Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/9dfcd5-07d6-4ad8-ad1d-b60fd67997bb/1/B-pSPsf5N3oanl1vqGgX7T1sCoI.mft
File: B-pSPsf5N3oanl1vqGgX7T1sCoI.mft (raw, json)
Hash identifier: RdUct+3TbVlwzVoHbeILrJOqdr007EVyDcTaqkOIWeI=
Subject key identifier: BF:3D:55:F7:84:83:D3:ED:DC:6E:77:8A:C4:74:A0:7C:2C:34:B4:BF
Authority key identifier: 07:EA:52:3E:C7:F9:37:7A:1A:9E:5D:6F:A8:68:17:ED:3D:6C:0A:82
Certificate issuer: /CN=07ea523ec7f9377a1a9e5d6fa86817ed3d6c0a82
Certificate serial: 019F92115DC0747E50C690C70045F81163E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B-pSPsf5N3oanl1vqGgX7T1sCoI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/9dfcd5-07d6-4ad8-ad1d-b60fd67997bb/1/B-pSPsf5N3oanl1vqGgX7T1sCoI.mft
Manifest number: 19C5
Signing time: Fri 24 Jul 2026 03:00:39 +0000
Manifest this update: Fri 24 Jul 2026 03:00:39 +0000
Manifest next update: Sat 25 Jul 2026 03:00:39 +0000
Files and hashes: 1: B-pSPsf5N3oanl1vqGgX7T1sCoI.crl (hash: pJZZ3zkHWXMWYGYNTQCqYarUT8v2OH/JVBmCn9Y2O3U=)
2: KAN-qjqmnh5cqoy6zcPSS-sENok.roa (hash: KIM13RN1rwVfiqcH/vu91prDVqpHnTdoOYAr3zB4tTI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/9dfcd5-07d6-4ad8-ad1d-b60fd67997bb/1/B-pSPsf5N3oanl1vqGgX7T1sCoI.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/9dfcd5-07d6-4ad8-ad1d-b60fd67997bb/1/B-pSPsf5N3oanl1vqGgX7T1sCoI.mft
rsync://rpki.ripe.net/repository/DEFAULT/B-pSPsf5N3oanl1vqGgX7T1sCoI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:11:5d:c0:74:7e:50:c6:90:c7:00:45:f8:11:63:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07ea523ec7f9377a1a9e5d6fa86817ed3d6c0a82
Validity
Not Before: Jul 24 03:00:39 2026 GMT
Not After : Jul 25 03:00:39 2026 GMT
Subject: CN=bf3d55f78483d3eddc6e778ac474a07c2c34b4bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:52:a9:14:da:89:32:70:f0:5c:8c:22:fb:ac:
2b:70:c1:22:e7:b1:7a:1b:e7:6a:45:72:55:b1:6f:
f3:0e:a2:2f:bd:70:59:bd:ed:b7:8d:0e:93:94:10:
42:8f:3f:9a:ea:56:33:d8:f8:8f:f7:9e:ba:85:e8:
ad:8d:dc:1a:3a:37:cf:61:24:49:21:9c:9d:4d:d8:
bf:69:52:69:31:e0:5e:29:45:f7:73:80:f2:ee:45:
bd:3e:7c:36:74:a2:d8:b7:d6:ac:e8:85:31:04:d2:
1e:14:d8:b4:69:d0:3a:8e:4a:a7:47:3d:06:d9:f9:
ec:d1:e6:ba:70:10:f6:00:aa:e6:d2:ef:04:6e:ef:
5f:bc:95:26:7a:31:29:f4:0c:44:9d:ed:04:e5:91:
12:4d:ca:d4:7b:4d:a0:28:82:e0:44:52:4e:83:7a:
44:92:3d:a5:dc:39:c9:86:8d:40:f5:97:ee:9d:4d:
76:e1:1e:81:61:b6:2e:1d:4f:fc:33:a5:28:6a:33:
8c:05:95:31:14:19:6d:4c:79:a7:16:53:c1:5f:be:
76:77:a2:5d:92:ff:64:9f:38:14:cf:56:59:41:f9:
10:a9:94:79:9a:27:60:14:90:e1:b5:a0:87:0c:3e:
53:db:3b:b4:71:a3:b3:aa:d6:ce:b4:39:9c:08:50:
d8:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:3D:55:F7:84:83:D3:ED:DC:6E:77:8A:C4:74:A0:7C:2C:34:B4:BF
X509v3 Authority Key Identifier:
