Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/fa6f43-7dd1-405b-8dce-29b038084aa6/1/Bh4lVOUgN3gdEHyPgxnJPlmYbwU.mft
File: Bh4lVOUgN3gdEHyPgxnJPlmYbwU.mft (raw, json)
Hash identifier: EI3CbTLoPMjpX1cYEI6Ih/KMXC4WDV6rQRTN4l4A0k8=
Subject key identifier: 76:54:AD:4B:E8:4C:22:C6:84:48:D4:D1:3C:B0:30:92:81:5D:AC:C6
Authority key identifier: 06:1E:25:54:E5:20:37:78:1D:10:7C:8F:83:19:C9:3E:59:98:6F:05
Certificate issuer: /CN=061e2554e52037781d107c8f8319c93e59986f05
Certificate serial: 019F8ED9291393A20ED53ADE38C0FE12DFF5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bh4lVOUgN3gdEHyPgxnJPlmYbwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/fa6f43-7dd1-405b-8dce-29b038084aa6/1/Bh4lVOUgN3gdEHyPgxnJPlmYbwU.mft
Manifest number: 0D44
Signing time: Thu 23 Jul 2026 12:00:24 +0000
Manifest this update: Thu 23 Jul 2026 12:00:24 +0000
Manifest next update: Fri 24 Jul 2026 12:00:24 +0000
Files and hashes: 1: 7nGRBNjM5j5eNDqYz-TSSv94j7Q.roa (hash: nhAdafWlc+OQ8H28KfWJebfO4dsqekDq134e+O9NNS4=)
2: Bh4lVOUgN3gdEHyPgxnJPlmYbwU.crl (hash: +S1OTwGraIkeXuMg1lBDt1Vm9xXxUdysEpK4FSFqyiM=)
3: yIFLl4MVGF9mjpKNHCzeQGsD2Qo.roa (hash: 7+aiKFdw/abreb0Y89Vdn5Q4kSAU0SOcU2BQF5q2AZU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/fa6f43-7dd1-405b-8dce-29b038084aa6/1/Bh4lVOUgN3gdEHyPgxnJPlmYbwU.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/fa6f43-7dd1-405b-8dce-29b038084aa6/1/Bh4lVOUgN3gdEHyPgxnJPlmYbwU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Bh4lVOUgN3gdEHyPgxnJPlmYbwU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 12:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8e:d9:29:13:93:a2:0e:d5:3a:de:38:c0:fe:12:df:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=061e2554e52037781d107c8f8319c93e59986f05
Validity
Not Before: Jul 23 12:00:24 2026 GMT
Not After : Jul 24 12:00:24 2026 GMT
Subject: CN=7654ad4be84c22c68448d4d13cb03092815dacc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:3a:74:4f:f0:fd:e3:c3:87:f1:b1:41:21:32:
39:f8:8f:a6:29:f3:07:18:1b:a9:30:07:3f:51:2c:
5d:f7:0a:b2:ae:d8:4e:4e:cc:43:fc:12:fc:91:fe:
71:c7:90:46:1a:1d:f2:7b:76:45:6b:95:f7:a8:da:
4a:b0:e9:c9:df:b4:3b:89:50:61:62:07:92:9d:53:
39:9b:ff:a3:8f:53:90:cf:7d:7b:58:49:16:7a:4d:
32:51:6f:54:32:3a:31:e5:cc:11:f0:89:10:21:bf:
e3:b6:5e:f5:e0:f9:30:86:52:1f:94:5d:eb:4a:eb:
e5:6d:f1:50:41:40:d4:db:2a:de:4b:3a:7d:c0:30:
b9:83:01:d6:ad:c0:fe:53:bd:33:85:47:d0:72:e6:
85:07:37:97:eb:4f:34:0f:79:b4:ea:07:1d:3f:bb:
50:e3:5d:8f:c1:ec:c3:3a:e7:94:12:72:d5:2b:78:
e8:60:2a:37:d3:8d:dc:10:59:94:98:92:55:48:3d:
35:ab:5a:45:18:2d:13:89:d0:4d:2b:9a:67:96:70:
16:c3:b7:bc:5c:e2:7c:bc:54:55:76:18:f2:ce:4c:
f3:f7:1b:ad:39:1c:d4:ce:bc:61:93:8b:8c:2c:8c:
06:d8:5d:10:26:7e:90:68:6a:99:ee:f5:8e:01:23:
4e:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:54:AD:4B:E8:4C:22:C6:84:48:D4:D1:3C:B0:30:92:81:5D:AC:C6
X509v3 Authority Key Identifier:
