Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/0ff9e5-fbbe-4b3b-b938-9ceaa1b7a116/1/Bag948ZgIx8iMPHCcA4gUFobz1c.mft
File: Bag948ZgIx8iMPHCcA4gUFobz1c.mft (raw, json)
Hash identifier: yVJkSiHFzysV10m2RmQymQRVgvhz3hRH45KUgjOOfds=
Subject key identifier: 51:16:6D:64:3F:A0:D4:F7:42:36:39:F0:8A:6B:95:D9:57:EA:9D:52
Authority key identifier: 05:A8:3D:E3:C6:60:23:1F:22:30:F1:C2:70:0E:20:50:5A:1B:CF:57
Certificate issuer: /CN=05a83de3c660231f2230f1c2700e20505a1bcf57
Certificate serial: 019F8F7FB8B01A4D554DF19ED58041717726
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bag948ZgIx8iMPHCcA4gUFobz1c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/0ff9e5-fbbe-4b3b-b938-9ceaa1b7a116/1/Bag948ZgIx8iMPHCcA4gUFobz1c.mft
Manifest number: 3F
Signing time: Thu 23 Jul 2026 15:02:19 +0000
Manifest this update: Thu 23 Jul 2026 15:02:19 +0000
Manifest next update: Fri 24 Jul 2026 15:02:19 +0000
Files and hashes: 1: Bag948ZgIx8iMPHCcA4gUFobz1c.crl (hash: CsksXPB9zleFD7NibXV98jElxhflpeAVW5kPUPd4xvI=)
2: HrgtmuW0yN0hsWEMTA8IRe5Ow-I.roa (hash: nkWf0uUkwJsAxVtSv5Gas9B1Em/eu7evo6LbD0YqyuM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/0ff9e5-fbbe-4b3b-b938-9ceaa1b7a116/1/Bag948ZgIx8iMPHCcA4gUFobz1c.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/0ff9e5-fbbe-4b3b-b938-9ceaa1b7a116/1/Bag948ZgIx8iMPHCcA4gUFobz1c.mft
rsync://rpki.ripe.net/repository/DEFAULT/Bag948ZgIx8iMPHCcA4gUFobz1c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:7f:b8:b0:1a:4d:55:4d:f1:9e:d5:80:41:71:77:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05a83de3c660231f2230f1c2700e20505a1bcf57
Validity
Not Before: Jul 23 15:02:19 2026 GMT
Not After : Jul 24 15:02:19 2026 GMT
Subject: CN=51166d643fa0d4f7423639f08a6b95d957ea9d52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:31:66:d6:04:3d:b2:28:a7:ad:21:a9:2f:e1:
54:65:17:5e:ee:54:3f:5d:4c:bd:f5:3f:70:d7:45:
a5:e7:64:3f:0b:16:48:10:1d:ff:9c:ec:a7:3b:bc:
52:17:c5:e8:45:ed:70:c1:27:7d:9b:fe:88:d7:b1:
9f:e3:f0:3c:47:33:e1:60:63:d0:de:45:74:de:52:
9d:3f:19:d7:d9:bd:d7:74:24:69:c3:d1:d9:6f:22:
f6:fe:2c:7c:81:b6:ba:2e:9b:d6:76:f9:a6:39:a6:
b8:43:b4:62:74:29:0a:62:a2:f5:5b:62:51:2e:84:
71:d9:17:50:b7:a3:f8:7f:29:82:39:75:2e:4e:77:
9f:81:3a:ac:ab:f8:d6:81:2f:c0:3e:66:47:f4:14:
5c:ce:e8:18:ef:54:d4:c7:b7:cb:93:52:b5:3b:0d:
94:f4:9b:6c:26:44:a1:a9:0e:c5:9f:fc:91:c2:7e:
b3:7a:13:27:03:92:99:a4:df:ce:8a:3c:ba:3f:13:
3c:23:9c:d4:25:de:b0:21:99:2d:3e:d1:23:f6:fd:
6e:c5:75:db:51:e3:14:02:af:58:c4:d6:8e:df:4f:
4f:16:63:3c:a0:18:fa:e5:c4:95:69:5b:22:d8:24:
a4:d2:42:2f:f1:ea:50:74:2e:43:d7:73:c8:bb:77:
97:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:16:6D:64:3F:A0:D4:F7:42:36:39:F0:8A:6B:95:D9:57:EA:9D:52
X509v3 Authority Key Identifier:
keyid:05:A8:3D:E3:C6:60:23:1F:22:30:F1:C2:70:0E:20:50:5A:1B:CF:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bag948ZgIx8iMPHCcA4gUFobz1c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/0ff9e5-fbbe-4b3b-b938-9ceaa1b7a116/1/Bag948ZgIx8iMPHCcA4gUFobz1c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/0ff9e5-fbbe-4b3b-b938-9ceaa1b7a116/1/Bag948ZgIx8iMPHCcA4gUFobz1c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:8c:4f:54:18:ae:24:47:39:ec:c2:9d:bc:ad:25:cf:72:7c:
a6:dd:25:0a:3f:fa:3a:55:ed:c0:9b:51:77:5a:e9:2e:08:26:
8c:29:06:46:bf:4a:be:7d:5c:a5:41:4a:1b:a7:87:09:ce:52:
4a:9b:db:45:4b:7b:55:86:e8:26:37:98:66:1a:3c:18:ad:e6:
82:1b:eb:ef:ce:ca:2a:68:26:d3:62:d9:b0:a9:fe:5c:dc:cb:
b5:ed:f6:32:73:0f:38:fd:99:e3:5d:f5:fb:d9:67:9d:03:80:
b3:89:a7:39:55:ab:35:89:c4:97:a6:57:37:51:3b:5c:ab:e5:
f9:b4:5b:4e:3c:88:03:37:91:86:57:da:55:d9:67:ac:8d:4c:
b6:9c:21:52:03:e8:7e:07:56:d7:c7:9c:32:28:4a:9e:d2:85:
e4:61:bd:7b:c3:c6:87:4b:e0:85:bf:1a:aa:32:61:7c:8a:99:
93:f8:71:93:a1:7f:eb:a8:98:eb:56:c4:19:dd:a2:c4:ac:54:
9e:59:70:35:31:8c:8c:51:95:d8:2b:7a:1d:e2:5b:7d:01:e0:
51:3c:bf:79:06:46:f8:89:d3:ac:db:2f:e8:15:21:63:f8:15:
69:3d:92:8b:6f:8b:33:0e:00:42:52:e8:45:71:fd:0f:4d:46:
c8:34:fd:9e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+Pf7iwGk1VTfGe1YBBcXcmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1YTgzZGUzYzY2MDIzMWYyMjMwZjFjMjcwMGUyMDUwNWEx
YmNmNTcwHhcNMjYwNzIzMTUwMjE5WhcNMjYwNzI0MTUwMjE5WjAzMTEwLwYDVQQD
Eyg1MTE2NmQ2NDNmYTBkNGY3NDIzNjM5ZjA4YTZiOTVkOTU3ZWE5ZDUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqzFm1gQ9siinrSGpL+FUZRde7lQ/
XUy99T9w10Wl52Q/CxZIEB3/nOynO7xSF8XoRe1wwSd9m/6I17Gf4/A8RzPhYGPQ
3kV03lKdPxnX2b3XdCRpw9HZbyL2/ix8gba6LpvWdvmmOaa4Q7RidCkKYqL1W2JR
LoRx2RdQt6P4fymCOXUuTnefgTqsq/jWgS/APmZH9BRczugY71TUx7fLk1K1Ow2U
9JtsJkShqQ7Fn/yRwn6zehMnA5KZpN/Oijy6PxM8I5zUJd6wIZktPtEj9v1uxXXb
UeMUAq9YxNaO309PFmM8oBj65cSVaVsi2CSk0kIv8epQdC5D13PIu3eX5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFEWbWQ/oNT3QjY58IprldlX6p1SMB8GA1UdIwQY
MBaAFAWoPePGYCMfIjDxwnAOIFBaG89XMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQmFnOTQ4WmdJeDhpTVBIQ2NBNGdVRm9iejFjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC8wZmY5ZTUtZmJiZS00YjNiLWI5Mzgt
OWNlYWExYjdhMTE2LzEvQmFnOTQ4WmdJeDhpTVBIQ2NBNGdVRm9iejFjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNC8wZmY5ZTUtZmJiZS00YjNiLWI5MzgtOWNlYWExYjdhMTE2
LzEvQmFnOTQ4WmdJeDhpTVBIQ2NBNGdVRm9iejFjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIIxPVBiu
JEc57MKdvK0lz3J8pt0lCj/6OlXtwJtRd1rpLggmjCkGRr9Kvn1cpUFKG6eHCc5S
SpvbRUt7VYboJjeYZho8GK3mghvr787KKmgm02LZsKn+XNzLte32MnMPOP2Z4131
+9lnnQOAs4mnOVWrNYnEl6ZXN1E7XKvl+bRbTjyIAzeRhlfaVdlnrI1MtpwhUgPo
fgdW18ecMihKntKF5GG9e8PGh0vghb8aqjJhfIqZk/hxk6F/66iY61bEGd2ixKxU
nllwNTGMjFGV2Ct6HeJbfQHgUTy/eQZG+InTrNsv6BUhY/gVaT2Si2+LMw4AQlLo
RXH9D01GyDT9ng==
-----END CERTIFICATE-----
Generated at Thu Jul 23 21:35:53 2026 by rpki-client