at Sun Jul 26 15:51:19 2026 by rpki-client