Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/b8575a-8b63-4532-81ed-efe5bfc79994/1/BhYY9tMA3yz1ni35f_6flWoj5jw.mft
File: BhYY9tMA3yz1ni35f_6flWoj5jw.mft (raw, json)
Hash identifier: 3Q05w5CHh9oqgq7DGlNvldvGL6SoA0Myz1kLlMX23eQ=
Subject key identifier: A9:31:D4:57:E9:A5:C8:29:47:A1:46:64:83:18:32:03:72:68:61:99
Authority key identifier: 06:16:18:F6:D3:00:DF:2C:F5:9E:2D:F9:7F:FE:9F:95:6A:23:E6:3C
Certificate issuer: /CN=061618f6d300df2cf59e2df97ffe9f956a23e63c
Certificate serial: 019F11F79BA3C7C6D3A6091509304A6D1B36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BhYY9tMA3yz1ni35f_6flWoj5jw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/b8575a-8b63-4532-81ed-efe5bfc79994/1/BhYY9tMA3yz1ni35f_6flWoj5jw.mft
Manifest number: 1985
Signing time: Mon 29 Jun 2026 06:01:07 +0000
Manifest this update: Mon 29 Jun 2026 06:01:07 +0000
Manifest next update: Tue 30 Jun 2026 06:01:07 +0000
Files and hashes: 1: BhYY9tMA3yz1ni35f_6flWoj5jw.crl (hash: zNIB2QxHOm1IN1vKrIIjgbddINAfWFrCS/iunyvfGrU=)
2: T4qruvGZFs_aXMb97g2-jFZUYXE.asa (hash: mtheudfewBlecebzdDrT6Ithx8eec3qH3GXNnYLbTlg=)
3: iuE68_Zu0uK275nJpb_6tInq2NE.roa (hash: vi8Q6eX9dc3jErUuvQfc1dJyq7p1p41pFgY91fJ0bdo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/b8575a-8b63-4532-81ed-efe5bfc79994/1/BhYY9tMA3yz1ni35f_6flWoj5jw.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/b8575a-8b63-4532-81ed-efe5bfc79994/1/BhYY9tMA3yz1ni35f_6flWoj5jw.mft
rsync://rpki.ripe.net/repository/DEFAULT/BhYY9tMA3yz1ni35f_6flWoj5jw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:11:f7:9b:a3:c7:c6:d3:a6:09:15:09:30:4a:6d:1b:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=061618f6d300df2cf59e2df97ffe9f956a23e63c
Validity
Not Before: Jun 29 06:01:07 2026 GMT
Not After : Jun 30 06:01:07 2026 GMT
Subject: CN=a931d457e9a5c82947a146648318320372686199
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:74:7f:39:fe:34:00:c3:dc:ab:79:59:82:9c:
59:e7:6f:f8:ac:d8:ec:68:eb:52:13:1e:cc:97:ef:
c5:f2:af:37:94:3c:39:7e:68:89:91:54:45:d5:33:
b3:d0:ef:a5:fe:67:ee:94:7a:f2:3d:c4:ac:ed:bf:
b9:c9:50:45:2e:0d:fc:ff:85:07:59:5e:30:54:c3:
b2:01:5c:55:b5:7a:3f:fe:aa:1b:84:b9:4e:93:e9:
30:33:7f:3a:2f:66:e2:8c:13:38:8b:2d:00:4c:67:
ad:01:8f:44:c0:5e:c2:8a:63:f0:58:34:ed:90:a1:
e8:52:fd:42:53:39:8b:29:01:ae:db:55:7e:c1:80:
0b:4b:3c:06:07:cb:4d:42:ef:ce:ac:21:bf:9f:37:
6b:ce:23:c3:b3:1b:d5:a2:c7:c6:09:c4:ec:76:7a:
22:74:19:44:8e:d9:49:e3:01:12:bb:2c:43:1a:65:
b8:cd:41:63:78:0e:37:5a:45:ed:8b:44:04:00:f0:
fe:ba:9d:a1:7a:a7:08:06:30:5a:8d:40:a2:d8:60:
2b:52:90:80:eb:ac:d9:6e:d3:ae:21:e4:74:01:43:
e2:8f:4b:76:a3:34:11:1c:9d:2c:9b:b7:97:bf:a0:
22:35:0e:6a:e8:0f:bd:bc:95:58:6a:7a:3c:aa:24:
fa:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:31:D4:57:E9:A5:C8:29:47:A1:46:64:83:18:32:03:72:68:61:99
X509v3 Authority Key Identifier:
