Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/496525-2c0d-43e4-8188-5fbc230abdc2/1/bs1crU0zBsT3LEKvwG5c0fuv46M.mft
File: bs1crU0zBsT3LEKvwG5c0fuv46M.mft (raw, json)
Hash identifier: MGilUQyY4ab2xDBaGhoecsi/R7vZLMhFZTWJCxjTank=
Subject key identifier: 58:6C:8C:E0:BF:57:DB:70:F6:64:6F:07:5E:BB:10:90:C4:8E:55:F6
Authority key identifier: 6E:CD:5C:AD:4D:33:06:C4:F7:2C:42:AF:C0:6E:5C:D1:FB:AF:E3:A3
Certificate issuer: /CN=6ecd5cad4d3306c4f72c42afc06e5cd1fbafe3a3
Certificate serial: 019F927F2D75C19512BA1227029C5FC85FE8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bs1crU0zBsT3LEKvwG5c0fuv46M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/496525-2c0d-43e4-8188-5fbc230abdc2/1/bs1crU0zBsT3LEKvwG5c0fuv46M.mft
Manifest number: 19D6
Signing time: Fri 24 Jul 2026 05:00:35 +0000
Manifest this update: Fri 24 Jul 2026 05:00:35 +0000
Manifest next update: Sat 25 Jul 2026 05:00:35 +0000
Files and hashes: 1: 1-XAPtzpEBbR-dL3HDvpMhi_QEZc.roa (hash: Y3Cc5NFdOsrYFpq1aDkqCQTbdqgeCbiviULrvKO6HjA=)
2: 84QPNs99F2FLKJtQBYoOZt3F3p8.roa (hash: EjdzLhSfZiaXxVtxCqo06jqnawXCpF2ar+1qQ5nt39k=)
3: bs1crU0zBsT3LEKvwG5c0fuv46M.crl (hash: q7jkzblR8Ie1FWRYMWGQdmDnuz5h8teyR8SKYrw8JQU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/496525-2c0d-43e4-8188-5fbc230abdc2/1/bs1crU0zBsT3LEKvwG5c0fuv46M.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/496525-2c0d-43e4-8188-5fbc230abdc2/1/bs1crU0zBsT3LEKvwG5c0fuv46M.mft
rsync://rpki.ripe.net/repository/DEFAULT/bs1crU0zBsT3LEKvwG5c0fuv46M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 05:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:7f:2d:75:c1:95:12:ba:12:27:02:9c:5f:c8:5f:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ecd5cad4d3306c4f72c42afc06e5cd1fbafe3a3
Validity
Not Before: Jul 24 05:00:35 2026 GMT
Not After : Jul 25 05:00:35 2026 GMT
Subject: CN=586c8ce0bf57db70f6646f075ebb1090c48e55f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:2a:90:cd:1b:9c:32:ed:23:71:62:48:f5:cb:
c1:30:18:38:75:98:28:03:c6:29:2d:04:1b:f4:b1:
68:b7:20:21:aa:a1:9d:69:42:f2:9b:1e:8a:55:69:
a7:de:c8:d9:e5:87:26:49:38:c2:62:5d:7c:b2:d8:
f3:12:9f:25:11:19:a1:f9:c2:04:2b:f2:44:a3:d6:
1f:5c:3f:c3:3b:8b:44:a2:3b:a0:b0:c0:08:1e:0f:
f3:d7:a2:42:4c:f7:6f:93:93:d3:86:7d:8a:04:c4:
66:58:30:c5:2d:3b:54:9b:14:f7:4f:76:12:e0:e3:
62:6a:c0:39:a6:2f:67:b4:de:05:b0:3d:9a:0c:19:
22:80:0c:4b:f9:41:d6:58:93:56:23:65:4f:1c:6e:
74:52:c8:7b:0b:95:6e:fa:52:a5:d2:34:6c:63:23:
4e:d0:0e:0b:48:06:f8:20:dc:a0:ca:7b:df:d7:b9:
5d:df:e4:b0:63:5a:fa:46:51:06:02:e0:9b:1a:24:
1d:08:53:26:d7:e2:7a:f6:8b:92:ff:37:12:cf:7e:
aa:14:4e:3a:00:bd:ac:64:56:57:c8:01:1c:06:90:
af:74:67:8b:d2:50:00:c1:a1:7a:a7:90:75:b9:93:
f7:6f:bc:b2:f5:19:0d:68:77:76:05:95:00:99:4c:
3f:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:6C:8C:E0:BF:57:DB:70:F6:64:6F:07:5E:BB:10:90:C4:8E:55:F6
X509v3 Authority Key Identifier:
keyid:6E:CD:5C:AD:4D:33:06:C4:F7:2C:42:AF:C0:6E:5C:D1:FB:AF:E3:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bs1crU0zBsT3LEKvwG5c0fuv46M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/496525-2c0d-43e4-8188-5fbc230abdc2/1/bs1crU0zBsT3LEKvwG5c0fuv46M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/496525-2c0d-43e4-8188-5fbc230abdc2/1/bs1crU0zBsT3LEKvwG5c0fuv46M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:03:95:ff:b8:94:39:c9:4f:6c:4c:cf:77:a9:ec:f2:32:3b:
73:a1:53:0a:60:61:37:0f:57:69:a9:52:31:75:c1:5c:be:d5:
45:8c:ac:81:93:93:ef:db:1f:d0:c0:c2:14:8c:7d:75:59:8a:
ef:91:51:23:29:18:77:31:9f:29:5c:97:7f:e9:23:29:86:ba:
ab:d6:fe:f9:ff:86:5d:ee:23:dd:80:48:ca:3a:df:f1:46:02:
f0:2b:ed:7f:1d:a6:07:1f:b7:d7:8f:a5:71:eb:36:48:b5:6a:
55:9d:33:fd:28:44:8e:20:5c:45:d7:12:a7:0c:85:66:44:dc:
ff:5e:5b:bf:45:1b:26:62:fb:a5:99:91:29:ab:f1:76:37:17:
a4:db:1c:b8:ef:1a:54:e6:3a:7f:81:d7:fd:6d:da:c9:9b:16:
9b:06:24:1a:19:cd:b5:40:c8:fa:58:f1:27:bf:dd:66:09:ef:
3c:4a:0c:ff:15:0e:ea:a2:af:48:12:2e:23:0f:a1:eb:db:bc:
9f:62:be:06:68:7e:91:98:8d:3c:df:8b:fd:67:b4:41:53:51:
2e:5f:2f:d2:23:d8:de:a6:3e:9b:c1:c2:ef:42:42:72:92:24:
2f:3c:b2:ed:c0:79:82:07:ce:4e:68:f8:a4:de:07:38:f6:d2:
cc:99:19:4a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+Sfy11wZUSuhInApxfyF/oMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZlY2Q1Y2FkNGQzMzA2YzRmNzJjNDJhZmMwNmU1Y2QxZmJh
ZmUzYTMwHhcNMjYwNzI0MDUwMDM1WhcNMjYwNzI1MDUwMDM1WjAzMTEwLwYDVQQD
Eyg1ODZjOGNlMGJmNTdkYjcwZjY2NDZmMDc1ZWJiMTA5MGM0OGU1NWY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0iqQzRucMu0jcWJI9cvBMBg4dZgo
A8YpLQQb9LFotyAhqqGdaULymx6KVWmn3sjZ5YcmSTjCYl18stjzEp8lERmh+cIE
K/JEo9YfXD/DO4tEojugsMAIHg/z16JCTPdvk5PThn2KBMRmWDDFLTtUmxT3T3YS
4ONiasA5pi9ntN4FsD2aDBkigAxL+UHWWJNWI2VPHG50Ush7C5Vu+lKl0jRsYyNO
0A4LSAb4INygynvf17ld3+SwY1r6RlEGAuCbGiQdCFMm1+J69ouS/zcSz36qFE46
AL2sZFZXyAEcBpCvdGeL0lAAwaF6p5B1uZP3b7yy9RkNaHd2BZUAmUw/GQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFhsjOC/V9tw9mRvB167EJDEjlX2MB8GA1UdIwQY
MBaAFG7NXK1NMwbE9yxCr8BuXNH7r+OjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYnMxY3JVMHpCc1QzTEVLdndHNWMwZnV2NDZNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi80OTY1MjUtMmMwZC00M2U0LTgxODgt
NWZiYzIzMGFiZGMyLzEvYnMxY3JVMHpCc1QzTEVLdndHNWMwZnV2NDZNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYi80OTY1MjUtMmMwZC00M2U0LTgxODgtNWZiYzIzMGFiZGMy
LzEvYnMxY3JVMHpCc1QzTEVLdndHNWMwZnV2NDZNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOQOV/7iU
OclPbEzPd6ns8jI7c6FTCmBhNw9XaalSMXXBXL7VRYysgZOT79sf0MDCFIx9dVmK
75FRIykYdzGfKVyXf+kjKYa6q9b++f+GXe4j3YBIyjrf8UYC8Cvtfx2mBx+314+l
ces2SLVqVZ0z/ShEjiBcRdcSpwyFZkTc/15bv0UbJmL7pZmRKavxdjcXpNscuO8a
VOY6f4HX/W3ayZsWmwYkGhnNtUDI+ljxJ7/dZgnvPEoM/xUO6qKvSBIuIw+h69u8
n2K+Bmh+kZiNPN+L/We0QVNRLl8v0iPY3qY+m8HC70JCcpIkLzyy7cB5ggfOTmj4
pN4HOPbSzJkZSg==
-----END CERTIFICATE-----
Generated at Fri Jul 24 10:05:40 2026 by rpki-client