Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/9d5fdc-66b2-4718-8b24-11daf170d7cd/1/bj5QHSUT5a7UQj1-smXmCCKo540.mft
File: bj5QHSUT5a7UQj1-smXmCCKo540.mft (raw, json)
Hash identifier: ImEeeZhNz67X9la44nsnb0QTFdt1zwgjehjWRhyRIMc=
Subject key identifier: 3C:E6:72:AD:A4:91:32:3E:CA:78:81:58:1F:8B:6B:32:53:63:1B:67
Authority key identifier: 6E:3E:50:1D:25:13:E5:AE:D4:42:3D:7E:B2:65:E6:08:22:A8:E7:8D
Certificate issuer: /CN=6e3e501d2513e5aed4423d7eb265e60822a8e78d
Certificate serial: 019F94A438E0ECB8A6153594A2E452C3555B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bj5QHSUT5a7UQj1-smXmCCKo540.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/9d5fdc-66b2-4718-8b24-11daf170d7cd/1/bj5QHSUT5a7UQj1-smXmCCKo540.mft
Manifest number: 16B4
Signing time: Fri 24 Jul 2026 15:00:17 +0000
Manifest this update: Fri 24 Jul 2026 15:00:17 +0000
Manifest next update: Sat 25 Jul 2026 15:00:17 +0000
Files and hashes: 1: Oon2IIrGkbnZaP-hb1ZNPn5crpM.roa (hash: aV6nVsAigskV1T2EnkJOb7mIfcRM6nE2dCNvULEtGlA=)
2: bj5QHSUT5a7UQj1-smXmCCKo540.crl (hash: QqwFdiK3F+3p8l2mpkTHMuIswWmKOltj1o3m49i1ZiU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/9d5fdc-66b2-4718-8b24-11daf170d7cd/1/bj5QHSUT5a7UQj1-smXmCCKo540.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/9d5fdc-66b2-4718-8b24-11daf170d7cd/1/bj5QHSUT5a7UQj1-smXmCCKo540.mft
rsync://rpki.ripe.net/repository/DEFAULT/bj5QHSUT5a7UQj1-smXmCCKo540.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:a4:38:e0:ec:b8:a6:15:35:94:a2:e4:52:c3:55:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e3e501d2513e5aed4423d7eb265e60822a8e78d
Validity
Not Before: Jul 24 15:00:17 2026 GMT
Not After : Jul 25 15:00:17 2026 GMT
Subject: CN=3ce672ada491323eca7881581f8b6b3253631b67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:3e:2e:94:48:b3:99:88:fe:0e:9d:ab:fd:07:
ac:fe:99:48:84:04:6e:31:b5:6d:19:55:07:c5:bb:
87:83:7f:a4:70:5c:2d:c4:0b:74:bb:44:2c:fc:10:
59:8e:0a:49:c1:44:22:96:8c:e8:b6:17:d4:05:25:
11:1e:c5:d0:ad:3f:85:c4:17:b7:f6:97:d2:d5:42:
48:8b:d4:97:24:f5:8f:af:43:e0:bc:9d:d7:e2:86:
3e:a9:45:c0:ff:bd:98:db:13:a9:a1:1b:00:dd:bf:
94:ee:e9:1e:fe:a4:7a:8d:73:65:1a:2e:8d:ae:c5:
8a:cc:dc:2e:56:46:ae:b8:84:a7:1c:ba:9c:02:1a:
8c:86:36:81:3c:bf:83:83:f3:45:76:e7:4e:90:77:
98:ae:c7:0a:44:67:d3:80:32:10:a4:41:52:2d:83:
a9:09:da:6e:f2:50:5a:2f:d3:a4:af:1b:b2:67:53:
69:64:06:37:cf:fa:60:aa:c6:68:fb:0a:a0:f2:6f:
36:93:a0:67:0c:b6:1c:6c:82:13:53:84:4e:b0:66:
b4:c3:76:46:dc:0d:47:c8:79:ad:d1:cc:50:60:7d:
ed:9b:b2:65:61:c1:50:ec:71:08:d6:b5:a3:57:e2:
f5:74:39:89:9b:a0:d9:f5:a3:21:24:a9:40:5e:4b:
0b:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:E6:72:AD:A4:91:32:3E:CA:78:81:58:1F:8B:6B:32:53:63:1B:67
X509v3 Authority Key Identifier:
keyid:6E:3E:50:1D:25:13:E5:AE:D4:42:3D:7E:B2:65:E6:08:22:A8:E7:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bj5QHSUT5a7UQj1-smXmCCKo540.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/9d5fdc-66b2-4718-8b24-11daf170d7cd/1/bj5QHSUT5a7UQj1-smXmCCKo540.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/9d5fdc-66b2-4718-8b24-11daf170d7cd/1/bj5QHSUT5a7UQj1-smXmCCKo540.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:f0:7b:e2:38:3c:df:d2:c9:c2:23:11:25:8d:c7:f7:71:9d:
5d:88:8a:5f:78:8b:59:9f:30:ea:6d:de:0a:e3:12:f3:8c:e5:
d0:90:d3:cd:6c:e6:eb:82:fd:52:c3:3b:82:25:54:e6:39:2a:
a9:04:2c:84:79:7b:28:a0:e4:fe:da:c0:99:a9:35:28:92:b3:
ee:b1:6e:e4:30:22:2b:36:78:18:42:8f:e0:9d:76:3b:ec:11:
9c:fd:8d:d1:d9:7a:cb:92:42:82:df:27:75:65:99:35:08:3d:
67:3a:f5:7f:ad:29:b5:fa:b9:e2:4d:9d:d7:72:29:07:f1:ff:
d2:7c:7e:ab:8a:a1:3f:eb:6c:07:9b:fe:a8:0e:33:2e:a6:41:
89:76:47:47:51:d3:60:9e:08:50:41:ce:75:d4:da:53:8c:ee:
8c:4b:60:94:d4:cd:23:5c:ec:36:e4:6f:6f:4a:c9:c0:6e:7e:
0e:c3:4d:6a:2c:cc:77:c0:87:a7:38:83:55:3b:06:95:ca:be:
26:fc:ae:35:e6:a8:b4:71:f6:d1:51:e6:5a:bd:21:23:ad:e4:
27:24:41:a2:cd:a1:2b:17:f6:f5:95:3b:23:90:7b:01:c9:ad:
c5:0a:18:68:39:1c:95:c1:a0:2c:f3:8f:cf:8b:17:18:74:6b:
0e:ce:b0:94
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+UpDjg7LimFTWUouRSw1VbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZlM2U1MDFkMjUxM2U1YWVkNDQyM2Q3ZWIyNjVlNjA4MjJh
OGU3OGQwHhcNMjYwNzI0MTUwMDE3WhcNMjYwNzI1MTUwMDE3WjAzMTEwLwYDVQQD
EygzY2U2NzJhZGE0OTEzMjNlY2E3ODgxNTgxZjhiNmIzMjUzNjMxYjY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvz4ulEizmYj+Dp2r/Qes/plIhARu
MbVtGVUHxbuHg3+kcFwtxAt0u0Qs/BBZjgpJwUQilozothfUBSURHsXQrT+FxBe3
9pfS1UJIi9SXJPWPr0PgvJ3X4oY+qUXA/72Y2xOpoRsA3b+U7uke/qR6jXNlGi6N
rsWKzNwuVkauuISnHLqcAhqMhjaBPL+Dg/NFdudOkHeYrscKRGfTgDIQpEFSLYOp
Cdpu8lBaL9OkrxuyZ1NpZAY3z/pgqsZo+wqg8m82k6BnDLYcbIITU4ROsGa0w3ZG
3A1HyHmt0cxQYH3tm7JlYcFQ7HEI1rWjV+L1dDmJm6DZ9aMhJKlAXksL9wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDzmcq2kkTI+yniBWB+LazJTYxtnMB8GA1UdIwQY
MBaAFG4+UB0lE+Wu1EI9frJl5ggiqOeNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYmo1UUhTVVQ1YTdVUWoxLXNtWG1DQ0tvNTQwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy85ZDVmZGMtNjZiMi00NzE4LThiMjQt
MTFkYWYxNzBkN2NkLzEvYmo1UUhTVVQ1YTdVUWoxLXNtWG1DQ0tvNTQwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy85ZDVmZGMtNjZiMi00NzE4LThiMjQtMTFkYWYxNzBkN2Nk
LzEvYmo1UUhTVVQ1YTdVUWoxLXNtWG1DQ0tvNTQwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL/B74jg8
39LJwiMRJY3H93GdXYiKX3iLWZ8w6m3eCuMS84zl0JDTzWzm64L9UsM7giVU5jkq
qQQshHl7KKDk/trAmak1KJKz7rFu5DAiKzZ4GEKP4J12O+wRnP2N0dl6y5JCgt8n
dWWZNQg9Zzr1f60ptfq54k2d13IpB/H/0nx+q4qhP+tsB5v+qA4zLqZBiXZHR1HT
YJ4IUEHOddTaU4zujEtglNTNI1zsNuRvb0rJwG5+DsNNaizMd8CHpziDVTsGlcq+
JvyuNeaotHH20VHmWr0hI63kJyRBos2hKxf29ZU7I5B7AcmtxQoYaDkclcGgLPOP
z4sXGHRrDs6wlA==
-----END CERTIFICATE-----
Generated at Fri Jul 24 18:31:59 2026 by rpki-client