Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/0896b2-f809-4f1d-9b94-14a0825b5291/1/Bf3E2l3zUF9fZsQGF0HCOp7OC-c.mft
File: Bf3E2l3zUF9fZsQGF0HCOp7OC-c.mft (raw, json)
Hash identifier: ZKC2yMgxQ8CW2FK9fjVne5owMYV6qZiq3YhhDkzvAtY=
Subject key identifier: 4A:5F:59:39:3A:46:0B:20:EB:05:B6:A0:51:A8:FD:AE:69:48:1F:56
Authority key identifier: 05:FD:C4:DA:5D:F3:50:5F:5F:66:C4:06:17:41:C2:3A:9E:CE:0B:E7
Certificate issuer: /CN=05fdc4da5df3505f5f66c4061741c23a9ece0be7
Certificate serial: 019F8F7EE435D14E99268C4F4777829EA662
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bf3E2l3zUF9fZsQGF0HCOp7OC-c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/0896b2-f809-4f1d-9b94-14a0825b5291/1/Bf3E2l3zUF9fZsQGF0HCOp7OC-c.mft
Manifest number: 3F
Signing time: Thu 23 Jul 2026 15:01:25 +0000
Manifest this update: Thu 23 Jul 2026 15:01:25 +0000
Manifest next update: Fri 24 Jul 2026 15:01:25 +0000
Files and hashes: 1: B2xA4r-YaWuzxF9e9Bejx8Nv8ow.roa (hash: BJSQF7U6lyI4DjZVMUaEYkHTgkb9afW2KgWbmWHAUr4=)
2: Bf3E2l3zUF9fZsQGF0HCOp7OC-c.crl (hash: +w84dtowwOjcq9gr2npeLlRrcxdSzbW2PJlFnxNvPOc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/0896b2-f809-4f1d-9b94-14a0825b5291/1/Bf3E2l3zUF9fZsQGF0HCOp7OC-c.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/0896b2-f809-4f1d-9b94-14a0825b5291/1/Bf3E2l3zUF9fZsQGF0HCOp7OC-c.mft
rsync://rpki.ripe.net/repository/DEFAULT/Bf3E2l3zUF9fZsQGF0HCOp7OC-c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:7e:e4:35:d1:4e:99:26:8c:4f:47:77:82:9e:a6:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05fdc4da5df3505f5f66c4061741c23a9ece0be7
Validity
Not Before: Jul 23 15:01:25 2026 GMT
Not After : Jul 24 15:01:25 2026 GMT
Subject: CN=4a5f59393a460b20eb05b6a051a8fdae69481f56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:b8:bb:0b:07:82:71:4f:98:b2:08:a7:86:68:
b2:b7:36:bb:f8:57:21:f9:aa:58:e3:7c:7d:a8:d3:
cc:6a:50:75:db:cd:8d:ee:d3:f4:8e:b4:10:84:9a:
d4:c9:48:4f:be:49:fd:27:ce:d5:6d:ca:2c:45:2b:
f8:dd:e1:bb:4e:f8:7c:c1:db:c2:b9:3f:b4:68:72:
6d:90:e9:a5:e4:c5:f7:e8:4b:50:98:e6:9b:6d:3d:
67:ef:58:51:a0:2a:51:39:47:94:88:3a:bf:f4:f2:
b4:5c:92:8a:91:10:3e:1f:c0:3f:49:37:4a:8a:c9:
c3:ab:40:78:8a:09:8b:88:f7:69:c5:42:c2:80:61:
67:e3:30:69:83:ef:e3:92:dd:3b:7d:e7:1f:43:0c:
12:55:ea:0c:81:a5:05:b6:fe:c8:a5:87:92:c2:22:
98:c3:6d:47:27:d1:7d:af:ea:a9:46:fc:77:02:0b:
ef:72:d0:ef:df:63:b0:57:be:c5:64:7f:cc:f9:d3:
1a:04:4b:d6:eb:49:d3:78:e7:fe:96:d2:7a:76:68:
1b:ac:57:b7:f0:27:d3:9a:dd:22:10:0b:bf:8d:1f:
d8:82:11:df:cf:61:21:c6:eb:ba:59:7e:93:dd:3d:
f6:3d:1d:e6:63:2c:cd:b7:55:22:ad:61:ab:79:21:
26:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:5F:59:39:3A:46:0B:20:EB:05:B6:A0:51:A8:FD:AE:69:48:1F:56
X509v3 Authority Key Identifier:
