Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/4bb7f4-9709-4109-b30e-24116cb6e986/1/BIsMM3dmY8tDIaEI8vTRY1tdLYo.mft
File: BIsMM3dmY8tDIaEI8vTRY1tdLYo.mft (raw, json)
Hash identifier: dEeZqzVoFey8AinBFPpNPuNYIcx2D7eaQ91GZDa/Gug=
Subject key identifier: B8:95:4E:B4:2D:2B:A5:D0:50:08:04:14:D0:F8:A1:F5:34:65:C1:95
Authority key identifier: 04:8B:0C:33:77:66:63:CB:43:21:A1:08:F2:F4:D1:63:5B:5D:2D:8A
Certificate issuer: /CN=048b0c33776663cb4321a108f2f4d1635b5d2d8a
Certificate serial: 019E1DFE8E02F13048A6BEDA63189619A065
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BIsMM3dmY8tDIaEI8vTRY1tdLYo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/4bb7f4-9709-4109-b30e-24116cb6e986/1/BIsMM3dmY8tDIaEI8vTRY1tdLYo.mft
Manifest number: 1907
Signing time: Tue 12 May 2026 21:01:22 +0000
Manifest this update: Tue 12 May 2026 21:01:22 +0000
Manifest next update: Wed 13 May 2026 21:01:22 +0000
Files and hashes: 1: BIsMM3dmY8tDIaEI8vTRY1tdLYo.crl (hash: 97zEOdu3wIp/XtoqGYf2C59NKZtbl6w0+4XYmUNUq4Y=)
2: NnEIJrnmhkwELld_U_QBTUbqU90.asa (hash: 5/Cpmz3yamVpUjVaZZVnuNujoVdFO+RPvIdZmRu6am4=)
3: aToK1H8Eu9LQyX9O96VpmV4-xH4.roa (hash: NOHh63b/9WqU00dOh312eJJg1BRneOILOEiJiVt9VO8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/4bb7f4-9709-4109-b30e-24116cb6e986/1/BIsMM3dmY8tDIaEI8vTRY1tdLYo.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/4bb7f4-9709-4109-b30e-24116cb6e986/1/BIsMM3dmY8tDIaEI8vTRY1tdLYo.mft
rsync://rpki.ripe.net/repository/DEFAULT/BIsMM3dmY8tDIaEI8vTRY1tdLYo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 21:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:fe:8e:02:f1:30:48:a6:be:da:63:18:96:19:a0:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=048b0c33776663cb4321a108f2f4d1635b5d2d8a
Validity
Not Before: May 12 21:01:22 2026 GMT
Not After : May 13 21:01:22 2026 GMT
Subject: CN=b8954eb42d2ba5d050080414d0f8a1f53465c195
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:62:3b:4e:30:20:5d:d6:d8:50:20:32:30:a1:
43:e3:f1:e1:63:44:61:c6:d6:aa:1b:63:ca:ef:5a:
1b:54:38:f5:24:38:93:4c:56:31:1d:da:22:9d:69:
f5:b3:ba:2e:40:e7:c1:b2:9f:2f:cc:3d:a4:ce:03:
ee:95:e3:82:78:84:5f:5d:bc:24:a0:80:ee:c8:a6:
71:07:2c:d6:db:12:1a:62:b2:e9:6f:7c:c5:0c:a4:
62:d8:1e:9c:3f:57:b8:92:8d:fb:2e:3d:d5:a8:21:
a8:a1:1f:fc:77:16:54:bd:5f:b9:25:99:39:77:bd:
3f:a2:a1:77:2f:2d:90:eb:ef:60:7d:14:3c:de:e2:
8e:3d:fa:47:03:af:a9:26:85:49:aa:b3:41:a1:49:
72:3b:21:9c:35:03:20:9d:bb:1b:74:79:a8:b8:8c:
de:da:22:e3:7a:01:b2:52:ca:0c:4d:e9:3f:56:6e:
b6:25:57:b5:71:61:ec:a6:5f:fd:4f:9d:00:32:50:
a3:f7:87:32:21:4c:4f:56:be:91:60:1b:aa:e9:4c:
54:8c:ff:0e:45:b5:f3:ea:fd:03:cb:6c:7c:ec:57:
10:ca:7f:ed:0b:a9:ab:14:24:75:2a:94:4b:7e:e7:
2f:ae:24:5c:2e:8d:55:d9:a0:f8:0b:30:e8:a6:41:
b0:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:95:4E:B4:2D:2B:A5:D0:50:08:04:14:D0:F8:A1:F5:34:65:C1:95
X509v3 Authority Key Identifier:
keyid:04:8B:0C:33:77:66:63:CB:43:21:A1:08:F2:F4:D1:63:5B:5D:2D:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BIsMM3dmY8tDIaEI8vTRY1tdLYo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/4bb7f4-9709-4109-b30e-24116cb6e986/1/BIsMM3dmY8tDIaEI8vTRY1tdLYo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/4bb7f4-9709-4109-b30e-24116cb6e986/1/BIsMM3dmY8tDIaEI8vTRY1tdLYo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:84:9c:50:71:2d:33:fd:10:f4:9e:2d:ae:47:2d:20:50:ef:
2e:fc:34:fa:ec:1f:08:4a:94:38:3a:c7:0c:5f:64:7b:87:a9:
37:3a:f8:d7:eb:b2:69:25:74:51:71:14:72:96:2d:a4:04:64:
f0:cc:0d:bd:1b:99:9f:28:39:2e:12:60:d3:7e:35:15:20:89:
53:37:21:87:08:e9:02:3d:6a:6e:0a:21:d3:20:d8:37:3e:4f:
10:ed:45:05:aa:1e:68:9c:8f:8e:d8:cf:f2:cc:d8:bd:85:1c:
56:2b:7b:07:8c:be:9a:5f:aa:0c:2a:e1:75:0e:ac:99:d6:d2:
00:5d:14:5a:ce:70:73:7d:a6:70:65:ee:d6:e9:6c:51:f2:e9:
7b:1d:fa:23:7c:8e:91:01:42:9b:f2:f7:1d:08:45:de:cb:21:
d9:bb:e7:01:e8:7a:0b:28:07:68:ea:03:c7:a7:8a:4e:04:3c:
6c:f3:89:cb:b9:71:ac:42:35:ce:c7:28:8d:d0:db:48:c7:8c:
05:5a:e7:80:a3:1d:f4:33:ae:b6:dc:45:8a:a8:91:72:bc:13:
a9:a7:2f:d1:10:b8:77:c4:f1:83:dd:15:66:d8:bf:c8:7f:f1:
91:98:a0:99:91:a9:24:14:01:a3:1d:c0:65:1f:b5:ef:50:db:
00:57:7f:97
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4d/o4C8TBIpr7aYxiWGaBlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA0OGIwYzMzNzc2NjYzY2I0MzIxYTEwOGYyZjRkMTYzNWI1
ZDJkOGEwHhcNMjYwNTEyMjEwMTIyWhcNMjYwNTEzMjEwMTIyWjAzMTEwLwYDVQQD
EyhiODk1NGViNDJkMmJhNWQwNTAwODA0MTRkMGY4YTFmNTM0NjVjMTk1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtGI7TjAgXdbYUCAyMKFD4/HhY0Rh
xtaqG2PK71obVDj1JDiTTFYxHdoinWn1s7ouQOfBsp8vzD2kzgPuleOCeIRfXbwk
oIDuyKZxByzW2xIaYrLpb3zFDKRi2B6cP1e4ko37Lj3VqCGooR/8dxZUvV+5JZk5
d70/oqF3Ly2Q6+9gfRQ83uKOPfpHA6+pJoVJqrNBoUlyOyGcNQMgnbsbdHmouIze
2iLjegGyUsoMTek/Vm62JVe1cWHspl/9T50AMlCj94cyIUxPVr6RYBuq6UxUjP8O
RbXz6v0Dy2x87FcQyn/tC6mrFCR1KpRLfucvriRcLo1V2aD4CzDopkGwrQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLiVTrQtK6XQUAgEFND4ofU0ZcGVMB8GA1UdIwQY
MBaAFASLDDN3ZmPLQyGhCPL00WNbXS2KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQklzTU0zZG1ZOHRESWFFSTh2VFJZMXRkTFlvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC80YmI3ZjQtOTcwOS00MTA5LWIzMGUt
MjQxMTZjYjZlOTg2LzEvQklzTU0zZG1ZOHRESWFFSTh2VFJZMXRkTFlvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOC80YmI3ZjQtOTcwOS00MTA5LWIzMGUtMjQxMTZjYjZlOTg2
LzEvQklzTU0zZG1ZOHRESWFFSTh2VFJZMXRkTFlvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADYScUHEt
M/0Q9J4trkctIFDvLvw0+uwfCEqUODrHDF9ke4epNzr41+uyaSV0UXEUcpYtpARk
8MwNvRuZnyg5LhJg0341FSCJUzchhwjpAj1qbgoh0yDYNz5PEO1FBaoeaJyPjtjP
8szYvYUcVit7B4y+ml+qDCrhdQ6smdbSAF0UWs5wc32mcGXu1ulsUfLpex36I3yO
kQFCm/L3HQhF3ssh2bvnAeh6CygHaOoDx6eKTgQ8bPOJy7lxrEI1zscojdDbSMeM
BVrngKMd9DOuttxFiqiRcrwTqacv0RC4d8Txg90VZti/yH/xkZigmZGpJBQBox3A
ZR+171DbAFd/lw==
-----END CERTIFICATE-----
Generated at Wed May 13 07:03:24 2026 by rpki-client