Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/e14ebe-45dd-44db-b9b7-1a1f936454ec/1/v9eGsktLMCdbzI1SRONO4ASB15A.mft
File: v9eGsktLMCdbzI1SRONO4ASB15A.mft (raw, json)
Hash identifier: B1Gpd8jsMZ4Th6YWxQc5IIFxhIAcyJpGfqAqUR9OOno=
Subject key identifier: BD:DC:0A:83:81:A2:9D:DC:2C:3B:00:30:41:56:EE:86:68:B7:21:5A
Authority key identifier: BF:D7:86:B2:4B:4B:30:27:5B:CC:8D:52:44:E3:4E:E0:04:81:D7:90
Certificate issuer: /CN=bfd786b24b4b30275bcc8d5244e34ee00481d790
Certificate serial: 019F90231D765A37B79B449A871EBA5EC445
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v9eGsktLMCdbzI1SRONO4ASB15A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/e14ebe-45dd-44db-b9b7-1a1f936454ec/1/v9eGsktLMCdbzI1SRONO4ASB15A.mft
Manifest number: 154A
Signing time: Thu 23 Jul 2026 18:00:47 +0000
Manifest this update: Thu 23 Jul 2026 18:00:47 +0000
Manifest next update: Fri 24 Jul 2026 18:00:47 +0000
Files and hashes: 1: 14VladBUxqaqZ-NNE8ER_uSwfHc.roa (hash: SrYCafFoP0SWSKgNsDYvBDk2UieF1/jSU5NqyuCubYM=)
2: otTbYOYedxsaU18vozv7H0qaULY.roa (hash: 0z94Z3PKNajsqszNsKqEJ/uzjuVZiI+UT7U7HnELbf8=)
3: v9eGsktLMCdbzI1SRONO4ASB15A.crl (hash: pNozfVWb4wgRnz3Wd5Z5sIl+5rhXGv71+4nsnTKDs5M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/e14ebe-45dd-44db-b9b7-1a1f936454ec/1/v9eGsktLMCdbzI1SRONO4ASB15A.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/e14ebe-45dd-44db-b9b7-1a1f936454ec/1/v9eGsktLMCdbzI1SRONO4ASB15A.mft
rsync://rpki.ripe.net/repository/DEFAULT/v9eGsktLMCdbzI1SRONO4ASB15A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 18:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:23:1d:76:5a:37:b7:9b:44:9a:87:1e:ba:5e:c4:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfd786b24b4b30275bcc8d5244e34ee00481d790
Validity
Not Before: Jul 23 18:00:47 2026 GMT
Not After : Jul 24 18:00:47 2026 GMT
Subject: CN=bddc0a8381a29ddc2c3b00304156ee8668b7215a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:c2:18:e6:e8:e9:81:12:56:70:27:10:bf:26:
d5:e9:dd:c5:dd:00:f4:d8:13:4d:51:f1:17:2d:85:
9f:bf:be:e5:cd:18:80:ca:2e:88:53:9f:cb:43:37:
fb:bb:c5:98:6d:76:c7:68:08:d1:66:df:f6:36:c7:
51:51:57:c3:58:f8:cf:0d:0b:e4:65:70:9b:5a:98:
21:aa:fb:56:3c:34:14:8b:c5:2f:7d:18:93:7d:64:
7a:cf:24:6c:de:af:58:c0:e0:0a:e1:db:65:81:90:
e3:ad:14:0a:1d:bc:26:a4:ea:77:2a:60:fc:b7:0d:
63:73:84:cd:5d:31:93:39:f9:5b:55:11:48:59:8c:
c0:b1:12:ea:2c:14:4d:27:d3:83:91:5b:50:42:65:
da:73:a5:b5:80:97:ed:61:5d:37:c2:59:20:a3:0c:
0a:9e:ff:29:bc:c4:45:46:c1:d4:0b:7a:09:05:dc:
dc:41:81:72:2f:12:5e:3a:af:a9:88:5e:74:c1:25:
31:fa:d6:15:c6:f7:2d:e1:8d:48:68:70:81:3e:b6:
fd:4a:3a:91:da:55:2a:b7:47:aa:9d:0d:4e:40:81:
7a:3b:4a:58:0e:e8:90:47:45:b3:ac:35:46:9a:c0:
d7:8f:8d:31:c8:7a:11:0a:78:18:91:74:96:46:9c:
59:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:DC:0A:83:81:A2:9D:DC:2C:3B:00:30:41:56:EE:86:68:B7:21:5A
X509v3 Authority Key Identifier:
keyid:BF:D7:86:B2:4B:4B:30:27:5B:CC:8D:52:44:E3:4E:E0:04:81:D7:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v9eGsktLMCdbzI1SRONO4ASB15A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e14ebe-45dd-44db-b9b7-1a1f936454ec/1/v9eGsktLMCdbzI1SRONO4ASB15A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e14ebe-45dd-44db-b9b7-1a1f936454ec/1/v9eGsktLMCdbzI1SRONO4ASB15A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:19:ab:09:8e:26:e9:d5:95:e9:92:91:1b:c0:18:20:c6:ee:
5c:af:ab:ca:95:2d:7d:17:b2:b1:d7:79:d0:52:dc:e1:83:91:
34:5e:34:21:75:ce:94:70:38:b1:53:61:15:13:a8:7f:b7:fc:
49:1e:b4:b6:4f:f8:fc:7b:25:64:fc:5a:0b:67:c4:fe:72:52:
8b:3e:d5:42:45:24:c6:b9:97:2b:8c:e7:82:9c:74:d6:17:e4:
d2:65:0c:d4:d3:28:73:ea:0a:d1:97:40:a7:e3:40:6f:3e:10:
f1:60:4a:f8:32:05:03:d4:25:f7:97:08:18:84:aa:f4:d3:ff:
de:63:5b:e5:89:e0:42:85:c1:d0:06:97:20:18:47:14:e6:51:
1f:bc:0f:7c:cc:97:dd:ea:0c:b1:70:7c:73:18:06:63:8d:24:
f0:8a:ef:6b:4e:35:a2:82:e5:f6:ff:ad:9e:00:f5:47:74:1f:
2a:a9:11:60:26:39:55:4b:99:37:f3:72:19:f2:7b:12:64:6d:
cd:00:8f:65:f5:65:1e:99:89:74:5f:9d:fd:1e:5e:f4:77:fd:
62:e7:f6:3e:31:a1:4b:0a:8d:63:06:67:bf:69:32:20:62:79:
d2:ae:02:d6:6c:ad:4c:ae:65:22:5e:d4:8d:98:1f:bd:19:ab:
4c:df:0b:d6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+QIx12Wje3m0Sahx66XsRFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJmZDc4NmIyNGI0YjMwMjc1YmNjOGQ1MjQ0ZTM0ZWUwMDQ4
MWQ3OTAwHhcNMjYwNzIzMTgwMDQ3WhcNMjYwNzI0MTgwMDQ3WjAzMTEwLwYDVQQD
EyhiZGRjMGE4MzgxYTI5ZGRjMmMzYjAwMzA0MTU2ZWU4NjY4YjcyMTVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwcIY5ujpgRJWcCcQvybV6d3F3QD0
2BNNUfEXLYWfv77lzRiAyi6IU5/LQzf7u8WYbXbHaAjRZt/2NsdRUVfDWPjPDQvk
ZXCbWpghqvtWPDQUi8UvfRiTfWR6zyRs3q9YwOAK4dtlgZDjrRQKHbwmpOp3KmD8
tw1jc4TNXTGTOflbVRFIWYzAsRLqLBRNJ9ODkVtQQmXac6W1gJftYV03wlkgowwK
nv8pvMRFRsHUC3oJBdzcQYFyLxJeOq+piF50wSUx+tYVxvct4Y1IaHCBPrb9SjqR
2lUqt0eqnQ1OQIF6O0pYDuiQR0WzrDVGmsDXj40xyHoRCngYkXSWRpxZRwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL3cCoOBop3cLDsAMEFW7oZotyFaMB8GA1UdIwQY
MBaAFL/XhrJLSzAnW8yNUkTjTuAEgdeQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdjllR3NrdExNQ2RiekkxU1JPTk80QVNCMTVBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC9lMTRlYmUtNDVkZC00NGRiLWI5Yjct
MWExZjkzNjQ1NGVjLzEvdjllR3NrdExNQ2RiekkxU1JPTk80QVNCMTVBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZC9lMTRlYmUtNDVkZC00NGRiLWI5YjctMWExZjkzNjQ1NGVj
LzEvdjllR3NrdExNQ2RiekkxU1JPTk80QVNCMTVBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdxmrCY4m
6dWV6ZKRG8AYIMbuXK+rypUtfReysdd50FLc4YORNF40IXXOlHA4sVNhFROof7f8
SR60tk/4/HslZPxaC2fE/nJSiz7VQkUkxrmXK4zngpx01hfk0mUM1NMoc+oK0ZdA
p+NAbz4Q8WBK+DIFA9Ql95cIGISq9NP/3mNb5YngQoXB0AaXIBhHFOZRH7wPfMyX
3eoMsXB8cxgGY40k8Irva041ooLl9v+tngD1R3QfKqkRYCY5VUuZN/NyGfJ7EmRt
zQCPZfVlHpmJdF+d/R5e9Hf9Yuf2PjGhSwqNYwZnv2kyIGJ50q4C1mytTK5lIl7U
jZgfvRmrTN8L1g==
-----END CERTIFICATE-----
Generated at Fri Jul 24 04:20:50 2026 by rpki-client