Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/66af07-3318-4f4a-89ff-40c5ebc6f736/1/bSPOewwQBo-8RMAhlD4zkBPyruA.mft
File: bSPOewwQBo-8RMAhlD4zkBPyruA.mft (raw, json)
Hash identifier: BkSIspZjwR0IcgoRDXD5ma6ZocfqYNLmhSZ32O7RwtU=
Subject key identifier: F5:05:D6:E0:B0:F1:1C:A9:69:26:A0:3A:CA:9B:1B:13:65:B7:BA:68
Authority key identifier: 6D:23:CE:7B:0C:10:06:8F:BC:44:C0:21:94:3E:33:90:13:F2:AE:E0
Certificate issuer: /CN=6d23ce7b0c10068fbc44c021943e339013f2aee0
Certificate serial: 019F954A2FB8FC4E7702C61B8806969D2B83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bSPOewwQBo-8RMAhlD4zkBPyruA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/66af07-3318-4f4a-89ff-40c5ebc6f736/1/bSPOewwQBo-8RMAhlD4zkBPyruA.mft
Manifest number: 19C8
Signing time: Fri 24 Jul 2026 18:01:34 +0000
Manifest this update: Fri 24 Jul 2026 18:01:34 +0000
Manifest next update: Sat 25 Jul 2026 18:01:34 +0000
Files and hashes: 1: WK4FeKC76gPpIjRhyORnL_0frZU.roa (hash: vdHNIiugtJJb19ih4gpWPEIdemNrQgRmwJqyp8Z7ys0=)
2: bSPOewwQBo-8RMAhlD4zkBPyruA.crl (hash: /64ylmrtuaE93YddiwQglwAQ86Occ4eeo99CURbANAE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/66af07-3318-4f4a-89ff-40c5ebc6f736/1/bSPOewwQBo-8RMAhlD4zkBPyruA.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/66af07-3318-4f4a-89ff-40c5ebc6f736/1/bSPOewwQBo-8RMAhlD4zkBPyruA.mft
rsync://rpki.ripe.net/repository/DEFAULT/bSPOewwQBo-8RMAhlD4zkBPyruA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 16:41:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:95:4a:2f:b8:fc:4e:77:02:c6:1b:88:06:96:9d:2b:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d23ce7b0c10068fbc44c021943e339013f2aee0
Validity
Not Before: Jul 24 18:01:34 2026 GMT
Not After : Jul 25 18:01:34 2026 GMT
Subject: CN=f505d6e0b0f11ca96926a03aca9b1b1365b7ba68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:b0:14:a3:11:1d:ed:f2:39:81:91:3d:fa:9c:
7a:96:f5:6d:71:ee:93:69:8b:de:e0:0e:b4:96:cd:
e3:cc:64:bc:bf:81:24:23:29:5e:b6:a9:6a:d9:ec:
d0:38:d6:f7:3e:e6:be:40:58:10:e1:99:ae:6a:6a:
28:db:9d:aa:ff:73:4f:24:fb:f0:81:6c:1b:ae:7a:
e9:75:e5:b7:56:17:a7:35:2a:8e:6b:b1:c0:47:e2:
cc:83:66:b3:36:c1:96:e1:f7:6a:d9:57:57:94:7f:
f4:30:bb:2c:d5:c4:6c:e7:6e:04:77:29:77:e0:15:
18:2d:92:db:ba:51:c5:5a:66:1a:db:23:88:10:8c:
42:f2:88:b5:c5:5b:24:24:ff:51:28:bc:2f:4f:96:
59:d9:e0:e0:75:4e:df:cf:67:c0:b4:18:22:a6:85:
54:fd:96:af:32:14:8b:f3:b3:a1:e2:fb:c9:b1:62:
0b:3f:f6:e2:0f:89:be:12:0d:b9:97:16:4c:2a:ae:
2f:bf:43:d4:c9:8a:ef:c2:ef:6f:0c:6a:ef:31:e4:
76:8f:b7:34:98:b4:94:56:35:1f:d6:0c:42:21:62:
91:a0:ae:18:c9:c5:23:f0:41:82:b3:c8:41:b9:3f:
37:d0:4f:c8:4e:d9:4a:3b:11:48:76:87:be:52:ec:
a6:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:05:D6:E0:B0:F1:1C:A9:69:26:A0:3A:CA:9B:1B:13:65:B7:BA:68
X509v3 Authority Key Identifier:
keyid:6D:23:CE:7B:0C:10:06:8F:BC:44:C0:21:94:3E:33:90:13:F2:AE:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bSPOewwQBo-8RMAhlD4zkBPyruA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/66af07-3318-4f4a-89ff-40c5ebc6f736/1/bSPOewwQBo-8RMAhlD4zkBPyruA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/66af07-3318-4f4a-89ff-40c5ebc6f736/1/bSPOewwQBo-8RMAhlD4zkBPyruA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:b7:d4:32:65:ab:53:4e:b3:e9:49:a8:81:69:db:11:3b:85:
49:f3:3f:97:85:8b:7c:2f:2f:4e:93:75:02:29:d6:ba:78:1e:
b8:1e:5b:3e:c0:dc:a9:42:a6:4d:32:c3:d6:03:6a:5b:7f:0c:
a8:13:43:9b:fa:a9:18:2d:71:67:a9:0c:b8:56:0c:cc:32:e5:
0b:46:a0:b0:f9:35:22:0a:c3:64:8c:b6:66:ae:94:8c:f9:59:
3e:e9:92:f6:7c:c1:58:42:ab:02:35:f5:68:c0:53:a0:90:ed:
c0:b9:1c:85:ba:a8:a2:30:ec:55:63:7a:2f:3f:42:91:15:54:
c7:f0:85:b5:d8:53:01:e7:56:ed:b6:f2:d7:83:43:1a:e5:7c:
29:1a:ff:8e:e6:7f:e2:06:bb:55:fc:bb:e2:07:29:2a:ae:1f:
5a:19:85:fa:8a:1c:99:07:ff:db:57:5a:68:7c:26:cc:ab:ed:
7c:3c:76:90:e7:3a:b9:ce:d4:1e:a8:42:53:5d:85:4d:44:07:
3c:11:4f:9a:e4:57:3c:da:0b:f4:c6:45:38:54:06:e0:ff:d4:
7f:1e:23:e1:7c:69:a2:47:07:94:af:6a:b0:72:21:40:c4:40:
2e:32:46:95:08:06:fc:6d:e0:17:98:26:e7:3b:53:b0:a3:51:
a0:71:54:d3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+VSi+4/E53AsYbiAaWnSuDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZkMjNjZTdiMGMxMDA2OGZiYzQ0YzAyMTk0M2UzMzkwMTNm
MmFlZTAwHhcNMjYwNzI0MTgwMTM0WhcNMjYwNzI1MTgwMTM0WjAzMTEwLwYDVQQD
EyhmNTA1ZDZlMGIwZjExY2E5NjkyNmEwM2FjYTliMWIxMzY1YjdiYTY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsbAUoxEd7fI5gZE9+px6lvVtce6T
aYve4A60ls3jzGS8v4EkIyletqlq2ezQONb3Pua+QFgQ4Zmuamoo252q/3NPJPvw
gWwbrnrpdeW3VhenNSqOa7HAR+LMg2azNsGW4fdq2VdXlH/0MLss1cRs524Edyl3
4BUYLZLbulHFWmYa2yOIEIxC8oi1xVskJP9RKLwvT5ZZ2eDgdU7fz2fAtBgipoVU
/ZavMhSL87Oh4vvJsWILP/biD4m+Eg25lxZMKq4vv0PUyYrvwu9vDGrvMeR2j7c0
mLSUVjUf1gxCIWKRoK4YycUj8EGCs8hBuT830E/ITtlKOxFIdoe+Uuym0wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPUF1uCw8RypaSagOsqbGxNlt7poMB8GA1UdIwQY
MBaAFG0jznsMEAaPvETAIZQ+M5AT8q7gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYlNQT2V3d1FCby04Uk1BaGxENHprQlB5cnVBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My82NmFmMDctMzMxOC00ZjRhLTg5ZmYt
NDBjNWViYzZmNzM2LzEvYlNQT2V3d1FCby04Uk1BaGxENHprQlB5cnVBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81My82NmFmMDctMzMxOC00ZjRhLTg5ZmYtNDBjNWViYzZmNzM2
LzEvYlNQT2V3d1FCby04Uk1BaGxENHprQlB5cnVBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABbfUMmWr
U06z6UmogWnbETuFSfM/l4WLfC8vTpN1AinWungeuB5bPsDcqUKmTTLD1gNqW38M
qBNDm/qpGC1xZ6kMuFYMzDLlC0agsPk1IgrDZIy2Zq6UjPlZPumS9nzBWEKrAjX1
aMBToJDtwLkchbqoojDsVWN6Lz9CkRVUx/CFtdhTAedW7bby14NDGuV8KRr/juZ/
4ga7Vfy74gcpKq4fWhmF+oocmQf/21daaHwmzKvtfDx2kOc6uc7UHqhCU12FTUQH
PBFPmuRXPNoL9MZFOFQG4P/Ufx4j4XxpokcHlK9qsHIhQMRALjJGlQgG/G3gF5gm
5ztTsKNRoHFU0w==
-----END CERTIFICATE-----
Generated at Fri Jul 24 21:41:44 2026 by rpki-client