keyid:05:FD:C4:DA:5D:F3:50:5F:5F:66:C4:06:17:41:C2:3A:9E:CE:0B:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bf3E2l3zUF9fZsQGF0HCOp7OC-c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/0896b2-f809-4f1d-9b94-14a0825b5291/1/Bf3E2l3zUF9fZsQGF0HCOp7OC-c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/0896b2-f809-4f1d-9b94-14a0825b5291/1/Bf3E2l3zUF9fZsQGF0HCOp7OC-c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:18:ea:a8:86:17:ee:6f:07:fd:7a:45:08:d1:67:98:1c:fb:
7c:2e:18:61:58:03:a5:d8:0e:2b:d0:9f:64:5a:02:e6:e7:34:
dc:04:d9:3b:96:10:ee:4c:39:97:62:32:b8:47:53:eb:25:6c:
1b:89:e3:ce:2e:e8:01:13:73:70:5f:d9:d5:f0:45:89:76:8f:
00:53:50:4d:c1:ed:6b:16:ad:55:fe:81:a3:e7:f0:06:c4:86:
56:19:e5:e9:39:ae:c3:99:b2:3f:f0:12:3b:60:03:39:f7:d8:
57:ae:64:dc:3e:49:96:6e:3b:c4:ee:02:db:d5:d4:bc:ee:ef:
66:e2:3a:46:a6:41:2b:69:70:55:2b:40:1c:54:dd:17:82:26:
7e:5d:3d:92:4c:f2:4b:79:83:d3:d0:e7:4e:68:4c:c7:b5:79:
77:2c:ec:31:c4:57:c6:6a:af:1d:20:b1:27:d7:f0:be:33:2f:
59:0e:14:a4:c9:e6:db:a2:dc:14:7e:91:62:fa:da:96:6d:af:
51:06:5d:11:c9:2b:aa:01:fb:f7:7a:ec:1e:16:46:bd:68:57:
16:f4:fe:f3:30:39:64:80:3d:ac:08:21:83:9d:39:fb:29:15:
ca:72:c4:91:48:50:f9:d1:aa:aa:3b:44:13:7e:54:69:6b:41:
da:98:a4:1e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+PfuQ10U6ZJoxPR3eCnqZiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1ZmRjNGRhNWRmMzUwNWY1ZjY2YzQwNjE3NDFjMjNhOWVj
ZTBiZTcwHhcNMjYwNzIzMTUwMTI1WhcNMjYwNzI0MTUwMTI1WjAzMTEwLwYDVQQD
Eyg0YTVmNTkzOTNhNDYwYjIwZWIwNWI2YTA1MWE4ZmRhZTY5NDgxZjU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Li7CweCcU+Ysginhmiytza7+Fch
+apY43x9qNPMalB1282N7tP0jrQQhJrUyUhPvkn9J87VbcosRSv43eG7Tvh8wdvC
uT+0aHJtkOml5MX36EtQmOabbT1n71hRoCpROUeUiDq/9PK0XJKKkRA+H8A/STdK
isnDq0B4igmLiPdpxULCgGFn4zBpg+/jkt07fecfQwwSVeoMgaUFtv7IpYeSwiKY
w21HJ9F9r+qpRvx3AgvvctDv32OwV77FZH/M+dMaBEvW60nTeOf+ltJ6dmgbrFe3
8CfTmt0iEAu/jR/YghHfz2Ehxuu6WX6T3T32PR3mYyzNt1UirWGreSEmDwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEpfWTk6Rgsg6wW2oFGo/a5pSB9WMB8GA1UdIwQY
MBaAFAX9xNpd81BfX2bEBhdBwjqezgvnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQmYzRTJsM3pVRjlmWnNRR0YwSENPcDdPQy1jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OS8wODk2YjItZjgwOS00ZjFkLTliOTQt
MTRhMDgyNWI1MjkxLzEvQmYzRTJsM3pVRjlmWnNRR0YwSENPcDdPQy1jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OS8wODk2YjItZjgwOS00ZjFkLTliOTQtMTRhMDgyNWI1Mjkx
LzEvQmYzRTJsM3pVRjlmWnNRR0YwSENPcDdPQy1jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATxjqqIYX
7m8H/XpFCNFnmBz7fC4YYVgDpdgOK9CfZFoC5uc03ATZO5YQ7kw5l2IyuEdT6yVs
G4njzi7oARNzcF/Z1fBFiXaPAFNQTcHtaxatVf6Bo+fwBsSGVhnl6Tmuw5myP/AS
O2ADOffYV65k3D5Jlm47xO4C29XUvO7vZuI6RqZBK2lwVStAHFTdF4Imfl09kkzy
S3mD09DnTmhMx7V5dyzsMcRXxmqvHSCxJ9fwvjMvWQ4UpMnm26LcFH6RYvralm2v
UQZdEckrqgH793rsHhZGvWhXFvT+8zA5ZIA9rAghg505+ykVynLEkUhQ+dGqqjtE
E35UaWtB2pikHg==
-----END CERTIFICATE-----
Generated at Thu Jul 23 23:16:35 2026 by rpki-client