keyid:06:16:18:F6:D3:00:DF:2C:F5:9E:2D:F9:7F:FE:9F:95:6A:23:E6:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BhYY9tMA3yz1ni35f_6flWoj5jw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/b8575a-8b63-4532-81ed-efe5bfc79994/1/BhYY9tMA3yz1ni35f_6flWoj5jw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/b8575a-8b63-4532-81ed-efe5bfc79994/1/BhYY9tMA3yz1ni35f_6flWoj5jw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:93:cf:f3:5d:d7:4f:93:fc:d5:5d:3c:ff:02:54:5a:88:aa:
2e:3c:6c:dd:e5:f0:b1:f4:6b:f8:62:be:86:7b:0c:39:03:c5:
25:6d:6d:d9:0c:2e:86:eb:22:4a:81:87:11:d8:63:a7:40:45:
ef:f3:91:e3:c7:5a:45:71:0e:57:9c:a3:e5:43:52:03:ba:66:
cd:dc:ae:50:83:0d:62:93:85:64:69:9d:a9:a8:62:4f:f1:5e:
19:51:44:80:69:67:7a:24:a7:54:11:b5:21:62:03:f3:a8:58:
5a:7a:75:f2:ec:5a:93:e2:8e:ae:5d:cf:78:c4:05:83:5d:64:
ea:79:2c:3c:f0:62:92:f6:91:51:c8:dc:c4:38:3a:87:88:f4:
d7:7b:99:01:99:bd:bd:20:18:d1:48:ea:26:c4:e2:a4:5e:80:
d0:b2:a5:fe:df:b3:12:c1:7f:6b:14:fa:aa:f0:3a:d2:15:8c:
80:aa:11:e9:18:a4:aa:b5:29:f3:1a:9d:df:a1:be:9c:63:95:
89:d9:ac:4d:0a:19:e3:9b:53:b2:e8:a2:00:d8:b4:3e:a2:0a:
f0:ad:bd:23:df:1a:e9:87:8b:1e:43:7c:e8:e0:4f:2b:64:b6:
8a:56:4f:bf:2f:1d:fa:b7:75:ad:d4:3a:8a:16:a1:53:21:c0:
d8:47:5d:23
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8R95ujx8bTpgkVCTBKbRs2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA2MTYxOGY2ZDMwMGRmMmNmNTllMmRmOTdmZmU5Zjk1NmEy
M2U2M2MwHhcNMjYwNjI5MDYwMTA3WhcNMjYwNjMwMDYwMTA3WjAzMTEwLwYDVQQD
EyhhOTMxZDQ1N2U5YTVjODI5NDdhMTQ2NjQ4MzE4MzIwMzcyNjg2MTk5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAunR/Of40AMPcq3lZgpxZ52/4rNjs
aOtSEx7Ml+/F8q83lDw5fmiJkVRF1TOz0O+l/mfulHryPcSs7b+5yVBFLg38/4UH
WV4wVMOyAVxVtXo//qobhLlOk+kwM386L2bijBM4iy0ATGetAY9EwF7CimPwWDTt
kKHoUv1CUzmLKQGu21V+wYALSzwGB8tNQu/OrCG/nzdrziPDsxvVosfGCcTsdnoi
dBlEjtlJ4wESuyxDGmW4zUFjeA43WkXti0QEAPD+up2heqcIBjBajUCi2GArUpCA
66zZbtOuIeR0AUPij0t2ozQRHJ0sm7eXv6AiNQ5q6A+9vJVYano8qiT6YwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKkx1FfppcgpR6FGZIMYMgNyaGGZMB8GA1UdIwQY
MBaAFAYWGPbTAN8s9Z4t+X/+n5VqI+Y8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQmhZWTl0TUEzeXoxbmkzNWZfNmZsV29qNWp3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS9iODU3NWEtOGI2My00NTMyLTgxZWQt
ZWZlNWJmYzc5OTk0LzEvQmhZWTl0TUEzeXoxbmkzNWZfNmZsV29qNWp3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OS9iODU3NWEtOGI2My00NTMyLTgxZWQtZWZlNWJmYzc5OTk0
LzEvQmhZWTl0TUEzeXoxbmkzNWZfNmZsV29qNWp3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlpPP813X
T5P81V08/wJUWoiqLjxs3eXwsfRr+GK+hnsMOQPFJW1t2QwuhusiSoGHEdhjp0BF
7/OR48daRXEOV5yj5UNSA7pmzdyuUIMNYpOFZGmdqahiT/FeGVFEgGlneiSnVBG1
IWID86hYWnp18uxak+KOrl3PeMQFg11k6nksPPBikvaRUcjcxDg6h4j013uZAZm9
vSAY0UjqJsTipF6A0LKl/t+zEsF/axT6qvA60hWMgKoR6RikqrUp8xqd36G+nGOV
idmsTQoZ45tTsuiiANi0PqIK8K29I98a6YeLHkN86OBPK2S2ilZPvy8d+rd1rdQ6
ihahUyHA2EddIw==
-----END CERTIFICATE-----
Generated at Mon Jun 29 10:42:42 2026 by rpki-client