Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/a2c386-d5e9-4ad9-938a-0d1d174c4351/1/bBp2F5Xw9mv_JHi0aM3g2FHtGIc.mft
File: bBp2F5Xw9mv_JHi0aM3g2FHtGIc.mft (raw, json)
Hash identifier: wmzk2LPCaEnHOM9ljT+46FNNH+h0D1CQP6YDCIjop+4=
Subject key identifier: 99:0C:5D:12:7B:C7:A7:36:D1:9E:66:A9:60:77:8C:86:93:93:74:78
Authority key identifier: 6C:1A:76:17:95:F0:F6:6B:FF:24:78:B4:68:CD:E0:D8:51:ED:18:87
Certificate issuer: /CN=6c1a761795f0f66bff2478b468cde0d851ed1887
Certificate serial: 019F9580B9EE21F084586AB5B9ED9778AD05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bBp2F5Xw9mv_JHi0aM3g2FHtGIc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/a2c386-d5e9-4ad9-938a-0d1d174c4351/1/bBp2F5Xw9mv_JHi0aM3g2FHtGIc.mft
Manifest number: 0FD1
Signing time: Fri 24 Jul 2026 19:01:09 +0000
Manifest this update: Fri 24 Jul 2026 19:01:09 +0000
Manifest next update: Sat 25 Jul 2026 19:01:09 +0000
Files and hashes: 1: 5yx-LhHh5uIomrp_4UWyJH0BrjQ.roa (hash: my/g78XxKs4ZVLWL7XEbiPiVyaVIQqJmYcRP5qZWpSk=)
2: bBp2F5Xw9mv_JHi0aM3g2FHtGIc.crl (hash: 7kOQWg+wLFIqUAinZW3An2BpoAPy1/5EqhKqGX5v+qw=)
3: yWDf5NXYf3V5C4RXp6kM7vpCi5U.roa (hash: 6+Q3eraszgocMXtLwLNNOidcC+Bf57i8X6gv7LDo3os=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/a2c386-d5e9-4ad9-938a-0d1d174c4351/1/bBp2F5Xw9mv_JHi0aM3g2FHtGIc.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/a2c386-d5e9-4ad9-938a-0d1d174c4351/1/bBp2F5Xw9mv_JHi0aM3g2FHtGIc.mft
rsync://rpki.ripe.net/repository/DEFAULT/bBp2F5Xw9mv_JHi0aM3g2FHtGIc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:95:80:b9:ee:21:f0:84:58:6a:b5:b9:ed:97:78:ad:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c1a761795f0f66bff2478b468cde0d851ed1887
Validity
Not Before: Jul 24 19:01:09 2026 GMT
Not After : Jul 25 19:01:09 2026 GMT
Subject: CN=990c5d127bc7a736d19e66a960778c8693937478
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:c6:ca:a7:e6:01:67:13:09:34:1e:63:95:e3:
2d:c6:d1:c5:ea:c6:01:48:d8:7c:ea:02:c9:93:cb:
d1:4e:21:68:5b:fd:d7:bb:1f:b8:e2:ee:5b:4f:ca:
e9:e2:bb:8e:f2:b5:08:3c:23:34:9b:1e:a0:a7:f3:
4a:b8:db:8e:bb:65:8a:42:14:45:0e:93:5b:f8:eb:
8c:b0:56:32:e5:d7:d9:e5:9e:80:01:a3:5c:44:47:
37:9c:57:cf:87:1c:dd:d1:bf:52:2f:77:26:cc:d3:
c9:3d:bf:af:a2:09:4c:8e:8c:de:4b:d5:7e:72:7b:
92:d5:0e:39:d8:e0:69:5c:5d:43:bb:b2:af:ad:f4:
61:5e:53:34:f8:ad:f4:9d:c8:02:01:e9:36:3d:02:
83:6d:31:b8:14:dd:b8:c2:46:ad:f2:bc:92:ff:4f:
6a:1d:65:8e:de:c0:5e:91:c1:c6:a3:09:0c:02:d3:
17:30:fe:1e:ba:ec:46:00:06:e1:e3:86:f3:8b:69:
99:21:5e:16:6f:50:31:7d:fc:cd:21:7c:31:d9:92:
e4:f9:f8:7c:86:9e:b0:7b:c9:fb:5b:be:d6:e4:ee:
da:5c:7f:26:9e:5e:82:c7:3e:0a:b7:d4:42:53:78:
05:78:9f:fb:5b:8a:9a:7f:5d:90:41:bf:ee:9d:b8:
9f:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:0C:5D:12:7B:C7:A7:36:D1:9E:66:A9:60:77:8C:86:93:93:74:78
X509v3 Authority Key Identifier:
keyid:6C:1A:76:17:95:F0:F6:6B:FF:24:78:B4:68:CD:E0:D8:51:ED:18:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bBp2F5Xw9mv_JHi0aM3g2FHtGIc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a2c386-d5e9-4ad9-938a-0d1d174c4351/1/bBp2F5Xw9mv_JHi0aM3g2FHtGIc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a2c386-d5e9-4ad9-938a-0d1d174c4351/1/bBp2F5Xw9mv_JHi0aM3g2FHtGIc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:ca:e8:e3:86:e2:a0:97:af:a6:c3:3b:5b:55:80:5d:1a:6a:
09:52:3e:c3:a6:64:8e:d0:df:a8:bc:c0:17:0d:46:7b:3c:96:
ff:05:ea:a1:a8:67:1b:68:2d:ee:74:59:05:b3:3c:8c:6f:f7:
cb:7b:28:85:eb:5e:7c:74:1d:c0:69:d9:7c:1e:a5:52:3f:73:
ac:1f:a5:eb:9b:48:da:b7:20:01:4a:c7:8e:61:5f:55:e5:87:
3c:0f:0d:33:1d:09:36:91:5e:06:45:60:ec:53:33:c3:bb:6c:
24:2a:43:53:fe:3d:2c:ad:9d:e5:34:2b:c6:65:cd:cf:06:c0:
09:c6:2c:d5:bc:1b:82:cd:2a:30:a3:51:62:eb:a8:96:47:ac:
09:a9:67:b8:99:c4:a0:86:87:10:80:54:5d:03:bb:57:2e:49:
37:dd:01:34:51:a1:9c:a8:6c:89:d0:f4:09:eb:8a:55:df:42:
f9:28:8e:a2:5c:ce:d4:cf:1d:44:ce:91:78:07:1e:ae:02:58:
f0:6b:e1:3e:34:7f:54:78:cc:e6:b1:06:e3:ff:b2:07:b8:85:
6e:da:bf:17:53:e0:d2:74:e8:60:b8:17:c1:4f:3a:69:80:99:
7a:55:e1:81:5f:07:30:2b:2c:fd:a8:7f:ae:10:76:4e:10:0c:
b0:d4:03:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 02:03:36 2026 by rpki-client