Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/cf0715-b993-4348-97e9-6ec982951cf7/1/bPL7D6Ut4TwzZonPP0gp1jUGdQ8.mft
File: bPL7D6Ut4TwzZonPP0gp1jUGdQ8.mft (raw, json)
Hash identifier: zivWZaFOc5XVg6ioK/cXYL0O4TkP+iJyqyp5HlB7uQE=
Subject key identifier: 17:73:9B:85:9C:E1:37:72:25:AA:50:C9:1A:94:A2:26:E0:A5:15:12
Authority key identifier: 6C:F2:FB:0F:A5:2D:E1:3C:33:66:89:CF:3F:48:29:D6:35:06:75:0F
Certificate issuer: /CN=6cf2fb0fa52de13c336689cf3f4829d63506750f
Certificate serial: 019E4FC71F9D35286C1391BF49479EBACB7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bPL7D6Ut4TwzZonPP0gp1jUGdQ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/cf0715-b993-4348-97e9-6ec982951cf7/1/bPL7D6Ut4TwzZonPP0gp1jUGdQ8.mft
Manifest number: 1920
Signing time: Fri 22 May 2026 13:01:50 +0000
Manifest this update: Fri 22 May 2026 13:01:50 +0000
Manifest next update: Sat 23 May 2026 13:01:50 +0000
Files and hashes: 1: STaAwjJw5o5YD77UFMiE3P3OF-8.roa (hash: ZyDnnvOoabqOZyAYi7oZ+XdKWhqE0mG6Qq6YUwDEsw0=)
2: bPL7D6Ut4TwzZonPP0gp1jUGdQ8.crl (hash: 7rijcP84wF3fdTP9nFt4Qn28Facnz80/1K5jJHNKnMA=)
3: bscFx-8WZDo1BLtY9Qu-MWUUme0.roa (hash: +4tdj917MYxkU3jVhML6xKHXxs+Te1nlf+Ukm7WotRQ=)
4: s4d1WKYP4Jxij26Bj_2PiI6IzLU.roa (hash: DVgyuxaELvhEOBhDUYXg4JM856u4ROpCMZfu6veKFDA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/cf0715-b993-4348-97e9-6ec982951cf7/1/bPL7D6Ut4TwzZonPP0gp1jUGdQ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/cf0715-b993-4348-97e9-6ec982951cf7/1/bPL7D6Ut4TwzZonPP0gp1jUGdQ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/bPL7D6Ut4TwzZonPP0gp1jUGdQ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 May 2026 08:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:4f:c7:1f:9d:35:28:6c:13:91:bf:49:47:9e:ba:cb:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6cf2fb0fa52de13c336689cf3f4829d63506750f
Validity
Not Before: May 22 13:01:50 2026 GMT
Not After : May 23 13:01:50 2026 GMT
Subject: CN=17739b859ce1377225aa50c91a94a226e0a51512
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:56:02:95:e8:d7:04:1d:70:ec:76:88:36:54:
cd:da:4e:b6:63:49:48:f7:0e:2c:3f:2c:0a:70:1f:
70:8a:56:c2:e2:7f:7c:af:54:a4:9b:e7:4a:1c:1d:
2d:1c:d3:90:ea:94:89:c8:fa:ab:f5:cd:77:2b:29:
a5:3e:ce:0f:18:23:9c:a5:9b:57:1f:fc:c6:fe:93:
be:39:2b:cd:6c:c0:73:5c:78:db:e8:a8:73:1f:d7:
02:a4:6a:50:fd:b9:69:98:78:46:c7:9f:ed:04:1f:
1d:7c:2a:b9:36:3b:8e:05:f7:c7:f3:d2:d6:29:4a:
17:9b:94:09:48:04:1e:29:29:d6:40:b7:bd:bd:84:
f8:f3:2d:67:00:5a:5d:84:87:33:05:96:c9:4d:01:
68:03:98:cf:fd:50:77:52:13:41:10:47:64:f4:c0:
a0:06:bb:b0:f7:6b:c2:6e:b8:be:c7:da:54:2b:88:
fa:3c:d7:f1:92:a1:3d:83:c4:ce:bc:2b:c1:10:55:
2b:29:3c:08:54:92:d6:e5:76:94:a3:63:a9:72:5a:
4f:f3:52:22:ef:e8:3d:67:8b:eb:92:f1:7a:a4:ec:
e5:11:83:b8:ff:54:51:90:18:b2:d4:0f:65:9d:59:
84:b9:25:07:6a:79:eb:87:bc:1e:43:2e:ef:23:d3:
e0:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:73:9B:85:9C:E1:37:72:25:AA:50:C9:1A:94:A2:26:E0:A5:15:12
X509v3 Authority Key Identifier:
keyid:6C:F2:FB:0F:A5:2D:E1:3C:33:66:89:CF:3F:48:29:D6:35:06:75:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bPL7D6Ut4TwzZonPP0gp1jUGdQ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/cf0715-b993-4348-97e9-6ec982951cf7/1/bPL7D6Ut4TwzZonPP0gp1jUGdQ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/cf0715-b993-4348-97e9-6ec982951cf7/1/bPL7D6Ut4TwzZonPP0gp1jUGdQ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:ab:5d:d4:e6:8d:3f:c9:84:a1:ef:5d:ed:0b:b1:e9:6d:bf:
a5:da:86:cf:a9:54:5e:c5:a3:cc:1d:ff:fc:ca:d9:7b:c6:bc:
e9:da:55:52:f1:e7:a8:22:76:11:d9:1c:44:02:8a:40:60:1f:
1b:f2:07:6c:76:12:89:4a:26:8e:00:ad:b6:c5:e2:49:b5:49:
22:5c:c2:aa:0a:cf:e9:0a:18:7a:f4:9b:63:da:95:0f:81:14:
cc:b7:0f:29:e5:38:c1:9e:6d:66:b9:8a:2c:10:0e:fa:8b:6d:
8e:55:8e:94:02:ea:b8:99:cd:18:0e:e2:94:b0:70:df:41:bf:
1f:c8:7a:f8:ac:18:36:c5:f1:58:66:a8:16:4b:e4:24:b7:ff:
85:7d:81:f2:58:02:d2:6d:cf:29:0c:7e:3e:f8:4e:2f:7b:fb:
8c:29:03:68:6a:b6:01:91:cf:2d:38:91:65:65:c4:70:ba:6c:
20:61:1b:af:ef:58:67:e3:52:a2:3b:ad:ac:f5:51:36:45:f1:
f6:50:fc:6d:ec:48:d1:3e:fd:cf:e5:f9:c1:78:00:26:a8:0e:
09:6d:14:b9:0c:fc:5c:b4:0f:55:af:19:1f:51:e2:dd:5d:20:
db:5f:2c:07:ac:47:fe:b9:f2:47:35:82:69:60:66:99:ea:09:
f3:01:34:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 22 15:09:47 2026 by rpki-client