Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/b0c875-24e1-444d-b01d-5408f8d9dfb1/1/bP89iZ4m_IT7Q3n7Ml8XS1B1zg0.mft
File: bP89iZ4m_IT7Q3n7Ml8XS1B1zg0.mft (raw, json)
Hash identifier: yJ9YrMw1jw23cnAnAivZ1ewFEWKFj4Uzr/OAgYGw+80=
Subject key identifier: FB:CD:64:D6:30:7F:6C:3B:7F:BF:24:78:38:59:FD:81:07:1E:E9:AB
Authority key identifier: 6C:FF:3D:89:9E:26:FC:84:FB:43:79:FB:32:5F:17:4B:50:75:CE:0D
Certificate issuer: /CN=6cff3d899e26fc84fb4379fb325f174b5075ce0d
Certificate serial: 019F8F106CFE41B0CC802976B63ECB6802C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bP89iZ4m_IT7Q3n7Ml8XS1B1zg0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/b0c875-24e1-444d-b01d-5408f8d9dfb1/1/bP89iZ4m_IT7Q3n7Ml8XS1B1zg0.mft
Manifest number: 19C6
Signing time: Thu 23 Jul 2026 13:00:46 +0000
Manifest this update: Thu 23 Jul 2026 13:00:46 +0000
Manifest next update: Fri 24 Jul 2026 13:00:46 +0000
Files and hashes: 1: 8GCiWcx8mqq89-eKSSRHyEp78Jk.roa (hash: 1VoDgs3kjOrw6G1rdHG1fmbKleZRoSt+eF4wHzGq/bs=)
2: CE438SQN80x5iPZkUW29526BgDA.asa (hash: K9IH+d5x5/jcdlcwMyd5/VZgpKUM+MzffZkVWLGjIE4=)
3: bP89iZ4m_IT7Q3n7Ml8XS1B1zg0.crl (hash: CA51cHrsVOyOLOF6J1f0jJIRYT75JzurxhF6T4y8akw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/b0c875-24e1-444d-b01d-5408f8d9dfb1/1/bP89iZ4m_IT7Q3n7Ml8XS1B1zg0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/b0c875-24e1-444d-b01d-5408f8d9dfb1/1/bP89iZ4m_IT7Q3n7Ml8XS1B1zg0.mft
rsync://rpki.ripe.net/repository/DEFAULT/bP89iZ4m_IT7Q3n7Ml8XS1B1zg0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 13:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:10:6c:fe:41:b0:cc:80:29:76:b6:3e:cb:68:02:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6cff3d899e26fc84fb4379fb325f174b5075ce0d
Validity
Not Before: Jul 23 13:00:46 2026 GMT
Not After : Jul 24 13:00:46 2026 GMT
Subject: CN=fbcd64d6307f6c3b7fbf24783859fd81071ee9ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:87:46:ef:48:e3:08:87:eb:35:65:c6:29:cf:
4b:84:67:63:2f:23:ba:1d:2c:ac:ef:54:36:15:4c:
a7:bc:08:b7:e7:fb:49:66:bc:7f:62:15:0d:1c:83:
c8:f1:9b:b6:e0:cc:f6:42:27:a6:a0:10:7e:0c:6f:
30:0a:41:62:51:93:18:58:da:89:f0:15:10:05:ea:
b8:e7:96:85:4c:5b:f5:94:a1:c7:5a:07:a8:00:fb:
a8:de:cf:76:fa:ad:1c:c6:ff:b9:88:c0:81:5f:47:
03:e7:59:b7:9f:51:40:14:6c:06:12:3b:75:41:8b:
9b:4c:2c:d1:68:2a:ee:c3:cb:b7:b5:00:3e:cf:68:
d4:ca:2a:56:fe:be:63:06:c1:ee:3c:6b:d1:03:c2:
54:6e:9b:bd:f1:21:c5:1c:bd:dc:02:6f:b7:50:b4:
9a:75:aa:7d:08:d9:6d:46:3d:43:23:d4:6f:40:67:
32:81:65:ff:61:98:dc:4c:93:28:71:ce:53:a2:0f:
64:c3:a6:87:81:7c:09:9f:28:94:e6:eb:e0:75:5c:
10:06:be:5a:35:22:7a:f3:5a:c1:35:67:0d:22:1b:
d8:a9:9d:66:fe:82:5d:86:ad:f7:dd:17:5c:89:0b:
70:7a:e3:1c:5e:d8:89:8f:46:04:a0:81:a9:2b:32:
84:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:CD:64:D6:30:7F:6C:3B:7F:BF:24:78:38:59:FD:81:07:1E:E9:AB
X509v3 Authority Key Identifier:
keyid:6C:FF:3D:89:9E:26:FC:84:FB:43:79:FB:32:5F:17:4B:50:75:CE:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bP89iZ4m_IT7Q3n7Ml8XS1B1zg0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/b0c875-24e1-444d-b01d-5408f8d9dfb1/1/bP89iZ4m_IT7Q3n7Ml8XS1B1zg0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/b0c875-24e1-444d-b01d-5408f8d9dfb1/1/bP89iZ4m_IT7Q3n7Ml8XS1B1zg0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:e0:72:1a:1d:ad:4d:72:3a:a6:eb:d8:06:c3:d7:c4:be:8a:
11:0a:8c:63:45:3c:fb:7c:03:a8:97:5b:14:b6:4e:46:f5:c5:
f6:4b:7f:7b:4e:e8:a5:57:85:fd:50:fc:34:fe:09:2b:69:41:
fc:62:18:38:09:49:59:a9:49:b0:4c:23:17:4d:5b:5e:3c:a1:
f4:aa:13:94:6d:a1:6c:8a:80:57:b1:40:a1:ac:7c:dd:9d:06:
07:e9:bf:e1:28:14:a4:3c:f5:7b:c9:57:04:5d:c7:70:f4:af:
c6:ef:d7:77:52:f8:81:35:0e:3c:d5:27:48:bf:ce:55:49:b2:
91:8f:e0:6d:7a:35:36:6a:e6:e3:f7:b6:c2:d1:df:7e:2d:7a:
1b:6c:f0:42:f2:62:0c:42:56:9f:49:bf:c8:3a:c1:3e:70:93:
26:28:b4:6e:cc:32:dc:e8:d6:e6:02:17:e7:ab:35:79:c9:2a:
00:38:46:88:56:db:3c:f1:b8:b2:32:ea:d3:87:1a:d4:7c:84:
21:4c:ed:5d:40:12:84:50:4d:47:a3:3c:f3:e0:5e:f2:25:b8:
c8:90:d8:8e:bb:72:33:90:6b:c5:6b:fd:e8:3d:63:54:ad:e1:
23:e7:55:45:4f:cd:04:9b:c1:9c:45:fe:ad:41:e1:78:9a:b9:
28:1e:33:76
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+PEGz+QbDMgCl2tj7LaALJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZjZmYzZDg5OWUyNmZjODRmYjQzNzlmYjMyNWYxNzRiNTA3
NWNlMGQwHhcNMjYwNzIzMTMwMDQ2WhcNMjYwNzI0MTMwMDQ2WjAzMTEwLwYDVQQD
EyhmYmNkNjRkNjMwN2Y2YzNiN2ZiZjI0NzgzODU5ZmQ4MTA3MWVlOWFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA04dG70jjCIfrNWXGKc9LhGdjLyO6
HSys71Q2FUynvAi35/tJZrx/YhUNHIPI8Zu24Mz2QiemoBB+DG8wCkFiUZMYWNqJ
8BUQBeq455aFTFv1lKHHWgeoAPuo3s92+q0cxv+5iMCBX0cD51m3n1FAFGwGEjt1
QYubTCzRaCruw8u3tQA+z2jUyipW/r5jBsHuPGvRA8JUbpu98SHFHL3cAm+3ULSa
dap9CNltRj1DI9RvQGcygWX/YZjcTJMocc5Tog9kw6aHgXwJnyiU5uvgdVwQBr5a
NSJ681rBNWcNIhvYqZ1m/oJdhq333RdciQtweuMcXtiJj0YEoIGpKzKEJQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPvNZNYwf2w7f78keDhZ/YEHHumrMB8GA1UdIwQY
MBaAFGz/PYmeJvyE+0N5+zJfF0tQdc4NMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYlA4OWlaNG1fSVQ3UTNuN01sOFhTMUIxemcwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC9iMGM4NzUtMjRlMS00NDRkLWIwMWQt
NTQwOGY4ZDlkZmIxLzEvYlA4OWlaNG1fSVQ3UTNuN01sOFhTMUIxemcwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOC9iMGM4NzUtMjRlMS00NDRkLWIwMWQtNTQwOGY4ZDlkZmIx
LzEvYlA4OWlaNG1fSVQ3UTNuN01sOFhTMUIxemcwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAceByGh2t
TXI6puvYBsPXxL6KEQqMY0U8+3wDqJdbFLZORvXF9kt/e07opVeF/VD8NP4JK2lB
/GIYOAlJWalJsEwjF01bXjyh9KoTlG2hbIqAV7FAoax83Z0GB+m/4SgUpDz1e8lX
BF3HcPSvxu/Xd1L4gTUOPNUnSL/OVUmykY/gbXo1Nmrm4/e2wtHffi16G2zwQvJi
DEJWn0m/yDrBPnCTJii0bswy3OjW5gIX56s1eckqADhGiFbbPPG4sjLq04ca1HyE
IUztXUAShFBNR6M88+Be8iW4yJDYjrtyM5BrxWv96D1jVK3hI+dVRU/NBJvBnEX+
rUHheJq5KB4zdg==
-----END CERTIFICATE-----
Generated at Thu Jul 23 19:03:24 2026 by rpki-client