Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/f8d98d-1ffe-4639-b373-9ba1172a68c0/1/0bS-sKan4ShKv0OFNIz0hhALn4A.mft
File: 0bS-sKan4ShKv0OFNIz0hhALn4A.mft (raw, json)
Hash identifier: vDHUNmPpPEiakAG+eQBr3t562AP3f4zdrd1WYlZqU4E=
Subject key identifier: F9:A8:A5:B5:9C:A3:D9:30:D5:8F:35:34:45:0E:71:40:0C:6E:1D:3B
Authority key identifier: D1:B4:BE:B0:A6:A7:E1:28:4A:BF:43:85:34:8C:F4:86:10:0B:9F:80
Certificate issuer: /CN=d1b4beb0a6a7e1284abf4385348cf486100b9f80
Certificate serial: 019F9135C3BCFC8E87AB6602A57FD1AAE800
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0bS-sKan4ShKv0OFNIz0hhALn4A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/f8d98d-1ffe-4639-b373-9ba1172a68c0/1/0bS-sKan4ShKv0OFNIz0hhALn4A.mft
Manifest number: 11C7
Signing time: Thu 23 Jul 2026 23:00:47 +0000
Manifest this update: Thu 23 Jul 2026 23:00:47 +0000
Manifest next update: Fri 24 Jul 2026 23:00:47 +0000
Files and hashes: 1: 0bS-sKan4ShKv0OFNIz0hhALn4A.crl (hash: Brc7GnXZIj8rmkd+8GltP+t3BNGnT3siVkLwatVKGno=)
2: BBKAblizkGIJV_f06RIh70XLtr0.roa (hash: EDuWd1ayZXpmIRskDvDc511OzhDthWRGsbu0u3My31o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/f8d98d-1ffe-4639-b373-9ba1172a68c0/1/0bS-sKan4ShKv0OFNIz0hhALn4A.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/f8d98d-1ffe-4639-b373-9ba1172a68c0/1/0bS-sKan4ShKv0OFNIz0hhALn4A.mft
rsync://rpki.ripe.net/repository/DEFAULT/0bS-sKan4ShKv0OFNIz0hhALn4A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:35:c3:bc:fc:8e:87:ab:66:02:a5:7f:d1:aa:e8:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1b4beb0a6a7e1284abf4385348cf486100b9f80
Validity
Not Before: Jul 23 23:00:47 2026 GMT
Not After : Jul 24 23:00:47 2026 GMT
Subject: CN=f9a8a5b59ca3d930d58f3534450e71400c6e1d3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:28:19:e3:d5:15:40:ac:d2:f4:18:04:67:0c:
8f:f3:7d:85:99:ba:ea:d4:80:0c:23:69:7e:89:74:
b6:d3:5d:d9:33:17:08:2d:04:3c:f8:51:82:9d:b3:
48:36:5e:3a:fc:d7:4a:af:97:61:df:65:0e:17:51:
5f:30:26:28:67:c0:96:4d:00:ee:a0:c2:93:a0:e9:
a7:3f:9f:74:61:7e:30:2f:da:67:e9:60:e5:78:b0:
ee:7e:ad:13:25:5d:1b:cf:1e:02:21:c9:fa:e3:38:
d3:04:86:91:7f:ae:85:06:cb:5d:86:54:25:b5:54:
74:08:f7:0c:9a:2f:ad:d2:c2:e5:b3:6b:b4:dc:f4:
ef:47:60:c8:40:4a:f9:92:28:92:8c:69:e6:84:68:
f7:c5:71:7e:60:a5:45:b5:02:d5:aa:57:dc:2d:9d:
70:f4:24:62:fe:4d:a7:ca:35:81:81:bb:81:fc:5b:
fd:0d:b5:cf:d4:6f:a9:61:30:79:70:e9:93:af:eb:
e2:7d:36:33:26:18:60:6a:62:01:bb:85:5e:53:c2:
3f:a9:40:7b:99:c9:ae:8f:c3:8f:e7:b2:1b:7a:0a:
f0:46:83:52:99:f2:e1:8f:55:fc:e3:21:d0:c2:9c:
a2:0f:8f:12:c7:0b:1a:30:c5:ec:30:4c:7f:9a:cd:
c8:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:A8:A5:B5:9C:A3:D9:30:D5:8F:35:34:45:0E:71:40:0C:6E:1D:3B
X509v3 Authority Key Identifier:
