Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/3343d2-5253-4243-a01f-587fc84acefe/1/v1a6mMZ0WmMCbXj8KEciOZ0uuEk.mft
File: v1a6mMZ0WmMCbXj8KEciOZ0uuEk.mft (raw, json)
Hash identifier: gdPnmHqnwiIbz5/ptihHRwh0mtBMTYYIm4TYG2SzMeY=
Subject key identifier: 49:85:5B:15:44:0C:16:2F:EF:B2:B1:B1:FF:51:8E:CD:3D:A4:24:24
Authority key identifier: BF:56:BA:98:C6:74:5A:63:02:6D:78:FC:28:47:22:39:9D:2E:B8:49
Certificate issuer: /CN=bf56ba98c6745a63026d78fc284722399d2eb849
Certificate serial: 019FA33BC5A6390E50B359BF40E3D2B1C0D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v1a6mMZ0WmMCbXj8KEciOZ0uuEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/3343d2-5253-4243-a01f-587fc84acefe/1/v1a6mMZ0WmMCbXj8KEciOZ0uuEk.mft
Manifest number: 140B
Signing time: Mon 27 Jul 2026 11:00:30 +0000
Manifest this update: Mon 27 Jul 2026 11:00:30 +0000
Manifest next update: Tue 28 Jul 2026 11:00:30 +0000
Files and hashes: 1: pBZly4FM6dBwlJDuWkuLuvUQhJg.roa (hash: o71HDV8s+9P3IJ7RipmOqIZNCQQ65Mxlc2gRRdwJM+c=)
2: v1a6mMZ0WmMCbXj8KEciOZ0uuEk.crl (hash: VJp8ZkFXd5uBIOosHRmlL3TiBgBnnaTEtS0STnAyosI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/3343d2-5253-4243-a01f-587fc84acefe/1/v1a6mMZ0WmMCbXj8KEciOZ0uuEk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/3343d2-5253-4243-a01f-587fc84acefe/1/v1a6mMZ0WmMCbXj8KEciOZ0uuEk.mft
rsync://rpki.ripe.net/repository/DEFAULT/v1a6mMZ0WmMCbXj8KEciOZ0uuEk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 11:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a3:3b:c5:a6:39:0e:50:b3:59:bf:40:e3:d2:b1:c0:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf56ba98c6745a63026d78fc284722399d2eb849
Validity
Not Before: Jul 27 11:00:30 2026 GMT
Not After : Jul 28 11:00:30 2026 GMT
Subject: CN=49855b15440c162fefb2b1b1ff518ecd3da42424
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:4d:82:87:43:fb:3a:8f:d3:ca:c7:9f:38:72:
0f:e2:ad:f8:f6:dc:42:85:0b:3c:66:c0:dc:dc:15:
1f:f7:ad:aa:de:f5:3e:5d:9c:3b:bf:d3:e8:b3:16:
6e:39:ee:a6:8f:8a:e5:15:14:78:d8:f4:08:8e:50:
59:c8:b0:58:2b:27:b8:47:1c:69:f1:d7:ec:a3:5b:
54:10:d4:8f:c1:55:20:6e:cd:17:53:97:9f:c6:b7:
4b:bb:2e:60:0a:88:0b:54:20:4f:34:bd:4c:44:2e:
69:67:54:04:5b:62:c7:a5:29:30:a5:6e:9d:98:79:
03:9a:74:8e:7c:e2:0c:df:9d:03:ee:40:9c:0e:3a:
56:65:51:90:3d:1b:75:52:99:9c:d0:c5:6b:af:e0:
46:a6:62:6b:21:46:6d:4c:9a:56:7e:33:70:b9:b7:
62:77:e9:73:c5:c8:d3:83:f6:dd:9c:1e:fa:f0:dd:
8b:a5:28:86:c9:dd:0d:00:45:a8:ca:c9:b4:87:50:
67:b9:df:6b:b5:00:64:0c:c1:d1:25:6b:20:f6:c3:
5f:3b:e1:d4:ec:49:d3:fe:67:7a:19:03:b9:99:26:
ac:4e:e7:5b:89:97:53:49:f0:43:45:5b:a2:99:b7:
54:cf:96:11:5c:15:7b:35:cd:f3:51:86:82:df:18:
36:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:85:5B:15:44:0C:16:2F:EF:B2:B1:B1:FF:51:8E:CD:3D:A4:24:24
X509v3 Authority Key Identifier:
keyid:BF:56:BA:98:C6:74:5A:63:02:6D:78:FC:28:47:22:39:9D:2E:B8:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v1a6mMZ0WmMCbXj8KEciOZ0uuEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/3343d2-5253-4243-a01f-587fc84acefe/1/v1a6mMZ0WmMCbXj8KEciOZ0uuEk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/3343d2-5253-4243-a01f-587fc84acefe/1/v1a6mMZ0WmMCbXj8KEciOZ0uuEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:ce:76:18:21:a8:73:b5:96:2b:7f:1d:3b:1b:93:32:f4:78:
c3:2f:c9:fa:23:08:78:99:1d:68:dc:c7:04:91:02:28:7d:bc:
e9:01:66:ce:46:11:09:75:00:cd:11:71:71:6b:bf:ba:49:d3:
ed:bf:af:b3:f6:ae:38:9f:16:d7:bd:cb:92:74:08:ee:23:d5:
09:0d:ec:d5:6f:7a:f9:cc:d4:77:a7:df:e2:a2:f0:f8:e2:3f:
68:6d:e8:e7:89:47:c4:74:63:24:28:50:dc:79:fe:7b:70:2a:
eb:96:ea:2e:8c:47:5e:66:3c:c3:5e:34:1c:02:a2:68:8b:27:
a8:64:37:99:28:c2:6a:e5:17:23:c1:c2:a6:49:15:d2:5e:1c:
5d:30:f4:50:45:fc:1b:a1:18:80:24:f8:19:81:ff:2f:b0:88:
c4:4f:62:08:d6:01:23:3a:38:00:22:76:e0:95:d3:cc:b2:61:
48:f4:39:8b:2c:8c:31:9c:1e:68:14:d1:20:eb:85:ad:4d:8b:
de:b3:0c:13:b7:72:dc:1e:da:af:83:be:56:e1:08:08:c8:0c:
4c:a3:2b:db:0b:2e:bf:37:f7:93:ad:db:e1:8e:b8:70:94:30:
2f:00:f2:5e:32:88:37:11:6c:f9:10:c1:9d:29:7a:92:e9:d9:
d0:96:c7:6b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+jO8WmOQ5Qs1m/QOPSscDVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJmNTZiYTk4YzY3NDVhNjMwMjZkNzhmYzI4NDcyMjM5OWQy
ZWI4NDkwHhcNMjYwNzI3MTEwMDMwWhcNMjYwNzI4MTEwMDMwWjAzMTEwLwYDVQQD
Eyg0OTg1NWIxNTQ0MGMxNjJmZWZiMmIxYjFmZjUxOGVjZDNkYTQyNDI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu02Ch0P7Oo/TysefOHIP4q349txC
hQs8ZsDc3BUf962q3vU+XZw7v9PosxZuOe6mj4rlFRR42PQIjlBZyLBYKye4Rxxp
8dfso1tUENSPwVUgbs0XU5efxrdLuy5gCogLVCBPNL1MRC5pZ1QEW2LHpSkwpW6d
mHkDmnSOfOIM350D7kCcDjpWZVGQPRt1Upmc0MVrr+BGpmJrIUZtTJpWfjNwubdi
d+lzxcjTg/bdnB768N2LpSiGyd0NAEWoysm0h1Bnud9rtQBkDMHRJWsg9sNfO+HU
7EnT/md6GQO5mSasTudbiZdTSfBDRVuimbdUz5YRXBV7Nc3zUYaC3xg2ZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEmFWxVEDBYv77Kxsf9Rjs09pCQkMB8GA1UdIwQY
MBaAFL9WupjGdFpjAm14/ChHIjmdLrhJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdjFhNm1NWjBXbU1DYlhqOEtFY2lPWjB1dUVrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy8zMzQzZDItNTI1My00MjQzLWEwMWYt
NTg3ZmM4NGFjZWZlLzEvdjFhNm1NWjBXbU1DYlhqOEtFY2lPWjB1dUVrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNy8zMzQzZDItNTI1My00MjQzLWEwMWYtNTg3ZmM4NGFjZWZl
LzEvdjFhNm1NWjBXbU1DYlhqOEtFY2lPWjB1dUVrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhM52GCGo
c7WWK38dOxuTMvR4wy/J+iMIeJkdaNzHBJECKH286QFmzkYRCXUAzRFxcWu/uknT
7b+vs/auOJ8W173LknQI7iPVCQ3s1W96+czUd6ff4qLw+OI/aG3o54lHxHRjJChQ
3Hn+e3Aq65bqLoxHXmY8w140HAKiaIsnqGQ3mSjCauUXI8HCpkkV0l4cXTD0UEX8
G6EYgCT4GYH/L7CIxE9iCNYBIzo4ACJ24JXTzLJhSPQ5iyyMMZweaBTRIOuFrU2L
3rMME7dy3B7ar4O+VuEICMgMTKMr2wsuvzf3k63b4Y64cJQwLwDyXjKINxFs+RDB
nSl6kunZ0JbHaw==
-----END CERTIFICATE-----
Generated at Mon Jul 27 19:34:32 2026 by rpki-client