Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/ca46fc-3847-4f1d-9ce4-52b9e6a16350/1/bLDewT3yBaZuxSJ5Jbj1a9sJ9Jk.mft
File: bLDewT3yBaZuxSJ5Jbj1a9sJ9Jk.mft (raw, json)
Hash identifier: hnAHlHnYenxblt10Y+06IsJj6LoT2kj+uEMtSNe7eb8=
Subject key identifier: FB:1B:A7:FC:BE:21:44:B1:3C:93:67:3C:8A:22:8C:36:B4:11:B5:74
Authority key identifier: 6C:B0:DE:C1:3D:F2:05:A6:6E:C5:22:79:25:B8:F5:6B:DB:09:F4:99
Certificate issuer: /CN=6cb0dec13df205a66ec5227925b8f56bdb09f499
Certificate serial: 019F935AF71392F8FD1610EA3605979DEAF1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bLDewT3yBaZuxSJ5Jbj1a9sJ9Jk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/ca46fc-3847-4f1d-9ce4-52b9e6a16350/1/bLDewT3yBaZuxSJ5Jbj1a9sJ9Jk.mft
Manifest number: 17AC
Signing time: Fri 24 Jul 2026 09:00:39 +0000
Manifest this update: Fri 24 Jul 2026 09:00:39 +0000
Manifest next update: Sat 25 Jul 2026 09:00:39 +0000
Files and hashes: 1: bLDewT3yBaZuxSJ5Jbj1a9sJ9Jk.crl (hash: Pw/KAajxUmSJNraIGKAtqqbdP1eUWWD4WKqAjl56jm0=)
2: d-ZgCOBX-bnyXymKa1SuDj5rBlw.roa (hash: y//RDl/N7uwiS3ix7FguqOqN3XfD3i8I9nlyndyoqYQ=)
3: j9ojRqA8hjMwSRYUCcpjNJf9hKs.roa (hash: wQ5cGmc4TT6YDfuWa820fpVGpW1HF0ecpTjnTfQVH14=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/ca46fc-3847-4f1d-9ce4-52b9e6a16350/1/bLDewT3yBaZuxSJ5Jbj1a9sJ9Jk.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/ca46fc-3847-4f1d-9ce4-52b9e6a16350/1/bLDewT3yBaZuxSJ5Jbj1a9sJ9Jk.mft
rsync://rpki.ripe.net/repository/DEFAULT/bLDewT3yBaZuxSJ5Jbj1a9sJ9Jk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:5a:f7:13:92:f8:fd:16:10:ea:36:05:97:9d:ea:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6cb0dec13df205a66ec5227925b8f56bdb09f499
Validity
Not Before: Jul 24 09:00:39 2026 GMT
Not After : Jul 25 09:00:39 2026 GMT
Subject: CN=fb1ba7fcbe2144b13c93673c8a228c36b411b574
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:13:f9:b4:ee:6a:3f:36:aa:9c:70:20:29:ad:
0e:99:16:1a:a4:05:bd:5e:cd:b9:83:95:32:b9:b3:
ce:ee:37:65:50:40:84:e8:ed:e6:85:94:db:23:60:
62:e3:62:51:d2:ad:44:00:61:7a:8c:af:60:69:22:
3a:bc:bd:a7:96:ed:24:42:d9:5e:08:d4:96:5a:c9:
06:d5:bf:d2:31:0c:2d:2b:a8:8b:75:a2:a7:85:00:
bb:d7:fc:5e:3c:81:41:9d:75:7d:fa:c4:d7:e6:18:
b1:b2:b0:80:62:9a:8b:2f:4e:cc:6f:cb:3f:92:dc:
fa:e4:2b:59:56:63:4d:60:12:b7:d5:6f:23:3a:2b:
f7:c3:ee:16:78:90:35:1c:95:fc:b9:b7:2e:02:2c:
bc:6e:db:74:2d:11:e4:83:fa:bf:64:c7:f5:58:6f:
66:af:05:25:bc:ec:7f:e9:93:d3:03:0d:bc:93:d7:
0d:04:a3:37:f8:79:5e:8b:df:62:62:5d:0f:1e:90:
e6:f2:0e:1a:81:17:ab:17:8d:17:bb:7a:63:12:c8:
ff:34:2b:63:45:44:b7:cb:b1:2d:4d:c6:cb:c3:0b:
f1:83:9e:25:12:a3:2f:d6:ee:5c:a6:63:69:93:b3:
36:86:6f:ea:5a:c2:30:63:e7:e2:27:2e:f5:72:56:
d6:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:1B:A7:FC:BE:21:44:B1:3C:93:67:3C:8A:22:8C:36:B4:11:B5:74
X509v3 Authority Key Identifier:
keyid:6C:B0:DE:C1:3D:F2:05:A6:6E:C5:22:79:25:B8:F5:6B:DB:09:F4:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bLDewT3yBaZuxSJ5Jbj1a9sJ9Jk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/ca46fc-3847-4f1d-9ce4-52b9e6a16350/1/bLDewT3yBaZuxSJ5Jbj1a9sJ9Jk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/ca46fc-3847-4f1d-9ce4-52b9e6a16350/1/bLDewT3yBaZuxSJ5Jbj1a9sJ9Jk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:fb:ac:9c:b9:57:eb:58:b7:3b:26:65:75:37:37:e5:ec:a3:
4a:eb:28:c1:38:06:6c:25:4a:ca:4d:0c:c1:5d:2a:5a:4e:e0:
73:be:b3:c2:de:d1:06:62:d7:ad:a2:05:b8:b4:37:2b:a9:83:
97:f1:9c:bd:b2:d5:cd:d8:be:c2:91:ae:dc:eb:0f:b4:82:42:
b8:44:8a:af:9f:32:46:13:7e:02:5d:48:1d:53:f8:9d:9e:6e:
7e:74:cd:72:a4:5e:c5:e0:44:bd:e9:5a:3f:14:e8:4c:61:97:
16:64:35:f6:0d:9c:f7:b0:cc:7c:64:a8:45:bb:5c:43:1f:9c:
ac:3f:54:f0:a8:c0:6e:8c:68:13:21:14:e4:8e:d6:b7:61:50:
9e:2a:3e:97:df:90:4b:a3:bb:e0:d2:e3:f9:7e:34:ed:b7:bb:
d2:b3:b5:c4:09:3e:2c:4f:f0:72:40:02:5d:db:22:e8:af:6e:
eb:ab:a0:b9:fc:61:e7:d9:2f:db:27:b5:71:9e:96:3f:32:db:
da:71:9e:ef:e5:30:53:36:bf:ad:e6:d3:c8:a8:6c:a2:5c:f4:
be:78:4c:35:17:e1:00:c5:c7:13:19:e4:89:c0:b8:66:f1:0e:
97:b8:bc:cb:95:f1:f8:a4:8c:41:91:72:a8:de:f3:03:56:3e:
9c:e5:d1:26
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+TWvcTkvj9FhDqNgWXnerxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZjYjBkZWMxM2RmMjA1YTY2ZWM1MjI3OTI1YjhmNTZiZGIw
OWY0OTkwHhcNMjYwNzI0MDkwMDM5WhcNMjYwNzI1MDkwMDM5WjAzMTEwLwYDVQQD
EyhmYjFiYTdmY2JlMjE0NGIxM2M5MzY3M2M4YTIyOGMzNmI0MTFiNTc0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwxP5tO5qPzaqnHAgKa0OmRYapAW9
Xs25g5UyubPO7jdlUECE6O3mhZTbI2Bi42JR0q1EAGF6jK9gaSI6vL2nlu0kQtle
CNSWWskG1b/SMQwtK6iLdaKnhQC71/xePIFBnXV9+sTX5hixsrCAYpqLL07Mb8s/
ktz65CtZVmNNYBK31W8jOiv3w+4WeJA1HJX8ubcuAiy8btt0LRHkg/q/ZMf1WG9m
rwUlvOx/6ZPTAw28k9cNBKM3+Hlei99iYl0PHpDm8g4agRerF40Xu3pjEsj/NCtj
RUS3y7EtTcbLwwvxg54lEqMv1u5cpmNpk7M2hm/qWsIwY+fiJy71clbW0wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPsbp/y+IUSxPJNnPIoijDa0EbV0MB8GA1UdIwQY
MBaAFGyw3sE98gWmbsUieSW49WvbCfSZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYkxEZXdUM3lCYVp1eFNKNUpiajFhOXNKOUprLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS9jYTQ2ZmMtMzg0Ny00ZjFkLTljZTQt
NTJiOWU2YTE2MzUwLzEvYkxEZXdUM3lCYVp1eFNKNUpiajFhOXNKOUprLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYS9jYTQ2ZmMtMzg0Ny00ZjFkLTljZTQtNTJiOWU2YTE2MzUw
LzEvYkxEZXdUM3lCYVp1eFNKNUpiajFhOXNKOUprLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS/usnLlX
61i3OyZldTc35eyjSusowTgGbCVKyk0MwV0qWk7gc76zwt7RBmLXraIFuLQ3K6mD
l/GcvbLVzdi+wpGu3OsPtIJCuESKr58yRhN+Al1IHVP4nZ5ufnTNcqRexeBEvela
PxToTGGXFmQ19g2c97DMfGSoRbtcQx+crD9U8KjAboxoEyEU5I7Wt2FQnio+l9+Q
S6O74NLj+X407be70rO1xAk+LE/wckACXdsi6K9u66ugufxh59kv2ye1cZ6WPzLb
2nGe7+UwUza/rebTyKhsolz0vnhMNRfhAMXHExnkicC4ZvEOl7i8y5Xx+KSMQZFy
qN7zA1Y+nOXRJg==
-----END CERTIFICATE-----
Generated at Fri Jul 24 16:16:42 2026 by rpki-client