keyid:D1:B4:BE:B0:A6:A7:E1:28:4A:BF:43:85:34:8C:F4:86:10:0B:9F:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0bS-sKan4ShKv0OFNIz0hhALn4A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/f8d98d-1ffe-4639-b373-9ba1172a68c0/1/0bS-sKan4ShKv0OFNIz0hhALn4A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/f8d98d-1ffe-4639-b373-9ba1172a68c0/1/0bS-sKan4ShKv0OFNIz0hhALn4A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:2d:42:4a:fa:01:d2:29:41:06:b8:5d:43:87:ec:40:9f:48:
aa:d0:57:83:ef:c3:06:08:bf:5e:76:d2:bc:ef:5c:2e:2c:50:
b2:ee:20:98:e5:fe:71:17:bd:62:8a:eb:42:9f:bc:3b:ef:1f:
57:a8:9a:65:3f:af:48:88:29:e6:67:dd:3d:58:9f:b7:91:38:
9f:fd:0e:b5:8e:9d:96:16:ae:14:c3:e9:0b:4e:c2:24:22:98:
6d:4f:e5:39:09:38:1e:eb:e8:21:88:b8:53:d9:f7:d2:36:80:
53:46:e0:2d:51:ed:70:01:b9:e4:dc:28:df:25:62:58:71:4d:
99:c4:a3:2e:80:e7:af:35:7a:12:39:2a:3b:26:18:0d:e6:24:
a6:9b:dd:96:4c:59:37:60:d2:17:83:a9:f9:e1:f4:c6:c2:5d:
f2:29:b9:ee:ac:6e:f9:e9:a1:6f:28:bb:29:05:3a:e9:fe:1a:
52:68:9f:ba:1a:86:4c:43:d6:a0:ac:49:0b:fa:8f:76:59:a1:
83:61:f0:3d:11:ca:60:58:26:95:40:ca:93:66:63:29:62:4d:
73:40:66:6c:9f:c4:8d:66:f3:3c:70:b9:85:be:5d:63:8e:83:
0f:40:24:58:e4:fa:08:5f:f5:65:b2:17:8c:de:54:6c:8c:b3:
1c:23:ba:1b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+RNcO8/I6Hq2YCpX/RqugAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQxYjRiZWIwYTZhN2UxMjg0YWJmNDM4NTM0OGNmNDg2MTAw
YjlmODAwHhcNMjYwNzIzMjMwMDQ3WhcNMjYwNzI0MjMwMDQ3WjAzMTEwLwYDVQQD
EyhmOWE4YTViNTljYTNkOTMwZDU4ZjM1MzQ0NTBlNzE0MDBjNmUxZDNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtygZ49UVQKzS9BgEZwyP832Fmbrq
1IAMI2l+iXS2013ZMxcILQQ8+FGCnbNINl46/NdKr5dh32UOF1FfMCYoZ8CWTQDu
oMKToOmnP590YX4wL9pn6WDleLDufq0TJV0bzx4CIcn64zjTBIaRf66FBstdhlQl
tVR0CPcMmi+t0sLls2u03PTvR2DIQEr5kiiSjGnmhGj3xXF+YKVFtQLVqlfcLZ1w
9CRi/k2nyjWBgbuB/Fv9DbXP1G+pYTB5cOmTr+vifTYzJhhgamIBu4VeU8I/qUB7
mcmuj8OP57IbegrwRoNSmfLhj1X84yHQwpyiD48SxwsaMMXsMEx/ms3IqQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPmopbWco9kw1Y81NEUOcUAMbh07MB8GA1UdIwQY
MBaAFNG0vrCmp+EoSr9DhTSM9IYQC5+AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMGJTLXNLYW40U2hLdjBPRk5JejBoaEFMbjRBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My9mOGQ5OGQtMWZmZS00NjM5LWIzNzMt
OWJhMTE3MmE2OGMwLzEvMGJTLXNLYW40U2hLdjBPRk5JejBoaEFMbjRBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80My9mOGQ5OGQtMWZmZS00NjM5LWIzNzMtOWJhMTE3MmE2OGMw
LzEvMGJTLXNLYW40U2hLdjBPRk5JejBoaEFMbjRBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApy1CSvoB
0ilBBrhdQ4fsQJ9IqtBXg+/DBgi/XnbSvO9cLixQsu4gmOX+cRe9YorrQp+8O+8f
V6iaZT+vSIgp5mfdPVift5E4n/0OtY6dlhauFMPpC07CJCKYbU/lOQk4HuvoIYi4
U9n30jaAU0bgLVHtcAG55Nwo3yViWHFNmcSjLoDnrzV6EjkqOyYYDeYkppvdlkxZ
N2DSF4Op+eH0xsJd8im57qxu+emhbyi7KQU66f4aUmifuhqGTEPWoKxJC/qPdlmh
g2HwPRHKYFgmlUDKk2ZjKWJNc0BmbJ/EjWbzPHC5hb5dY46DD0AkWOT6CF/1ZbIX
jN5UbIyzHCO6Gw==
-----END CERTIFICATE-----
Generated at Fri Jul 24 03:06:22 2026 by rpki-client