keyid:06:1E:25:54:E5:20:37:78:1D:10:7C:8F:83:19:C9:3E:59:98:6F:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bh4lVOUgN3gdEHyPgxnJPlmYbwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/fa6f43-7dd1-405b-8dce-29b038084aa6/1/Bh4lVOUgN3gdEHyPgxnJPlmYbwU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/fa6f43-7dd1-405b-8dce-29b038084aa6/1/Bh4lVOUgN3gdEHyPgxnJPlmYbwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:5d:b9:88:61:35:11:f1:b9:cf:3d:1e:c3:0d:a7:4d:a3:d9:
f7:b5:a8:a5:3c:e7:28:a0:9b:92:db:2a:55:29:88:70:9a:8b:
b2:f1:3a:e9:d7:2c:ad:3a:29:e7:3a:01:42:bf:c9:fb:d3:f8:
b1:3e:ae:cf:f6:95:83:99:8a:ee:eb:31:e9:ce:5f:eb:89:d4:
f4:21:3d:b4:1a:bd:7e:d9:b2:29:9c:db:dc:d9:ec:64:4b:14:
d0:4c:ac:18:33:3f:12:54:51:c3:8e:de:91:64:36:d8:40:04:
a6:c2:9c:cb:3e:5a:30:cc:cc:67:f3:98:78:a6:c7:24:69:df:
63:27:ce:11:5b:ff:b3:44:03:1f:7c:90:90:61:ef:fc:10:b5:
7d:cd:6e:6a:cd:91:2c:79:6a:65:ae:d6:26:e3:73:a8:9d:1e:
f0:d3:62:0f:e8:1d:b9:b5:2e:df:61:0c:05:75:52:1e:ca:c2:
84:b2:c2:0e:d4:65:77:fb:2f:f7:fd:10:04:4b:72:ca:98:f2:
32:90:8a:7d:fc:bf:5f:d5:ca:d4:9c:55:20:5d:15:28:29:73:
f7:df:cc:5a:4f:d0:a7:07:2d:96:f0:5a:4b:63:e7:d0:44:6f:
a3:57:12:f9:3b:fa:29:8f:f2:43:73:3d:23:6a:31:36:62:d5:
da:97:b7:b1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+O2SkTk6IO1TreOMD+Et/1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA2MWUyNTU0ZTUyMDM3NzgxZDEwN2M4ZjgzMTljOTNlNTk5
ODZmMDUwHhcNMjYwNzIzMTIwMDI0WhcNMjYwNzI0MTIwMDI0WjAzMTEwLwYDVQQD
Eyg3NjU0YWQ0YmU4NGMyMmM2ODQ0OGQ0ZDEzY2IwMzA5MjgxNWRhY2M2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnDp0T/D948OH8bFBITI5+I+mKfMH
GBupMAc/USxd9wqyrthOTsxD/BL8kf5xx5BGGh3ye3ZFa5X3qNpKsOnJ37Q7iVBh
YgeSnVM5m/+jj1OQz317WEkWek0yUW9UMjox5cwR8IkQIb/jtl714PkwhlIflF3r
SuvlbfFQQUDU2yreSzp9wDC5gwHWrcD+U70zhUfQcuaFBzeX6080D3m06gcdP7tQ
412PwezDOueUEnLVK3joYCo3043cEFmUmJJVSD01q1pFGC0TidBNK5pnlnAWw7e8
XOJ8vFRVdhjyzkzz9xutORzUzrxhk4uMLIwG2F0QJn6QaGqZ7vWOASNO6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHZUrUvoTCLGhEjU0TywMJKBXazGMB8GA1UdIwQY
MBaAFAYeJVTlIDd4HRB8j4MZyT5ZmG8FMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQmg0bFZPVWdOM2dkRUh5UGd4bkpQbG1ZYndVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My9mYTZmNDMtN2RkMS00MDViLThkY2Ut
MjliMDM4MDg0YWE2LzEvQmg0bFZPVWdOM2dkRUh5UGd4bkpQbG1ZYndVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85My9mYTZmNDMtN2RkMS00MDViLThkY2UtMjliMDM4MDg0YWE2
LzEvQmg0bFZPVWdOM2dkRUh5UGd4bkpQbG1ZYndVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh125iGE1
EfG5zz0eww2nTaPZ97WopTznKKCbktsqVSmIcJqLsvE66dcsrTop5zoBQr/J+9P4
sT6uz/aVg5mK7usx6c5f64nU9CE9tBq9ftmyKZzb3NnsZEsU0EysGDM/ElRRw47e
kWQ22EAEpsKcyz5aMMzMZ/OYeKbHJGnfYyfOEVv/s0QDH3yQkGHv/BC1fc1uas2R
LHlqZa7WJuNzqJ0e8NNiD+gdubUu32EMBXVSHsrChLLCDtRld/sv9/0QBEtyypjy
MpCKffy/X9XK1JxVIF0VKClz99/MWk/QpwctlvBaS2Pn0ERvo1cS+Tv6KY/yQ3M9
I2oxNmLV2pe3sQ==
-----END CERTIFICATE-----
Generated at Thu Jul 23 21:45:59 2026 by rpki-client