Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/80b4c0-06cb-4424-9dd5-5a988931ea33/1/bwVF620H5D0m7IQAymTMUbuVZv8.mft
File: bwVF620H5D0m7IQAymTMUbuVZv8.mft (raw, json)
Hash identifier: VjUDyNrFJcyJOnunUyh623LqQvpK3RS0ssV00T//Eyc=
Subject key identifier: A8:76:D7:74:AF:07:65:47:A6:D7:D7:1B:E5:FD:0B:EC:96:93:9E:2F
Authority key identifier: 6F:05:45:EB:6D:07:E4:3D:26:EC:84:00:CA:64:CC:51:BB:95:66:FF
Certificate issuer: /CN=6f0545eb6d07e43d26ec8400ca64cc51bb9566ff
Certificate serial: 019F954902A362378FFB333A80C167707789
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bwVF620H5D0m7IQAymTMUbuVZv8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/80b4c0-06cb-4424-9dd5-5a988931ea33/1/bwVF620H5D0m7IQAymTMUbuVZv8.mft
Manifest number: 42
Signing time: Fri 24 Jul 2026 18:00:17 +0000
Manifest this update: Fri 24 Jul 2026 18:00:17 +0000
Manifest next update: Sat 25 Jul 2026 18:00:17 +0000
Files and hashes: 1: bwVF620H5D0m7IQAymTMUbuVZv8.crl (hash: Y+scGdG0xBjzXx4pPJQEUDxRKedecda3EkDID0uAHHI=)
2: crSSmpcLdnTcx2ovWO2MVlxTArU.roa (hash: L7ZtPmmnI2aRhLMmMXfjqnVphR0y7J0Vd8zHZ1iyQFc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/80b4c0-06cb-4424-9dd5-5a988931ea33/1/bwVF620H5D0m7IQAymTMUbuVZv8.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/80b4c0-06cb-4424-9dd5-5a988931ea33/1/bwVF620H5D0m7IQAymTMUbuVZv8.mft
rsync://rpki.ripe.net/repository/DEFAULT/bwVF620H5D0m7IQAymTMUbuVZv8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 16:41:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:95:49:02:a3:62:37:8f:fb:33:3a:80:c1:67:70:77:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f0545eb6d07e43d26ec8400ca64cc51bb9566ff
Validity
Not Before: Jul 24 18:00:17 2026 GMT
Not After : Jul 25 18:00:17 2026 GMT
Subject: CN=a876d774af076547a6d7d71be5fd0bec96939e2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:d3:35:c5:ed:44:1c:5b:b0:a7:d1:8a:a4:a3:
ed:c6:d1:c2:c9:96:38:88:dd:68:e0:48:b7:61:19:
4e:ad:1e:c7:c0:49:cd:e3:63:54:4f:93:55:1f:d2:
35:b4:a6:99:42:eb:c1:3f:de:dc:b4:a2:17:e4:2d:
79:85:a8:3c:f7:2c:1d:21:84:b7:c5:18:e4:ab:f6:
0a:92:69:2d:ab:9f:c9:60:a0:d7:ad:1d:fa:ff:d6:
28:4a:ac:e2:e4:03:35:6b:3c:9b:58:01:64:6c:62:
56:0b:d1:a0:e5:00:5d:f8:82:0e:a6:fe:26:8c:91:
e0:96:ab:1b:8f:6c:dd:f6:9b:0e:34:23:52:c2:62:
3d:54:b0:3b:dd:73:a0:29:25:16:bd:57:2f:c0:47:
29:74:1d:63:cd:3d:21:2c:87:bf:77:f8:f4:8d:11:
bc:65:0d:ea:ff:3c:18:97:e5:94:d7:c8:81:3b:3e:
32:b4:9b:86:9a:40:12:04:91:39:81:32:c4:aa:70:
8b:5d:aa:40:9c:39:d3:92:40:ce:39:e0:46:30:25:
3b:de:ba:7a:d0:60:fc:46:13:be:54:f0:b0:2e:dc:
a3:ae:37:d2:6a:45:76:36:c3:e2:b3:40:7c:1c:8c:
dd:f1:cb:73:1f:f1:be:1c:0a:ed:10:3d:ec:ac:da:
55:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:76:D7:74:AF:07:65:47:A6:D7:D7:1B:E5:FD:0B:EC:96:93:9E:2F
X509v3 Authority Key Identifier:
keyid:6F:05:45:EB:6D:07:E4:3D:26:EC:84:00:CA:64:CC:51:BB:95:66:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bwVF620H5D0m7IQAymTMUbuVZv8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/80b4c0-06cb-4424-9dd5-5a988931ea33/1/bwVF620H5D0m7IQAymTMUbuVZv8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/80b4c0-06cb-4424-9dd5-5a988931ea33/1/bwVF620H5D0m7IQAymTMUbuVZv8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:ca:ea:2e:3b:23:4c:78:c0:67:86:d8:02:c2:75:b5:31:2d:
08:cc:e0:0a:11:b7:4d:39:0d:38:89:34:6f:54:e5:a4:58:5f:
08:ea:db:1a:d3:5d:82:76:6b:da:14:45:f7:6d:e9:dd:d5:5b:
a4:5b:77:16:fa:ed:10:25:de:61:1c:d2:1f:4b:da:28:f7:b9:
90:8a:0c:b4:4a:da:ff:2b:54:68:aa:92:55:99:40:f8:49:b2:
96:05:cc:94:f3:5b:62:45:eb:6f:72:d6:52:42:95:3a:8e:57:
a2:00:65:15:b5:1a:a6:73:62:c8:41:80:17:89:e7:0d:b4:8c:
3a:b7:57:61:bc:44:44:f8:34:8d:14:62:77:23:2b:85:6b:44:
af:72:bb:f1:ad:78:47:4d:95:65:e7:6a:cf:38:78:dc:bc:c3:
c7:e0:77:0a:da:6d:55:06:91:5e:5c:59:9a:40:82:e1:2e:e8:
c7:ec:06:63:fd:4d:b6:72:52:6d:ba:12:25:5a:1b:18:e1:f4:
e7:5a:06:23:3c:b3:e2:fa:c2:97:14:46:81:2a:e0:eb:c2:90:
30:af:40:3a:ad:ea:3d:8c:bf:91:c7:f1:f3:a3:b2:8c:03:a1:
dc:6c:ca:e6:8e:ff:bf:36:45:18:45:40:f3:88:e4:8b:8c:58:
dc:04:85:93
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+VSQKjYjeP+zM6gMFncHeJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmMDU0NWViNmQwN2U0M2QyNmVjODQwMGNhNjRjYzUxYmI5
NTY2ZmYwHhcNMjYwNzI0MTgwMDE3WhcNMjYwNzI1MTgwMDE3WjAzMTEwLwYDVQQD
EyhhODc2ZDc3NGFmMDc2NTQ3YTZkN2Q3MWJlNWZkMGJlYzk2OTM5ZTJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA59M1xe1EHFuwp9GKpKPtxtHCyZY4
iN1o4Ei3YRlOrR7HwEnN42NUT5NVH9I1tKaZQuvBP97ctKIX5C15hag89ywdIYS3
xRjkq/YKkmktq5/JYKDXrR36/9YoSqzi5AM1azybWAFkbGJWC9Gg5QBd+IIOpv4m
jJHglqsbj2zd9psONCNSwmI9VLA73XOgKSUWvVcvwEcpdB1jzT0hLIe/d/j0jRG8
ZQ3q/zwYl+WU18iBOz4ytJuGmkASBJE5gTLEqnCLXapAnDnTkkDOOeBGMCU73rp6
0GD8RhO+VPCwLtyjrjfSakV2NsPis0B8HIzd8ctzH/G+HArtED3srNpV2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKh213SvB2VHptfXG+X9C+yWk54vMB8GA1UdIwQY
MBaAFG8FRettB+Q9JuyEAMpkzFG7lWb/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYndWRjYyMEg1RDBtN0lRQXltVE1VYnVWWnY4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS84MGI0YzAtMDZjYi00NDI0LTlkZDUt
NWE5ODg5MzFlYTMzLzEvYndWRjYyMEg1RDBtN0lRQXltVE1VYnVWWnY4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NS84MGI0YzAtMDZjYi00NDI0LTlkZDUtNWE5ODg5MzFlYTMz
LzEvYndWRjYyMEg1RDBtN0lRQXltVE1VYnVWWnY4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe8rqLjsj
THjAZ4bYAsJ1tTEtCMzgChG3TTkNOIk0b1TlpFhfCOrbGtNdgnZr2hRF923p3dVb
pFt3FvrtECXeYRzSH0vaKPe5kIoMtEra/ytUaKqSVZlA+EmylgXMlPNbYkXrb3LW
UkKVOo5XogBlFbUapnNiyEGAF4nnDbSMOrdXYbxERPg0jRRidyMrhWtEr3K78a14
R02VZedqzzh43LzDx+B3CtptVQaRXlxZmkCC4S7ox+wGY/1NtnJSbboSJVobGOH0
51oGIzyz4vrClxRGgSrg68KQMK9AOq3qPYy/kcfx86OyjAOh3GzK5o7/vzZFGEVA
84jki4xY3ASFkw==
-----END CERTIFICATE-----
Generated at Fri Jul 24 20:19:26 2026 by rpki-client