keyid:07:EA:52:3E:C7:F9:37:7A:1A:9E:5D:6F:A8:68:17:ED:3D:6C:0A:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B-pSPsf5N3oanl1vqGgX7T1sCoI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/9dfcd5-07d6-4ad8-ad1d-b60fd67997bb/1/B-pSPsf5N3oanl1vqGgX7T1sCoI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/9dfcd5-07d6-4ad8-ad1d-b60fd67997bb/1/B-pSPsf5N3oanl1vqGgX7T1sCoI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:ed:d1:b8:a9:f6:e8:bc:af:6b:01:4e:18:dd:30:fe:d8:a4:
12:7f:a1:99:c9:4f:e2:6e:22:79:35:8c:83:13:be:77:56:52:
83:61:8a:36:e9:a9:f7:04:f9:91:ed:16:b8:c5:f1:4e:46:f5:
c2:8c:c5:24:b5:a0:37:96:94:2e:bf:2d:6e:b1:e5:3a:b1:89:
18:fd:d5:51:3b:99:78:6f:68:21:e7:55:37:1b:c8:12:b2:8a:
60:cf:f3:49:c9:41:7c:6d:48:57:fa:43:a0:71:5b:5e:54:e3:
51:e8:80:13:a8:74:da:ff:23:a1:3d:26:3c:1b:e3:7f:31:7f:
16:ce:39:6c:99:6d:32:e3:fe:29:6b:3d:c8:76:c4:0a:57:9c:
4c:70:03:b7:c3:1b:7c:3a:a4:a2:d3:5f:3d:57:16:01:56:55:
23:53:2c:c3:3c:e0:70:a2:95:54:10:6f:80:51:f5:4c:17:b2:
ee:8a:7a:64:98:76:d7:f1:39:3a:de:bd:c6:9a:83:f0:fa:09:
3d:fb:ae:ac:44:14:10:e4:fb:84:bc:ed:f6:dc:aa:80:ef:e2:
e5:bd:60:41:17:34:a9:de:a8:4a:42:dc:e3:0a:45:ac:6c:2f:
7e:01:ab:d7:44:1e:47:4a:81:9a:18:0d:77:ec:86:e2:41:9a:
71:08:c4:49
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+SEV3AdH5QxpDHAEX4EWPkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA3ZWE1MjNlYzdmOTM3N2ExYTllNWQ2ZmE4NjgxN2VkM2Q2
YzBhODIwHhcNMjYwNzI0MDMwMDM5WhcNMjYwNzI1MDMwMDM5WjAzMTEwLwYDVQQD
EyhiZjNkNTVmNzg0ODNkM2VkZGM2ZTc3OGFjNDc0YTA3YzJjMzRiNGJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu1KpFNqJMnDwXIwi+6wrcMEi57F6
G+dqRXJVsW/zDqIvvXBZve23jQ6TlBBCjz+a6lYz2PiP9566heitjdwaOjfPYSRJ
IZydTdi/aVJpMeBeKUX3c4Dy7kW9Pnw2dKLYt9as6IUxBNIeFNi0adA6jkqnRz0G
2fns0ea6cBD2AKrm0u8Ebu9fvJUmejEp9AxEne0E5ZESTcrUe02gKILgRFJOg3pE
kj2l3DnJho1A9ZfunU124R6BYbYuHU/8M6UoajOMBZUxFBltTHmnFlPBX752d6Jd
kv9knzgUz1ZZQfkQqZR5midgFJDhtaCHDD5T2zu0caOzqtbOtDmcCFDY+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL89VfeEg9Pt3G53isR0oHwsNLS/MB8GA1UdIwQY
MBaAFAfqUj7H+Td6Gp5db6hoF+09bAqCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQi1wU1BzZjVOM29hbmwxdnFHZ1g3VDFzQ29JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS85ZGZjZDUtMDdkNi00YWQ4LWFkMWQt
YjYwZmQ2Nzk5N2JiLzEvQi1wU1BzZjVOM29hbmwxdnFHZ1g3VDFzQ29JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZS85ZGZjZDUtMDdkNi00YWQ4LWFkMWQtYjYwZmQ2Nzk5N2Ji
LzEvQi1wU1BzZjVOM29hbmwxdnFHZ1g3VDFzQ29JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARu3RuKn2
6LyvawFOGN0w/tikEn+hmclP4m4ieTWMgxO+d1ZSg2GKNump9wT5ke0WuMXxTkb1
wozFJLWgN5aULr8tbrHlOrGJGP3VUTuZeG9oIedVNxvIErKKYM/zSclBfG1IV/pD
oHFbXlTjUeiAE6h02v8joT0mPBvjfzF/Fs45bJltMuP+KWs9yHbEClecTHADt8Mb
fDqkotNfPVcWAVZVI1MswzzgcKKVVBBvgFH1TBey7op6ZJh21/E5Ot69xpqD8PoJ
PfuurEQUEOT7hLzt9tyqgO/i5b1gQRc0qd6oSkLc4wpFrGwvfgGr10QeR0qBmhgN
d+yG4kGacQjESQ==
-----END CERTIFICATE-----
Generated at Fri Jul 24 08:20:36 2026 by rpki-client