Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/adfaea-b7d7-46e5-84de-1602bfef37e9/1/bc0iYSmgbEho-hD-gtImFrsvZps.mft
File: bc0iYSmgbEho-hD-gtImFrsvZps.mft (raw, json)
Hash identifier: H1MV5IXglYL/CBXHX9AkzgFHXWaxX43GwC69NajjTCM=
Subject key identifier: AE:2A:1B:DA:84:F5:51:34:7F:28:51:DE:FF:A5:F6:69:09:42:B9:C5
Authority key identifier: 6D:CD:22:61:29:A0:6C:48:68:FA:10:FE:82:D2:26:16:BB:2F:66:9B
Certificate issuer: /CN=6dcd226129a06c4868fa10fe82d22616bb2f669b
Certificate serial: 019F860D02B2C84D9643F366FD776C21D8E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bc0iYSmgbEho-hD-gtImFrsvZps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/adfaea-b7d7-46e5-84de-1602bfef37e9/1/bc0iYSmgbEho-hD-gtImFrsvZps.mft
Manifest number: 018C
Signing time: Tue 21 Jul 2026 19:00:27 +0000
Manifest this update: Tue 21 Jul 2026 19:00:27 +0000
Manifest next update: Wed 22 Jul 2026 19:00:27 +0000
Files and hashes: 1: 4GwizHDiJW34eVbsS1zqAhW5bAA.asa (hash: tIiey6tQSs3tmmWNU2xS6Ra9dn48lRK3oxZupZMUgQ8=)
2: bc0iYSmgbEho-hD-gtImFrsvZps.crl (hash: 7MpkgB6N6cq5Ldwm0bDwS/1rgTvE4ryyk0qfnAz4TaM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/adfaea-b7d7-46e5-84de-1602bfef37e9/1/bc0iYSmgbEho-hD-gtImFrsvZps.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/adfaea-b7d7-46e5-84de-1602bfef37e9/1/bc0iYSmgbEho-hD-gtImFrsvZps.mft
rsync://rpki.ripe.net/repository/DEFAULT/bc0iYSmgbEho-hD-gtImFrsvZps.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:86:0d:02:b2:c8:4d:96:43:f3:66:fd:77:6c:21:d8:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6dcd226129a06c4868fa10fe82d22616bb2f669b
Validity
Not Before: Jul 21 19:00:27 2026 GMT
Not After : Jul 22 19:00:27 2026 GMT
Subject: CN=ae2a1bda84f551347f2851deffa5f6690942b9c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:aa:14:32:e1:b5:a7:46:5f:f4:62:5c:a9:18:
8e:2b:fd:20:1a:aa:a4:bf:92:36:0b:c5:01:2e:d2:
c6:fe:d1:ff:36:75:a2:20:77:81:22:9d:a2:3e:8f:
82:a9:dc:07:b7:25:49:83:c4:2b:64:9e:0d:de:24:
44:1e:5f:94:7b:b7:11:da:97:e6:a0:2a:00:9c:32:
e6:6a:ba:64:af:23:8c:ef:fe:3f:df:c2:fa:5e:2c:
f2:03:9c:11:c9:cd:18:91:31:77:cd:2e:15:78:ea:
9b:0d:c0:c4:ec:14:f0:30:ce:83:7f:36:03:5d:71:
5b:36:af:5a:fd:52:d3:e4:07:ac:0a:b8:1f:b8:71:
77:2f:17:4a:16:89:10:7e:f9:39:e4:16:a8:21:86:
d7:e6:cc:bc:e6:c9:cd:81:b5:db:a0:96:54:2e:3b:
95:82:53:55:37:0d:15:b5:ca:a5:21:6b:0e:1e:f2:
f3:70:9e:79:57:c7:c1:55:b6:32:71:83:26:bf:1c:
26:fa:a4:83:13:aa:06:17:31:51:e1:41:a2:d1:3a:
6b:bc:0d:f3:ff:f4:02:c8:38:79:c3:fc:d9:3b:e5:
66:2c:e0:a0:b0:d5:15:34:63:6c:7d:29:62:a7:c0:
07:83:c0:9d:ca:d8:2c:f1:c9:2a:35:48:c5:a8:08:
ba:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:2A:1B:DA:84:F5:51:34:7F:28:51:DE:FF:A5:F6:69:09:42:B9:C5
X509v3 Authority Key Identifier:
keyid:6D:CD:22:61:29:A0:6C:48:68:FA:10:FE:82:D2:26:16:BB:2F:66:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc0iYSmgbEho-hD-gtImFrsvZps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/adfaea-b7d7-46e5-84de-1602bfef37e9/1/bc0iYSmgbEho-hD-gtImFrsvZps.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/adfaea-b7d7-46e5-84de-1602bfef37e9/1/bc0iYSmgbEho-hD-gtImFrsvZps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:10:b2:cb:fe:69:49:d4:12:7a:ad:3f:78:a3:9a:29:f9:77:
c7:fc:5d:2b:d2:4c:52:0c:58:a5:66:e5:e6:47:f5:0c:db:14:
1b:c7:0e:e9:ee:87:a0:74:9d:89:1b:99:16:78:32:0e:52:88:
93:1f:6a:31:06:51:10:dd:80:ae:6a:41:c4:51:96:08:84:55:
16:26:71:2d:02:5e:50:31:2b:95:a4:87:59:92:e9:a6:26:82:
df:9a:dd:f3:d2:28:7d:9f:12:27:32:79:c3:12:c1:be:65:db:
fb:df:23:31:4a:44:34:29:fb:fc:d0:a8:05:64:71:5a:a6:0d:
1f:f4:8e:06:b7:31:93:e3:78:e1:84:3a:2c:74:f8:c4:7c:16:
18:0c:3a:59:1c:34:ac:df:cb:3c:a0:6f:28:07:e1:59:2f:8a:
3a:92:f9:0b:5a:6a:5a:f3:6d:c6:1d:50:38:fc:de:0c:4e:0f:
de:ef:87:3d:af:b4:68:db:35:eb:28:fb:a6:13:82:d7:7f:bd:
84:bd:9e:03:75:fd:24:69:ab:8f:38:f4:43:64:2b:03:69:7e:
8f:ec:46:e9:5c:c4:54:b5:db:8f:22:f0:d2:78:3c:19:20:5a:
7f:a5:6c:99:cb:32:1f:cd:79:79:df:0e:db:78:6e:46:89:8f:
00:6f:4f:ca
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+GDQKyyE2WQ/Nm/XdsIdjhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZkY2QyMjYxMjlhMDZjNDg2OGZhMTBmZTgyZDIyNjE2YmIy
ZjY2OWIwHhcNMjYwNzIxMTkwMDI3WhcNMjYwNzIyMTkwMDI3WjAzMTEwLwYDVQQD
EyhhZTJhMWJkYTg0ZjU1MTM0N2YyODUxZGVmZmE1ZjY2OTA5NDJiOWM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz6oUMuG1p0Zf9GJcqRiOK/0gGqqk
v5I2C8UBLtLG/tH/NnWiIHeBIp2iPo+CqdwHtyVJg8QrZJ4N3iREHl+Ue7cR2pfm
oCoAnDLmarpkryOM7/4/38L6XizyA5wRyc0YkTF3zS4VeOqbDcDE7BTwMM6DfzYD
XXFbNq9a/VLT5AesCrgfuHF3LxdKFokQfvk55BaoIYbX5sy85snNgbXboJZULjuV
glNVNw0VtcqlIWsOHvLzcJ55V8fBVbYycYMmvxwm+qSDE6oGFzFR4UGi0TprvA3z
//QCyDh5w/zZO+VmLOCgsNUVNGNsfSlip8AHg8Cdytgs8ckqNUjFqAi6JwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK4qG9qE9VE0fyhR3v+l9mkJQrnFMB8GA1UdIwQY
MBaAFG3NImEpoGxIaPoQ/oLSJha7L2abMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYmMwaVlTbWdiRWhvLWhELWd0SW1GcnN2WnBzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS9hZGZhZWEtYjdkNy00NmU1LTg0ZGUt
MTYwMmJmZWYzN2U5LzEvYmMwaVlTbWdiRWhvLWhELWd0SW1GcnN2WnBzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83YS9hZGZhZWEtYjdkNy00NmU1LTg0ZGUtMTYwMmJmZWYzN2U5
LzEvYmMwaVlTbWdiRWhvLWhELWd0SW1GcnN2WnBzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsxCyy/5p
SdQSeq0/eKOaKfl3x/xdK9JMUgxYpWbl5kf1DNsUG8cO6e6HoHSdiRuZFngyDlKI
kx9qMQZREN2ArmpBxFGWCIRVFiZxLQJeUDErlaSHWZLppiaC35rd89IofZ8SJzJ5
wxLBvmXb+98jMUpENCn7/NCoBWRxWqYNH/SOBrcxk+N44YQ6LHT4xHwWGAw6WRw0
rN/LPKBvKAfhWS+KOpL5C1pqWvNtxh1QOPzeDE4P3u+HPa+0aNs16yj7phOC13+9
hL2eA3X9JGmrjzj0Q2QrA2l+j+xG6VzEVLXbjyLw0ng8GSBaf6VsmcsyH815ed8O
23huRomPAG9Pyg==
-----END CERTIFICATE-----
Generated at Tue Jul 21 23:06:57 2026 by rpki-client