Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/adfaea-b7d7-46e5-84de-1602bfef37e9/1/bc0iYSmgbEho-hD-gtImFrsvZps.mft
File: bc0iYSmgbEho-hD-gtImFrsvZps.mft (raw, json)
Hash identifier: SbkfVkDK7DdtfS1onsftivqw1oJmMRlD05PCQj5ZKgI=
Subject key identifier: 58:24:4E:4A:20:0C:6E:A7:34:D5:DF:6C:2A:A9:F7:E1:E4:A7:A6:E3
Authority key identifier: 6D:CD:22:61:29:A0:6C:48:68:FA:10:FE:82:D2:26:16:BB:2F:66:9B
Certificate issuer: /CN=6dcd226129a06c4868fa10fe82d22616bb2f669b
Certificate serial: 019E1CEB849DAEF4B0DC7E38490CEBCCB25C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bc0iYSmgbEho-hD-gtImFrsvZps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/adfaea-b7d7-46e5-84de-1602bfef37e9/1/bc0iYSmgbEho-hD-gtImFrsvZps.mft
Manifest number: D1
Signing time: Tue 12 May 2026 16:00:57 +0000
Manifest this update: Tue 12 May 2026 16:00:57 +0000
Manifest next update: Wed 13 May 2026 16:00:57 +0000
Files and hashes: 1: 4GwizHDiJW34eVbsS1zqAhW5bAA.asa (hash: tIiey6tQSs3tmmWNU2xS6Ra9dn48lRK3oxZupZMUgQ8=)
2: bc0iYSmgbEho-hD-gtImFrsvZps.crl (hash: yTxntYGw4TMqq3f1XvzeIf7gINtObn12FM1YJQYqaxE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/adfaea-b7d7-46e5-84de-1602bfef37e9/1/bc0iYSmgbEho-hD-gtImFrsvZps.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/adfaea-b7d7-46e5-84de-1602bfef37e9/1/bc0iYSmgbEho-hD-gtImFrsvZps.mft
rsync://rpki.ripe.net/repository/DEFAULT/bc0iYSmgbEho-hD-gtImFrsvZps.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:eb:84:9d:ae:f4:b0:dc:7e:38:49:0c:eb:cc:b2:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6dcd226129a06c4868fa10fe82d22616bb2f669b
Validity
Not Before: May 12 16:00:57 2026 GMT
Not After : May 13 16:00:57 2026 GMT
Subject: CN=58244e4a200c6ea734d5df6c2aa9f7e1e4a7a6e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:7e:1e:6c:e8:cd:1e:5d:b1:6a:47:92:86:14:
2e:92:d5:d8:aa:cb:97:cf:ba:94:53:55:a9:17:39:
45:1d:f7:ab:d9:a2:dd:11:8a:f8:7c:a0:8c:0b:76:
b7:9a:16:19:1d:3c:04:0b:15:ea:43:cf:22:3c:6b:
43:f7:d1:fd:9e:c8:ae:23:54:57:6c:06:0a:7f:09:
c1:16:98:3e:10:2d:a7:1e:ec:3e:1d:57:a4:3a:33:
5b:39:da:fd:58:c2:d9:12:4f:52:0a:6a:52:a4:fc:
c5:af:4c:75:b9:fd:bb:7b:0f:72:c4:08:91:18:1c:
12:7b:8d:3c:bc:27:ab:b1:bf:f8:f6:7f:a5:e6:98:
0a:0c:a6:29:18:fb:34:66:bf:79:3d:da:42:80:c4:
57:0d:1b:d7:bf:88:ce:8b:11:cc:91:73:c0:c2:35:
b5:8f:3d:dd:38:4f:1c:f3:16:f5:d4:c3:47:05:d1:
d3:31:a9:f5:e6:49:20:df:ce:25:37:d1:e3:be:26:
8e:72:1b:c7:0e:33:0a:8c:27:91:74:22:0e:ba:43:
1a:a6:fc:cc:f5:0f:6e:d1:8c:66:16:f2:3f:64:01:
db:30:1f:cb:f1:78:d6:47:e8:26:d5:9c:05:32:2d:
0b:13:4e:fa:d1:cd:12:92:43:6f:fb:14:b8:18:d5:
ff:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:24:4E:4A:20:0C:6E:A7:34:D5:DF:6C:2A:A9:F7:E1:E4:A7:A6:E3
X509v3 Authority Key Identifier:
keyid:6D:CD:22:61:29:A0:6C:48:68:FA:10:FE:82:D2:26:16:BB:2F:66:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc0iYSmgbEho-hD-gtImFrsvZps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/adfaea-b7d7-46e5-84de-1602bfef37e9/1/bc0iYSmgbEho-hD-gtImFrsvZps.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/adfaea-b7d7-46e5-84de-1602bfef37e9/1/bc0iYSmgbEho-hD-gtImFrsvZps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:1d:d6:ca:16:72:cb:00:bd:f8:23:a2:ce:86:39:6a:39:63:
e7:78:73:0b:72:7a:1f:b2:82:7a:09:ea:00:74:f0:d7:6e:fd:
31:68:b2:04:a8:9f:b8:db:91:fe:cf:b7:6a:a5:08:d3:ef:01:
2e:8e:41:c4:a4:82:74:f2:e4:d8:b6:0f:60:32:8e:27:c8:83:
c7:bd:ce:d9:1e:87:9c:49:c5:a8:a5:20:5c:8b:e6:f9:31:3c:
31:d6:53:be:42:c8:10:97:c8:03:8a:cb:62:bc:6a:c0:64:c6:
8a:a6:32:ba:cd:e1:84:72:42:12:ed:62:21:40:1c:20:c7:37:
2d:58:39:13:fc:e0:ea:2a:1c:82:5d:a8:e8:98:c4:bf:06:08:
a1:57:88:06:c3:22:67:e9:ed:e6:ba:92:64:56:cd:ee:00:19:
4f:4c:91:1e:7a:90:58:6f:3d:12:dd:ec:12:70:42:e2:0e:cf:
e4:09:df:ab:ad:7a:95:c3:b5:84:88:ae:94:ac:e8:6a:9c:c1:
a4:d9:84:a7:82:73:c5:b2:02:ab:66:ed:27:47:47:82:ba:23:
8a:83:08:a6:1a:60:cd:69:14:2f:d7:0a:da:0b:27:34:a7:80:
c6:b4:10:ed:49:92:03:21:c8:1c:bb:b7:44:1e:1e:a1:96:88:
f2:d0:cc:70
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4c64SdrvSw3H44SQzrzLJcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZkY2QyMjYxMjlhMDZjNDg2OGZhMTBmZTgyZDIyNjE2YmIy
ZjY2OWIwHhcNMjYwNTEyMTYwMDU3WhcNMjYwNTEzMTYwMDU3WjAzMTEwLwYDVQQD
Eyg1ODI0NGU0YTIwMGM2ZWE3MzRkNWRmNmMyYWE5ZjdlMWU0YTdhNmUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1H4ebOjNHl2xakeShhQuktXYqsuX
z7qUU1WpFzlFHfer2aLdEYr4fKCMC3a3mhYZHTwECxXqQ88iPGtD99H9nsiuI1RX
bAYKfwnBFpg+EC2nHuw+HVekOjNbOdr9WMLZEk9SCmpSpPzFr0x1uf27ew9yxAiR
GBwSe408vCersb/49n+l5pgKDKYpGPs0Zr95PdpCgMRXDRvXv4jOixHMkXPAwjW1
jz3dOE8c8xb11MNHBdHTMan15kkg384lN9HjviaOchvHDjMKjCeRdCIOukMapvzM
9Q9u0YxmFvI/ZAHbMB/L8XjWR+gm1ZwFMi0LE0760c0SkkNv+xS4GNX/cwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFgkTkogDG6nNNXfbCqp9+Hkp6bjMB8GA1UdIwQY
MBaAFG3NImEpoGxIaPoQ/oLSJha7L2abMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYmMwaVlTbWdiRWhvLWhELWd0SW1GcnN2WnBzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS9hZGZhZWEtYjdkNy00NmU1LTg0ZGUt
MTYwMmJmZWYzN2U5LzEvYmMwaVlTbWdiRWhvLWhELWd0SW1GcnN2WnBzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83YS9hZGZhZWEtYjdkNy00NmU1LTg0ZGUtMTYwMmJmZWYzN2U5
LzEvYmMwaVlTbWdiRWhvLWhELWd0SW1GcnN2WnBzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXh3WyhZy
ywC9+COizoY5ajlj53hzC3J6H7KCegnqAHTw1279MWiyBKifuNuR/s+3aqUI0+8B
Lo5BxKSCdPLk2LYPYDKOJ8iDx73O2R6HnEnFqKUgXIvm+TE8MdZTvkLIEJfIA4rL
YrxqwGTGiqYyus3hhHJCEu1iIUAcIMc3LVg5E/zg6iocgl2o6JjEvwYIoVeIBsMi
Z+nt5rqSZFbN7gAZT0yRHnqQWG89Et3sEnBC4g7P5Anfq616lcO1hIiulKzoapzB
pNmEp4JzxbICq2btJ0dHgrojioMIphpgzWkUL9cK2gsnNKeAxrQQ7UmSAyHIHLu3
RB4eoZaI8tDMcA==
-----END CERTIFICATE-----
Generated at Wed May 13 01:16:05 2026 by rpki-client